Error in ERP CFTE integration using Web dispatcher

[Former Member]

HI all,

    while doing the integration between ERP system and SAP CFTE  using i Web dispatcher i am getting an error.

please find the details in the attached doc.

Request your assistance in resolving this issue

Sandy

WD error.txt.zip

[shuai_liang]

Hi,

according to the error, it seems an authorization issue.

So I suggest you to assign the SAP_ALL to the involved user temporarily.

If the issue persist, then this is not an authorization issue. You need analyze on other direction.

If the issue gone, then this is an authorization issue.

You need to do an authorization trace in transaction ST01 to find which authorization check caused this issue.

* I guess it may be the S_ICF authorization object

Best regards,
Shuai

[Former Member]

Hi Shuai,

The error i am getting in the web dispatcher log.SO i believe the block is in the WD itself.

I am using a sub-domain in the URL for differentiating the URL for each server.

ie,

EXTURL : https://xxxxxxxx.yyyyy.COM:443/sapclouddev/sap/bc/srt/idoc?sap-client=220

INTURL: https://xxxxxxxx.yyyyy.COM:44300/sap/bc/srt/idoc?sap-client=220

For attaining this following are the parameters and values set in in the web dispatcher

icm/server_port_0 = PROT=HTTP,HOST=localhost,PORT=81$$

icm/server_port_1 = PROT=HTTPS,HOST=xxxxxxxx.yyyyy..com,PORT=443,ACLFILE=\\xxxdsp00\sapmnt\XXX\W00\sec\ACL.txt

icm/HTTP/admin_0 = PREFIX=/sap/admin,DOCROOT=$(DIR_DATA)$(DIR_SEP)icmandir,AUTHFILE=$(icm/authfile),PORT=81$$;443

wdisp/group_info_protocol = https

wdisp/url_map_protocol = https

wdisp/ping_protocol = https

wdisp/ssl_encrypt = 0

#settings for client certificate handling

icm/HTTPS/verify_client = 1

icm/HTTPS/forward_ccert_as_header = true

wdisp/ssl_auth = 0

wdisp/system_0 = SID=DEV, MSHOST=xxxxxxxx.yyyyy.corp, MSPORT=8100,  SRCURL=/sapclouddev

icm/HTTP/auth_0 =PREFIX =/sapclouddev,PERMFILE= \\ergdsp00\sapmnt\EWD\W00\sec\perm.txt   (Full perm for now)

icm/HTTP/mod_0 =PREFIX=/sapclouddev,FILE=\\xxxdsp00\sapmnt\XXX\W00\sec\actionfile.txt

action file

RegIRewriteUrl /sapclouddev/sap(.*) /sap$1 [qsreplace]

Please let me know whether there is any mistake in the above config

sandy

[shuai_liang]

Hi Sandy,

What is the exact error?

I suggest you check the trace of the webdispatcher and also do a logon trace according to note 495911.

Best regards,
Shuai

[Former Member]

Hi Shuai,

I have done the Web dispatcher config as said earlier .When i check the connectivity from SAP CFTE , there i am getting the following error

Error accessing service; Service Ping ERROR: Unauthorized (401)

When i checked in the Webdisp Access log i can see the following entry

136 [10/Sep/2014:00:24:48 -0500] 169.145.9.80 SAPCLOUD - "HEAD /sapclouddev/sap/bc/srt/idoc HTTP/1.1" 401 1991 5

In the Trace file of the WD  There is no error showing related to this.

That is where i am confused on what to do..

Sandy

[Former Member]

Hi Shuai,

I think the problem is with the Modification handler.(URL Rewrite).

EXTURL : https://xxxxxxxx.yyyyy.COM:443/sapclouddev/sap/bc/srt/idoc?sap-client=220

INTURL: https://xxxxxxxx.yyyyy.COM:44300/sap/bc/srt/idoc?sap-client=220

icm/HTTP/mod_0 =PREFIX=/sapclouddev,FILE=\\xxxdsp00\sapmnt\XXX\W00\sec\actionfile.txt

action file

RegIRewriteUrl /sapclouddev/sap(.*) /sap$1 [qsreplace]

Do you know or have any doc on how to write the URL rewrite for making the EXTURL to INTURL?

Sandy

[Former Member]

Shuai,

There is a slight change in the above URL. The FQDN is different

EXTURL : https://xxxxxxxx.yyyyy.COM:443/sapclouddev/sap/bc/srt/idoc?sap-client=220

INTURL: https://aaaaaa.bbbb.COM:44300/sap/bc/srt/idoc?sap-client=220