SAP4ADMIN: SAP Web Dispatcher

ICM: Binding ports < 1024 on UNIX

SAP notes

Refer to the following SAP notes:

2354759 - Service not started in host <hostname/IP address>:<port> -- NIEMYHOST_VERIFY
421359 - ICM: Binding ports < 1024 on UNIX

Cause

The SAP Web Dispatcher is configured with the port 443
alemavt06:wd1adm 89> grep icm/server WD1_W03_alemavt06
icm/server_port_0 = PROT=HTTPS,PORT=443

During the start of the SAP Web Dispatcher, the following error appears
alemavt06:wd1adm 73> tail -f dev_webdisp
...
[Thr 139928454227712] *** ERROR => NiIBindSocket: SiBind failed for hdl 25/sock 10
    (SI_EADDR_NAVAIL/13; I4; ST; 0.0.0.0:443) [nixxi.cpp    3831]
[Thr 139928454227712] *** ERROR => IcmBindService: You might not have the permissions to bind the service: alemavt06.alema.local:443 [icxxserv.c   3817]
[Thr 139928454227712] *** ERROR => IcmBindService: NiBuf2Listen failed for host alemavt06.alema.local:443 (rc=-16): NIEMYHOST_VERIFY [icxxserv.c   3822]
[Thr 139928454227712] *** WARNING => IcmAddService: Could not start service (rc=-1) PORT=443,PROT=HTTPS,TIMEOUT=60,PROCTIMEOUT=60,VCLIENT=1 [icxxserv.c   1311]
[Thr 139928454227712] IcmAddHiddenService: Hidden service WEBSOCKET started
[Thr 139928454227712] Started service PORT=8003,PROT=HTTP,TIMEOUT=60,PROCTIMEOUT=60

The SAP Web Dispatcher user cannot bind the port 443 because the process on Unix must have superuser authorization rights.

Procedure

Log on with the root user

Go inside SAP executable directory (CDEXE)
alemavt06:/usr/sap # cd /sapmnt/WD1/exe/uc/linuxx86_64

Check the existence of the binary "icmbnd.new"
alemavt06:/sapmnt/WD1/exe/uc/linuxx86_64 # ls -l | grep icmbnd
-rwxr-xr-x 1 wd1adm sapsys 2256990 Feb 6 20:28 icmbnd.new

Copy the binary from "icmbnd.new" to "icmbnd"
alemavt06:/sapmnt/WD1/exe/uc/linuxx86_64 # cp icmbnd.new icmbnd

Adapt the authorization of "icmbnd"
alemavt06:/sapmnt/WD1/exe/uc/linuxx86_64 # chown root:sapsys icmbnd
alemavt06:/sapmnt/WD1/exe/uc/linuxx86_64 # chmod 4750 icmbnd

Check the new authorizations for "icmbnd"
alemavt06:/sapmnt/WD1/exe/uc/linuxx86_64 # ls -l | grep icmbnd
-rwsr-x--- 1 root sapsys 2256990 Mar 6 13:59 icmbnd
-rwxr-xr-x 1 wd1adm sapsys 2256990 Feb 6 20:28 icmbnd.new

To prevent the ICM/SAP Web Dispatcher from attempting to bind the port itself, an additional option must be specified when the ports are configured with icm/server_port_: "EXTBIND=1".
alemavt06:wd1adm 91> grep icm/server WD1_W03_alemavt06
icm/server_port_0 = PROT=HTTPS,PORT=443, TIMEOUT=15, EXTBIND=1

Restart the SAP Web Dispatcher
alemavt06:wd1adm 92> stopsap ; startsap

Check the log
alemavt06:wd1adm 58> view dev_webdisp
...
[Thr 139773473732480] Started service PORT=443,PROT=HTTPS,TIMEOUT=15,PROCTIMEOUT=15,EXTBIND=1,VCLIENT=1
[Thr 139773473732480] SSL settings: verify_client: 1, cache_size: -1, cache_lifetime: -1, credfile: SAPSSLS.pse, ciphers: default
[Thr 139773235496704] IcmAddHiddenService: Hidden service WEBSOCKET started

Installation of SAP Web Dispatcher 7.45

This article describes how to install SAP Web Dispatcher version 7.45 using the installation tool Software Provisioning Manager.

In our case, we will be in the below version combination:

Operating system: SUSE Linux Enterprise Server 12 SP2
SAP version: SAP Web Dispatcher 7.45
SAP kernel: 745_REL

As a reminder, the SAP Web Dispatcher is a load balancer and reverse proxy that can be used with different web application server backends:

SAP NetWeaver Application Server ABAP
SAP NetWeaver Application Server Java
SAP HANA XS, both in the "Classic" and "Advanced" flavor
Any web server

Refer to the following SAP documentation for more information:

908097 - SAP Web Dispatcher: Release, Installation, Patches, Documentation
552286 - Troubleshooting for the SAP Web Dispatcher

Preparation

Product Availability Matrix

First of all, check the supported combinations of operating systems and database systems for the choosen SAP system installation.

Link to explain how to navigate into the PAM

Connect to the SAP Marketplace: https://launchpad.support.sap.com

Click on the "Product Availability Matrix" (PAM) tile
Find the SAP system to be installed (SAP NETWEAVER 7.5)

Go into the "Operating Systems" tab
Select the following options:
- Product instance: SAP Web Dispatcher
- Scope: SAP WEB DISPATCHER 7.45
- Operating System: LINUX ON X86_64
Validate that is a SAP supported combination

Hardware and Software requirements

Ensure that your hosts meet the hardware and software requirements for your operating system and the SAP instances. Otherwise you might experience problems when working with the SAP system.

You will find these information into the installation guides located into https://service.sap.com/installnw75
-> "3 - Installation - Standalone Engines"
-> "Installing Web Dispatcher for SAP NetWeaver 7.1 or Higher"

Operating system installation

This part is not yet available.

Media list

Link to explain how to download DVD

DVD number	Label
SAPWEBDISP_SP_410-80000900.SAR	sapwebdisp
SAPHOSTAGENT23_23-20009394.SAR	SAP HOST AGENT 7.21 SP23
SWPM10SP19_0-20009701.SAR	SWPM 1.0 SP19 for NW higher than 7.0x
SAPCRYPTOLIBP_8509-20011697.SAR	SAPCRYPTOLIBP

Here is a quick summary of the download and installation steps:

(1) Download the SAP Web Dispatcher SAR archive:
https://launchpad.support.sap.com/#/softwarecenter
-> Enter "Web Dispatcher" into the search filed
-> Select the desired version from the list
-> Select your operating system
-> Ensure to sort by "Change Date" in "Descending" order
-> Download the SAR archive of the latest SP

(2) Download the SAP Host Agent SAR archive (required by the installation):
https://launchpad.support.sap.com/#/softwarecenter
-> Enter "Host Agent" into the search filed
-> Select the desired version from the list
-> Select your operating system
-> Ensure to sort by "Change Date" in "Descending" order
-> Download the SAR archive of the latest SP

(3) Download Software Provisioning Manager (SWPM):
https://support.sap.com/sltoolset
-> "System Provisioning"
-> "System Provisioning: Software Provisioning Manager 1.0 SPxx" (pick latest SP)
-> Download Software Provisioning Manager (file name starts with "SWPM10...")

(4) Download SAP Cryptographic Software (SAPCRYPTO):
https://launchpad.support.sap.com/#/softwarecenter
-> Enter "SAPcryptolib" into the search filed
-> Select the desired version from the list
-> Select your operating system
-> Ensure to sort by "Change Date" in "Descending" order
-> Download the SAR archive of the latest SP

SAP Installation

Transfert the source into a directory


# ls -lrt /sources/SAP_WD_745

total 657656

-rw-r--r-- 1 root root  61223866 Feb 13 15:06 SAPWEBDISP_SP_410-80000900.SAR

-rw-r--r-- 1 root root  72690691 Feb 13 15:06 SAPHOSTAGENT23_23-20009394.SAR

-rw-r--r-- 1 root root 534485648 Feb 13 15:07 SWPM10SP19_0-20009701.SAR

-rw-r--r--  1 root root   2341306 Feb 21 12:20 SAPCRYPTOLIBP_8509-20011697.SAR

-rwxr-xr-x 1 root root   4347520 Feb 13 15:29 SAPCAR

Extract the SWPM


# cd /sources/SAP_WD_745/

# mkdir SWPM10SP19_0-20009701

# ./SAPCAR -xvf SWPM10SP19_0-20009701.SAR -R SWPM10SP19_0-20009701

Execute the SWPM


# cd /sources/SAP_WD_745/SWPM10SP19_0-20009701
# ./sapinst

Select: Generic Options -> SAP Web Dispatcher -> SAP Web Dispatcher (Unicode)
Click on "Next"

Note:
Two options are possible during the installation of a new SAP Web Dispatcher instance.

SAP Web Dispatcher (Non-Unicode): Installs a non-Unicode SAP Web Dispatcher instance using SAP WEB DISPATCHER <7.21 or 7.42>

SAP Web Dispatcher (Unicode): Installs a Unicode SAP Web Dispatcher instance using SAP WEB DISPATCHER 7.45