For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

perkins_71408's avatar
perkins_71408
Icon for Nimbostratus rankNimbostratus
May 28, 2009

F5 LB Url https://SERVER/webdynpro/dispatcher... gets page cannot be displayed

Hi All,

 

 

we have setup F5 Load Balancer to LB SAP Portal 7.0.

 

 

Everything is working fine through LB url, except, when the url schema changes to .../webdynpro/dispatcher/..., for example

 

 

a test,

 

 

. open the url https://LB-VIP/index.html gets the SAP WAS general screen

 

 

. click WEBDYNPRO gets the next page about WebDynPro

 

with url schema https://LB-VIP/webdynpro/webdynpro.jsp

 

 

. click CONTENT ADMINISTRATION, the url schema changes to:

 

https://LB-VIP/webdynpro/distpatcher/.... and we get, Page Cannot Be Displayed

 

 

any url which uses the schema https://LB-VIP/webdynpro/dispatcher... gets page cannot be displayed :-(

 

 

 

Does anyone know, is this an LB config problem or a SAP problem ?

 

 

Thanks,

 

 

Perkins.
partner
sap

2 Replies

  • bls9701_10560's avatar
    bls9701_10560
    Icon for Nimbostratus rankNimbostratus
    May 28, 2009
    Hi perkins,

     

     

    I don't seem to get the same issue as you. There are a couple of differences in my setup though. We do a redirect to the correct port from port 80. So something like http://LB-VIP.company.com redirects to https://LB-VIP.company.com:5XX01. One thing to note, and it is difficult to tell from your masking of the actual hostname, is that most single sign on requires the use of a fully qualified domain name, so that is something you may want to check. When I follow your steps, my URLs are a bit different, (the ones you mentioned don't exist on my system):

     

     

    Netweaver Start Page: https://LB-VIP.company.com:5XX01/index.html

     

     

    Webdynpro welcome: http://LB-VIP.company.com:5XX01/webdynpro/welcome/Welcome.jsp

     

     

    Content Administrator: https://LB-VIP.company.com:5XX01/webdynpro/dispatcher/sap.com/tc~wd~tools/Explorer

     

     

    I can then run any installed webdynpro application with no issues.

     

     

    I would ask if it works when not using the f5 (direct to a server) or not. And does it work without https?

     

     

    Thanks,

     

     

    Brian

     

  • perkins_71408's avatar
    perkins_71408
    Icon for Nimbostratus rankNimbostratus
    May 28, 2009

     

     

    Hi Brian,

     

     

    thanks for your reply.

     

     

    Please let me give some more info,

     

     

    I have been running HTTP Watch trace and this is what I see in the trace...

     

     

    1, Open Internet Explorer run the url: https://F5LB-VIP/index.html I get the SAP WAS page

     

     

    2, Click on WebDynPro, the page opens:

     

    https://F5LB-VIP/webdynpro/webdynpro.jsp

     

     

    3, Click on Content Administrator:

     

     

    and this is the important part, it is at this point that

     

    the SAP WAS REDIRECTS to a logon screen, and crucially, for some reason, the REDIRECTION to the Logon Screen happens

     

    in HTTP protocol and NOT the HTTPS like before

     

     

    it seems the LB is not open for HTTP

     

     

    but the questions is, where is the protocol change happening when the REDIRECTION happens to the logon screen ? is the LB changing the Protocol, or is the Portal changing the Protocol ?

     

     

     

    If I logon directly on the hostame and do the same, during the REDIRECTION for the SAP WAS logon screen, there is no PROTOCOL change.

     

     

     

    Does that mean for some reason the LB is forcing a protocol change ?

     

     

    Thanks and regards,

     

     

    John.