List ports for BOE services in UNIX

[john_turner3]

Can you tell me the command/process to list all the assigned ports on a UNIX BOXI R2 SP3 environment.

./serverconfig.sh -4(List) will list the servers. Yet, we need to list the ports assigned to each service.

The list below is exactly what I am looking for. Yet, I need to show this type of list extracted from our specific server to satisfy C&A requirements.

Can you assist?

/***********************************************************************/

boe-cms 6400 Business Objects CMS contact port

boe-was 6401 boe-was

boe-eventsrv 6402 boe-eventsrv

boe-cachesvr 6403 boe-cachesvr

boe-filesvr 6404 Business Objects Enterprise internal server

boe-pagesvr 6405 Business Objects Enterprise internal server

boe-processsvr 6406 Business Objects Enterprise internal server

boe-resssvr1 6407 Business Objects Enterprise internal server

boe-resssvr2 6408 Business Objects Enterprise internal server

boe-resssvr3 6409 Business Objects Enterprise internal server

boe-resssvr4 6410 Business Objects Enterprise internal server

[john_turner3 · Accepted solution]

OK - So if no ports are specified in the ccm.config file, is there a standard range of ports that are commonly assigned to each or all of the BOXI services/daemons? And, where is this documented?

[former_member59613 · Accepted solution]

The servers just call out to the OS for the next open port. On systems that have a lot running, this could be anywhere within the range. In previous versions, ports 6400-6420 were commonly used but now only 6400 is standardized as the CMS port.

The BIP Deployment guide has details on how to set these ports:

[XI R2 Deployment Guide|http://help.sap.com/businessobject/product_guides/boexir2/en/xir2_bip_deploy_en.pdf]

Chapter 5 - Changing the default server port numbers - Page 147.

Thanks

Jb

[former_member203322 · Accepted solution]

Hello

Hello

I have a similar problem....I'm installing BOE 3.1 in a mixed environment (web apps in DMZ, backedn servers in LAN) and now have to define/bind to fixed ports each server.

Obviously I can't do it via cmcapp since the fw rules are not yet in place...in ccm.config I can't see any single server settings

xxxxxxLAUNCH='"/usr/sap/bo/bobje/enterprise120/generic/bobjrestart.sh" -protect "/usr/sap/bo/bobje/enterprise120/generic/javalaunch.sh" "-Dbobj.root.internal=/usr/sap/bo/bobje" -Djava.net.prefer

IPv4Stack=false -jar "/usr/sap/bo/bobje/java/lib/SIA.jar" -boot "/usr/sap/bo/bobje/enterprise120/aix_rs6000/_boe_hgrsubii2.bootstrap" -cmspath "/usr/sap/bo/bobje/enterprise120/aix_rs6000/boe_cmsd"

-cmsdir "/usr/sap/bo/bobje" -pidFile "/usr/sap/bo/bobje/serverpids/hgrsubii2.pid" -loggingPath "/usr/sap/bo/bobje/logging" -name "hgrsubii2" -dbinfo "/usr/sap/bo/bobje/enterprise120/aix_rs6000/_boe

_hgrsubii2.dbinfo" -piddir "/usr/sap/bo/bobje/serverpids" '

is thre any command line tool (I'm on AIX) to update these settings ? any config file ?

thanks and regards

Michele

[denis_konovalov · Accepted solution]

Michele,

There is no other way, you need to configure server ports from CMC, ther is no commandline tool

However, for CMC to connect to your CMS you only need opne port open int he firewall - port 6400 (if default ports are used).

Once that port is openned, you can login into CMC and set other ports/requestports.

In general, it is recomended to make initial setup and configuration of any environment first - only then harden it with firewalls etc... Or, the alternative is to install Tomcat together with BOE and use it for CMC and initial config. Then it can be stopped or removed, utilizing your DMZ server instead....

p.s.

Having App server in DMZ is not a good idea because you'll need to open all those ports from it to BOE backend.

You should have a web server in DMZ which will connect to App server outside thru a single port. Makes security much stronger.

[Former Member · Accepted solution]

Hi Michele,

We have same issues in our environment and your comments has solved our confusions. Thanks for it . Can i request you that is there any SAP NOTE which is pointing to this " Having App server in DMZ is not a good idea because you'll need to open all those ports from it to BOE backend. You should have a web server in DMZ which will connect to App server outside thru a single port. Makes security much stronger."

I need this for the client team to show. As they are not agreeing on NOT placing APP SERVER outside DMZ.

Regards

Ayaz

[denis_konovalov · Accepted solution]

There is no document to present. It is a simple common sense recomendation.

One port open in the DMZ vs. a whole bunch of open ports.  Its their decision, product will work in either case.

[former_member59613]

Hi John,

I think what you are asking is how you can get a list of ALL the ports that the different BOE components use. By default, most of the servers use random ports so this list would change each and every time the service was restarted. The CMS and SIA use ports 6400 and 6410 respectively but the other servers assign at random.

Luckily, you can assign dedicated ports from within the CMC application. If you go to the properties of each server listed, you can actually specify a port in there. In XIR2, you have to add the -requestPort <port> switch to the command line of each server in the ccm.config file.

Most customers with this type of requirement will ask for a range of ports (6400-7400) and will assign out the ports to the servers. This way you know which ports/range is being used.

The Administrator guide covers this in a little more detail.

Thanks

Jonathan

Edited by: Jonathan Brown on May 20, 2010 6:42 PM

[former_member142702]

Hi,

you can use netstat -p and filter out everything expect the BOE daemons.

Regards,

Stratos

[john_turner3]

nestat -n | grep ip yields something close:

tcp 0 0 10.zzz.yyy.xx.54773 10.zzz.yyy.xx.54151 ESTABLISHED

tcp 0 0 10.zzz.yyy.xx.54059 10.zzz.yyy.xx.54452 ESTABLISHED

tcp 0 0 10.zzz.yyy.xx.53948 10.zzz.yyy.xx.54062 ESTABLISHED

tcp 0 0 10.zzz.yyy.xx.8080 10.zzz.yyy.xx.59009 FIN_WAIT_2

which indicates ports being used. But, how can you get the ports being used and their associate boe service as listed above?

[Former Member]

netstat -an | grep portnumber will tell you if a port is in use.

To assign a port, you have to edit your ccm.config file and add a -requestport line to each of the serverLAUNCH statements and declare which port it is to run on. Then you have to restart each service to put the change into effect.