on 04-24-2005 11:15 AM
Hi,
My company is planning to migrate from EP5 to EP6. In order to familarise myself with EP6, I have installed EP6SP11 on my laptop (HP nc8000, W2K, 2GB Ram).
My LAN account have local admin rights, but I discovered if I want to continue with the install from home, I can only use a local account with Admin rights to do the install (otherwise SAPInst would exit with an error).
Anyhow, I have now got EP6SP11 installed along with SAP IISProxy 1.6 with IIS. I now discovered that I can log onto EP6 from a local account using the URL http://localhost/irj/, but can not do so if I logon with my normal LAN account. If I attempt to logon to EP6 with my LAN account, I just get redirected back to the std EP6 logon screen. However, I can logon to EP6 if I don't use IISProxy and use the EP6 port no. instead (ie. http://localhost:50000/irj/).
I have checked the W2K event and IISProxy log files and did not see any errors.
I am new to EP6/WAS640, any assistance would be much appreciated.
Regards,
Thomas Siu
This is a known issue with IISProxy.
See Sympton 11 of OSS 713568.
Symptom 11
NTLM authentication works fine when IisProxy computer is targeted with requests from other computers but fail when the browser on the same computer is used.
Cause
Windows Integrated Authentication does not work properly when both sides of the challenge-response handshake are on the same computer.
Solution
From the Internet Explorer browser go to the menus: Tools->Internet Options->Advanced. Uncheck the "Enable Windows Integrated Authentication" checkbox.
Nick
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Nick,
I don't think this is related to OSS713568.
I am not attempting SSO with NTLM to EP6 (yet), I am just testing the use of IISProxy to simplify the URL (ie. don't have to type in port no.). Also, IIS's Integrated windows logon is currently not enabled on my IIS instance.
As mentioned earlier, IISProxy works fine if I am logged on as a local user to the laptop. I just confirmed this by creating a new local user account (with min. priv) and was able logon successfully via the EP6 logon screen. Yet attempts to log onto EP6 fails if I logon onto my laptop with my LAN account.
Any other ideas?
Regards,
Thomas
Bump the IISProxy logging to level 3 everywhere and post some of your results.
Nick
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Thomas,
Can you you provide your iisproxy setting(IISproxy.xml) file.
Sanjeev
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Sanjeev,
Here's my iisproxy.xml (with the DTD part removed).
Cheers,
Thomas
<ISAPI-config version="1.6">
<filter name="IisProxy filter" authentication="forward" log-level="3" debug-flags="3"/>
<extension name="IisProxy extension" log-level="3" debug-flags="3"/>
<mapping name="IisProxy for SAP EP6" log-level="3" debug-flags="3">
<source>
<protocol>http</protocol>
<prefix>/irj/</prefix>
</source>
<source>
<protocol>http</protocol>
<prefix>/irj</prefix>
<new-prefix>/irj/</new-prefix>
</source>
<source>
<protocol>http</protocol>
<prefix>/logon/</prefix>
</source>
<source>
<protocol>http</protocol>
<prefix>/webdynpro/</prefix>
</source>
<source>
<protocol>http</protocol>
<prefix>/pdk/</prefix>
</source>
<source>
<protocol>http</protocol>
<prefix>/sld/</prefix>
</source>
<target>
<protocol>http</protocol>
<host>localhost</host>
<port>50000</port>
</target>
<compress-types>text/html, text/plain</compress-types>
</mapping>
<config>
<source>
<protocol>http</protocol>
<host>localhost</host>
<prefix>/IisProxy</prefix>
</source>
<source>
<protocol>https</protocol>
<host>localhost</host>
<prefix>/IisProxy</prefix>
</source>
</config>
</ISAPI-config>
User | Count |
---|---|
84 | |
25 | |
12 | |
9 | |
7 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.