cancel
Showing results for 
Search instead for 
Did you mean: 

Can't login to EP6 on laptop via IISProxy...

Former Member
0 Kudos

Hi,

My company is planning to migrate from EP5 to EP6. In order to familarise myself with EP6, I have installed EP6SP11 on my laptop (HP nc8000, W2K, 2GB Ram).

My LAN account have local admin rights, but I discovered if I want to continue with the install from home, I can only use a local account with Admin rights to do the install (otherwise SAPInst would exit with an error).

Anyhow, I have now got EP6SP11 installed along with SAP IISProxy 1.6 with IIS. I now discovered that I can log onto EP6 from a local account using the URL http://localhost/irj/, but can not do so if I logon with my normal LAN account. If I attempt to logon to EP6 with my LAN account, I just get redirected back to the std EP6 logon screen. However, I can logon to EP6 if I don't use IISProxy and use the EP6 port no. instead (ie. http://localhost:50000/irj/).

I have checked the W2K event and IISProxy log files and did not see any errors.

I am new to EP6/WAS640, any assistance would be much appreciated.

Regards,

Thomas Siu

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

This is a known issue with IISProxy.

See Sympton 11 of OSS 713568.

Symptom 11

NTLM authentication works fine when IisProxy computer is targeted with requests from other computers but fail when the browser on the same computer is used.

Cause

Windows Integrated Authentication does not work properly when both sides of the challenge-response handshake are on the same computer.

Solution

From the Internet Explorer browser go to the menus: Tools->Internet Options->Advanced. Uncheck the "Enable Windows Integrated Authentication" checkbox.

Nick

Former Member
0 Kudos

Nick,

I don't think this is related to OSS713568.

I am not attempting SSO with NTLM to EP6 (yet), I am just testing the use of IISProxy to simplify the URL (ie. don't have to type in port no.). Also, IIS's Integrated windows logon is currently not enabled on my IIS instance.

As mentioned earlier, IISProxy works fine if I am logged on as a local user to the laptop. I just confirmed this by creating a new local user account (with min. priv) and was able logon successfully via the EP6 logon screen. Yet attempts to log onto EP6 fails if I logon onto my laptop with my LAN account.

Any other ideas?

Regards,

Thomas

Former Member
0 Kudos

OK, got it! The problem was caused by my IE browser's HTTP 1.1 setting was not being enabled.

I'm not sure how that happened as HTTP 1.1 is the IE browser's default setting, but once I noticed it and turned it back on then all is now working as expected.

Thanks,

Thomas

Answers (2)

Answers (2)

Former Member
0 Kudos

Bump the IISProxy logging to level 3 everywhere and post some of your results.

Nick

Former Member
0 Kudos

Hi Thomas,

Can you you provide your iisproxy setting(IISproxy.xml) file.

Sanjeev

Former Member
0 Kudos

Sanjeev,

Here's my iisproxy.xml (with the DTD part removed).

Cheers,

Thomas

<ISAPI-config version="1.6">

<filter name="IisProxy filter" authentication="forward" log-level="3" debug-flags="3"/>

<extension name="IisProxy extension" log-level="3" debug-flags="3"/>

<mapping name="IisProxy for SAP EP6" log-level="3" debug-flags="3">

<source>

<protocol>http</protocol>

<prefix>/irj/</prefix>

</source>

<source>

<protocol>http</protocol>

<prefix>/irj</prefix>

<new-prefix>/irj/</new-prefix>

</source>

<source>

<protocol>http</protocol>

<prefix>/logon/</prefix>

</source>

<source>

<protocol>http</protocol>

<prefix>/webdynpro/</prefix>

</source>

<source>

<protocol>http</protocol>

<prefix>/pdk/</prefix>

</source>

<source>

<protocol>http</protocol>

<prefix>/sld/</prefix>

</source>

<target>

<protocol>http</protocol>

<host>localhost</host>

<port>50000</port>

</target>

<compress-types>text/html, text/plain</compress-types>

</mapping>

<config>

<source>

<protocol>http</protocol>

<host>localhost</host>

<prefix>/IisProxy</prefix>

</source>

<source>

<protocol>https</protocol>

<host>localhost</host>

<prefix>/IisProxy</prefix>

</source>

</config>

</ISAPI-config>