Prevent HTTPS switch for Web Applications under Reverse Proxy

[Former Member]

We recently upgraded to SAP_BASIS 701 0011. Since that time all our web dynpro applications switch to HTTPS for the authentication.

Old behaviour:

http://externalserver.com/app?sap-system-login-basic_auth=X -> Login popup (basic auth) -> Application started in HTTP

New behaviour

http://externalserver.com/app?sap-system-login-basic_auth=X -> Redirects to...

https://internalserver/app?sap-system-login-basic_auth=X -> Breaks, user cannot access internal server

How do we disable this switch to HTTPS? It was previously not required under 701 0006.

SICF Settings:

1) Logon Data -> Security Requirement -> Standard (not SSL)

2) Error Pages -> Configuration -> Actions During Logon:

   Protocol: X - do not switch

   Do not display warnings: Checked

   Check for multiple logon: Unchecked

   Deactivate Login XSRF Protection: Checked

SAP Note 833489 seems to have no effect!

[Former Member · Accepted solution]

Update, the above SICF settings I posted are the "global settings". We have discovered that if we check the option "service-specific settings" then everything works as expected. It seems the global settings are ignored so we have to copy them to each service!

http://screencast.com/t/YiFHkDsDpm

[Former Member]

hi,

please check the below parameter is activated in your system.

ms/server_port_1 = PROT=HTTPS, PORT=80$$

[Former Member]

We don't have that parameter. What we have is:

ms/redirect_version                         1

ms/https_port                               8082

ms/http_port                                8081

[Former Member]

Wait, I found a parameter in our DEFAULT profile:

ms/server_port_0                            PROT=HTTP, PORT=8100

What does it mean and how does this apply to my issue?