icm/server_port_<xx> (SAP Library - Architecture of the SAP Web Application Server)

icm/server_port_<xx>

Use

You can use this parameter to specify the service/port that is to be used for a protocol. Either the service name or the port number can be specified.

You can also determine additional service properties. This is described in the procedure below.

Prerequisites

A plug-in for the protocol must be specified in the parameter icm/plugin_<xx>, as otherwise the service cannot be started. There cannot be more than one service allocated to a single port. Also, a service cannot be started if another program is using the port or service.

Procedure

The protocol that is used and the service name or the port number must be specified.

Additional optional input is described below.

Timeout

If there is no activity on an active connection for more than a certain length of time, the connection is terminated (see also icm/keep_alive_timeout). The time period is specified (in seconds) using the third parameter value <keep alive timeout>. A timeout cannot have the value -1.

Value Range	Unit	Default Setting
10 - 32000	Seconds	30

The time limit applies in the following cases:

In the case of requests, the time between receipt of the TCP packets
The time between acknowledgments (responses sent by the server) of TCP packets

Depending on the type of network connection (internal, LAN, WAN, and so on), it can make sense to increase the parameter values. However, the value should not be less than 10 seconds. If, on the other hand, a value is too high, the network connections will be very slow and the performance of the server will suffer.

Using an External Binding Program

For connecting ports < 1024 to UNIX this parameter is extended by specifying EXTBIND=1 (optional) (see Connecting Ports < 1024 on UNIX).

Not Binding the Port to all Host Names

You can use the optional parameter HOST=<host name or IP address> to specify that the port should not be bound to all host names (default), but only to the specified host.

X.509 Certificate

Using the optional parameter VCLIENT you can specify whether the client should have an X.509 certificate when you use SSL. There are three certification levels (0-2):

0: No certification is required and the server does not ask for one.
1: The server asks the client to produce a certificate. If the client does not send a certificate, authentication is carried out by another method, for example, basic (default setting).
2: The client must transfer a valid certificate to the server, otherwise access is denied.

This server-specific value overrides the value that is set with parameter icm/HTTPS/verify_client.

Value Range

Unit

Default Setting

Syntax

PROT=<Protocol name>, PORT=<Port or service name>[, TIMEOUT=<keep alive timeout, EXTBIND=1, HOST=<Host name>, VCLIENT=<SSL Client verification>]

Example

PROT=HTTP, PORT=8080, TIMEOUT=15

PROT=SMTP, PORT=80, TIMEOUT=45, EXTBIND=1, HOST=prd.sap.de

PROT=HTTPS, PORT=443, TIMEOUT=15, VCLIENT=0

Character string

Note

For Binding Ports < 1024 on UNIX this parameter looks like:

icm/server_port_<xx> = PROT=<Protocol>, PORT=<Port>, [TIMEOUT=<timeout>,] EXTBIND=1 [, HOST=<Host name>]