Entering content frame

Procedure documentation icm/server_port_<xx> Locate the document in its SAP Library structure

Use

You can use this parameter to specify the service or to be used for a protocol. Either the service name or the port number can be specified.

You can also determine additional service properties. This is described in the procedure below.

Prerequisites

There must not be more than one service allocated to a single port. Also, a service cannot be started if another program is using the port or service.

Procedure

<xx> stands for a number. Numbers ascending from 0 must be used (compare with Generic Profile Parameter with the Ending <xx>).

You can find a description of the syntax below under “Value Range”.

You have to specify the protocol you want to use and the service name or the port. For the protocol PROT there are the values HTTP, HTTPS (the ICM decodes the HTTPS request), and SMTP. For the SAP Web dispatcher there is the additional value ROUTER (Structure linkEnd-to-End SSL).

The following data is optional and is described below in detail.

·        Timeout options TIMEOUT, PROCTIMEOUT. There are various timeouts that you can set.

·        EXTBIND: Do you want to bind the port using the external binding program?

·        HOST: If several host names are used, do you want to bind the port to specific host names only?

·        VCLIENT:  This parameter is used to regulate the handling of X.509 certificates.

Timout Options

Two timeouts can be configured -  the network timeout TIMEOUT and the processing timeout PROCTIMEOUT.

Keep-alive timeout Option TIMEOUT or profile parameter icm/keepalive_timeout

If there is no activity on an active connection for more than a certain length of time, the ICM terminates the connection (see also icm/keep_alive_timeout). The time period is specified (in seconds) in the parameter value <timeout>.

The value -1 deactivates the timeout, the value 0 means that the value is determined by the parameter icm/keep_alive_timeout.

Value Range

Unit

Default Setting

-1, 0, 10 - 32000

Seconds

30

The time limit applies in the following cases:

·         In the case of requests, the time between receipt of the TCP packets

·         The time between acknowledgments (responses sent by the server) of TCP packets

Depending on the type of network connection (internal, LAN, WAN, and so on), it can make sense to increase the parameter value. However, the value should not be less than 10 seconds. If, on the other hand, a value is too high, the network connections will be very slow and the performance of the server will suffer.

Caution

Once the timeout interval has expired the user context in the work process is not closed. The user context is closed only after the time interval specified in the profile parameter rdisp/plugin_auto_logout has expired. If rdisp/plugin_auto_logout = 0 is set, the context in the work process is not deleted at all.

Processing timeout Option PROCTIMEOUT

If the ICM receives a request and has forwarded it for processing (to the ABAP or J2EE Engine), the ICM waits for the server response until the timeout has expired. The work process context is then closed, the client is notified with a Connection Timeout message (error ETIMEOUT, see ICM Error Handling).

The value is specified with the parameter value <proctimeout> in seconds, value -1 deactivates the timeout.

Value Range

Unit

Default Setting

-1, 1 - 32000

Seconds

30

If the parameter is not set, the same value as for the network TIMEOUT is valid (see below). This is also the default setting.

Using an External Binding Program

For binding ports < 1024 to UNIX this parameter is extended by specifying EXTBIND=1 (optional) (see Structure linkConnecting Ports < 1024 on UNIX).

Not Binding the Port to all Host Names

You can use the optional parameter HOST=<host name or IP address> to specify that the port should not be bound to all host names (default), but only to the specified host. In this way the host with only one open port can be reached under various URLs. 

X.509 Certificate

Using the optional parameter VCLIENT you can specify whether the client should have an X.509 certificate when you use SSL.  There are three certification levels (0-2):

·        0: No certification is required and the server does not ask for one.                                                     

·        1: The server asks the client to transfer a certificate. If the client does not send a certificate, authentication is carried out by another method, for example, basic authentication (default setting).                                          

·        2: The client must transfer a valid certificate to the server, otherwise access is denied.

This server-specific value overrides the value that is set with parameter icm/HTTPS/verify_client.                  

Value Range

Unit

Default Setting

This graphic is explained in the accompanying text

PROT=<protocol name>, PORT=<port or service name>[, TIMEOUT=<timeout>, PROCTIMEOUT=<proctimeout>, EXTBIND=1, HOST=<host name>, VCLIENT=<SSL Client Verification>]

Example

PROT=HTTP, PORT=8080, TIMEOUT=15

PROT=SMTP, PORT=80, TIMEOUT=45, EXTBIND=1, HOST=prd.sap.de

PROT=HTTPS, PORT=443, TIMEOUT=15, PROCTIMEOUT=45, VCLIENT=0

Character string

-

Note

For Structure linkBinding Ports < 1024 on UNIX this parameter looks like:

icm/server_port_<xx> = PROT=<Protocol>, PORT=<Port>, [TIMEOUT=<timeout>,] EXTBIND=1 [, HOST=<Host name>]

 

See also:

Structure linkSample Profiles for the ICM

Example: Profile File of a SAP Web Dispatcher

 

 

Leaving content frame