Setting Up the Web Administration Interface 

Prerequisites

Either the Web dispatcher or ICM is installed.

You have package WDISPADMIN.SAR or ICMADMIN.SAR. This contains the ICP control data for the Web Dispatcher or ICM.

 

For the Web Dispatcher the package WDISPADMIN.SAR replaces ICMADMIN.SAR used in older releases. This ensures that the Web administration interface matches the release of the Web dispatcher, even if the Web dispatcher and ICM have different release statuses

 

To find out where to find it or to get the latest version see Operating the SAP Web Dispatcher under section Importing the SAP Web Dispatcher.

Procedure

...

Define the parameter icm/HTTP/admin_<xx>in the Web Disaptcher/ICM profile in the line:

icm/HTTP/admin_0 = PREFIX=/sap/admin,DOCROOT=./admin,PORT=8888,HOST=ls3022 .

This sets the URL prefix for the administration to /sap/admin and the path for the ICP control files to./admin.

With this parameter you can further restrict access to the Web administration interface - to a port (e.g. SSL port), to a local host name (e.g. “local host“), or to an external host name (only from this host can the Web administration interface be accessed).

Specify this port with icm/server_port_<xx>as the inbound port.

Create an administration user as described under Creating Administration Users. The authorization file icmauth.txt will be generated.

       1.      Make sure that file icmauth.txt (the file name can be named something else in icm/HTTP/admin_<xx>) exists in the work directory. If it does not, generate the authorization file icmauth.txt using program wdispmon or icmon, by calling it with the option -a.

       2.      Ensure that the directory specified by DOCROOT (after the Web dispatcher has been started for the first time) contains the files for the Web administration interface (for example, a default.html file). You can unpack wdispadmin.SAR or icmadmin.SAR manually into a subdirectory with the name admin, by calling the working directory SAPCAR ‑xvf <wdisp|icm>admin.SAR.

SAP Web Dispatcher: Alternative

You can generate the profile file for the Web dispatcher sapwebdisp.pfl and create the authorization file automatically icmauth.txt (with user icmadm). The SAP Web dispatcher is also automatically started with the generated profile. If the files already exist, they are not changed.

For this purpose use the bootstrap option sapwebdisp –bootstrap, as described in Starting the SAP Web Dispatcher with the Bootstrap Option.

The Web dispatcher bootstrap creates a user icmadm in group admin with a random eight character password, and outputs, for example, the following:

Web Administration user is "icmadm" with password "RdUAs27F"

Result

You can now use the Web Administration Interface.

In the logon dialog box enter (in the above example) user icmadm and password RdUAs27F.

You can now set up other administration users.

After the SAP Web Dispatcher has been installed you should change the password of user icmadm.

More Information

SAP recommends you use SSL with the client certificate to access the administration interface. For more information see Using the Web Admin Interface with Certificate X.509.