With this parameter you can configure the Web-based administration interface.
You have to set the parameter if you want to monitor and administrate the ICM with the browser.
More information: Using the Web Administration Interface
To use the ICM administration functions you must have created an initial administration user for yourself in the browser. This procedure is described in Using the Web Administration Interface.
The ICM has opened the port that you as the administrator want to set up.
For more information, see icm/server_port_<xx>, Option PORT
Work area |
Internet Communication Manager, SAP Web Dispatcher |
Unit |
Character string |
Standard value |
icm/HTTP/admin_0 = PREFIX=/sap/admin,DOCROOT=$(DIR_ICMAN_ROOT)/admin,AUTHFILE=$(icm/authfile) |
Dynamically changeable |
No |
The parameter has the following syntax:
Syntax
icm/HTTP/admin_<xx> = PREFIX=<URL-Präfix>, DOCROOT=<Verzeichnis> [, AUTHFILE=<Dateiname>, PORT=<Admin-Port-1;...;Admin-Port-n>, HOST=<Admin-Host-1;...;Admin-Host-m>, CLIENTHOST=<Admin-Client-1;...;Admin-Client-k>]
This is explained below.
<xx> stands for a number. The numbers must be used from 0 in acendending order.
For more information, see Generic Profile Parameters with Ending _<xx>
PREFIX: URL prefix that is called for this HTTP subhandler. The same procedure is used as with the SAP Web Dispatcher.
For more information, see Processing Administration Requests
DOCROOT: Root directory of the administration files.
AUTHFILE: File name of the authoring file, where the hash values of the passwords for admin users are stored. Default value: icmauth.txt If you do not have to authenticate the user (for instance, if the user has already been authenticated in the http_auth handler), you can you can specify AUTHFILE=none.
For more information, see icm/HTTP/auth_<xx>
Caution
In the authorization file users and their group affiliation are in plain text, and the passwords are encrypted. Protect the file from undesired reading in accordance with your security standards.
PORT: Restricted to local TCP/IP ports where admin requests are accepted. In the standard system admin requests are accepted on all local TCP/IP ports.
This port must be specified in the parameter icm/server_port_<xx>. The relevant protocol is used according to whether the port is HTTP or HTTPS.
You can specify multiple ports, which are then separated with semicolons.
Recommendation
SAP recommends HTTPS, because otherwise the password of the admin user is transferred unencrypted.
Note
Note that you have to specify a port with PROT=HTTPS if you use HTTPS. You cannot use any port that is configured for end-to-end SSL (PROT=ROUTER).
HOST: Restricted to local host name or IP address where admin requests are accepted. You can specify hosts or IP addresses, which are then separated with semicolons. If localhost or 127.0.0.1 is specified here, only local users can use the Web-based interface. If nothing is specified, admin requests are accepted by all host names.
CLIENTHOST: Restricted to host or IP address where admin requests are accepted. You can specify hosts or IP addresses, which are then separated with semicolons. This can restrict administration to specific client hosts. If nothing is specified, admin requests are accepted by each host.
Example
Value icm/HTTP/admin_<xx> = PREFIX=/sap/admin,DOCROOT=./admin,PORT=1088;8855,HOST=ldp007;localhost,CLIENTHOST=localhost;p122271 has the effect that administration requests in a combination of HOST and PORT values are possible. The local host and another host p122271 are permitted as clients.
For example, if
icm/server_port_0 = PROT=HTTP, PORT=1088
is set, from the local host you can use
http://ldp007:1088/sap/admin
to manage the Web Dispatcher or ICM.
If the parameter has the value
icm/HTTP/admin_<xx> = PREFIX=sap/icm/admin, DOCROOT=./admin, PORT=8888
and port 8888 is defined as an HTTPS port in
icm/server_port_0 = PROT=HTTPS, PORT=8888, TIMEOUT=15
and the host name is saphost the ICP files are located in the subdirectory admin in the executable directory. You can administrate the ICM from the browser by entering the URL
https://saphost:8888/sap/icm/admin
in every line.
Log on with the initial user that you created when setting up the Web Administration. See Creating Administration Users
For more information, see Creating Administration Users
Value
icm/HTTP/admin_<xx> = PREFIX=/sap/admin,DOCROOT=./admin,PORT=1088;8855,HOST=localhost
means that administration requests are possible in a combination of HOST and PORT values. Since only localhost is permitted for the host, only requests from clients on the local host are accepted.
For example, if icm/server_port_0 = PROT=HTTP, PORT=1088 is set, you can manage the Web Dispatcher or ICM from the host by using http://localhost:1088/sap/admin.
Value
icm/HTTP/admin_<xx> = PREFIX=/sap/admin,DOCROOT=./admin,PORT=1088,HOST=ldp007.internal.corp;localhost,CLIENTHOST=p122261;p122271;localhost means that administration requests in a combination of HOST- und PORT values are possible. Only the two hosts p122261 ad p122271 are permitted as hosts.
For example, if icm/server_port_0 = PROT=HTTP, PORT=1088 is set, you can manage the Web Dispatcher or ICM from the p122261 with URL http://ldp007.internal.corp:1088/sap/admin.