Show TOC

Background documentationPort < 1024 Could not Be Bound Locate this document in the navigation structure

 

If the Web dispatcher log contains an entry that port < 1024 could not be bound, this might have the following cause.

Only users with superuser authorization rights can bind ports < 1024 (well-known ports) on a UNIX system, so the port must be bound by an external program and the listen socket must then be transferred to the calling process.

With the standard authorization rights of the <sapsid>adm user, the process can only bind all ports >= 1024.

To be able to bind ports < 1024, the external bind program icmbnd must be started directly by the SAP Web dispatcher. icmbnd binds the port and returns the listen socket to the calling process.

To be able to bind ports < 1024, the icmbnd must have superuser authorization.

Procedure

Proceed as follows:

  1. Execute the following commands with root privileges (as root user) to assign the required authorizations to icmbind:

    cd /usr/sap/<SAPSID>/SYS/exe/run

    chown root.sapsys icmbnd

    chmod 4750 icmbnd

  2. Start the SAP Web dispatcher by switching back to the <sapsid>adm user and running stopsap and startsap.

  3. Open the instance profile of your SAP Web dispatcher located at /usr/sap/<webdisp_SAPSID>/SYS/profile/<webdisp_SAPSID>_W<instance_no>_<host_name> and make sure the following parameter has the following value:

    icm/server_port_0 = PROT=HTTP,PORT=1080,EXTBIND=1

  4. Check the function by running the SAP Web dispatcher administration console at http://<host_name>:<http_port>/sap/admin (using the webadm user and the master password that was defined during the installation) or having a look in the logs in the usr/sap/<SAPSID>/W<instance_no>/work directory.