Symptom
Trying to access ICM/SAP Web Dispatcher results in the error page.
- If icm/HTTP/error_templ_path is not set, you will see "403 Access denied" like below:
2.- If icm/HTTP/error_templ_path is set, the customized error page will be displayed.
The image below shows a default error page (ICMERR-EDEFAULT.html), even if you defined and specific page for ICMERR-EDEFAULT page in /usr/sap/<system id>/<instance nr>/data/icmandir/error_templ
"Our service is not available at the moment. Please try again later. "
Then, checking the dev_icm or dev_webdisp trace. It says:
<level 1 trace>
[Thr 15688] *** ERROR => Permission denied: request not on secure protocol {0000000b} [http_auth.c 1470]
<level 2 trace>
1 ->icm/HTTP/error_templ_path is not set:
[Thr <nr>] HttpAuthHandler: permission denied: request not on secure protocol
[Thr <nr>] *** ERROR => Permission denied: request not on secure protocol \{00000007\} [http_auth.c 1470]
[Thr <nr>] HttpPlugInWriteErrorText: check for error templates in "C:\SapWorkDir\exe\sapwebdisp\data\icmandir/error_templ"
[Thr <nr>] HttpPlugInWriteErrorText: return static error for "Permission denied" (-13)
[Thr <nr>] HttpPlugInWriteErrorText: templ_path: C:\SapWorkDir\exe\sapwebdisp\data\icmandir/error_templ, err_idx: -1
2 ->icm/HTTP/error_templ_path is set:
[Thr <nr>] HttpAuthHandler: permission denied: request not on secure protocol
[Thr <nr>] *** ERROR => Permission denied: request not on secure protocol {00051f35} [http_auth.c 1470]
[Thr <nr>] HttpPlugInWriteErrorText: return content of file "C:\SapWorkDir\exe\sapwebdisp\data\icmandir\error_templ\ICMER-EDEFAULT.html" for error: "Permission denied" (-13)
or
[Thr <nr>] HttpFileAccessHandler: access file/dir: /usr/sap/<system id>/<instance nr>/<url>
[Thr <nr>] HttpPlugInWriteErrorText: return static error for "Permission denied" (-13)
[Thr <nr>] HttpPlugInWriteErrorText: templ_path: /usr/sap/<system id>/data/icmandir/error_templ, err_idx: -1
Another possible message in the trace is:
[Thr 139897064650496] *** ERROR => permission denied for [URL path] : request not on secure protocol {000a148a} [http_route.c 3507]
[Thr 139897064650496] <Web Dispatcher IP and port/URL path>
[Thr 139897064650496] role: Server, protocol: HTTP, local: [Web Dispatcher IP and port], peer: [client IP and port]
Read more...
Environment
- ICM or SAP Web Dispatcher. The parameter icm/HTTP/auth_<XX> is activated.
Product
Keywords
Permission denied, request not on secure protocol, icm/HTTP/auth PERMFILE, ICMERR-EDEFAULT, error_templ, 403 Access denied, icm/HTTP/auth_<xx> , KBA , BC-CST-IC , Internet Communication Manager , BC-CST-WDP , Web Dispatcher , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview