SAP Knowledge Base Article - Preview

2904874 - HTTP 403 response from various BI URLs with nginx Proxy / Load Balancer

Symptom

  • It is observed in the platform that HTTP 403 responses are seen for certain BI URLs, eg:
    http://<HOST>/BOE/portal/1910261105/PlatformServices/jsp/fioribi/instanceTitle.jsp?cafWebSesInit=true<TRUNCATED>

  • It is not possible to expand Public Folders in BI Launchpad (BILP), clicking on the + action, or the Public Folders text, does not open the folder 
  • The following response is returned:

    Type Status Report

    Message ???boetrustguard.TokenCreationFailed???[/BOE/portal/1910261105/PlatformServices/jsp/fioribi/instanceTitle.jsp] ???boetrustguard.TokenCreationFailedValue??? [MDAwRE9aRTBFVGBNWDIzZj86Nj9lVGBBbjhPPFdRMDAEQ,MDAwRE9aRTBFVGBNWDIzZj86Nj9lVGBBbjhPPFdRMDAEQ] ???boetrustguard.TokenCreationFailedMessage???[???boetrustguard.token.missing???]

    Description The server understood the request but refuses to authorize it.

  • This only occurs when requests go through nginx before reaching Tomcat, when the same workflow is performed directly connecting to Tomcat, there is no issue


Read more...

Environment

  • SAP BusinessObjects Business Intelligence Platform 4.x (BI 4.0 / 4.1 / 4.2)
  • nginx
  • Windows
  • Linux / Unix  

Product

SAP BusinessObjects Business Intelligence platform 4.1 ; SAP BusinessObjects Business Intelligence platform 4.2

Keywords

KBA , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.