We ran ./saproot.sh <sid> after kernel upgrade, let’s know why it is so important.
I always heard Command ./saproot.sh sets the ownership and permissions for kernel files like saposcol and icmbnd. but as a fresher I always wondered ,what is saposcol and icmbnd. So, here it is.
what is saposcol and icmbnd?
SAPOSCOL: It stands for SAP operating system collector.
This is a standalone program that runs at the OS level and collects performance data from the host system.
SAPOSCOL is running in the background, collecting OS-level metrics every 10 seconds.
Stores data in shared memory, which SAP instances and monitoring tools (like ST06 or RZ20) can access.
It Runs independently on SAP instances, once per host.
Think of SAPOSCOL as smart sensor system:
- A smart sensor system in your house that tracks room temperatures, electricity usage, and open doors — but doesn’t directly control anything. It runs quietly in the background and collects data, which you can view on your mobile app or dashboard.
In SAP terms:
- SAPOSCOL collects system health info like CPU usage and memory load. SAP transactions like ST06 use this data to give you performance insights. It doesn’t change anything, but gives you the data you need to make decisions.
Daily parallel: Just like your smart assistant tells you, “Your fridge is using too much power,” SAPOSCOL tells you, “Your server’s CPU is hitting 90% usage at noon.”
Get Kushp’s stories in your inbox
Join Medium for free to get updates from this writer.
ICMBND: It stand for Internet communication manager binding program.
This is a helper executable used by the Internet Communication Manager (ICM) to bind to privileged ports (<1024) on UNIX systems.
why we need of this? On UNIX, only root users can bind to ports like 80 or 443. SAP runs under <SID>adm, which doesn’t have root privileges. So, ICMBND is used to bind the port and pass the socket to ICM securely.
Think ICMBND is like a security guard who opens the VIP gate:
Imagine you live in a gated society. Your house help needs to bring supplies through the VIP entrance, which only security guards can unlock using master key(root access).
Here’s how it plays out:
- The security guard (ICMBND) unlocks the VIP gate (port 443) because your helper (SAP ICM) isn’t allowed to do it themselves and It’s risky to take master key in your hand and open gate for your helper. Once the gate is open, the helper takes over — without needing full security access themselves.
In SAP terms:
- Ports below 1024 on UNIX systems need root privileges. But SAP shouldn’t run as root — that’s risky. ICMBND is a small tool that binds these ports and hands access to ICM (Internet Communication Manager).
Daily parallel: It’s like a valet opening a secure gate for the delivery truck — no need for the truck driver to carry master keys.
I hope this clear all your queries related to this topic and now you will feel more confident while answering to this question in your upcoming interview.
Happy Learning :)
Good Luck!
