BPM Automated Activity: Technical User vs Named User

Hi Folks,
I've implemented a number of working BPM prototypes and now our customers are so interested they want us to implement a number of productive solutions for different process scenarios. Technically we all know that for the automated activity we can either use a logical destination or a service group which in both cases will mean a number of alternatives for authentication to the backend to execute the service operation in the automated activity. In our scenarios so far we have tested both approaches i.e. Service Group and Logical destination using a technical user for both cases (For SG, technical user in the physical system assigned to the SG)
My question is are you using a technical user to authenticate to the backend in either case or are you forwarding credentials of a named user involved in the specific process instance to be authenticated to the backend and in case of the latter how do you achieve this (apart from ensuring this user also exists in the backend)? The dilemma is if (by SAP agreement) we can use a technical user then what (apart from our ethics) stops us from only getting BPM licences and using a technical user(s) for most of our data maintenance transactions and by extension what prevents the same approach being used via non-SAP BPM tools (such as AquaLogic). I know there may be different arrangements specific to an organisation's license agreement and relationship with SAP but what is the general approach out there
Thanks for sharing your feedabck

Hi Anna,
Please check the section 'ABAP webservice' in the document
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10271ce0-d613-2d10-a094-d4d693cd7b43?quicklink=index&overridelayout=true
Anil

Similar Messages

Doubts about named user license in CMC.

Hi Gurus,
I'm kinda new to this issue, our client has a named license for only eight users, while testing we realized that a user can logon several times with the same user name in different computers. My questions are, What would be the potential costs that this may entail?, why can I logon several times with the same user?, Is there a way to logon on a computer ending the same user logged on another computer? I have read different posts but I can't find answers to these questions.
thanks in advance.

Hi,
Following is explanation for NUL & CUL (named and concurrent user license):
Named User license:
Typically associated with specific user names.
Allow 'physical users', that are named to access the system based, typically each 'physical users' will have their user name and password.
One named user license is occupied for each physical user accessing the BI Platform, typically this is one user account per 'physical' user.
A named user can have unlimited sessions if not restricted by CUL.
e.g you have 2 named user license. you created two users (say A & B). Once A is logged from a machine. Simultaneously, he can login from other computer as A itself. You would not be able to create more than 2 named users in this case.
Concurrent license:
Specify the number of sessions that can connect to BusinessObjects Enterprise at the same time.
Each physical user can consume more than one session, for example the same user could use both the browser on a PC and a mobile Application on a mobile device. This would create 2 sessions for the same physical user.
Flexible since a small concurrent license can support a large user base (provided all of them don't login simultaneously ).
Read more, from following SAP Notes:
1285639 - What license types are available for Business Objects Enterprise?
1502152 - If Business Objects Enterprise is configured with only 1 Named User License or 1 Concurrent Active License what is the expected result?
Hope this information helps.
Regards,
Onkar

Connection Type - Concurrent or Named User

Post Author: Rohini
CA Forum: Administration
Hi,
     We are using BOE XI R2. How can I check if a user logged in to BOE is a concurrent user or named user?
Thanks,
Rohini.

Post Author: Rohini
CA Forum: Administration
Thanks for replying! My bad... I didn't ask what I exactly was looking for.
I wanted to see if there is any Audit report, or view in CMC that shows me list of users logged in and connection type for each user. We have 10 concurrent licenses and sometimes when the # of users logged in exceeds to 10, all users get error message that # of concurrent users exceeded 10.
For eg. I would expect to see something like this:
UserName        LoginDateTime          ConnectionType
user1                03/27/08 08:00:01         Concurrent user
user2                03/27/08 08:10:11         Concurrent user
user3                03/27/08 08:05:50         Named user
user10              03/27/08 08:15:20         Concurrent user
So, I want to see a summary details of all the users who are logged in is Named User or Concurrent user.
Thanks,
Rohini.

FWB 00013 "You do not have enough Named User licenses" error

I have recently installed Edge XI 3.1. I converted my old 6.5 installation to the new Edge framework and brought over all existing userids.
In Edge, I am licensed for 55 Named and 20 Concurrent. I went through the Properties for each and every User I have to count how many were defined as Named - there were only 3, (and they happened to all have been General Supervisors in the old 6.5 version - so they migrated over to XI 3.1 as Named).
When I try to modify an existing user from Concurrent to Named, (CMC/Users and Groups/Properties tab of the User, under Connection Type), I get the error message, "FWB 00013 You do not have enough Named User licenses to make this user a named user. You have 55 Named User licenses."
It thinks I have already used up all of my 55 Named User licenses, but there are only 3 userids that are marked as Named.
However, when I look at CMC/Settings/View global system metrics, it shows a count of 55 Named Existing User Accounts.
I need to be able to mark certain users as Named instead of Concurrent, but am not able to due to error.
Has anyone seen or experienced this? Any suggestions?
Thanks.

Tim, thanks for your reply - and yes, you're right...
I heard from SAP Support and was notified that this is a known issue with XI3.1 Edge. They say an enhancement request has already been raised with the Product Group - although there is no ETA for when a fix will be released.
The current workaround is to delete the existing concurrent user that you want to be a named user. After deleting the user, then re-add the same user as a named user. This works, but is a cumbersome task if you have a lot of named user licenses!
Additionally, if you want to add a brand-new named user - you still get the same error. So a brand-new user would need to be created as concurrent, deleted, and re-added as named. Convoluted? Yes.
Thanks again for your input.
Angelia

You do not have enough Named User Licenses...But I do!

You do not have enough Named User Licenses to make this user a named user. You have 5 Named User Licenses.
On our Test system, I have five named and five concurrent users. I've switched all but two to concurrent, and I cannot switch anyone to Named. I even disabled all the users except two, and I keep getting the error when I try to swith the remaining to Named.
Any ideas?
Thanks!

Joe Parra wrote:
So as an ugly workaroud, we can delete the user and re-create.
This is due to a bug in the product which is currently escalated. The next fixpack released should hopefully fix but I'm noit sure which one it's slated for right now.
Regards,
Tim

Automated activity not executing in BPM process

Hi All,
We have created a BPM process in NWCE72, and it was executing fine.
When we added an automated activitiy and assigned a Web Service created from a rule and run the process, it is possible to run the process till the automated activity only. The automated activity is throwing error a snapshot of the same pasted belw
If anyone has encountered simllar problem kindly let us know how to overcome.
Lookforward for help in overcoming this problem
Down below it is saying that "You may have not assigned the Service Group to a Provider System, or the generation of the configuration has failed. "
=====================================================================================================
An error occurred while executing transition AUTOMATED_ACTIVITY_Determine_Criticality(Token_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3{64810061-7973-11df-872e-02004c4f4f50}(Instance_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3{4be7da15-7973-11df-b824-02004c4f4f50}(?),1,null,operator,ff12474b71b3fa29a516e53e125eaa18), Instance_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3{4be7da15-7973-11df-b824-02004c4f4f50}(null,null,null,false), Context_0_DO_IssueTrackingProcess_2baa0100a79b04782f33bbea2160cdf3{4be7da30-7973-11df-c7a0-02004c4f4f50}(Instance_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3{4be7da15-7973-11df-b824-02004c4f4f50}(?),Scope_14_Equipment_Issue_Reporting_2baa0100a79b04782f33bbea2160cdf3{4be7da2f-7973-11df-cc05-02004c4f4f50}(?),1,true,false,null)): com.sap.glx.core.kernel.api.TransitionException: An exception occurred while executing the script "_Equipment_Issue_Reporting:AUTOMATED_ACTIVITY_Determine_Criticality(
      com.sap.glx.adapter.BPMNAdapter:Token_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3 token,
      com.sap.glx.adapter.BPMNAdapter:Instance_0_Equipment_Issue_Reporting_Process_2baa0100a79b04782f33bbea2160cdf3 parent,
      com.sap.glx.adapter.internal.ContainerAdapter:Context_0_DO_IssueTrackingProcess_2baa0100a79b04782f33bbea2160cdf3 context_1){
exit=new com.sap.glx.adapter.BPMNAdapter:Exit();
exit:onActivation("E01DFA6EF00BAFC0797011DFB05502004C4F4F50", parent, token);
delete exit;
controller=new com.sap.glx.adapter.internal.ExceptionAdapter:ExceptionController();
controller:setContext(token);
delete controller;
callscope=new com.sap.glx.adapter.internal.TypeRegistry:Scope_7_Equipment_Issue_Reporting_2baa0100a79b04782f33bbea2160cdf3(parent);
call=new com.sap.glx.adapter.UnifiedConnectivityAdapter:Call_0_Determine_Criticality_2baa0100a79b04782f33bbea2160cdf3(callscope);
ppUsername=token:ppUsername;
ppHash=token:ppHash;
call:setPrincipal(ppHash, ppUsername, token);
request=callscope:instantiate("http://www.sap.com", "#RulesTypes-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet");
mapper=new com.sap.glx.adapter.internal.Transformer:DataMapper();
yves_in=new com.sap.glx.adapter.internal.Transformer:Data();
yves_out=new com.sap.glx.adapter.internal.Transformer:Data();
data=context_1:getData();
yves_in:setData("demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting", "$demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting:DO_IssueTrackingProcess", data, "C000F957BEB5AA9E0E98E96A67EE2D06");
yves_out:setData("http://www.sap.com", "$http://www.sap.com:Request-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet", request, "8F3954721A11A18DF1A2321F9544700D");
mapper:map("E01DFA6EF00DF9B0797011DFC8A002004C4F4F50_2baa0100a79b04782f33bbea2160cdf3", yves_in, yves_out);
request=yves_out:getData("http://www.sap.com", "$http://www.sap.com:Request-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet", "8F3954721A11A18DF1A2321F9544700D");
delete yves_in;
delete yves_out;
delete mapper;
call:setInputData("http://www.sap.com", "$http://www.sap.com:Request-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet", request);
response=callscope:instantiate("http://www.sap.com", "#RulesTypes-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet");
call:setOutputData("http://www.sap.com", "$http://www.sap.com:Response-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet", response);
call:invoke();
response=call:getOutputData("http://www.sap.com", "$http://www.sap.com:Response-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet");
mapper=new com.sap.glx.adapter.internal.Transformer:DataMapper();
yves_in=new com.sap.glx.adapter.internal.Transformer:Data();
yves_out=new com.sap.glx.adapter.internal.Transformer:Data();
yves_in:setData("http://www.sap.com", "$http://www.sap.com:Response-demo.sap.com-equuipissueruledc-CriticalityRuleSet-CriticalityRuleSet", response, "8F3954721A11A18DF1A2321F9544700D");
data=context_1:getData();
yves_in:setData("demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting", "$demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting:DO_IssueTrackingProcess", data, "C000F957BEB5AA9E0E98E96A67EE2D06");
bind context_1;
data=context_1:getData();
scope=new com.sap.glx.adapter.internal.TypeRegistry:GenericScope(null, "C000F957BEB5AA9E0E98E96A67EE2D06");
copy=scope:copy(data);
delete scope;
yves_out:setData("demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting", "$demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting:DO_IssueTrackingProcess", copy, "C000F957BEB5AA9E0E98E96A67EE2D06");
mapper:map("E01DFA6EF0106AB0797011DFBC6D02004C4F4F50_2baa0100a79b04782f33bbea2160cdf3", yves_in, yves_out);
data=yves_out:getData("demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting", "$demo.sap.com/reportissueprocessdc/Equipment_Issue_Reporting_Process/Equipment_Issue_Reporting:DO_IssueTrackingProcess", "C000F957BEB5AA9E0E98E96A67EE2D06");
context_1:setData(data);
delete yves_in;
delete yves_out;
delete mapper;
delete call;
delete callscope;
token:state=0;
at com.sap.glx.core.kernel.execution.transition.ScriptTransition.execute(ScriptTransition.java:68)
at com.sap.glx.core.kernel.execution.transition.Transition.commence(Transition.java:138)
at com.sap.glx.core.kernel.execution.LeaderWorkerPool$Follower.run(LeaderWorkerPool.java:126)
at com.sap.glx.core.resource.impl.common.WorkWrapper.run(WorkWrapper.java:58)
at com.sap.glx.core.resource.impl.j2ee.ServiceUserManager$ServiceUserImpersonator$1.run(ServiceUserManager.java:121)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:337)
at com.sap.glx.core.resource.impl.j2ee.ServiceUserManager$ServiceUserImpersonator.run(ServiceUserManager.java:118)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:169)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:277)
Caused by: com.sap.glx.core.kernel.api.TransitionException: An exception occurred while executing the script command "call:invoke()"
at com.sap.glx.core.kernel.trigger.config.Script.execute(Script.java:796)
at com.sap.glx.core.kernel.execution.transition.ScriptTransition.execute(ScriptTransition.java:63)
... 11 more
Caused by: java.lang.RuntimeException: com.sap.glx.adapter.api.AdapterException: com.sap.engine.interfaces.sca.exception.SCADASException: Could not invoke service reference name b51513b6-379d-4c0b-be2a-a3b13d7fe23b, component name demo.sap.comreportissueprocessdcBPMcomponent, application name demo.sap.com/reportissueprocessdc.
at com.sap.glx.adapter.app.ucon.UnifiedWebServiceCallObject$PropagatedCall.run(UnifiedWebServiceCallObject.java:127)
at com.sap.glx.core.login.LoginPersisterProxy$1.run(LoginPersisterProxy.java:76)
at com.sap.glx.core.resource.impl.j2ee.J2EELoginPersisterImpl$1.run(J2EELoginPersisterImpl.java:80)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:396)
at com.sap.glx.core.resource.impl.j2ee.J2EELoginPersisterImpl.invokeAsPropagated(J2EELoginPersisterImpl.java:74)
at com.sap.glx.core.login.LoginPersisterProxy.invokeAsPropagated(LoginPersisterProxy.java:72)
at com.sap.glx.adapter.app.ucon.UnifiedWebServiceCallObject.invokeWebServiceOperation(UnifiedWebServiceCallObject.java:93)
at com.sap.glx.adapter.app.ucon.UnifiedWebServiceCallClass.invoke(UnifiedWebServiceCallClass.java:174)
at com.sap.glx.core.dock.impl.DockObjectImpl.invokeMethod(DockObjectImpl.java:528)
at com.sap.glx.core.kernel.trigger.config.Script$MethodInvocation.execute(Script.java:245)
at com.sap.glx.core.kernel.trigger.config.Script.execute(Script.java:791)
... 12 more
Caused by: com.sap.glx.adapter.api.AdapterException: com.sap.engine.interfaces.sca.exception.SCADASException: Could not invoke service reference name b51513b6-379d-4c0b-be2a-a3b13d7fe23b, component name demo.sap.comreportissueprocessdcBPMcomponent, application name demo.sap.com/reportissueprocessdc.
at com.sap.glx.adapter.app.ucon.SCADASWrapperImpl.invoke(SCADASWrapperImpl.java:151)
at com.sap.glx.adapter.app.ucon.UnifiedWebServiceCallObject$PropagatedCall.run(UnifiedWebServiceCallObject.java:125)
... 23 more
Caused by: com.sap.engine.interfaces.sca.exception.SCADASException: Could not invoke service reference name b51513b6-379d-4c0b-be2a-a3b13d7fe23b, component name demo.sap.comreportissueprocessdcBPMcomponent, application name demo.sap.com/reportissueprocessdc.
at com.sap.engine.services.sca.das.SCADASImpl.invokeReference(SCADASImpl.java:362)
at com.sap.glx.adapter.app.ucon.SCADASWrapperImpl.invoke(SCADASWrapperImpl.java:116)
... 24 more
Caused by: com.sap.engine.interfaces.sca.config.exception.ESBConfigurationException: Configuration not found for application: demo.sap.com/reportissueprocessdc,composite:reportissueprocessdc,component:demo.sap.comreportissueprocessdcBPMcomponent,reference:b51513b6-379d-4c0b-be2a-a3b13d7fe23b,bindingType:WS
at com.sap.esi.esp.service.server.ESPServiceInterfaceImpl.getConfiguration(ESPServiceInterfaceImpl.java:450)
at com.sap.engine.services.sca.plugins.ws.WebServiceImplementationInstance.initWsdas(WebServiceImplementationInstance.java:193)
at com.sap.engine.services.sca.plugins.ws.WebServiceImplementationInstance.accept(WebServiceImplementationInstance.java:76)
at com.sap.engine.services.sca.das.SCADASImpl.invokeReference(SCADASImpl.java:335)
... 25 more
Caused by: com.sap.esi.esp.lib.mm.config.exceptions.ObjectNotExistsException: Configuration not found for application: demo.sap.com/reportissueprocessdc,composite:reportissueprocessdc,component:demo.sap.comreportissueprocessdcBPMcomponent,reference:b51513b6-379d-4c0b-be2a-a3b13d7fe23b,bindingType:WS
at com.sap.esi.esp.service.server.esb.ConnectivityConfigurationManagerImpl.readConfiguration(ConnectivityConfigurationManagerImpl.java:276)
at com.sap.esi.esp.service.server.ESPServiceInterfaceImpl.getConfiguration(ESPServiceInterfaceImpl.java:443)
... 28 more
Caused by: com.sap.esi.esp.lib.mm.config.exceptions.ObjectNotExistsException: Configuration not found for application: demo.sap.com/reportissueprocessdc,serviceRefId:reportissueprocessdc_demo.sap.comreportissueprocessdcBPMcomponent_b51513b6-379d-4c0b-be2a-a3b13d7fe23b_WS. Please check the configuration details from the NWA. You may have not assigned the Service Group to a Provider System, or the generation of the configuration has failed.
at com.sap.esi.esp.service.server.esb.ConnectivityConfigurationManagerImpl.readConfiguration(ConnectivityConfigurationManagerImpl.java:334)
at com.sap.esi.esp.service.server.esb.ConnectivityConfigurationManagerImpl.readConfiguration(ConnectivityConfigurationManagerImpl.java:263)
... 29 more
Date: 2010-06-16
Time: 19:17:16:800
Category: com.sap.glx.core.kernel.execution.LeaderWorkerPool
Location: com.sap.glx.core.kernel.execution.LeaderWorkerPool
Application: sap.com/com.sap.glx.process.ear
Thread: Galaxy 340 / Follower Worker
Data Source: j2ee\cluster\server0\log\defaultTrace_00.trc
Arguments:
DSR Transaction: c6a0ff48796211dfca1602004c4f4f50
Message ID: com.sap.BPM.core_svc.000047
Session: 0
Transaction:
User: SAP_BPM_Service
Time Zone: +0100
Customer Message Component: BC-BMT-BPM-SRV
DC Name: com.sap.glx.core.svc
Correlation ID: 5164050000004002
DSR Root Context ID: C6A0FF48796211DFCA1602004C4F4F50
DSR Connection: c6a0ff48796211dfca1602004c4f4f50
DSR Counter: 0
Host: dcwwwx11871
System: CE2
Instance: J00
Node: server0
Log ID: 02004C4F4F50039E000000010000162C

Hi,
Your Error Says
You may have not assigned the Service Group to a Provider System, or the generation of the configuration has failed. at com.sap.esi.esp.service.server.esb.ConnectivityConfigurationManagerImpl.readConfiguration
Procedure to Create Provide System
https://cw.sdn.sap.com/cw/docs/DOC-101203 (From the service where you are consuming)
Procedure to Create and Assign ServiceGroup
While importing the Enterprise Service into Automated Activity it will ask the name of Service Group.Please check what is the Service Group Name and Assign the Service Group to the Provider System by following the Below Procedure.
https://cw.sdn.sap.com/cw/docs/DOC-109461
Thanks
Srikanth

There are no active responsibilities available for this user

Hi Guys...
I am not technical person... but wanted to if anybody has experienced the following problem:-
When logging into any account i get the following message:- There are no active responsibilities available for this user
No i have looked the threads posted and most advise to run the WF_SYNCHRONIZE_LOCAL_TABLES concurrent request.. if i run this through toad or UNIX as i can’t get into forms i always seem to get the following message which could be playing a part in my initial problem.....ORA-00600: internal error code, arguments: [ktsircinfo_num1], [9], [33], [52844], [], [], [], []
When i also query the following table Fnd_User_Resp_Groups i also get the following message: ORA-00600: internal error code, arguments: [ktsircinfo_num1], [9], [33], [52844], [], [], [], []
any help would be most welcome......
Bal

Is the system in maintenance mode, by any chance ? You put the app in maintenance mode when applying patches. If you connect as the apps database user, what does this sql statement return ?
select fnd_profile.value('APPS_MAINTENANCE_MODE') from dual;
MOS Doc 400151.1 - After Login Receive Error: 'There are no active responsibilities available for this user'
If the system is not in maintenance mode, you only option would be to open an SR
HTH
Srini

Error in Automated activity of BPM using the PI operation mapping.

Dear Experts,
We have a BPM process, where we have imported Operation Mapping, to use it in an automated activity. We have created the service reference with localhost and checked the local provider system check box and with type WS.
While running the scenario the process stops at the automated activity (having the Operation mapping), with error:
A technical error during invocation: Could not invoke service reference name
I have tried to recreate the step couple of times but it is always the same error.
Could you please share your expertise in how to over come the error.
Thank you,
Best Regards,
Ajay

Hi Ganesh,
Thanks for your response.
SOAP and Mail scenario are also using the same inbound proxy structure , and the proxy is working fine in both cases.
For FTP scenario we are reusing the same inbound proxy but we are facing error .
SAP is getting
"XML to ABAP Conversion error with error id as "CX_ST_MATCH_ELEMENT " System expected the element 'Namespace of the inbound service interface' .
Please guide.
Thanks,
Ruchi

Pre-populate adapter for setting the Active Directory OU for a user

Hi All
I created a pre-populate adapter that set the Active Directory OU for a user...
In the end the status of the resource is still showing "provisioning"..
It must be "Provsioned"..did I miss something ?
The logs speak as below :-
08:01:12,678 INFO [STDOUT] Running Create User
08:01:12,678 INFO [STDOUT] Before appending Root Context:OU=Human Resources,
08:01:12,678 INFO [STDOUT] tcUtilLDAPController.java : hierString : OU=Human Resources,dc=mydomain,dc=com
08:01:13,553 ERROR [ACTIVEDIRECTORYCONTROLLER] Problem creating object: javax.naming.OperationNotSupportedException: [LD
AP: error code 53 - 0000001F: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0
]; remaining name 'cn=ASYMONDS'
08:03:18,756 INFO [[xlWebApp]] action: LogonAction: User 'XELSYSADM' logged on in session 8116CBC0FA1481D06A207A1941B9
E096
08:22:31,256 ERROR [WEBAPP] Class/Method: ProvisionedResourcesForUserAction/confirmEnableSelection encounter some proble
ms: No checkbox was checked.

Just verify the OU value is correctly populated , first try doing the provisioning by manually giving OU and everything .
Is it successful ?
Then we can check if something wrong going with pre pop.
Thanks
Suren

Hello, I have a strange file in my Users folder, named PortDetect.log I have no idea which app created it and it reappears when I delete it. Has anyone got the same file? Or know where it may originate from? Thanks in advance!

Hello,
I have a strange file in my Users folder, named PortDetect.log
I have no idea which app created it and it reappears when I delete it.
Has anyone got the same file? Or know where it may originate from?
Thanks in advance!

know where it may originate from?
The Huawei wireless modem driver.

No active writeable datasource found for user creation, check your Persiste

HI SAP Guru's
Suddenly when I am login in Portal with J2EE_ADMIN or any user , I am getting error
You are not authorized to access this application; contact your system administrator
and when I am going to create user in identity management I am getting below error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".
I have searched all related treads in SDN but no success
Please help.
Thanks & Regards
Vinay Patel

Dear all,
I was searching the community because I had this same error and there was no answer of how it was fixed. So I'm sending how I fixed today in a customer environment.
1. Go to portal http://<portal>/webdynpro/dispatcher/sap.com/tcsecumewdumeadmin/UmeAdminApp
- select configuration
- folder "sap system based in abap"
- do the conection test
If the test fails, log on in client 001 and change user SAPJSF:
- assign role SAP_BC_JSF_COMMUNICATION (only this one) and one profile that has permission to RFC logon
- you can change the password too
STOP/START ABAP+JAVA
Go again to the portal above and test connection again. The tests should now be OK.
2. Go to portal http://<portal>/irj
- Log on with administrator user
Now you should be able to create an user.

How to create user in specific user group in Microsoft Active Directory ?

Hi,
I am using Nestcape LDAP, and want to create user in the user defined group. I have created a new user group "TestUsers" in the "Users" container of Active Directory, I want to add the new user to Test Users group But my problem is that whenever I create a new user
it get added to Domain Users group.
Following is the code I am using which adds user to default group Domain Users.
public LDAPResult createUserID(
String userId,
String pwd,
String pId,
boolean resetonLogOn,
LDAPConnection ldCon) {
boolean flag = false;
int code=0;
try {
String pwdLastSetVal;
String desName;
String desc;
/* Specify the DN of the new entry. */
String dn =
"CN=" + userId + ",CN=" + this.container + "," + this.baseDN; // container = "Users"
/* Create and add attributes to the attribute set. */
String objectclass_values[] =
{ "top", "person", "organizationalPerson", "user" };
// LDAPEntry findEntry=null;
/* Create a new attribute set for the entry. */
LDAPAttributeSet attrs = new LDAPAttributeSet();
/* Attribute sAMAccountName */
LDAPAttribute attr = new LDAPAttribute(LDAP_SAM_KEY, userId);
attrs.add(attr);
/* Attribute unicodePwd */ // LDAP_PASSWORD_KEY = "unicodePwd"
attr =
new LDAPAttribute(
LDAP_PASSWORD_KEY,
(byte[]) this.encodePassword(pwd));
attrs.add(attr);
/* Attribute Display Name */
desName = userId + ":" + pId;
//desName = userId ;
attr = new LDAPAttribute(LDAP_DIS_NAME_KEY, desName);
attrs.add(attr);
/** Attribute userAccountControl to enable the userid.
attr = new LDAPAttribute(LDAP_ACCOUNT_KEY, LDAP_ACCOUNT_EN_VAL); // LDAP_ACCOUNT_EN_VAL= "548"
attrs.add(attr);
/* Attribute pwdLastSet to reset the password on first logon*/
if (resetonLogOn == true) {
pwdLastSetVal = "0";
} else {
pwdLastSetVal = "-1";
attr = new LDAPAttribute(LDAP_RESET_KEY, pwdLastSetVal);
attrs.add(attr);
/* Attribute Description */
desc = " Account Created by HelpNow App";
attr = new LDAPAttribute(LDAP_DESC_KEY, desc);
attrs.add(attr);
/* Attribute objectclass */
attr = new LDAPAttribute("objectclass", objectclass_values);
attrs.add(attr);
/* Create an entry with this DN and these attributes . */
LDAPEntry myEntry = new LDAPEntry(dn, attrs);
/* Add the entry to the directory. */
ldCon.add(myEntry);
flag = true;
}catch (LDAPException e) {
flag = false;
code=e.getLDAPResultCode();
}catch (Exception e) {
flag = false;
code=LDAPException.OTHER;
}finally {
ldaprs.flag=flag;
ldaprs.code=code;
return ldaprs;
}

Refer to the post titled "JNDI, Active Directory and Group Memberships" available at http://forum.java.sun.com/thread.jspa?threadID=581444&tstart=150

Getting Active Directory Users in UCM User Admin - Users Tab

Hello All
We have integrated WLS with our Active Directory. And we are getting all the active directory users under Security Realms >myrealm >Users and Groups tab in WLS Console.
We are also able to login to webcenter spaces and Content server using those userid and credentials. But our problem is in UCM under Admin Applets - User Admin - Users tab all the active directory users are not listed. So we are not able to assign particular roles to the users.
When a particular Active Directory user logins in UCM (First Time) after that the admisistrator (weblogic) is able to get that user under Admin Applets - User Admin - Users tab. And also it comes as an External user so we are not able to assign role.
So basically UCM requires a login to get all the users listed in users tab.
Our requirement is we want all the Active Directory users to get listed in UCM without the condition that the users has to login in content server once.
Thanks

Hi Navin ,
First and foremost the requirement that you have posted is not possible and the reason for that is :
Users are created on AD which is outside the realm of UCM hence there is no way that the users created on AD will be shown up under Users tab without they login atleast once . UCM does not know which all users are part of the realm until and unless the AD users login in atleast once .
Secondly external users cannot be assigned roles from UCM because when the Auth type is set to External UCM sees it as external entity hence not giving it any way to relate roles / groups from UCM . As a workaround you can change the AuthType for the External users to Global from User Admin applet after the users login for the first time . This will enable you to assign roles / groups for the AD users .
Hope this helps .
Thanks
Srinath

Anonymous access with named users

Hi!
I am trying to set up anonymous access with named users on EP6 SP9. I am using Database only as UME Data storage. I have applied the note #728106, since most of the content is html-pages on the KM.
I defined the UME settings ume.login.guest_user.uniqueids=anon01,anon02
ume.login.anonymous_user.mode=1
Restarted the server and attached user account into roles (which contain only anonymous content).
I then accessed the page /irj/portal/anonymous (or the longer version /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.anonymous) and everything was fine. However I wasn't able to get the portal working with /irj/portal/anonymous?j_user=anon02. I always received Portal runtime error. From the logs I saw that the portal tried to access as user anon01.
When I changed the UME settings into
ume.login.guest_user.uniqueids=anon02,anon01
I was able to get the anon02 user account working, but not /irj/portal/anonymous?j_user=anon01. From the logs I saw that the portal tried to access as user anon02.
Both user account are using the same rule, portal desktop and framework page. I can see the correct (and different) TLN for each user only in the content are I see this error.
Any ideas?
Thanks,
Petri

I need to switch between two named anonymous users.
It works fine using http://<server>:<port>/irj/portal?j_user=<first_Guest_user>&j_password=<pwd_of_first_Guest_user>&login_submit=true
Then to switch to the other user I must do a log-off or close the browser and input the other url http://<server>:<port>/irj/portal?j_user=<second_Guest_user>&j_password=<pwd_of_second_Guest_user>&login_submit=true
I developed a servlet to switch the users using IAuthentication (method forceLogoffUser) and then redirect to the respective url. But when I call forceLogoffUser method I get a login screen and the script stop executing. Passing 'returnURL' parameter did not work.
Parameters:
req - HttpServletRequest
resp - HttpServletResponse
returnURL - url to use to logon again.
Is there a way to switch automaticaly between the two named anonymous users?

BRM Webservice call from BPM as an automated activity in CE 7.2

Dear All,
A simple BRM ruleset is created and published as a webservice. The WSDL is available at NWA ->SOA Management-> Application and Scenario Communication-> Single Service Administration.
The webservice test in WSNAVIGATOR provides the expected results.
In the BPM process flow, an automated activity has been created for the webservice call. This activity contains the 'Service Interface' and 'Service Reference' of the imported WSDL.
Issue:
When the process is started, the BRM webservice call results in error. The error is not visible in the log but the process flow shows a green symbol on the automatic activity, thereby indicating that the webservice call does not end and the process remains in 'In progress' state.
Can you please provide your inputs?
Thanks,
Pritish

Dear All,
The issue is resolved with the help of following document.
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/9009be68-1e9a-2c10-fd91-8f5fcb00474c.
Regards,
Pritish

BPM Automated Activity: Technical User vs Named User

Similar Messages

Maybe you are looking for