Define Logon group in Webservice SOAMANAGER configuration

Hi All,
I've setup a webservice through an ABAP RFC. This webservice is called from a .NET application. A initial test is done and the webservice is working propperly. For loadbalancing reasons I would like to set the Logon Group when calling this webservice. I think this is done in the SOAMANAGER as it is visible in the SICF transactions. Only I can't edit the Logon group in SICF because the webservice is configured in SOAMANAGER.
Simply, does anyone know how to set the logon group when configuring a webservice in SOAMANAGER?
Hope anyone can help.
Kind regards,
Koen Schouten

Hi Schouten,
As per my assumption you need to configure the below path ?
Please revert me if this is the requirement which you need.
Thanks,
Seshadri.

Similar Messages

Portal-based logon Groups?

Hi,
I´m working with in a Application Sharing setup and in help.sap related to configuring Application Sharing in a clustered environment it mentions something about a portal-based logon group and a zone separator when just having a stand alone server with more than one server nodes.
This is found in the following document under ClusterLogonGroupName and ClusterGroupSeparator explanation.
http://help.sap.com/saphelp_nw70/helpdata/en/6d/41e74196d8c517e10000000a155106/content.htm
I have never heard about logon groups inside SAP Portal and a zone separator, has somebody worked with them? where do you configure them or is this info in help.sap not accurate?
Kind Regards,
Gerardo J

Hi Gerado,
You define logon groups to determine how client requests to certain applications are load balanced when your system setup uses the SAP Web Dispatcher or a third-party hardware load balancer in front of your application servers. For example, you can define a logon group so that a certain application (such as one with high CPU usage) is accessible only on two instances within your cluster, which are running on machines equipped with extra CPU resources.
http://help.sap.com/saphelp_nw70/helpdata/en/f3/795a421b5ec153e10000000a1550b0/frameset.htm
Information regarding the zone seperator can be found here:
http://help.sap.com/saphelp_nw70/helpdata/en/56/dcf4c12b072c4e89884dc164b3762c/frameset.htm
I have not worked with these, but they seem interesting.
Regards,
Kai

Configuring Logon groups for JAVA instances using NWA method

Hello,
we have a BI dual System landscape ( CI ABAP+ JAVA plus 2 dialog instance ABAP+JAVA, based on NW04s. I have set up a Web Dispatcher to do a load balancing for JAVA instances. I configured the logon groups according this documentation using NWA (http://help.sap.com/saphelp_nw04/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/content.htm).
The following points are still quite unclear for me:
1. according documentation I should specify the following profile parameters:
[Define the special HTTP URLs, which SAP Web Dispatcher uses to send to the AS Java to retrieve the logon groups information]
wdisp/J2EE/group_info_location = [?] /JavaEE/public/icf_info/icr_groups
wdisp/J2EE/url_map_location = [?] /JavaEE/public/icf_info/icr_urlprefix
Wich values should i take here actually? These one or /J2EE/icr_groups and /J2EE/icr_urlprefix ?
2. Also I have to configure (in visual administrator) the GroupInfoRequest and UrlMapRequest properties of the HTTP Provider service running on server processes. They recommend to use /J2EE/icr_groups and /J2EE/icr_urlprefix. Should it be the same values as defined in those profile parameters?
3. I have defined the instance IDs and exacte Alias in the groups definitions in nwa. Is it possible to proof somehow while using my URL http://<host>:<port>/TestApp~test/<application_resource> either im web dispatcher (traces?) or on a web site on which DI I actually land to be sure that my load balancing works properly and i don't land on my Central Instance?
Thanks a lot in advance for your advices.
best regards,
Polina

Understood, Install the web dispatcher and configre the ABAP Message Server Port and ms/http_port (T-CODE:SMMS). Test this link
http://host:port/sap/public/icf_info/icr_groups
and this would retrieve the list of ABAP (SMLG) cofigured groups.
For java load balancing, icm of that host will send the incoming requests to JAVA Dispatcher. The load balancing happens on the basis of server nodes and can be found in the web dispatcher session dispatching table.
There are no necessary parameters required for java load balancing except the number of server nodes you'll hookup to that dispatcher.
There is an option called service based, where we configure the j2ee hosts to accept the connections for the services which are running but I haven't seen much customers using this option.
Bottom line: No changes are required for java side and enable the "ext rfc" option for abap logon groups and rest will be taken care by Web Dispatcher.
Use connection pooling and high timeouts to acheive the better througput and use the SSL termination on Web Disp.

Logon groups configuration for JAVA instances using NWA method

Hello guys,
we have a BI dual System landscape (CI ABAP+ JAVA plus 2 dialog instance ABAP+JAVA, based on NW04s. I have set up a Web Dispatcher to do a load balancing for JAVA instances. I configured the logon groups according this documentation using NWA (http://help.sap.com/saphelp_nw04/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/content.htm).
The following point is still quite unclear for me:
I have defined the instance IDs (of DIs installed on linux servers) and exacte Alias in the logon groups definitions in NWA. Is it possible to proof somehow (while accessing my URL http://<host>:<port>/TestApp~test/<application_resource> ) either in web dispatcher ->Web Administration Interface(Application Server Monitor ?) or somewhere else on which Dialog Instance I actually land to be sure that my load balancing works properly and i don't land on my Central Instance?
Thanks a lot in advance.
best regards,
Polina

ok, I have understood what you ment in the first passage Thanks!
When I put javascript:document.cookie in my Internet Explorer Address Bar i got the following information:
PortalAlias=portal; saplb_STD_JAVA=(sapt20p_T20_20)207175450; JSESSIONID=(sapt20p_T20_20)ID1892984750DB11747115157906231437End; saplb_test=(lx003207_T20_20)206509050; saplb_*=(lx003207_T20_20)206509050
what does here saplb_STD_JAVA mean?
you can use following URLs to access any particular Java Server node of any server.
https://<host name>:<https port>/irj/portal;saplb_*=<Java serer node number> https://<host name>:<https port>/irj/portal;sapj2ee_irj=<Java server node number>
What is the difference between saplb_* and sapj2ee_irj?
Thanks in advance.
regards,
Polina

Can Portal be configured with Logon Group?

Hi, gurus:
is concept 'logon group' used for Enterprise Portal?
how to configure Logon Group for enterprise?
Thank you
Br,
Chrina

Hi Chrina,
don't get me wrong. You still need a dedicated load balancer system to realize load balancing between multiple application servers. This could be a software load balancer (e.g. SAP Web Dispatcher) or a hardware load balancer (e.g. F5).
If you deploy an application, it is deployed to all application servers. A user who tries to access this applicaion could be forwarded (by the load balancer) to any of your application servers.
But sometimes you do not want this. In case you have an application which has very high CPU usage you can use logon groups to restrict the routing of the load balancer. Basically, you tell the load balancer to forward requests for a specific application to one of your application servers which belongs to a previously defined sub set of your cluster. For example, you have 4 application servers (AS1, AS2, AS3, AS4). Now you define a logon group for a certain application (App1), which is deployed on all servers. By defining the logon group you tell the load balancer to forward all requests for application App1 to either server AS1 or server AS2, but never to server AS3 or server AS4.
This way you avoid that all of your application servers become really busy processing requests for the applicaion with very high CPU usage.
Best regards,
Martin

Configure Balance logon Group in Portal

Hello experts,
I've installed the portal central instance in one machine and a dialog java instance for this portal in another machine, after i installed the webdispacher in central instance machine, now I want to configure the Logon Group, does anyone could help me ?
I don't have idea to do this, if someone does this configuration please help make the same.
Thanks

Hi,
Please check the below link for configuring the logon groups:
Link: [http://help.sap.com/saphelp_nw70/helpdata/en/c4/3a64b4505211d189550000e829fbbd/content.htm]
Hope it helps.
Thanks & Regards,
Gourav

Logon Load Balancing / Configuring Logon Groups problem

In existing system setting:
One Logon group (PUBLIC) and point to one instances. This setting is work and SAP LOGON default clinet no is 320.
I try to install one more instances on other server and add to same Logon group (PUBLIC).
Install compent as below:
SAP ERP 2005 Support Release 2 -> SAP systems -> MS SQL, Server -> High available system -> Base on ABAP System -> Dialog System
The instance has been installed and start and stop this instance is successful.
Add instance into logon group (PUBLIC)
Logon system via logon group, the logon redirect to new instanace server. But the default client no has been changed from 320 to 001. Change client from 001 to 320 and logon. But no response from new instance server.
Any suggestion to solve this problem.
Thanks!

I found the profile in profile directory as below:
default.1.pfl
COQ_D02_BSSPI11 (New Instance)
START_D02_BSSPI11 (New Instance)
COQ_DVEBMGS02_bssco11 (existing Instance)
START_DVEBMGS02_bssco11 (existing Instance)
I strat the new instance and add to Public group and logon successful.
The problem is in transaction RZ10.
I cannot select COQ_D02_BSSPI11 and START_D02_BSSPI11 profile from Profile field.
how to fix it.
Thanks!

Issue with parallel operation of SAP NW SSO 2.0 and SNC Client Encryption (Logon Groups)

Hi!
One of our customers is using the SNC Client Encryption solution to ensure encryption using SNC (based on Kerberos Technology) for their SAP GUI Dialog connections. They have lots of SAP backends DEV, QAS, PRD all with the SNC Client Encryption SNC Lib installed. The profile parameter snc/identity/as contains the following value: p:CN=SAP/<ServiceAccount>@<DOMAIN>.
Example: p:CN=SAP/[email protected]
The customer is using one AD Service Account "SNCServiceUser" with one registered SPN "SAP/SNCServiceUser" for all systems (yes, this is not recommended... but the case).
Important: All users use group entries in the SAP Logon (saplogin.ini). Means, for SAP logon the SNC name can not be manually configured on the SAP Front End. With group logons, the application server's SNC name is dynamically requested by the message server each time a SAP GUI connection is started. The SNC Name is greyed out in this case as dynamically obtained from the applications servers profile parameter snc/identity/as.
Now our customer implements SAP NetWeaver Single Sign-On 2.0 within his landscape. Based on the Secure Login Server 2.0 (SP3) he likes to use X.509 based authentication to his AS ABAP backends using SAP GUI SNC while others still use SNC Client Encryption.
Replacing the SNC Library on the AS ABAP
The Secure Login Library 2.0 (SP3) has been installed on one of the ABAP systems and the SNC Client Encryption SNC Library (which is based on SSO 1.0) is no longer used, thus we changed the parameter snc/gssapi_lib to point to the new SNC library. We removed the old PSE.ZIP containing the keytab and created the new SAPSNCSKERB.PSE incl. the keytab and proper credentials. To ensure parallel operation, we kept the snc/identity/as value as is = p:CN=SAP/[email protected].
After restarting the system with initialized Secure Login Library 2.0, still the SNC client encryption works fine for existing users.
The problem
We created on the Secure Login Server an SNC certificate for the AS ABAP which has the following X.509 Distinguised Name Fomat: CN=SAP/[email protected] This is to avoid having to change the snc/identity/as to an "real" X.509 DN which would lead to non-working SNC Client Encryption for all the other users using SAP GUI and logon groups.
As soon as we install the PSE via STRUST on the system the SNC Client Encryption solution stops working with error „Server refuses kerberos key exchange“.
As part of an pilot implementation we have installed Secure Login Client 2.0 (SP3) on some test PCs. The test PC with SLC is able to perform Single Sign-On with SNC based on X.509 (incl. Encryption) to the ABAP system.
Seems the SAP System now only tries to do X.509 based authentication thus key exchange fails. The problem is, we cannot change the snc/identity/as value because of the logon groups. If we were able to do so, we would in any case set the server identity to X.509 DN and in addition create the SAPSNCSKERB.PSE incl. keytab. This should work, as confirmed by SAP see this post.
Any ideas how to solve this and have both solutions in parallel?
Appreciate any help.
Regards,
Carsten

Hi all,
we was able to fix the issue. It was an issue with the customers cluster configuration and the $SECUDIR variable. This tricky issue leads to non working or sporadic working SNC Client Encryption...
This was how the configuration looks before:
Environment variable $SECUDIR is defined:
"/ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec“
sapgenpse seclogin -l -v
running seclogin with USER="<SID>adm"
Credentials for username '<SID>adm':
0 (LPS:OFF):
         (LPS:OFF): /ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCSKERB.pse
1 (LPS:OFF):
         (LPS:OFF): /usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCS.pse
After changing the $SECUDIR to "/usr/sap/<SID>/DVEBMGSxx/sec“ and re-creating the credentials, it worked like a charm.
As a result of this we can confirm, this configuration and SNC Client Encryption works with CommonCryptoLib in parallel to the SSO configuration.
And Valerie was right with 2. SLC starting from V. 1.0 SP2 PL3 was able to convert the CN= part of the SNC Name into an SPN, was my mistake. In addition SNC Client Encryption starting from Version 1 SP1 PL1 does this also.. just to make this clear
Thread closed hope this helps someone
Carsten

How to create Logon groups for JAVA Systems

Hi,
I am implementing an BI JAVA Landscape. We do have 1 Central Instance(CI) and 2 Dialog Instances (DI) JAVA Standalone. Everything based on NW04s
I have set up a Web Dispatcher to do a load balancing. The Web Dispatcher is connected to the Message Server (MS) of the JAVA CI to get all the information about the Engines.
I am now looking to create Logon groups to distibute the load according the application used applications. I am not sure if there is a possibility to set up logon groups (server groups) directly somewhere in the J2EE engine, or if I have to set this up in the WebDispatcher konfiguration files?!
Thanks in advance and best regards,
Dominik

We're trying to do something similar with NetWeaver CE 7.1.
According to [this documentation|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/frameset.htm] there are 3 steps to doing this for NetWeaver CE 7.1:
1. Logon Groups
2. Web Dispatcher profile changes
3. HTTP Provider property changes
We've set up a Logon Group in the NetWeaver nwa and associated the two instances (one host) with it.
"[Configuring Logon Groups Using Configuration Files|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3c3f0cad9f4c2de10000000a1553f6/frameset.htm]" says: "...to create the files using HTTP Provider service."
There it doesn't say exactly how to generate those 3 text files; it says: "1. Create the icrgroups.txt and urlinfo.txt files that define the logon groups. For more information, see the documentation of SAP Web Dispatcher." ; but, has no link to what it says to see. So, I manually go to ["SAP Web Dispatcher", "Assigning Logon Groups"|http://help.sap.com/saphelp_nwce10/helpdata/en/b4/9aa8862e714e6db8e74e48e5d3283b/frameset.htm]. But, it all pretty much breaks down there because it's referring to apparently non-NetWeaver CE 7.1 stuff (as near as I can tell); for instance, how do the transactions SMLG and SICF relate to NetWeaver CE 7.1, or am I in the wrong place?
I tried to press ahead with files similar to the examples here, but I hit this error in the Web Dispatcher:
[Thr 5132] *** WARNING => ICT: path prefix /Curam/ not allowed in this context. Only prefix / allowed. [ictxxptab.c 764]
[Thr 5132] *** WARNING => When a file is specified in wdisp/J2EE/url_map_location only URL prefix '/' is supported. See also SAP note 1033470. [icrxx.c 2925]
The note reference looks hopeful, but I cannot read it; I get:
Note 1033470
The requested SAP Note is either in reworking or is released internally only
Does anyone have a copy of this Note or knows if it's helpful?
Has anyone done this with NetWeaver CE 7.1?
Tahnks,
William

Connection to ECC with SAP Logon Group failing

I'm creating a new system connection to an ECC backend using a logon group (transaction SMLG in ABAP stack). I have created the connection with the wizard as a SAP_R3_LoadBalancing connection and given it the appropriate Group, Logical System Name, Message Server, Remote Host Tppe and SAP Client. Also I've given it an Alias.
SSO is working correctly between the portal and ECC.
The System Connection Tests > Connection Test for Connectors works, as can been seen::
Test Connection with Connector
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
Results
Retrieval of default alias successful
Connection successful
However, if I try to connection to this system with the Alias, it fails. If I change the alias to a system with a standard R3 connection with a specified hostname, it works. The /etc/services is correct and contains the appropriate entries. Any ideas?
Regards,
Graham

Hi Srikishan,
Thanks for the response. When user from CRM logged in another language than EN for eg. FR, clicks on external link in CRM, takes to EN, only if that language FR is not installed in ECC, else it will take to the same language in which CRM user logged in. This cannot be controlled in SSO configuration. Is this correct?
In case if FR is installed in both the systems, ie CRM and ECC, but user wants to log only to EN when clicked the external link(to ECC) from CRM, how we can configure this, Is any parameter can control or SSO setup configuration available? Please advice.
Regards,
Shahul Hameed

How to extract data via webservices and configure webservices in BI 7

Hi to all,
Can any body tell me How to extract data via webservices and configure webservices in BI 7.
i have created a remote functionmodule which extract data from R/3 , now i want to upload data to BI 7 using that remote function module.
i have use webservice (push) as adapter mode, as i want to connect function module with SOAP , via web services.
please can any body tell how to do that.
also how to configure the webserive , what is it .
I SHALL BE THANKFULL TO YOU FOR THAT
Regards
Pavneet rana

Hi,
1. Using the function library (transaction SE37), call the Web service creation wizard.
To do this, select the desired function module in the function library and choose Utilities ®Generate Web Service ® From the Function Module.
2. Go through the following steps, shown in the wizard:
a. Create a virtual interface.
The virtual interface represents the interface between the Web Service and the outside.
b. Choose the end point.
The name of the function module that is to be offered as Web service is already entered here.
c. Create the Web service definition.
The Web service definition helps with assigning the Web service features, such as how security can be guaranteed in data transfer.
d. Release the Web service.
The wizard generates the object virtual interface and Web service definition in the object navigator.
The function group that was generated when the XML DataSource was created is not transportable and is thus assigned to a local package. To prevent errors due to transports, make sure that the objects that were generated in the Web service creation wizard are assigned to a local non-transportable package.
The Web service is released for the SOAP runtime.
3. In the virtual interface for the import parameter DATASOURCE, define the name of the XML DataSource as the fixed value.
A separate function group is generated for each XML DataSource. It makes sense to pre-assign the parameter DATASOURCE with the name of the XML DataSource in the virtual interface of the Web service for which the function group was generated.
If you do not pre-assign the parameter, it will be necessary to transfer the data sent with the appropriate filled DataSource element, for example, by setting the value in the application that implements the Web service.
a. In the object navigator, choose the name of the package in which the Web service was created and choose Enterprise Services ® Web Service Library ® Virtual Interfaces.
b. Choose Change in the context menu for the virtual interface.
c. For the virtual interface, remove the flags exposed and initial and enter the name of the XML DataSource in apostrophes, for example u20196ADATASOURCENAMEu2019.
d. Activate the virtual interface.
Regards,
Marasa.

Configuartion of logon group !DIAG for use by web dispatcher

We are load balancing our HTTP traffic across a range of ABAP+Java Addin instances and have found that the load is balanced according to the logon group !DIAG. Does anyone know if is possible to configure this group (ie to remove the CI) or how to use a different logon group.
I think you can do something with URL mapping in SICF, but do not know how to configure it.
Regards
Jack Inniss.

Hi Jack
The internal server group !DIAG is made up of all application servers defined in SMLG, I believe. The web dispatcher uses the ICF service /sap/public/icf_info to determine the content of this group in conjunction with URL mapping.
If you exeute this service you'll see the list of servers and logon groups that will be used for the !DIAG group. Is the CI defined in SMLG ? Also, you may find the following page on SAP Help useful.
<a href="http://help.sap.com/saphelp_nw04/helpdata/en/a8/a8463c53a0ff02e10000000a114084/frameset.htm">Server Groups in the Internet Communication Framework</a>
Regards,
Gary

Purpose of creating Logon groups

Hello,
plesae tell me What is the purpose of creating Logon groups ?
Thanks,
Teja

Hi Teja
LOGON GROUPS, as it's name specifies it allows us to divide the total number of logons into some groups, so as to share the workload
Logon load distribution allows dynamic distribution of the SAP users to application server instances by setting up multiple logon groups that consists of one or more application instances.
Every application server group is assigned maximum threshold values for the response time and the number of users that can log on to a particular group server. Especially important logon groups with time-critical transactions can be assigned to application servers with improved response times.
The process of defining the logon groups is:
u2022 Choose CCMS > Configuration > Logon Groups. Alternatively, call Transaction SMLG.
You can configure the logon groups as:
http://help.sap.com/saphelp_nw04/helpdata/en/c4/3a64b4505211d189550000e829fbbd/content.htm
after configuring these logon groups, users are asked to create sapgui entries, so as to make them to login into SAP as per logon load balancing
http://www.cmich.edu/documents/SAP/pdfs/Setting_Up_SAP_Logon_Groups.pdf
thanks
Bhudev

SSO to SAP via SAP Logon Group

Hi,
I've tried to configure SSO to SAP via SAP logon group. When trying this I'll get the following error:
Connect to message server failed Connect_PM MSHOST=<server>, R3NAME=IB1, GROUP=IB1_Web LOCATION CPIC (TCP/IP) on local host ERROR The message received isn't from a message server. Are you really connected to the message server? Please check your connection parameters. (<server> / sapmsIB1) TIME Tue Dec 16 16:48:49 2008 RELEASE 640 COMPONENT MS (message handling interface, multithreaded) VERSION 4 RC -2
I've also configured the file services under winnt\system32\drivers\etc on the BO server with the following line:
+sapmsIB1 443/tcp +
Is there anything I'll have to configure too? Or what does this error mean? The server which I have tried to reach is a message server.
Thanks in advice.
Claudia

HI Ingo,
yes I can connect with SAP GUI via message server and application server. I can also connect with BO via sso to the application server. Only the message server failed.
I have now found out that I had the wrong port. But also the right port doesn't work. I have tested the port with telnet. The port is reachable.
Thanks
Claudia

Scheduling background job on Logon group

Hi All,
We have 4 logon groups configured in SMLG, while scheduling the job in SM36 ->Target server field i am able to see only one group and other indivdual servers not all the Groups configured in SMLG.
Is there any option i have to check to let all the groups configured in SLMG to diaply in SM36 for scheduling so that i can select the Logon group. I tried giving the logon group names manually which are not listed in Target server field it's giving the error group not exist..
Please suggest..how to make all the Groups configured in SMLG to get displayed in SM36 for scheduling jobs...
Thanks,
Subhash.G

Target server field is Name of an SAP instance at which a background job should be run. The name has the following format: <host name>_<SAP System name>_<SAP System number>, where host name is the name of the server computer on which the instance is running, as specified in the system profile parameter SAPLOCALHOST.
The name of each instance is specified in the system profile parameter rdisp/myname.
Example: hs0123_C11_55
In programming: As the table field EXECSERVER, shows the target instance selected by the user for running a job. As the table field REAXSERVER, shows the SAP instance at which a job was actually run.
Hope this is clear.
Thank you,
Shyam

Define Logon group in Webservice SOAMANAGER configuration

Similar Messages

Maybe you are looking for