FPN - error trying to lookup object - remote role assignment not working

Hello everyone,
We have implemented a Federated Portal Network connection in our landscape between our portals.
We use only remote role assignment functionality.
Everything was working fine, but since 2 days we encounter the following error in the Default trace.
Error trying to lookup object: alias: <role name>
It is possible to open the producer portal in the Portal Content Administration and also searching for the Producer portal roles is possible in User administration. But when we assign the remote role the tab is not displayed in the portal only the above mentioned error is shown in the default trace. Our portals run SP 12 and BI Java SP14.
Is there a solution or workaround for this issue ?
Martin

Hi,
I have the same issue as you, I cannot see role tabs in Consumer portal and I get the same error in the defaulttrace as you.
What did you do to resolve this issue?
Many thanks
Gordon

Similar Messages

  • Another FPN Thread: Remote role assignment not working

    Hi all,
    We have successfully implemented FPN for use in our ESS and BW environment and we are experiencing very little problems with it. We now want to start implementing it for our eRecruitment and SRM systems (as producers). For some reason we are not able to use the Remote Role Assignement functionality.
    We have set up trust for the systems and use SSO.
    Connection test for the producer is successfull.
    We can see the Producer content in the pcd on the consumer.
    Server times are the same.
    As far as I know I have correctly set permissions on producer and consumer.
    Possible cause: We are in the process of upgrading our consumer Portal to NW 7.0 SPS15 and have encountered some problems. The system is partially upgraded, so some components are SP15 and some others are still SP13. This is currently under investigation by SAP. Can this be an issue as our producer portals all are still on SP13?
    I hope to hear from you soon. Please ask if you need any screenshots. Thanks in advance.
    Best regards,
    Jan Laros

    Hi Jan,
    if remote role assignment not works, you can also use remote delta links. I only work with remote delta links because i have more options   and a better performance.
    If your connection works you can go to Content Administration ->Portal Content-> NetWeaver-Content-Producer. Hier you can see your remote system. Now you can copy the role and add it to your portal-content.
    If you can not see the content make sure that you have the same user  on both sides also check the premissions on the portal-content of your remote system. To test the connection it is easier to add Everyone group to the content of your remote system.
    regards,
    Sharam

  • ABAP centered role assignment not working

    I have been trying to implement ABAP centered role assignment for our users but not really having much luck in gettng it to work. I've been trying to make sense of it by using [the help guide|http://help.sap.com/saphelp_nwmobile71/helpdata/en/d2/3e3842b23d690de10000000a155106/frameset.htm] but I must be doing someting wrong. Here are the steps that  take.
    1. Create a single ABAP role - A single role with no menu or authorizatons
    2. Create a UME Group - I name the group exactly the same as the ABAP single role from the previous step
    3. Assign UME Group to Portal Role
    4. Assign mapped user to ABAP role
    Supposedly the ABAP role assingment is supposed to reflect through to the UME group membership so the portal user then sees the associated portal tab.
    Can you enlighten me?
    Thanks in advance

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • Role assignment not working

    Hi everyone,
    I am trying to assign different roles to different users for GRC - Risk Management 10.0; however it seems like standard roles don't have any affect on type of activity. I have maintained various levels of roles (e.g. risk owner, risk expert, risk manager, etc) using PFCG and assigned almost every role to the users; but it doesn't give them the authorization to create or edit anything, they can only display.
    The only workaround for this was assigning a role with the authorization object GRFN_USER (with 02 Change value enabled) or assigning SAP_GRC_FN_ALL (Power user role which also contains object GRFN_USER). However this would allow users to do "anything" they want which obviously isn't what I seek.
    I have tried changing customization options such as Maintain Custom Agent Determination Rules and Maintain Entity Role Assignment, it hasn't solved anything so far.
    I urgently require your assistance on this issue. Thank you.
    Regards,
    Seckin

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • Security-role and security-role-assignment not working in WL7.0

    Hello all..
    Some EJB components that worked fine in WebLogic 6.1 no longer work in
    WL7.0. It has to do with the security-role and security-role-assignment
    descriptor elements no longer allowing anonymous users to be included in the
    authorization for a bean.
    For example, in WL6.1 placing these items in ejb-jar.xml:
    <assembly-descriptor>
    <security-role>
    <role-name>Employees</role-name>
    </security-role>
    <method-permission>
    <role-name>Employees</role-name>
    <method>
    <ejb-name>CustomerEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    </method-permission>
    and mapping WebLogic default users to this role in weblogic-ejb-jar.xml:
    <security-role-assignment>
    <role-name>Employees</role-name>
    <principal-name>guest</principal-name>
    <principal-name>system</principal-name>
    </security-role-assignment>
    worked fine for clients creating their context using a simple
    InitialContext() constructor without specifying SECURITY_PRINCIPAL or
    SECURITY_CREDENTIALS. These users were basically "guest" to WebLogic, and
    the security-role-assignment element above told WebLogic that "guest" was in
    the Employees role for purposes of this EJB archive.
    Worked in WL6.1, no longer works in WL7.0. Client receives typical
    permission exception:
    java.rmi.AccessException: Security violation: insufficient permission to
    access method 'create'
    If I explicity connect as "system" things are fine, or I can create a new
    user in the default realm in WebLogic, put a matching <principal-name>
    element in the section above, and connect as that user. Note that if I leave
    off the <security-role> section completely, or set the required role name to
    "everyone", the anonymous access works fine. Apparently the anonymous user
    is a member of "everyone" behind the scenes even though "everyone" does not
    appear in the realm list of groups or roles.
    So, my question boils down to this: Is there a "magic" username in WL7 like
    "guest" was in WL6.1 that can be mapped to the required role name, or must
    every client connection use a true weblogic-created user with appropriate
    role assignments used to map it to the required role name.
    -Greg
    P.S. Note that none of the EJB examples provided with WL used
    <security-role>..
    Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
    www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

    Below are the screen shots for PFCG:

  • Custom Auth. Object with Profile and role assignment not working

    Hi,
    I have created custom Authorization Object with field ACTVT with allowed values - 01,02, 03. Now test it with custom program using AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ' it is working fine and returning sy-subrc 12. At this point i have not created any role using this Auth Object.
    Now I have created custom role ZPM_**** and assigned above Auth object to it with value ACTVT 03. Assigned this role to user.
    When I try to test the above custom program with any ACTVT value it is giving sy-subrc as 0. Used below custom code in program.
    AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ'
                ID 'ACTVT'  FIELD '01'.
    Am I missing anything? The profiles are generated correctly. 
    Best Regards,
    Nilesh

    Below are the screen shots for PFCG:

  • Error in Creation of Object ID 00000000 is not allowed

    Hi all,
    When I am Hiring an employee using PA40, I am getting an error as "Creation of Object ID 00000000 is not allowed", when I save it.
    In the NUMKR Feature, the return value has been assigned to the Personnel Sub Area.
    Pls. can anybody explain, how can I solve this problem. 
    This is urgent requirement of client.
    Thanks,
    HR User.

    Hi Hr user
    Now listen carefully.
    1. If you have defined your feature NUMKR according to PSA then while running hiring action does PSA comes or it just gives you the Position, PA, EG and ESG fileds only.
    2. If the first condition is true then you will get the error, now the question is why
    Answer, you have defined the feature through PSA and once you try to save the IT0000 there is no PSA mentioned there thats why the system gives you the error.
    If this explnanation is understood by you than reply , i will tell you how you can bring the PSA field also in hiring action at IT0000.
    Do reply
    Regards,
    Bhupesh Wankar

  • Federation, remote role assignment based on ABAP roles on producer

    Hi all,
    We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
    Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
    System I: ABAP + JAVA --> ECC 6.0
    Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
    System II: JAVA --> NW 7.0 Portal
    Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
    System III: ABAP + JAVA --> SRM
    Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
    +PROBLEM+
    We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
    Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
    Best regards,
    Jan Laros

    Jan,
    Interesting question. Let me share my experience and hope that's of some use to you.
    We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
    - B's UME points to Active Directory
    - A's UME points to BI ABAP user store
    - User ids are identical in both systems
    We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
    - A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
    However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
    Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
    In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
    Either my story is applicable or I must have got you totally wrong,
    Kiran

  • Federation: Remote role assignment vs Remote delta link

    does anyone know whats the difference on what percentage of load falls on the Consumer portal and what percentage of load on producer between federation via remote role assignment and via remote delta link
    which way is better?

    Hi,
        Basically the load differences between RRA and RDL on the consumer and producer is not a good way to look at it.  Technically all the load to run the content and render it is done on the producer portal and the producer portal just has to display the content in either case.
    As to which one is better, it depends on what you want to do.  RRA only works with roles.  If you have roles already created on you producer portal and you just want to use them as is on the consumer portal then RRA is the way to go.  But if you only want to use iViews or pages from the producer then you have use  RDL.  (or remote application integration)  
    You can of course use both if you want.  You don't have to use only one so use the ne that meets you need the best.
    Hope this helps,
    John

  • Tried to update iPhone 4 to iOS 6 and my phone got stuck in recovery mode. My only option now is to restore my iPhone and lose media. However, I then tried to restore my iPhone and error 1603 occurred. My iPhone is now not working!?!?!

    Tried to update iPhone 4 to iOS 6 and my phone got stuck in recovery mode. My only option now is to restore my iPhone and lose media. However, I then tried to restore my iPhone and error 1603 occurred. My iPhone is now not working!?!?!

    if your computer is not recognizing it, try using a different USB port or different usb cable. if that doesnt work you will need to uninstall and reinstall itunes.

  • Remote DVR will not work?

    I signed up for FIOS when it first came to my area. Verizon installed a basic Netgear router. I since upgraded to a wireless Netgear router about 4 years ago. We just upgraded our DVR to a Home Media and tried to turn on the remote DVR. But when I go to the web site it says remote DVR will not work without original Verizon router. I don't understand why it won't work. Is there a setting or something in the router to make it work or do I need a different router that Verizon has to provide? I am guessing the original router I had wouldn't work either because it is the same brand as the one I have now.

    Called and got a Westell router today. Got it all hooked up and internet and TV are working fine but I still can't activate remote DVR. The DVR has an access code listed, tells me to go to the website and sign in with my verizon.net id. I do and I still get the error remote DVR not possible with third party router. Any more help?

  • HT1222 I just installed this update and now I cannot access "Mail" at all.  I tried reinstalling the program, but that does not work, either.  Help!!!!!!

    I just installed this update and now I cannot access "Mail" at all.  I tried reinstalling the program, but that does not work, either.  Help!

    Paldeng, thanks for the suggestion.  I've done all that.  I can connect to the server, but apparently they are not recognizing my ID and password.  I can use the server program if I don't go through Mail (using the same ID and password).  My mother in another state with another provider has had the same email issue, as also my husband on his laptop who uses the same internet connection I do.  His worked fine until we had it repaired at the Apple store and all the original programs reloaded (with the required updates, I assume).  We can receive email in Mail, we just cannot send.
    I contacted my service provider, and we went over my connections.  They said it was not their problem and connected me with Apple, resulting in a charge to me because my warranty is long expired.  Apple swears it is not their problem, it is the provider, so here I sit.  My son was able to fix my Mom's Mail (she's 97) and got my husband's working also, until mine went out, by tweaking connection descriptions and ports remotely.  The thing is, we had not messed with any of those settings, so what changed?  I just did not want to bother my son again, as he has many other demands on his time.
    Since this fiasco with the Mail v4.6 update, I'm wondering if something else was updated that works well with Lion and Mountain Lion, but does not work well with Snow Leopard and Leopard.  I think the problem I had with the Mail update was that my Mail program had been renamed to Mail (original), and therefore was not being recognized by the update.  Perhaps they had another tweak in there somewhere that is affecting outgoing mail connections?

  • Edit In Photoshop from lighroom suddenly stopped working. I have tried uninstalling and reinstalling both and still not working.

    Edit In Photoshop from lighroom suddenly stopped working. I have tried uninstalling and reinstalling both and still not working.

    What error message are you getting? If none then in Lightroom Preferences> General> check "reset all warning dialogs"
    Try again and see what message pops up.

  • ZSAPLINK for Object type = CLAS is not working

    Dear Experts,
    ZSAPLINK for Object type = CLAS is not working. On executing by selecting Export Object to Slinkee with Object type = CLAS and class name, It is giving the dump which is shown in below snapshots. Pls guide me how to resolve this error.
    Thanks
    KH

    From the screenshot, It seems that the object  _renderer did not point to any memory location.
    You can verify this by putting a breakpoint in method IF_IXML~CREATE_RENDERER of class CL_IXML
    If the return value RVAL is initial, this mean there something wrong with the kernel module abkm_iXML_CreateRenderer. If it is, you will have to check with your Basis team to apply some kernel patches.
    Hope it helps. Cheers!

  • My home sharing and remote app does not work. How do I fix it? I am on a university network.

    My home sharing and remote app does not work.
    Here is my setup:
    Macbook 2009 running Mac OS X 10.6.8
    Itunes 10.6.1
    Ipod Touch 4th gen Mac OS X 5.1
    I am on a university secured network.

    Hi Charles, chinese may be difficult, see our resident language ecxpert, Tom's reply here...
    https://discussions.apple.com/message/20061347#20061347
    On the slowness...
    See if the Disk is issuing any S.M.A.R.T errors in Disk Utility...
    http://support.apple.com/kb/PH7029
    Open Activity Monitor in Applications>Utilities, select All Processes & sort on CPU%, any indications there?
    How much RAM & free Disk space do you have also, click on the Memory & Disk Usage Tabs.
    Open Console in Utilities & see if there are any clues or repeating messages when this happens.
    In the Memory tab of Activity Monitor, are there a lot of Pageouts?
    https://discussions.apple.com/servlet/JiveServlet/showImage/2-18666790-125104/AM Pageouts.jpg

Maybe you are looking for

  • 3gs not being recognized by the computer

    I am having issues with my 3gs.  My computer won't recognize my 3gs

  • ITunes wont sync artist info/album art?

    I have an iPod Touch 4th gen and ever since i updated itunes, its stopped syncing my album art and artist info to my songs. at first, it would just take a few tries at syncing before it would update the artwork on my ipod, but now it doesnt update it

  • File Storage

    How do I store Documentation files on the iPad for sending as attachments on emails? How do I load those documents on to the iPad? Please forgive - my novice is showing

  • Unable to install on mac

    I have a mac version and tried to install flash and it will NOT install.  I download and open and put in my password then it says retrieving install then stops.  I uninstalled flash and tried to install it again and will not.  I restarted my computer

  • Strange App Folder Issue

    Out of 300 machines in the whole building, I have a lab that does not show a specific App folder in the start menu. When the same user logs in on a different machine, it shows up for them there. I can't figure out why, I've even reimaged the machines