How to restrice ananymous user access to portal link /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default?
Hi experts,
We had an issue with portal access. I wonder if portal is venerable for security threats?
Could you please let me how to restrict the unauthorized users (anonymous user) to the portal URL.
https://HOST:50001//irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default .
Appreciate your help.
Regards
Maruti
Hi Maruti,
Hope you are doing good.
Can't you just amend the portal permissions so that this access is not possible.
The PCD location should be:
com.sap.portal.system/security/sap.com/NetWeaver.Portal/no_safety/com.sap.portal.navigation.portallauncher....
Hope this helps.
Thank you and have a nice day!
Kind Regards,
Hemanth
Similar Messages
-
Hi,
in KM it is possible to use short guids to point to resources. Unfortunately, to use guids in Links, one has to prepend the full path to the component com.sap.km.cm.docs, i.e. to point to guid "/guid/123" one has to write "http://server:port/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/guid/123".
How can I afford to use the much shorter URL "http://server:port/guid/123"?
Thanks in advance
UweHi Boris,
thanks for your reply. This helps me further, but I would even more like to use only URLs that have the form http://server:port/guid/123 or http://server/guid/123.
With Apache Web Server I would have known that this could be achieved via URL rewriting but I could not find anything equal to URL rewriting in Netweaver Portal, not even in Web Dispatcher, which we are using, too.
Cheers,
Uwe -
Hi Experts,
I need to change the text in logon screen i.e,
2006-2007 SAP AG ALL RIGHTS RESERVED
for this i changed the copyright and deployed the par file
but it is giving error like this
operation failed:please make sure the server is running or check the log(sap-plugin.log)
what should i do plz suggest me na.....
i searched the file sap-plugin.log in program files -> sap>IDE>eclipse-->plugin but i couldnt find the
plz specify the directory na...
waiting for u r response.....
Regards,
ShilpaHI SHILPA....really sorry for the late response.
here is the error log which i m getting...(its not 500 error)
[13.08.08 / 16:49] #DEBUG LEVEL# com.sap.portal.developmentTools.ideSpecific.eclipse.PortalPlugin > Startup in progress
[13.08.08 / 16:49] #DEBUG LEVEL# com.sap.portal.developmentTools.ideSpecific.eclipse.PortalPlugin > Factory initialized !
[13.08.08 / 16:50] #ERROR LEVEL# com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.sapmakepar.SAPMPWizard$1 > No Information
java.io.IOException: Server returned HTTP response code: 502 for URL: http://hostname:50000/irj/servlet/prt/portal/prteventname/upload/prtroot/com.sap.portal.runtime.system.console.ArchiveUploader?login_submit=on&j_user=Administrator&j_password=EPDJ2EEADM&j_authscheme=default&uidPasswordLogon=Log%20on
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:808)
at com.sap.portal.developmentTools.general.wizards.upload.DeployEngine.readResponse(DeployEngine.java:363)
at com.sap.portal.developmentTools.general.wizards.upload.DeployEngine.uploadPar(DeployEngine.java:435)
at com.sap.portal.developmentTools.general.wizards.upload.DeployEngine.deploy(DeployEngine.java:221)
at com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.sapmakepar.SAPMPWizard$1.processUpload(SAPMPWizard.java:416)
at com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.sapmakepar.SAPMPWizard$1.run(SAPMPWizard.java:350)
at org.eclipse.jface.operation.ModalContext.runInCurrentThread(ModalContext.java:302)
at org.eclipse.jface.operation.ModalContext.run(ModalContext.java:252)
at org.eclipse.jface.wizard.WizardDialog.run(WizardDialog.java:758)
at com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.sapmakepar.SAPMPWizard.performFinish(SAPMPWizard.java:531)
at org.eclipse.jface.wizard.WizardDialog.finishPressed(WizardDialog.java:608)
at org.eclipse.jface.wizard.WizardDialog.buttonPressed(WizardDialog.java:321)
at org.eclipse.jface.dialogs.Dialog$1.widgetSelected(Dialog.java:423)
at org.eclipse.swt.widgets.TypedListener.handleEvent(TypedListener.java:89)
at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:81)
at org.eclipse.swt.widgets.Widget.sendEvent(Widget.java:840)
at org.eclipse.swt.widgets.Display.runDeferredEvents(Display.java:2022)
at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:1729)
at org.eclipse.jface.window.Window.runEventLoop(Window.java:583)
at org.eclipse.jface.window.Window.open(Window.java:563)
at com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.actions.WizardInvokeAction.invokeWizardInANewDialog(WizardInvokeAction.java:179)
at com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.actions.WizardInvokeAction.run(WizardInvokeAction.java:84)
at org.eclipse.ui.internal.PluginAction.runWithEvent(PluginAction.java:251)
at org.eclipse.ui.internal.WWinPluginAction.runWithEvent(WWinPluginAction.java:207)
at org.eclipse.jface.action.ActionContributionItem.handleWidgetSelection(ActionContributionItem.java:456)
at org.eclipse.jface.action.ActionContributionItem.handleWidgetEvent(ActionContributionItem.java:403)
at org.eclipse.jface.action.ActionContributionItem.access$0(ActionContributionItem.java:397)
at org.eclipse.jface.action.ActionContributionItem$ActionListener.handleEvent(ActionContributionItem.java:72)
at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:81)
at org.eclipse.swt.widgets.Widget.sendEvent(Widget.java:840)
at org.eclipse.swt.widgets.Display.runDeferredEvents(Display.java:2022)
at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:1729)
at org.eclipse.ui.internal.Workbench.runEventLoop(Workbench.java:1402)
at org.eclipse.ui.internal.Workbench.run(Workbench.java:1385)
at com.tssap.util.startup.WBLauncher.run(WBLauncher.java:79)
at org.eclipse.core.internal.boot.InternalBootLoader.run(InternalBootLoader.java:858)
at org.eclipse.core.boot.BootLoader.run(BootLoader.java:461)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.sap.ide.eclipse.startup.Main.basicRun(Main.java:291)
at com.sap.ide.eclipse.startup.Main.run(Main.java:789)
at com.sap.ide.eclipse.startup.Main.main(Main.java:607) -
Com.sap.portal.navigation.masthead.par.bak
I have been given the task of creating a new masthead of the portal but do not have access to the files, could someone please send me: com.sap.portal.navigation.masthead.par.bak
I have tried to get this through Portal Runtime -> Browse Deployment but I always get an error when I try to upload the PAR file into NWDS.
Thank you in advance, if anyone sends it to me please post here also so others know (And so i can reward points)
Michael
[email protected]Hi Michael,
it's quite dangerous just to use "some" navigation.masthead, maybe different from you SPS/Patch version.
The question is:
> I always get an error
> when I try to upload the PAR file into NWDS
Why that? Have you been aware that the downloaded file is a ZIP which <i>contains</i> the PAR in question?! (So you first have to unpack the PAR, which you want to import afterwards).
If yes, did you choose File -> Import -> PAR-File?!
If yes, what kind of error came up?
Hope it helps
Detlev -
Hi all,
I must to deploy the "com.sap.portal.navigation.masthead.par" from Portal 7.0 to Portal 7.30
I'm doing the following steps:
- Convert .par to .ear
- Import .ear to NWDS 7.30
- Deployment perspective > Import > File System > com.sap.portal.navigation.masthead.ear > Start
Results log:
S U M M A R Y
~~~~~~~~~~~~~~~~~~~
Successfully deployed: 0
Deployed with warnings: 0
Failed deployments: 1
~~~~~~~~~~~~~~~~~~~
[ERROR CODE DPL.DCAPI.1031] AllItemsAlreadyDeployedValidationException.
Reason: ASJ.dpl_dc.003456 All batch items are marked as AlreadyDeployed because of Version check.
1. File:D:\Documents and Settings\corellavpd\Escritorio\com.sap.portal.navigation.masthead.ear
+ Name:com.sap.portal.navigation.masthead+
+ Vendor:sap.com+
+ Location:SAP AG+
+ Version:1+
+ Deploy status:AlreadyDeployed+
+ Version:LOWER+
+ Description:+
+ 1. Already deployed component has version:7.3005.20110929162215.0000+
How can I deploy in Portal 7.30 an older version of "com.sap.portal.navigation.masthead.par" ?
Thx!
M.
Edited by: ALL NEW Arinso on Nov 17, 2011 12:54 PMHi Detlev,
Thanks so much for your reply. Regarding "Create Portal Archive (EAR File)" everything is understood, thanks! In NWDS 7.3 everything must be deployed via .ear file
Regarding the libs... yes, of course I know I compile the sources against some libs Then, I'm gonna type it an example:
- NWDS 7.0 > import com.sap.portal.navigation.masthead.par
Everything is ok and working. Now, the same in 7.3:
- NWDS 7.30 > import com.sap.portal.navigation.masthead.par > LogInRedirect.jsp > exactly the same code as NWDS 7.0 (of course), but with errors in lines:
<%@ page import = "com.sapportals.portal.navigation.*" %> >>> The import com.sapportals.portal.navigation cannot be resolved
<%@ page import = "com.sapportals.portal.prt.runtime.PortalRuntime" %> >>> this is resolved correctly into SAP_EP\resources\prtapi.jar
I understand I must to add the corresponding libs for "com.sapportals.portal.navigation.*" to be used... but how I could know which one and where is located? I hope I'm explaining myself clear...
Thx!!
M.
Edited by: All NorthgateArinso on Nov 23, 2011 4:47 PM -
Add code to 'com.sap.portal.runtime.logon'
Hi,
I want to add custom code to the logon page after the user is authenticated.
Where do I need to add this code?
Is it possible to add it under unLogonPage.jsp? or do I need to call other portal component?
The code should update custom property under user maintenence
Something like:
String uID = user.getUniqueID();
IUserMaint us = UMFactory.getUserFactory().getMutableUser(uID);
String[] param = { "123456" };
us.setAttribute("MyNameSapce","customProp",param);
us.save();
us.commit();
Thanks,
OmriHi,
I don't have welcome/home page but this is what I did:
in umLogonPage.jsp I change the action in the form to:
<FORM name="logonForm" method="post" action="/irj/servlet/prt/portal/prtroot/com.company.SetUserData.SetUserData">
I wrote AbstractPortalComponent with the following content:
public void doContent(IPortalComponentRequest request, IPortalComponentResponse response)
try {
IUser user = request.getUser();
String uID = user.getUniqueID();
IUserMaint us = UMFactory.getUserFactory().getMutableUser(uID);
String[] param = new String[1];
param[0] = uID + "Testing 1 2 3";
us.setAttribute("Namespace","customProp",param);
us.save();
us.commit();
} catch (Exception e) {
response.write("<script>");
response.write("alert("Error";)");
response.write("</script>");
response.write("<script>");
response.write("location.href = "/irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default"");
response.write("</script>");
The code seems to be working but I wonder what will go wrong (-: (what is the meaning of not using the 'inPortal' parameter in umLogonPage)
Should I perform any more tests?
Regards,
Omri -
Create custom com.sap.portal.layouts.framework to allow google index
Hello experts,
I can't create a full .par from a copy of the com.sap.portal.layouts.framework component because when I create the .par for upload it in the portal, this .par file just includes the portalapp.xml. I don't know if there is a restriction in the portalapp.xml, so that the .jsp files are not exported to the par file?
I haven't changed the portalapp.xml, just deleted the components for the layouts that I donu2019t need to modify
<?xml version="1.0" encoding="UTF-8"?>
<application>
<!--THIS FILE IS A COPY OF THE ORIGINAL VERSION STORED IN THE PCD. PLEASE DO NOT CHANGE IT!-->
<application-config>
<property name="Vendor" value="sap.com"/>
<property name="SecurityArea" value="NetWeaver.Portal"/>
<property name="SharingReference" value="com.sap.portal.htmlb,com.sap.portal.themes.lafservice,com.sap.portal.useragent,com.sap.portal.pagebuilder"/>
</application-config>
<components>
<component name="framework">
<component-config>
<property name="ClassName" value="com.sapportals.portal.pb.layout.PageLayout"/>
<property name="ResourceBundleName" value="pagebuilder_nls"/>
<property name="SafetyLevel" value="no_safety"/>
</component-config>
<component-profile>
<property name="ComponentType" value="com.sapportals.portal.layout"/>
<property name="com.sap.portal.pcm.Title" value="Framework Layout"/>
<property name="com.sap.portal.pcm.Description" value="Layout displaying one full-width column that encompasses the entire portal desktop and contains scripts"/>
<property name="com.sap.portal.reserved.layout.TagLibLayout" value="/SERVICE/com.sap.portal.pagebuilder/taglib/layout.tld"/>
<property name="com.sap.portal.reserved.layout.TagLibHtmlb" value="/SERVICE/com.sap.portal.htmlb/taglib/htmlb.tld "/>
<property name="com.sap.portal.reserved.layout.TemplateFile" value="framework.jsp"/>
<property name="AuthScheme" value="anonymous"/>
<property name="com.sap.portal.reserved.layout.Cont1" value="frameworkColumn">
<property name="title" value="Framework Column"/>
<property name="orientation" value="vertical"/>
<property name="designClass" value="prtlHeaderCon"/>
</property>
</component-profile>
</component>
<component name="light_framework">
<component-config>
<property name="ClassName" value="com.sapportals.portal.pb.layout.PageLayout"/>
<property name="ResourceBundleName" value="pagebuilder_nls"/>
<property name="SafetyLevel" value="no_safety"/>
</component-config>
<component-profile>
<property name="EPCFLevel" value="0"/>
<property name="ComponentType" value="com.sapportals.portal.layout"/>
<property name="com.sap.portal.pcm.Title" value="Framework Layout"/>
<property name="com.sap.portal.pcm.Description" value="Layout displaying one full-width column that encompasses the entire portal desktop and contains scripts"/>
<property name="com.sap.portal.reserved.layout.TagLibLayout" value="/SERVICE/com.sap.portal.pagebuilder/taglib/layout.tld"/>
<property name="com.sap.portal.reserved.layout.TagLibHtmlb" value="/SERVICE/com.sap.portal.htmlb/taglib/htmlb.tld "/>
<property name="com.sap.portal.reserved.layout.TemplateFile" value="light_framework.jsp"/>
<property name="AuthScheme" value="anonymous"/>
<property name="com.sap.portal.reserved.layout.Cont1" value="frameworkColumn">
<property name="title" value="Framework Column"/>
<property name="orientation" value="vertical"/>
<property name="designClass" value="prtlHeaderCon"/>
</property>
</component-profile>
</component>
</components>
<services/>
</application>I'm trying to do the follow change in framework.jsp so that google can correctly index a external facing portal:
I allready consider the following links:
Note 933452
http://help.sap.com/saphelp_nw70/helpdata/en/44/ccf6bf687f3b9ae10000000a1553f6/frameset.htm
Re: EP and search engine
Re: Portal Page Header <HEAD> Keywords & Title
Re: EP and search engine
Re: New Framework Page From PAR File
Creating framework page from new jsp-file
Any advice will be very helpful
Best Regards,
Ernesto Serrano -
Dear all,
I've created out BI system in our new Portal installation and tested the connection. Everything works fine. I added the certificate of the portal to STRUSTSSO2 in BI ABAP and assigned SAP_ALL and SAP_NEW to my Account.in BI. If I open the iView from the portal I get a BSP Exception with the message:
The used connection by the iView is to the ABAP-Stack of the BI-system not to the JAVA-Stack. Is that correct?
BSP Exception: Der Zugriff auf die URL /irj/servlet/prt/portal/prtroot/com.sap.ip.bi.web.portal.integration.launcher;jsessionid=IDBYatWIpt_pX4uc52ChoZqMWkm1RAFW2qsA_SAP ist untersagt.
What can be the problem/reason?
Thanks!Hi Gerrit
In both places you have to provide a authorization access to the end users then only it will work. because your are already said that in SAP_All & SAP_New working fine
Back end BI system access as per the word document as pasted the link
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=7&cad=rja&uact=8&ved=0CFIQFjAG&url=http%3A%2F%2Fbasisdsp.f…
For SAP portal you have to create iview's assign the same to end user
Assigning an Authentication Scheme to an iView - User Authentication and Single Sign-On - SAP Library
Portal Authentication Infrastructure - Configuring the Portal for Initial Use - SAP Library
BR
SS -
We are implementing EP 6.0, currently with SP11. We have developed some iViews, which are using RFC functions to get information from backend system, in this case SRM.
Everything worked fine, till the day weve transported those developments into other systems (production and testing systems). We are getting the following error Access denied (Object: com.sap.portal.system/security/no_safety). This error only comes out if the iView is called from inside another one, if called isolated it works fine.
Does any one have any idea about how to solve this?Hi AA, you can find in the log file in order to identify what is the object that you need to add in the security zone.
You can find information for the security zones on:
http://help.sap.com/saphelp_nw04/helpdata/en/25/85de55a94c4b5fa7a2d74e8ed201b0/content.htm
Regards. -
Hi this is related to the wizard creating component required .jar file. Can any body tell me , how to get this jar file. I have searched in my IDE plug-in's folder. But i have nt find this.
com.sap.portal.admin.wizardframework_api.jar
how to get thid jar file.
REgards
VijayVijay,
You can access the above mentioned par file from this location,
System Admin -> support -> Support Desk->ROOT/WEB-INF/deployment/pcd (download this folder)
->com.sap.portal.admin.wizardframework.par.bak->extract the file
alternatively,
u can find the same in,
\j2ee\cluster\server0\apps\sap.com\irj\servlet_jsp\irj\root\WEB-INF\portal\portalapps\com.sap.portal.admin.wizardframework\lib
Thanks & Regards,
Ramganesan K
Keane Inc -
Hi this is related to the wizard creating component required .jar file. Can any body tell me , how to get this jar file. I have searched in my IDE plug-in's folder. But i have nt find this.
com.sap.portal.admin.wizardframework_api.jar
how to get thid jar file.
REgards
VijayHi,
You should have com.sap.portal.admin.wizardframework in your SharingReference:
<property name="SharingReference" value="com.sap.km.application, com.sap.portal.admin.wizardframework"/>
Pls check this link,
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/bf4172cb951d66e10000000a1553f6/content.htm
Hope this helps !
Regards
Srinivasan T -
How do i download com.sap.portal.runtime.logon.par.bak
I need to download com.sap.portal.runtime.logon.par.bak
From what i understand, If you have the System administration privilege then you can download the par file from "System Administration"==>"Support"==>"Support Desk"==>"Portal Runtime"==>"Browse deployment"==>"ROOT"==>"WEB-INF"==>"deployment"==>"pcd"
I was able to navigate this way. However, i cannot find this logon.par under this directory structure.
In help.sap.com, i was told to Navigate to <J2EE_Engine_Instance>\j2ee\cluster\server<X>\apps\sap.com\irj\servlet_jsp\irj\root\WEB-INF\deployment\pcd .There you can find com.sap.portal.runtime.logon.par.bak.
How is this different from the earlier navigation? I don't know how to do this? How exactly do i navigate this way?Sandeep
I am sure that in the follwoing path, u can find the
com.sap.portal.runtime.logon.par.bak
<b><J2EE_Engine_Instance>\j2ee\cluster\server<X>\apps\sap.com\irj\servlet_jsp\irj\root\WEB-INF\deployment\pcd</b>
MAke a copy of the PAR and u can Pull it into the NetStudio !!!!
Thanks
Kay -
How to download com.sap.portal.navigation.contentarea par file
I am trying to download the com.sap.portal.navigation.contentarea par file so that I can modify it and upload it with a new name. I found the file in the Support Desk of the portal, and I downloaded it just fine. However, when I download it it was in the form of com.sap.portal.support.browse.zip. I tried to extract the files from there, and I came up with com.sap.portal.support.browse.
How can I get this in the form of a par file to import into NWDS? I have imported par files into NWDS before, but I nothing I am trying is working, because I can't get it into the .par or .par.bak formats.
Thanks,
OwenOK done...
I am doing it and explaining you step by step same time...
1. logged in to portal -> system administration -> support -> ROOT/WEB-INF/deployment/pcd
2. clicked download link beside com.sap.portal.navigation.contentarea.par.bak file.
3. downloaded/saved to my desktop
4. Now I have file com.sap.portal.support.browse.default on my local machine.
5. Right click on this . default file and select Add to "com.sap.portal.support.browse.default.rar" --- this is the important step...*
6. Now you have com.sap.portal.support.browse RAR / ZIP file (no extension will be added, you can check it by file format).
7. Keep on double clicking on rar file till you see .bak file.
8. Once you are at / you see com.sap.portal.navigation.contentarea.par.bak then right click on this file and select "Exctract to specified folder" ...
9. Change the path to where you want to store .bak.
10. rename it to .par by removing .bak.
That is it... its all yours to modify/customize...
Hope this is clear to you.... let me know If you see anymore issues.
As you asked for... I have done it in my system and writing it to you....
-PradeeP -
How to change com.sap.portal.usermanagement.admin.par file
Hi
Requirement is
1)using com.sap.portal.usermanagement.admin.par file provide the UserUpdate view(With out developing ur own GUI and code to update the userprofile).
2)Department and Position is not visible to the user at the time of updation.
so to achive this i imported com.sap.portal.usermanagement.admin.par file into NWDS after that i have confiused to change the files. can u give the procedure to follow the things.
Regards
Srinivasu.yHi,
Your question is not clear. Second, people are bound to get offended if words like "Urgent Requirement" or words like "clearly state the files " is used.
Please clearly state the requirements. If people know the solution they would answer it. This is not a support portal , so please make sure that you do not offend the community.
Go through this link
<a href="https://www.sdn.sap.com/irj/sdn/thread?threadID=285259&tstart=0">Rules of Engagement</a>
And do state your question clearly.
Thanks and Regards
Bharathwaj -
How to modify com.sap.portal.navigation.toplevel.par
Hi,
I have a situation where i need to change the Top level navigation (com.sap.portal.navigation.toplevel) i.e i want some different buttons insted of the standard one's.
I had seen some blogs like hovering etc..
but i cant understand the concept.
Can any one explain it in a simple and detailed way.
Thanks in advance,
MrChowdaryHi Chowdary,
Please Refer This,
<b>Navigation in portal:</b>
http://help.sap.com/erp2005_ehp_02/helpdata/en/e0/9e4f3e7395b412e10000000a11405a/frameset.htm
<b>Portal Personalization:</b>
http://help.sap.com/erp2005_ehp_02/helpdata/en/e0/9e4f3e7395b412e10000000a11405a/frameset.htm
Regards,
Nandha.
Maybe you are looking for
-
Let me explain. I have an HP 2000 series laptop running Windows 7 Home premium with a 500gb hard drive. I currently have Adobe Photoshop CS4 on my computer but I uninstalled it first before downloading the trial of CC. I figured when my 30 day Photos
-
SHPCON serial number updates item on delivery but not item in HU
I am using SHPCON to update the item on delivery with serial numbers. After that I use SHPCON to pack that same item in a handling unit. From the pack screen I should be able to select the item and hit the serial number button and see the serial nu
-
when i save my pdff another archive appears
-
Reg : txt Files in Server directory (UTL_FILE)
Hi Experts, Suppose, I've placed 5 +.txt+ files (procedure/table creation scripts) in a db server directory. Is there any way I can loop through each of the files? I need to pull the content of each file into oracle table using a procedure. So, I'm t
-
How can I get it back?