How to trace certificate login failure?

Hi all
We have a SOAP sender channel in which we want to use a signed request from a 3rd party to make the login at the PI system.
The certifiate are exported and installed in the NWA-keystore and correspondingly related to a user in the UME.
Everything is configured in the adapter (pointing out the certifate use, etc.).
But when we sign and send and XML-request via SOAP-UI when get a "Logon Error Message"-repsonse like this:
Anmeldung fehlgeschlagen
Was ist passiert ?
Der Aufruf der URL http://192.168.0.18/sap/xi/engine wurde aufgrund fehlerhafter Anmeldedaten abgebrochen.
Hinweis
Die Anmeldung wurde im System XXX ausgef�hrt.
Die Anmeldung wurde f�r den Mandanten 100 und den Benutzer test und die Sprache durchgef�hrt.
Was k�nnen Sie tun ?
�berpr�fen Sie die Angabe �ber den Mandanten, Benutzer und das Passwort auf Tippfehler.
Falls Sie noch �ber keine Benutzerkennung verf�gen, so wenden Sie sich an Ihren Systemadministrator.
Fehlercode: ICF-LE-http-c:004-l:-T:531-C:6-U:5-P:5-L:6
HTTP 401 - Unauthorized
Ihr SAP Internet Communication Framework Team
We have tried to trace both via XPI Monitor and using the trace facilities in the Internet Communication Framework but there are absolutely no indication of why the logon attemt fails
How do you experts search for these type of logon errors? Is there a security log that I should look into? Or is there some other setting that I should be aware of?
Please note that I can see the auth.error in the XPI Monitor, but I cannot determine the reason of the error from the log entries:
[Thr 5888] DpRqPutIntoQueue: put request into queue (reqtype 1, prio LOW, rq_id 57440)     
[Thr 5888] IcmConnRollInWP: rolled in WP -old roll reason was: ICM_ROLL_NONE(0)     
[Thr 5888] HttpSrvHdlRequest: Subhandler rc=704     
[Thr 5888] IcmPlCheckRetVal: Next status: WRITE_RESPONSE(4)     
[Thr 5888] IcmHandleNetRead(id=46/152295): read_len: 5246, HandleNetData returned: 4     
[Thr 5888] IcmHandleNetRead(id=46/152295): status 1 -> 4     
[Thr 5888] IcmReadFromPartner(id=46/152295): read with maximum timeout 500     
[Thr 5888] IcmConnRollInWP: no need to roll in WP status: ROLLED IN     
[Thr 5888] MPI<45b96>66#3: GetInbuf: waiting for new buffer 0 0     
[Thr 5888] MPI<45b96>66#5 GetInbuf 500 0 0 (0) -> MPI_EOUTOFBAND: out-of-band message     
[Thr 5888] MPI<45b96>66#6 ReadOOB 00000000 06000000 35000000 00 -> MPI_OK     
[Thr 5888] IcmHandleOOBData: Received data on 1st MPI (seqno: 0, type=6, reason=Request processed in wp(6)): 53/29369/     
[Thr 5888] IcmHandleOOBData: request will be processed in wp 6     
[Thr 5888] IcmConnRollInWP: no need to roll in WP status: ROLLED IN     
[Thr 5888] MPI<45b96>66#7: GetInbuf: waiting for new buffer 0 0     
[Thr 5888] MPI<45b96>66#10 GetInbuf 500 3d7520 1385 (1) -> MPI_EOS: End Of Stream     
[Thr 5888] Address    Offset  IcmReadFromPartner received     
[Thr 5888]     
[Thr 5888] 00000000097175D8  000000  48545450 2f312e31 20343031 20556e61     HTTP/1.1 401 Una
[Thr 5888] 00000000097175E8  000016  7574686f 72697a65 640d0a53 65742d43     uthorized..Set-C
Many rewards points will be given to your input
Thanks in advance
Peter Michael
Edited by: Peter Michael Jensen on Feb 27, 2012 11:08 AM

Dear Peter
What is the HTTP security level for your sender soap adapter?
For un authiorozed error you should check the user logon credentials which is maintained.
PS - you dont have to lure people with promise of points, they will help you even if you dont give

Similar Messages

  • How to trace reason for failure to synchronize customer in OPM Financials

    Sirs,
    I created a customer in Order Management and process Synchronize Customer in OPM Financials. The result is "Failed"
    How to trace the reason for the reason to synchronize?

    Sirs,
    I created a customer in Order Management and process Synchronize Customer in OPM Financials. The result is "Failed"
    How to trace the reason for the failure to synchronize?
    thanks!

  • How to see / limit consecutive login failures?

    Hi, our server is running 10.4.7 server.
    In terms of hardening the machine against attacks, is there be default a limit to the number of failed logins that occur before an account is locked in some way?
    If not, is there a way to turn ON that security feaure?
    Where are login failures logged?
    Thanks!

    Yes, you can set a limit to login failures. The following assumes that you are using Open Directory and that your users are authenticating against the server's Open Directory database.
    For global policies =
    Open Server Admin > for the proper server select Open Directory > select Policy > select Passwords > adjust settings
    For a single user = this will override global policies listed above
    Open Workgroup Manager > browse users > select the account you wish to manage > Select the Advanced user settings > select Options > dialog box gives ability to limit access in a variety of ways.
    Authentication is logged =
    Server Admin > Open Directory > Logs > Password service server log

  • SSL VPN Login failure issue

    Hello,
    I am having an issue with some users trying to login to our SSL VPN (Anyconnect) via ASA5505 8.2(1).  Authentication is done via AD.  From the same computer, the client finds the DNS name and unlocks the login username and password.  When I enter a username and password and click connect, it is instantly rejected with login failure with the following event log:
    Function: ConnectMgr::setPromptAttributes
    File: .\ConnectMgr.cpp
    Line: 2657
    Invoked Function: setPromptAttributes
    Return Code: -33554423 (0xFE000009)
    Description: GLOBAL_ERROR_UNEXPECTED
    Error text:
    Login failed.
    If I change the user account to another user (from the same PC), login works perfectly fine - this is only happening with 3 or 4 users - I have compared the user accounts of a failing account and a successful account and they are identical in AD. 
    This has been driving me crazy - as a work around for the failing users, I just created a temporary account which works perfectly fine.  The request doesn't even seem to hit the ASA (there is nothing in the logs that show a failed attempt).  Still troubleshooting and looking at certificate's at this point.  Any help/suggestions would be greatly appreciated!!  Thanks.
    Regards.
    After a little more testing, seems somehow related to users being in to many groups in AD.      
    Message was edited by: Rich Viola

    Hello,
    If the website is unavailable or in this case, the website is missing several characters(charts, canvas, etc or some other objects), usually could be an issue with the rewrite engine.
    Solution (workaround):
    You may use smart tunnel for this website, so the rewrite engine will not override any content, and it will display the website as it should.
    You can implement it as follow:
    Add a Bookmark
    Bookmark for the service and clicking the Enable Smart Tunnel option in the Add or Edit Bookmark dialog box.
    For further information you can find it here:
    http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/configuration/guide/config/webvpn.html#wp1272236
    Let me know how tit works out!
    Please don't forget to rate and mark as correct the helpful Post!
    David Castro,
    Regards,

  • ADC Login failure

    While login to the BAM, i am getting the following error. How to resolve this.
    2006-12-16 14:30:03,796 [12860] ERROR - ActiveDataCache Logon failure: unknown user name or bad password
    2006-12-16 14:30:03,796 [12860] WARN - ActiveDataCache Exception occurred in method GetUserGroups (24)
    Stack trace:
    at Oracle.BAM.Common.Security.Groups.WindowsGroupsGetter.GetLocalOrRemoteGroups(String strServerName, String strUserName, Boolean bLocal)
    at Oracle.BAM.Common.Security.Groups.WindowsGroupsGetter.GetGroups(String strName)
    at Oracle.BAM.ActiveDataCache.Common.Core.AuthenticationProcedures.GetGroups(String strName)
    at Oracle.BAM.ActiveDataCache.Kernel.Server.DataStoreServer.GetUserGroups(Int64 lUserID)

    I'm also facing the same issue. The user is a valid windows Domain user. Error 1069: Service did not start due to login failure. Starting the Data Flow Service also gives the same error. Verified the domain user and password are correct from the Windows services. Tried running cacheinit.exe, but that also gives an exception - Name is already used by an existing object.
    Please help.

  • TB V31.0 SMTP user name has extraneous characters at end causes SMTP login failure

    Ubuntu 14.04 LTS with Thunderbird. TB updated recently to V31.0 and SMTP login problems started.
    Worked fine before update. ISP BTinternet.com in UK. Removed and reinstalled Accounts and checked and changed passwords in attempt to resolve problem. Web access works fine so account is OK.
    TB SMTP Log shows extra characters in SMTP user login name causing login failure. Have deleted SMTP account and recreated but error still there.
    Here is an extract from the TB SMTP log. User name is [email protected], but you can see that there are extra characters at the end.
    -1492797568[7fe4a5d17580]: trying auth method 0x200
    -1492797568[7fe4a5d17580]: SMTP entering state: 16
    -1492797568[7fe4a5d17580]: SMTP AuthLoginStep1() for [email protected]@`sÿ£ä
    -1492797568[7fe4a5d17580]: PLAIN auth
    -1492797568[7fe4a5d17580]: Logging suppressed for this command (it probably contained authentication information)
    -1492797568[7fe4a5d17580]: SMTP entering state: 0
    -1492797568[7fe4a5d17580]: SMTP Response: 535 invalid user ID or password
    -1492797568[7fe4a5d17580]: SMTP entering state: 18
    -1492797568[7fe4a5d17580]: SMTP Login response, code 535
    -1492797568[7fe4a5d17580]: marking auth method 0x200 failed ..
    How to edit the SMTP username string to remove these extraneous characters?
    Any help appreciated.
    Paul_B

    Hi Matt,
    Thanks for replaying.
    Not that I am aware of. This is ubuntu 14.04 LTS so there is no anti virus software running and no proxy. Straight to my broadband router and out to the wide world.
    I'm currently tryinf to trace where the login string is stored to see if I can clean it up there.
    Paul B

  • How to create a login session in flex?

    Hi there,
    I have a flex application with two states. One is a "login" state which is a screen with username and password. The other state is "loggedIn" state which is a screen with a small application. As soon as the user credentials are checked from the back end, based on it's success, I'm changing the state to "loggedIn", else there is a message to the user about login failure in "login" state itself.
    My problem is if I'm in "loggedIn" state and if I hit refresh button of the webpage(F5), it goes back to the login screen i.e., it just restarts the application..
    How can I control this? Is there something like login session which can do the trick?
    Appreciate your help...
    -Deepak

    Flex code:
    <?xml version="1.0" encoding="utf-8"?>
    <mx:Application xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute" applicationComplete="getSession.send()">
        <mx:Script>
            <![CDATA[
                import mx.rpc.events.ResultEvent;
                public function getSessionStuff(evt:ResultEvent):void
                    saveInfo.text = evt.result.info;
            ]]>
        </mx:Script>
        <mx:HTTPService id="startSession" showBusyCursor="true" method="POST" url="http://localhost/startSession.php">
            <mx:request xmlns="">
                <stuffToSave>
                    {saveInfo.text}   
                </stuffToSave>
            </mx:request>
        </mx:HTTPService>
        <mx:HTTPService id="getSession" result="getSessionStuff(event)" showBusyCursor="true" method="POST" url="http://localhost/getSession.php"/>
        <mx:Button x="602" y="323" label="Start Session" enabled="{saveInfo.text != ''}" click="startSession.send()"/>
        <mx:TextInput id="saveInfo" x="563" y="293"/>
    </mx:Application>
    setSession.php code;
    <?php
        session_start();
        $_SESSION['loggedIn'] = $_POST["stuffToSave"];
    ?>
    getSession.php code;
    <?php
        session_start();
        if($_SESSION['loggedIn'])
            echo "<info>".$_SESSION['loggedIn']."</info>";
        else
            echo "<info>nothing has been saved</info>";
    ?>
    ta daa

  • How to authorize my Login.jsp file to create LoginContext, deployed in war

    I am currently doing a login process and I need to know how to give my Login.jsp file the permission to create a LoginContext. I packaged everything in a war file and deployed it to the server.
    Specifically this is the error that I am getting:
    type Exception report
    message
    description The server encountered an internal error () that prevented it from fulfilling this request.
    exception
    org.apache.jasper.JasperException: access denied (javax.security.auth.AuthPermission createLoginContext.studentportal)
         org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:384)
         org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:297)
         org.apache.jasper.servlet.JspServlet.service(JspServlet.java:247)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         java.lang.reflect.Method.invoke(Method.java:585)
         org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
         java.security.AccessController.doPrivileged(Native Method)
         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
         org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
         org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
    root cause
    java.security.AccessControlException: access denied (javax.security.auth.AuthPermission createLoginContext.studentportal)
         java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
         java.security.AccessController.checkPermission(AccessController.java:427)
         java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
         javax.security.auth.login.LoginContext.init(LoginContext.java:224)
         javax.security.auth.login.LoginContext.(LoginContext.java:403)
         org.apache.jsp.Login_jsp._jspService(Login_jsp.java:55)
         org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:105)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
         org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:336)
         org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:297)
         org.apache.jasper.servlet.JspServlet.service(JspServlet.java:247)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         java.lang.reflect.Method.invoke(Method.java:585)
         org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
         java.security.AccessController.doPrivileged(Native Method)
         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
         org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
         org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
    note The full stack trace of the root cause is available in the Sun-Java-System/Application-Server logs.
    In my code in Login.jsp this is what I have at the top of the page:
    <%@ page language="Java" import="portal.*,javax.security.auth.login.*" %>
    <%
    String s = request.getParameter("loginButton");
    if (s != null) {
    out.println("The user attempted to login");
    String user = request.getParameter("username");
    String psw = request.getParameter("psw");
    AscCallbackHandler cbh = new AscCallbackHandler(user,psw);
    LoginContext ctx;
    try {
    ctx = new LoginContext("studentportal",cbh);
    } catch (LoginException  le) {
    out.println("Sorry, could NOT create context");
    }The admin page tells me that portal is deployed at location:
    ${com.sun.aas.instanceRoot}/applications/j2ee-modules/portal
    My entry in the server.policy file looks like so:
    grant codeBase "file:/home/jay/sun/Creator2_1/SunAppServer8/domains/creator/applications/j2ee-modules/portal/WEB-INF/-" {
    permission javax.security.auth.AuthPermission "createLoginContext.studentportal";
    permission javax.security.auth.AuthPermission "modifyPrincipals";
    permission javax.security.auth.AuthPermission "getLoginConfiguration";
    Which gives the error shown above
    Please help
    Message was edited by:
    jay_dawg
    Placing code tags

    java.lang.NoClassDefFoundError: org/jdom/JDOMException
         java.lang.Class.getDeclaredConstructors0(Native Method)
         java.lang.Class.privateGetDeclaredConstructors(Class.java:2357)
         java.lang.Class.getConstructor0(Class.java:2671)
         java.lang.Class.getConstructor(Class.java:1629)
         org.apache.jasper.compiler.Generator$GenerateVisitor.visit(Generator.java:1164)
         org.apache.jasper.compiler.Node$UseBean.accept(Node.java:1116)
         org.apache.jasper.compiler.Node$Nodes.visit(Node.java:2163)
         org.apache.jasper.compiler.Node$Visitor.visitBody(Node.java:2213)
         org.apache.jasper.compiler.Node$Visitor.visit(Node.java:2219)
         org.apache.jasper.compiler.Node$Root.accept(Node.java:456)
         org.apache.jasper.compiler.Node$Nodes.visit(Node.java:2163)
         org.apache.jasper.compiler.Generator.generate(Generator.java:3305)
         org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:198)
         org.apache.jasper.compiler.Compiler.compile(Compiler.java:295)
         org.apache.jasper.compiler.Compiler.compile(Compiler.java:276)
         org.apache.jasper.compiler.Compiler.compile(Compiler.java:264)
         org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:563)
         org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:303)
         org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)
         org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
         org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:368)and following by this

  • SP15 in Java engine failed, "Login Failure: all modules ignored"

    Hi
    During the installation of sp15 (with JSPM) failed, the sdm log shows:
    ERROR: Cannot connect to Host: [hostname] with user name: [J2EE_ADMIN]
    My instance was down so I started but now there is an error, when I try to log on to User management it give me the error: "Login Failure: all modules ignored".
    I checked the logs for the server and found the following:
    #1.5^H#0000000000000067000000250000596D00045A79FA4B224F#1225379843613#com.sap.engine.services.security.resource.ResourceHandl
    eImpl#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_GUEST#0##n/a##da7
    065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.
    ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#session-pool#ge
    t_session_pool#ALL#
    #1.5^H#0000000000000067000000260000596D00045A79FA4B32AC#1225379843613#com.sap.engine.services.security.authentication.loginco
    ntext#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.authentication.logincontext#J2EE_GUEST#0##n/a##da7
    065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error##Java###Caller not authorized.
    [EXCEPTION]
    #1#com.sap.engine.services.security.exceptions.BaseSecurityException: Caller not authorized.
            at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:627)
            at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:513)
            at com.sap.engine.services.security.resource.ResourceContextImpl.checkPermission(ResourceContextImpl.java:45)
            at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:119)
            at com.sap.engine.services.security.server.AuthenticationContextImpl.getSessionPool(AuthenticationContextImpl.java:39
    5)
            at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContextFactory(AuthenticationContextImpl
    .java:740)
            at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContext(AuthenticationContextImpl.java:2
    54)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:324)
            at com.sap.engine.system.SystemLoginModule.initialize(SystemLoginModule.java:72)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:324)
            at javax.security.auth.login.LoginContext.invoke(LoginContext.java:662)
            at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
            at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
            at java.security.AccessController.doPrivileged(Native Method)
            at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
            at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
            at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.getLoggedInUser(SAPJ2EEAuthenticator.java:146)
            at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.forceLoggedInUser(SAPJ2EEAuthenticator.java:231)
            at com.sap.security.core.admin.ServletAccessToLogic.getActiveUser(ServletAccessToLogic.java:141)
            at com.sap.security.core.admin.UserAdminLogic.executeRequest(UserAdminLogic.java:438)
            at com.sap.security.core.admin.UserAdminServlet.doPost(UserAdminServlet.java:26)
            at com.sap.security.core.admin.UserAdminServlet.doGet(UserAdminServlet.java:19)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
    nMessageListener.java:33)
            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
            at java.security.AccessController.doPrivileged(Native Method)
            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    I found the SAP Note 971249 but Iu2019m not sure it applies and even I can log on into Visual administrator.
    Log for the Visual Administrator
    <!LOGHEADER[START]/>
    <!HELP[Manual modification of the header may cause parsing problem!]/>
    <!LOGGINGVERSION[1.5.3.7185 - 630]/>
    <!NAME[/usr/sap/SID/DVEBMGS00/j2ee/admin/log/./traces/visual_administration.trc]/>
    <!PATTERN[visual_administration.trc]/>
    <!FORMATTER[com.sap.tc.logging.ListFormatter]/>
    <!ENCODING[UTF8]/>
    <!FILESET[0, 5, 10000000]/>
    <!PREVIOUSFILE[visual_administration.4.trc]/>
    <!NEXTFILE[visual_administration.1.trc]/>
    <!LOGHEADER[END]/>
    #1.5^H#C000AC11873E00000000000100CEC78D00045A541BE7A040#1225217198758#com.sap.engine.services.adminadapter.gui.tasks.LoginTas
    k##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-1,5,main]##0#0#Error#1#/System/Server/VisualA
    dministrationTool#Java###Error while trying to login to host: null
    [EXCEPTION]
    #1#java.lang.NullPointerException
            at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImpl.login(RemoteLoginContextHelperImpl.
    java:72)
            at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImplp4_Skel.dispatch(RemoteLoginContextH
    elperImplp4_Skel.java:64)
            at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:319)
            at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:200)
            at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:136)
            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
    nMessageListener.java:33)
            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
            at java.security.AccessController.doPrivileged(Native Method)
            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    Thank you very much for your help.
    Best Regards

    hi
    we had the same issue some time back when we upgraded to SP15, we opened a OSS message and SAP had to come and fix the issue.
    It was some inconsistencies in -Config DB settings and they made quite a few changes in security/configurations/ticket(config tool)
    also
    one Java parameter was wrong(config tool - server config) :
    -Djava.security.policy=/java.policy  it should be -
    > Djava.security.policy=./java.policy (The DOT was missing)
    thank you
    Jonu Joy

  • ACS Certificate import failure

    Hello All,
    trying to get a certificate imported on an ACS collector. The import (apparently) fails with this:
    >> 1 certificates found for server authentication usage.
    >> Enter the number of the certificate you want AdtServer to use for authenticating
    >>   to AdtAgent or 0 to quit without saving: 1
    >> Certificate 1 selected. Attempting to save thumbprint to registry ...
    >> failure.
    No errors, no messages, no event logs - no nada. I'm not even sure the import actually failed (how to verify ??).
    Anyone happen to have an idea on how to troubleshoot this? I tried tracing registry access with Sysinternals ProcMon, but nothing interesting really stood out.
    Thx in advance for help and/or pointers!
    Rgds - M.

    Hi,
    here you can find more information how to configure certificates for ACS forwarders and collectors:
    How to configure Audit Collection System (ACS) to use Certificate based authentication,
    How to Configure Certficates for ACS Collector and Forwarder
    Regards,
    Ivan

  • How to trace particular T.code

    hi friends,
    how to trace out the particular T.Code used by user.
    --- Lee

    sorry for inconveniance..
    What the t.code used by the particular user in that day ?
    then i have 1 more ques.
    how to find the login details for end users for 1 months.
    the report must be login data , login time , end of session.
    in simple word.  .... How many hours they worked per day for one month. ?
    Lee

  • Workflow Agent login failure

    Hi Everybody,
    I m following KFI process for Invoice Processing.The document image is successfully loaded into UCM and display in IPM search criteria.But the thing is that when ever i m watching Documentrouting in EM ,there is no instance created .
    IPM logs:Workflow Agent login failure
    Please guide me how to solve this one.
    With Regards
    Jyoti

    Hi Everybody,
    Actually imaging.ear was missing.It has solved with the patch installation for soa suite 11.1.1.3 in linux machine.
    Thnx for co-operation.
    With Regards
    Jyoti

  • My iphone 4s is lost what can i do how can trace

    how to trace my phone please help me

    i tune succesfully login but i cloud not login
    please do me a favore i give to you id and password please you try
    <Edited By Host>

  • Design a job for Login failure alert

    HI,
         I need a query to get Login failure alert for both windows login and SQL login account. Also i need track to which database the Login user is connecting while he is getting Login failure error. I need to to schedule this as a job.

    To check what database was being used when the login failed, you will need to use default trace as mentioned in the link below:-
    http://www.eraofdata.com/the-sql-server-default-trace/
    or simply run the query below:-
    SELECT  TE.name AS [EventName] ,
            v.subclass_name ,
            T.DatabaseName ,
            t.DatabaseID ,
            t.NTDomainName ,
            t.ApplicationName ,
            t.LoginName ,
            t.SPID ,
            t.StartTime ,
            t.SessionLoginName
    FROM    sys.fn_trace_gettable(CONVERT(VARCHAR(150), ( 
                    SELECT TOP 1
                    f.[value]
                    FROM    sys.fn_trace_getinfo(NULL) f
                    WHERE   f.property = 2)), DEFAULT) T
            JOIN sys.trace_events TE 
                    ON T.EventClass = TE.trace_event_id
            JOIN sys.trace_subclass_values v 
                    ON v.trace_event_id = TE.trace_event_id
                    AND v.subclass_value = t.EventSubClass
    WHERE   te.name IN ( 'Audit Login Failed' )
    order by t.StartTime desc
    The only other way would be to use Auditing, Server Side Trace or Triggers if you want to maintain history of these. 
    Reference:
    http://sqlrows.blogspot.in/2011/10/note-to-self.html
    Please mark the answer as helpful if i have answered your query. Thanks and Regards, Kartar Rana

  • How to trace the missing authorizations using NWBC at object level

    Hi all,
    In SAP R/3 any authorization issue can be tracked down till authorization object level using SU53 tcode and ST01 tcode.
    1 - I have a super user who has all the roles in Solution manager system and test user which I created with just 1 role Incident management role. But when I login with Super user ID I can see in tcode (WDY_APPLICATION - Incident Management ) I have 4 tabs (Overview,Messages,Reports and Queries) but when I execute the same tcode using test ID I can only see Overview and Messages tab. Report and Query tab were missing . Please advice on how to trace the missing authorizations using NWBC at object level? or how to solve this issue......
    2 - How to add a Web dynpro Transaction code (example WDY_APPLICATION - Incident Management )while building a role in PFCG?
    Thanks
    LAK

    Hi Gurus,
    Can anyone please help me with my questions.
    In addition here are few more info that I need
    How to bring in the new authorizations without logiing off and logging in back in NWBC ( Equivalent to Menu-->Refresh in SAP GUI)
    Thanks
    LAK

Maybe you are looking for

  • Indesign CS6 - 8.0 on iMac 10.9.1, a few issues that may be connected, Shutting down & PDF Issues

    Indesign CS6 - 8.0 on iMac 10.9.1, I have a few issues that may be connected: 1. My computer shuts down goes to a black screen then restarts on its own. 2. My InDesign will crash when I am working and there doesn't seem to be a pattern it just happen

  • Kawai K4 not working correctly in Logic 9

    Hi i am using an old Kawai K4 as my midi controller in logic.  It works fine except for when 2 keys are pressed at the same time the note will continue playing infinitely. Im pretty sure that it may actually not be the program but the keyboard itself

  • CALCULATE_TAX_ITEM how to use it

    hello al cud u tell me what values shud be passed into CALCULATE_TAX_ITEM function module. and how to use it.

  • Obtain folder contents and details

    Hi Ideally via MS Excel, I would like to obtain the contents of a SharePoint document library.  By contents I mean File name Size Last Modified Date Last Modified By As regards the SP library, I could put the address in hard-coding or if possible I d

  • Creation of role inside a role

    hi, is it possible to create a role under another role in cProjects.  I mean, with parent child relations ship.. so, i can see the subrole(s) staffing getting roled up on to the parent role and check the status of supply agianst the demand on the par