New version of sapyto - SAP Penetration Testing Framework

Hello list,
I'm glad to let you know that a new version of sapyto, the SAP Penetration Testing Framework, is available.
You can download it by accessing the following link: http://www.cybsec.com/EN/research/sapyto.php
News in this version:
This version is mainly a complete re-design of sapyto's core and architecture to support future releases. Some of the new features now available are:
. Target configuration is now based on "connectors", which represent different ways to communicate with SAP services and components. This makes the
framework extensible to handle new types of connections to SAP platforms.
. Plugins are now divided in three categories:
     . Discovery: Try to discover new targets from the configured/already-discovered ones.
     . Audit: Perform some kind of vulnerability check over configured targets.
     . Exploit: Are used as proofs of concept for discovered vulnerabilities.
. Exploit plugins now generate shells and/or sapytoAgent objects.
. New plugins!: User account bruteforcing, client enumeration, SAProuter assessment, and more...
. Plugin-developer interface drastically simplified and improved.
. New command switches to allow the configuration of targets/scripts/output independently.
. Installation process and general documentation improved.
. Many (many) bugs fixed. :P
Enjoy!
Cheers,
Mariano

Hi Mariano,
Thanks for the update.
We implemented secinfo restrictions 5 years ago, but used a rather complicated approach. We did some tests today (the "local" setting works okay so far) and will continue tomorrow.
We now use the HOST and USER-HOST set to "local" and let the application security deal with who-can-do-what and this works quite well; though we have encountered some external 3rd party server programs in some cases. It seems to be popular amongst the business folks and some of the products use the gateway monitor to comunicate with the SAP system to find out when it has completed processing.
I think this is a design error, but they of course think otherwise
What was interesting to note, was that we locked ourselves out of an unprotected system. We changed the gw/monitor from 2 to 1 in a test. This worked. But then the gwmon cannot be used to change it back to 2! To we tried RZ11, and experienced the same. So we changed it to 0 in a test, and then 1 was blocked as well. This appears to be implemented in the kernel, as even hobbling the application coding does not help. The parameter is only dynamic when decreasing the value and increasing the security.
We had to restart the whole system for the instance profile to take effect again. Rather noisy and a few developers could take an additional 10 minute coffee break as a result
We are testing this on 3 different releases with different config:
- 4.6C (46D)
- 6.40
- 7.00
The different config relates to:
- gw/sec_info
- gw/monitor
- auth/rfc_authority_check
Our intention behind this is to improve baseline security and harden some special systems further.
Cheers,
Julius

Similar Messages

Object link selection (Required) by user while new version creation

Hi All,
In ECC 6 While creating the new version of DIR ,SAP easy DMS is showing pop up to select the existing object link , how can we stop this and enable to copy the existing object link in new version which working fine in SAP R/3 4.7.
Regards
shiv

Dear Shiv,
you can change this behavior in the customizing of the document type in transaction DC10 for each object type.
Just go to DC10 and mark the affected document type. Then click on "Define object links" and double click on the object type. On the next screen you should see a field called "When New Version". Here you can use the F4 help to choose which behavior you want to have.
Best regards,
Christoph

"newer version exist" in Solution Manager SMSY version 4.0

Hello
We do run Solution Manager version 4.0.
We have configured our D/Q and P Systems for SAP BW 3.5 (Netweaver)
When I goto Transaction SMSY there is always a yellow triangle for our BW Dev System which indicates "newer version exist".
Does anyone of you know how I can get rid of that warning?
Does this warning means that there is a newer version available? (SAP BI 7.0) or does thie warning indicate there there is a mismatch in my BW versions in the Solution Manager? Strange is also that BW Dev/Q and P match in terms of version in the Solution Manager nevertheless this warning is only visible for BW Dev environment.
regards
Nesimi

Hello,
Thank you for your valid input!
When I goto "Other Object" and Select my BW Dev System (SBD) and than goto "Installed Product Versions" it already has the SAP NeWeaber 2004 Product selcted. I can get rid of the yellow triangle when I remove the hook fromthe SBD System in "Leading Product". But the strange thing about this is that I do have this hook enabled in my BW Q and P System and all of them (D,Q and P) run on exactly the same version.
So now I got rid of the yellow triangle but this one little parameter is now different from D to Q and P.
any suggestions?
Thank you
best regards
nesimi

SAP NetWeaver Gateway plug-in for Eclipse - New Version Available

Hi All,
I am happy to share with you that a new version (2.4.101 )of the SAP NetWeaver Gateway plug-in for Eclipse is now available [here|http://www.sdn.sap.com/irj/scn/downloads?rid=/webcontent/uuid/b09d414f-f227-2f10-bdbf-ba31c844b432].
We will be happy to get any feedback on the tool from you.
What's new?
Framework
u2022 Proxy generation support from Search Console
u2022 New exploration screen (user provides URL) in Wizard
u2022 OData 1.0 support (exploration including aggregation of catalogs)
u2022 Enhancements (improved performance, bug fixes)
Java Toolkit
u2022 New Connectivity API (X.509 enablement, XSRF protection, error handling)
u2022 New Parsing API
u2022 OData 1.0 support
PHP Toolkit
u2022 OData 1.0 support
Thanks,
Nir

Hi Michal,
While installing the Netweaver gateway plugin for eclipse Juno version through the following link
https://tools.hana.ondemand.com/juno under Help -> Install New Software... I have encountered below error.
Can you please help me in resolving it.
An error occurred while collecting items to be installed
session context was:(profile=epp.package.jee, phase=org.eclipse.equinox.internal.p2.engine.phases.Collect, operand=, action=).
Unknown Host: https://tools.hana.ondemand.com/juno/features/com.sap.core.editor.feature_1.0.6.jar
tools.hana.ondemand.com
Many thanks in advance.
Regards,
Parthi

SAP application penetration testing.

Dear All,
Does anyone have information on penetration testing of SAP application? I am looking for the following:
· Tools
· Methodology including any reference material
phenoelit has some resources/vulns for SAP.
http://www.phenoelit.de/whatSAP/index.html
and also:
http://www.it-audit.de/html/ian_sp_sap_sp.html
Thanks in advance,
Elad Shapira, CISSP

Elad,
SAP Security Testing is at the complex end of Application Testing. It's easy to test individual components (e.g. EP or ITS apps can be tested to some extent by more or less any outfit with Web App experience). We've been 'doing' SAP Security Testing for most modules, WAS, EP and ITS for a while now and it's a very strange beast indeed.
The bad news: There aren't any tools (beyond ABAP Workbench and Access/TOAD).
Generally in an SAP test you're looking for the following:
Assurance that underlying infrastructure and databases are secure (So, classic Vulnerability Assessment and Database testing)
Assurance that the SAP instances themselves are sufficiently secured (Authorizations, audit focused points, source code review for Z* and Y* transactions, Interfaces, User Exits etc.)
Assurance that the documentation and procedures are up to scratch (normally a fairly swift policy review, usually highlights the areas that are different).
Please feel free to send me a message offline if there's any specifics you'd like to discuss.
Steve

Cannot find FindById..My old script cannot work anymore in SAP new version.

Dear Experts,
I have upgraded my SAP to a new version but I cannot use script that I wrote in the past with this version.
I tried to use record and playback. It works but with different code. It seems that it is using a different kind of code that is not similar to FindById at all.
Moreover, I cannot call Development Tool, Professor Dumbledor, any more.
Is there anything I have to change to activate Developmento tool and change back to FindById code option?
Thank you very much for your help.
Jackijacky

Hi Jackijacky,
It could be that it has something to do with WAN mode.
You can check the adjustment. :SAPLOGON --> PROPERTIES --> ADVANCED
Regards,
ScriptMan

What is the newer version SAP R/3.

Hi All,
What is the newer version SAP R/3.
at present i am using 3.0 with my client...
Cheers,
Raghavesh

Most commonly using version is 4.7ee,
But ECC 5.0 and ECC 6.0 are also available in the market.
SOme companies are using ECC 5.0 already.
Thanx.

Roll back to standard SAP, after generating a new version for an interface

Hello all,
Somebody has modified one standard interface, and now a new version has been created with that user name. But, there is no difference between the old SAP version and the current active versioin (he/she has changed nothing). If i go and see the version management it is appearing like this,
X     Active    ..............   with that user name............
below which i have the standard SAP version like this,
.......................0.00.000. ...................... SAP
But, if i go and see the attributes for that interface, its showing
LAST CHANGED BY    ............................ SAP
how this can happen, when the active version is under a user name, but still the attributes is showing LAST CHANGED BY as SAP ????
one more question,
Now i want to revert my interface back to Standard SAP version, although there are no changes between the old and the current version. If i go and see the version management, it should show me only one version that too of standard SAP, like this,
X      Active...........................   SAP.
THe reason is, some body in future on seeing this interface should not think that this standard interface got changed.
Is it possible now? Please give me suggestions.
Thanks in advance

Hi ,
This currently seems like a bug , we have encountered this too.
work around is you have to delete the rtf files from server Siebel\client\temp\XMLP directory and upload them again so that they are not cached any more.
same on dedicated client you may have to delete relavant files form siebel\client\temp\xmlp directory and upload again.
Thanks,
Vamsi

When will the Firefox team actually test for bugs before realsing a newer version ?

<blockquote>Locking duplicate thread.<br>
Please continue here: [[/questions/884894]]</blockquote>
Every time a new version comes out, things don't work. Which inidicates to me that the team have no testing policy. I am not feeling like Firefox is the way to go any more.

Duplicate Thread LOCK please
* Continue here - https://support.mozilla.com/en-US/questions/884894

Can I test a new version of my website on Business catalyst before it goes live? I am a Creative Cloud user.

Can I test a new version of my website on Business catalyst before it goes live? I don't want to replace the current version until I am sure it works properly.

Hi bgeorge,
You have the option at any time to publish your project to a new trial site. Make sure to select in the publishing pop-up the Options button, and from "Publish to:" field scroll to the top where you have "New Site". Whenever you want to publish to your existing site, follow the same steps and click on the site you want to publish to.
Currently the publish process is down due to a scheduled maintenance on Business Catalyst so you won't be able to do it right now. Check the status page later to see when it is completed: http://status.businesscatalyst.com
Regards,
Cristian

Some Thoughts On An OWB Performance/Testing Framework

Hi all,
I've been giving some thought recently to how we could build a performance tuning and testing framework around Oracle Warehouse Builder. Specifically, I'm looking at was in which we can use some of the performance tuning techniques described in Cary Millsap/Jeff Holt's book "Optimizing Oracle Performance" to profile and performance tune mappings and process flows, and to use some of the ideas put forward in Kent Graziano's Agile Methods in Data Warehousing paper http://www.rmoug.org/td2005pres/graziano.zip and Steven Feuernstein's utPLSQL project http://utplsql.sourceforge.net/ to provide an agile/test-driven way of developing mappings, process flows and modules. The aim of this is to ensure that the mappings we put together are as efficient as possible, work individually and together as expected, and are quick to develop and test.
At the moment, most people's experience of performance tuning OWB mappings is firstly to see if it runs set-based rather than row-based, then perhaps to extract the main SQL statement and run an explain plan on it, then check to make sure indexes etc are being used ok. This involves a lot of manual work, doesn't factor in the data available from the wait interface, doesn't store the execution plans anywhere, and doesn't really scale out to encompass entire batches of mapping (process flows).
For some background reading on Cary Millsap/Jeff Holt's approach to profiling and performance tuning, take a look at http://www.rittman.net/archives/000961.html and http://www.rittman.net/work_stuff/extended_sql_trace_and_tkprof.htm. Basically, this approach traces the SQL that is generated by a batch file (read: mapping) and generates a file that can be later used to replay the SQL commands used, the explain plans that relate to the SQL, details on what wait events occurred during execution, and provides at the end a profile listing that tells you where the majority of your time went during the batch. It's currently the "preferred" way of tuning applications as it focuses all the tuning effort on precisely the issues that are slowing your mappings down, rather than database-wide issues that might not be relevant to your mapping.
For some background information on agile methods, take a look at Kent Graziano's paper, this one on test-driven development http://c2.com/cgi/wiki?TestDrivenDevelopment , this one http://martinfowler.com/articles/evodb.html on agile database development, and the sourceforge project for utPLSQL http://utplsql.sourceforge.net/. What this is all about is having a development methodology that builds in quality but is flexible and responsive to changes in customer requirements. The benefit of using utPLSQL (or any unit testing framework) is that you can automatically check your altered mappings to see that they still return logically correct data, meaning that you can make changes to your data model and mappings whilst still being sure that it'll still compile and run.
Observations On The Current State of OWB Performance Tuning & Testing
At present, when you build OWB mappings, there is no way (within the OWB GUI) to determine how "efficient" the mapping is. Often, when building the mapping against development data, the mapping executes quickly and yet when run against the full dataset, problems then occur. The mapping is built "in isolation" from its effect on the database and there is no handy tool for determining how efficient the SQL is.
OWB doesn't come with any methodology or testing framework, and so apart from checking that the mapping has run, and that the number of rows inserted/updated/deleted looks correct, there is nothing really to tell you whether there are any "logical" errors. Also, there is no OWB methodology for integration testing, unit testing, or any other sort of testing, and we need to put one in place. Note - OWB does come with auditing, error reporting and so on, but there's no framework for guiding the user through a regime of unit testing, integration testing, system testing and so on, which I would imagine more complete developer GUIs come with. Certainly there's no built in ability to use testing frameworks such as utPLSQL, or a part of the application that let's you record whether a mapping has been tested, and changes the test status of mappings when you make changes to ones that they are dependent on.
OWB is effectively a code generator, and this code runs against the Oracle database just like any other SQL or PL/SQL code. There is a whole world of information and techniques out there for tuning SQL and PL/SQL, and one particular methodology that we quite like is the Cary Millsap/Jeff Holt "Extended SQL Trace" approach that uses Oracle diagnostic events to find out exactly what went on during the running of a batch of SQL commands. We've been pretty successful using this approach to tune customer applications and batch jobs, and we'd like to use this, together with the "Method R" performance profiling methodology detailed in the book "Optimising Oracle Performance", as a way of tuning our generated mapping code.
Whilst we want to build performance and quality into our code, we also don't want to overburden developers with an unwieldy development approach, because what we'll know will happen is that after a short amount of time, it won't get used. Given that we want this framework to be used for all mappings, it's got to be easy to use, cause minimal overhead, and have results that are easy to interpret. If at all possible, we'd like to use some of the ideas from agile methodologies such as eXtreme Programming, SCRUM and so on to build in quality but minimise paperwork.
We also recognise that there are quite a few settings that can be changed at a session and instance level, that can have an effect on the performance of a mapping. Some of these include initialisation parameters that can change the amount of memory assigned to the instance and the amount of memory subsequently assigned to caches, sort areas and the like, preferences that can be set so that indexes are preferred over table scans, and other such "tweaks" to the Oracle instance we're working with. For reference, the version of Oracle we're going to use to both run our code and store our data is Oracle 10g 10.1.0.3 Enterprise Edition, running on Sun Solaris 64-bit.
Some initial thoughts on how this could be accomplished
- Put in place some method for automatically / easily generating explain plans for OWB mappings (issue - this is only relevant for mappings that are set based, and what about pre- and post- mapping triggers)
- Put in place a method for starting and stopping an event 10046 extended SQL trace for a mapping
- Put in place a way of detecting whether the explain plan / cost / timing for a mapping changes significantly
- Put in place a way of tracing a collection of mappings, i.e. a process flow
- The way of enabling tracing should either be built in by default, or easily added by the OWB developer. Ideally it should be simple to switch it on or off (perhaps levels of event 10046 tracing?)
- Perhaps store trace results in a repository? reporting? exception reporting?
at an instance level, come up with some stock recommendations for instance settings
- identify the set of instance and session settings that are relevant for ETL jobs, and determine what effect changing them has on the ETL job
- put in place a regime that records key instance indicators (STATSPACK / ASH) and allows reports to be run / exceptions to be reported
- Incorporate any existing "performance best practices" for OWB development
- define a lightweight regime for unit testing (as per agile methodologies) and a way of automating it (utPLSQL?) and of recording the results so we can check the status of dependent mappings easily
other ideas around testing?
Suggested Approach
- For mapping tracing and generation of explain plans, a pre- and post-mapping trigger that turns extended SQL trace on and off, places the trace file in a predetermined spot, formats the trace file and dumps the output to repository tables.
- For process flows, something that does the same at the start and end of the process. Issue - how might this conflict with mapping level tracing controls?
- Within the mapping/process flow tracing repository, store the values of historic executions, have an exception report that tells you when a mapping execution time varies by a certain amount
- get the standard set of preferred initialisation parameters for a DW, use these as the start point for the stock recommendations. Identify which ones have an effect on an ETL job.
- identify the standard steps Oracle recommends for getting the best performance out of OWB (workstation RAM etc) - see OWB Performance Tips http://www.rittman.net/archives/001031.html and Optimizing Oracle Warehouse Builder Performance http://www.oracle.com/technology/products/warehouse/pdf/OWBPerformanceWP.pdf
- Investigate what additional tuning options and advisers are available with 10g
- Investigate the effect of system statistics & come up with recommendations.
Further reading / resources:
- Diagnosing Performance Problems Using Extended Trace" Cary Millsap
http://otn.oracle.com/oramag/oracle/04-jan/o14tech_perf.html
- "Performance Tuning With STATSPACK" Connie Dialeris and Graham Wood
http://www.oracle.com/oramag/oracle/00-sep/index.html?o50tun.html
- "Performance Tuning with Statspack, Part II" Connie Dialeris and Graham Wood
http://otn.oracle.com/deploy/performance/pdf/statspack_tuning_otn_new.pdf
- "Analyzing a Statspack Report: A Guide to the Detail Pages" Connie Dialeris and Graham Wood
http://www.oracle.com/oramag/oracle/00-nov/index.html?o60tun_ol.html
- "Why Isn't Oracle Using My Index?!" Jonathan Lewis
http://www.dbazine.com/jlewis12.shtml
- "Performance Tuning Enhancements in Oracle Database 10g" Oracle-Base.com
http://www.oracle-base.com/articles/10g/PerformanceTuningEnhancements10g.php
- Introduction to Method R and Hotsos Profiler (Cary Millsap, free reg. required)
http://www.hotsos.com/downloads/registered/00000029.pdf
- Exploring the Oracle Database 10g Wait Interface (Robin Schumacher)
http://otn.oracle.com/pub/articles/schumacher_10gwait.html
- Article referencing an OWB forum posting
http://www.rittman.net/archives/001031.html
- How do I inspect error logs in Warehouse Builder? - OWB Exchange tip
http://www.oracle.com/technology/products/warehouse/pdf/Cases/case10.pdf
- What is the fastest way to load data from files? - OWB exchange tip
http://www.oracle.com/technology/products/warehouse/pdf/Cases/case1.pdf
- Optimizing Oracle Warehouse Builder Performance - Oracle White Paper
http://www.oracle.com/technology/products/warehouse/pdf/OWBPerformanceWP.pdf
- OWB Advanced ETL topics - including sections on operating modes, partition exchange loading
http://www.oracle.com/technology/products/warehouse/selfserv_edu/advanced_ETL.html
- Niall Litchfield's Simple Profiler (a creative commons-licensed trace file profiler, based on Oracle Trace Analyzer, that displays the response time profile through HTMLDB. Perhaps could be used as the basis for the repository/reporting part of the project)
http://www.niall.litchfield.dial.pipex.com/SimpleProfiler/SimpleProfiler.html
- Welcome to the utPLSQL Project - a PL/SQL unit testing framework by Steven Feuernstein. Could be useful for automating the process of unit testing mappings.
http://utplsql.sourceforge.net/
Relevant postings from the OTN OWB Forum
- Bulk Insert - Configuration Settings in OWB
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=291269&tstart=30&trange=15
- Default Performance Parameters
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=213265&message=588419&q=706572666f726d616e6365#588419
- Performance Improvements
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=270350&message=820365&q=706572666f726d616e6365#820365
- Map Operator performance
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=238184&message=681817&q=706572666f726d616e6365#681817
- Performance of mapping with FILTER
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=273221&message=830732&q=706572666f726d616e6365#830732
- Poor mapping performance
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=275059&message=838812&q=706572666f726d616e6365#838812
- Optimizing Mapping Performance With OWB
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=269552&message=815295&q=706572666f726d616e6365#815295
- Performance of mapping with FILTER
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=273221&message=830732&q=706572666f726d616e6365#830732
- Performance of the OWB-Repository
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=66271&message=66271&q=706572666f726d616e6365#66271
- One large JOIN or many small ones?
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=202784&message=553503&q=706572666f726d616e6365#553503
- NATIVE PL SQL with OWB9i
http://forums.oracle.com/forums/thread.jsp?forum=57&thread=270273&message=818390&q=706572666f726d616e6365#818390
Next Steps
Although this is something that I'll be progressing with anyway, I'd appreciate any comment from existing OWB users as to how they currently perform performance tuning and testing. Whilst these are perhaps two distinct subject areas, they can be thought of as the core of an "OWB Best Practices" framework and I'd be prepared to write the results up as a freely downloadable whitepaper. With this in mind, does anyone have an existing best practices for tuning or testing, have they tried using SQL trace and TKPROF to profile mappings and process flows, or have you used a unit testing framework such as utPLSQL to automatically test the set of mappings that make up your project?
Any feedback, add it to this forum posting or send directly through to me at [email protected]. I'll report back on a proposed approach in due course.

Hi Mark,
interesting post, but I think you may be focusing on the trees, and losing sight of the forest.
Coincidentally, I've been giving quite a lot of thought lately to some aspects of your post. They relate to some new stuff I'm doing. Maybe I'll be able to answer in more detail later, but I do have a few preliminary thoughts.
1. 'How efficient is the generated code' is a perennial topic. There are still some people who believe that a code generator like OWB cannot be in the same league as hand-crafted SQL. I answered that question quite definitely: "We carefully timed execution of full-size runs of both the original code and the OWB versions. Take it from me, the code that OWB generates is every bit as fast as the very best hand-crafted and fully tuned code that an expert programmer can produce."
The link is http://www.donnapkelly.pwp.blueyonder.co.uk/generated_code.htm
That said, it still behooves the developer to have a solid understanding of what the generated code will actually do, such as how it will take advantage of indexes, and so on. If not, the developer can create such monstrosities as lookups into an un-indexed field (I've seen that).
2. The real issue is not how fast any particular generated mapping runs, but whether or not the system as a whole is fit for purpose. Most often, that means: does it fit within its batch update window? My technique is to dump the process flow into Microsoft Project, and then to add the timings for each process. That creates a Critical Path, and then I can visually inspect it for any bottleneck processes. I usually find that there are not more than one or two dogs. I'll concentrate on those, fix them, and re-do the flow timings. I would add this: the dogs I have seen, I have invariably replaced. They were just garbage, They did not need tuning at all - just scrapping.
Gee, but this whole thing is minimum effort and real fast! I generally figure that it takes maybe a day or two (max) to soup up system performance to the point where it whizzes.
Fact is, I don't really care whether there are a lot of sub-optimal processes. All I really care about is performance of the system as a whole. This technique seems to work for me. 'Course, it depends on architecting the thing properly in the first place. Otherwise, no amount of tuning of going to help worth a darn.
Conversely (re. my note about replacing dogs) I do not think I have ever tuned a piece of OWB-generated code. Never found a need to. Not once. Not ever.
That's not to say I do not recognise the value of playing with deployment configuration parameters. Obviously, I set auditing=none, and operating mode=set based, and sometimes, I play with a couple of different target environments to fool around with partitioning, for example. Nonetheless, if it is not a switch or a knob inside OWB, I do not touch it. This is in line with my dictat that you shall use no other tool than OWB to develop data warehouses. (And that includes all documentation!). (OK, I'll accept MS Project)
Finally, you raise the concept of a 'testing framework'. This is a major part of what I am working on at the moment. This is a tough one. Clearly, the developer must unit test each mapping in a design-model-deploy-execute cycle, paying attention to both functionality and performance. When the developer is satisifed, that mapping will be marked as 'done' in the project workbook. Mappings will form part of a stream, executed as a process flow. Each process flow will usually terminate in a dimension, a fact, or an aggregate. Each process flow will be tested as an integrated whole. There will be test strategies devised, and test cases constructed. There will finally be system tests, to verify the validity of the system as a production-grade whole. (stuff like recovery/restart, late-arriving data, and so on)
For me, I use EDM (TM). That's the methodology I created (and trademarked) twenty years ago: Evolutionary Development Methodology (TM). This is a spiral methodology based around prototyping cycles within Stage cycles within Release cycles. For OWB, a Stage would consist (say) of a Dimensional update. What I am trying to now is to graft this within a traditional waterfall methodology, and I am having the same difficulties I had when I tried to do it then.
All suggestions on how to do that grafting gratefully received!
To sum up, I 'm kinda at a loss as to why you want to go deep into OWB-generated code performance stuff. Jeepers, architect the thing right, and the code runs fast enough for anyone. I've worked on ultra-large OWB systems, including validating the largest data warehouse in the UK. I've never found any value in 'tuning' the code. What I'd like you to comment on is this: what will it buy you?
Cheers,
Donna
http://www.donnapkelly.pwp.blueyonder.co.uk

How to Generate New Version of Enhancements done to Std WebDynpro ABAP obj

Hi Experts,
We have enhanced a SAP Std WebDynpro ABAP component (HAP_DOCUMENT_BODY) using Enhancement framework provided by SAP. Multiple enhancements were done on the same component for different requirements. Now, under the Enhancement Implementations folder of this component, you can see 5 enhancements of the component each referring to the 5 different changes done (most of the changes were done to the same view ).
These changes has now been transported to the Quality System. Now, the client wants one of the changes to be removed. I am not sure of the impact of removing, for eg: the 3rd enhancement, on the other changes done as multiple enhancements were done in a mixed manner.
What i want to do is to generate a new version of WebDynpro component on Dev which has all the enhancements done so far using Utilities -> Versions -> Generate new version. Then try to delete the 3rd enhancement folder, so that if something goes wrong, I can always revert to this newly created version on DEV which has all changes available.
Questions:
1) Before that, I would like to know if I can generate versions of the enhancements done of WebDynpro ABAP using enhancement framework by using Utilities -> Versions -> Generate new version ?
2) If yes, I want to generate one version which has all the enhancements done so far using enhancement framework. For doing so, where should i do the click or selection (Is it Std Main Component or is it Enhancements in the enhancements folder-if so, there are 5 of them, and which one??) before i go to Utilities -> Versions -> Generate new version. I am not clear where i should select or keep the cursor selected on before generating a new version?
Please guide with step by step details.
Thanks,

I have moved this post to the HTML5 layouts forum, which is more appropriate.
I am guessing you are using Rh11 as you have a trial copy. I have some instructions for Rh10 and the only difference should be the script used. See the contact page on my site and request those details. Include a link to this thread.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

ERP Upgrade: Changes in Reporting in new version ECC6.0

Hi Gurus,
We are just in upgrade process from 4.7c to ECC 6.0. During the test we ascertained that there are certain changes happened in the reporting functions und the reports are not showing some necessary fields in new version. For instance the reports RFDOPO00 and RFKOPO00 are replaced by RFDEPL00 and RFKEPL00 in ECC 6.0, which do not show some important fields of old report. SAP says they are standard reports in ECC 5.0 /6.0.
How can we maintain old reports (in general, not specifically these above mentioned reports) from 4.7c in our new upgraded system ahead instead of new reporting standard of ECC6.0.
Please tell me the steps to solve this problem.
Regards
SIM

No, there is slightly difference in reporting between both versions ERP 4.7C and ECC 6.0. For instance in old version 4.7c we can produce reports (RFDOPO00 and RFKOPO00) with Subtotal and Total by currency by making check mark on both these items. In new version this items has been removed. There are also some more items which are not offered by SAP in new version.
As we have decided to keep some old reports in new system, Can you therefore please tell me how we can keep the old reports in new version?

Addons - new versions of addon with old versions of B1

Hi guys,
Does anyone know if new versions of addons work with old versions of SAP B1?
I have a client who is asking for the latest Payment Engine (PL70) but they are on SAPB1 2005A SP01 PL12 which has the Payment Engine PL30.
My thinking is that you will need to upgrade the B1 app to PL34, if you want to use the latest addon?
or am i way out and infact the addons work independently of B1 and will therefore work on an old patch of B1?
TIA,
John Treweeks

Hi John,
Patches are bug fixes and do not change functionality (unless the functionality was broken of course ). Addons communicate through the UI and DI APIs which are installed as part of the patch. Therefore, the theory should be that addons are pretty much patch independent.
But, as has been pointed out above, it's really difficult to predict exactly what results you'll get. I guess sometimes an addon patch could have been released in order to correct a problem that was both addon and DI API related. In that case, you'd need to install the addon patch and the SBO patch.
I never recommend you go to the latest patch until it has been around for a few weeks. However, going to a patch that is dated just prior to the addon patch release sounds like a sensible policy. In any case, testing is vital, prior to installation on a production site.
Kind Regards,
Owen

Portal is blank after modifying com.sap.portal.layouts.framework

Hi Experts,
Using SAP EP 7.0 SPS 18 and NWDS 7.0.18
I downloaded the par file com.sap.portal.layouts.framework because I wanted to increase the width of the detailed navigation panel. I imported it into NWDS and in the WAandNavPanel.jsp I modified this line
<hbj:page title="Portal Page">
     <hbj:gridLayout   id="GridLayout1" width="100%" cellSpacing="2">
     <hbj:gridLayoutCell rowIndex="1" columnIndex="1" width="20%" verticalAlignment="top">
          <lyt:container id="navPanelContainer" />
     </hbj:gridLayoutCell>
     <hbj:gridLayoutCell rowIndex="1" columnIndex="2" width="80%" verticalAlignment="top">
          <lyt:container id="workAreaContainer" />
     </hbj:gridLayoutCell>
     </hbj:gridLayout>
</hbj:page>
To this:
<hbj:page title="Portal Page">
     <hbj:gridLayout   id="GridLayout1" width="100%" cellSpacing="2">
     <hbj:gridLayoutCell rowIndex="1" columnIndex="1" width="25%" verticalAlignment="top">
          <lyt:container id="navPanelContainer" />
     </hbj:gridLayoutCell>
     <hbj:gridLayoutCell rowIndex="1" columnIndex="2" width="75%" verticalAlignment="top">
          <lyt:container id="workAreaContainer" />
     </hbj:gridLayoutCell>
     </hbj:gridLayout>
</hbj:page>
I then selected 'Quick PAR Upload' from NWDS and selected 'Include the source code of the portal application' and 'Deploy PAR' checkboxes and then deployed.
Now when I login to the portal, its just a blank screen. What did I do wrong, and how can I fix this please?
Regards,
Marshall.

Hi Marshall,
Just a couple of notes for you:
Changing the SAP namespace to your own/client namespace is a good idea, though you'll need to copy all referenced Portal objects if possible. In addition, every support pack or patch will require you to recreate this PAR file using the original SAP source as the underlying code may have changed.
All that said, the easiest way to check out a change is to make a change directly to the PAR file and upload. I do this when working with a local Portal install (not the development one).
Another point, make sure when you upload it via System Admin/Support/Runtime Tools/Administration Console (or something like that); that you get a valid version number when you upload. If you don't, that indicates something is wrong with the PAR file.
Maybe a test for you would be to take the existing PAR file, and upload it again without modification to see if there's a problem; then do it again, but this time just adding some space or something to the file (no code changes). Keep baby stepping till you work out what code is making the screen go blank for you.
Regards,
Matt
ps. I hope you've solved this by now...Otherwise ask your friendly SAP expert (who may be handy) how to do it. Alternatively, publish exactly the change you're making and we can review it.

New version of sapyto - SAP Penetration Testing Framework

Similar Messages

Maybe you are looking for