What happens when HTTPS communication fails during certificate check?

Hello Experts,
I have a scenario where a Bapi functionality(server proxy) is exposed as a webservice .
So scenario will be SOAP -> XI -> Proxy (calls a BAPI)
Here we are going to use HTTPS (SSL).
I would like to know :
What happens when a check for certificate validation fails in XI? It may be due to invalid certificate, expired certificate or a request from unauthorised user-
- Will it be raised as a exception and we need to do some configuration to inform it back to Sender?
- Will the message fail in Moni with red flag ?
- Alerts will be created ?
Please share your experiences and expert sugestions.
Thanks in Advance!!
Regards,
XI Queries.

Hi Abhishek,
Thanks for the reply. I will keep this in mind and design the scenario & error handling accordingly.
Appropriate points awarded
Kind regards,
Xi Queries.

Similar Messages

What happen when sy-subrc fails

Hi,
I want to know that what happens when sy-subrc fails . is there any example for it.

Hi,
Its a system variable which is used to check whether a particular stmt was successful or not.
The purpose of this field to indicate success/failure of any action in SAP. After each statement in SAP is executed, the SY-SUBRC is set depending on the result of the statement. the SY-SUBRC can contain the following values.
0 - This value is set when the statement is executed successfully.
2 - This value is set when the statement is executed unsuccessfully.
4 - This value is set when the statement is executed unsuccessfully.
8 - This value is set when the statement is executed unsuccessfully.
12 - Specified object not maintained in the user master record.
16 - No profile entered in the user master record.
24 - The field names of the check call do not match those of an authorization. Either the authorization or the call is incorrect.
28 -Incorrect structure for user master record.
32 - Incorrect structure for user master record.
36 - Incorrect structure for user master record.
For more deatils please go through the link [http://help.sap.com/saphelp_47x200/helpdata/en/7b/fb96c8882811d295a90000e8353423/content.htm]

What happen when an error occurs during Snapshot-Refresh?

Hi,
I would like to know what happens, when an error occurs
during a refresh (COMPLETE-REFRESH) of a snapshot?
Is there a possibility for exception-handling??
During a complete refresh the data in the snapshot will be deleted an the requested new from the master-side. Now when
an error occurs during the refresh what happens with the "old" data of the snapshot??? Will it be lost?
Thanxx
Schoeib

Each thread has its own error state. To get the results for a thread (including error result), you need to have a wait step which waits for it. If a thread has an error and you wait for it, you will get the error at the wait step that waits for it.
If your main thread has an error and you want some worker thread to exit, you should add code to the cleanup of your main thread's sequence which signals the worker thread to exit (you should already have some sort of mechanism for signaling the worker thread to exit (there are many ways to do this, for example, a boolean variable passed by reference to the new thread's sequence, or a TestStand notification).
If your main thread is getting an error, but is stuck inside a step, that problem is probably specific to something your code is doing, that is not the normal behavior of TestStand. You will need to provide more details or an example sequence in order for us to better understand what is happening.
Hope this helps,
-Doug

What happen When light is gone during updateing ...

What happen When light is gone during updateing software. Is software is destroy or what happen. Please tell me

What exactly do you mean by "when light is gone"?
Your phone will shut down and restart several times during the update, this is quite normal. Do not interrupt the process if NSU is in the final stage and installing you the new software to the phone.

What happen when connector operation fails

Hi Everyone,
I am looking for design options and wondering if anyone can suggest the solutions adopted in their previous projects.
How should we provide the IAM functionality to handle the following exceptions:-
1, When performing a provisioning operation on multiple target resources, the connector fails to connect with some (one or many) rescources. I think offline provisioning can provide the solution but then how to handle failure messages.
2. While provisioning, the connector fails to bind with any target resource.
3. Connection with target resource breaks before the connector tasks are complete.
Appreciate if anyone will put their thoughts on these.

Any failed provisioning task will return as a rejected task. Depending on how you manage the ownership of these tasks, the admin would be able to login to oim, see open provisioning tasks, and view the status. They can then click on the link to display the returned error message depending on the handling of errors.
-Kevin

What happens when recieving phone call during apple pay transaction

How do I control receiving a phone call during an Apple Pay transaction. My phone "froze" and I couldn't complete the transaction.

takamore wrote:
excuse me, just what is your definition of 'store'?
the building is large with a large apple logo on the front and only sells apple products.
and it is not a few blocks away.
My definition of an Apple Store, which is what you said you visited in your first post, is what everyone else defines it as, one owned and run by Apple. The store you visited is not owned nor managed by Apple but rather by some independent company, so Apple is not in control of what they told you. This is something you need to address with the manager or owner of that store. Apple cannot assist you with this issue.
Regards.
Message was edited by: varjak paw

ISE - What happens when the on-boarded certificate expires?

I'm trying to design a good BYOD deployment model but have a few questions that need direct answers. I have down how to go about on-boarding and getting a certificate on a device, the ISE provides great flow for this to happen in many ways. My questions come from a design perspective before and after the BYOD deployment is completed.
1. Figuring out a method to validate the device is a Corporate asset or a BYOD asset.
     (I don't want to install a certificate on just any device, or perhaps I do but I need to give permissions to all resources if its a Corporate Device, and more resitrictions if it's BYOD, so how do I figure this out during the provisioning phase?)
     a. Use MDM (May not have one, or if you do we are still waiting on ISE 1.2 for that integration)
     b. Build a Group for provisioning admins, if user PEAP-MSCHAPv2 account is from this group install a certificate. (issue here is that the end user looses administration of the device in the my device portal as the device is now registered to the provisioning admin)
     c. Pre-populate MAC into ISE as all Corporate devices should be provisioned by I.T. before they go to the end user (I think this is good but can see push back from customers as they don't want to add more time to the process)
     d. Certs on any IOS or Android device, provide access based on user group and do not worry if device is Company asset or not (I believe that this is the easiest solution and seems to be what I find in the guides)
     e. Other options I have not thought about, would love input from the crowd
2. What happens to the device once the Certificate expires?
     (I don't know the answer to this, my thought would be the user or device will fail during the authentication policy and this creates a mess)
     a. Tell the user to delete the profile so they can start all over again (creates help desk calls and frustrated users)
     b. Use MDM for Cert management (may not have one)
     c. Perhaps the client uses SCEP to renew based on the cert template renew policy and there are no issues (this is me wishing)
Would appreciate some feed back and would like to know if anyone has run into these issues.

Neno,
Sorry but I don't have any other info on using a public CA, Cisco says to use internal CA's for PKI. I think the best practice in 1.2 comes out will be to use one interface for Web Management and a different interface for Radius, profiling, posture, and on boarding. This way you can use your private CA for EAP and a public CA for web traffic. Have you tried a public CA bound to management and a private CA for EAP yet?
I did do a session on EAP-TEAP, they explained how it will work and also discussed EAP-FASTv2. EAP-FASTv2 is available now but you must use anyconnect as your supplicant. Microsoft and all other vendors will have EAP-TEAP native once it is fully released and comissioned as it will be the new gold standard for EAP. It will support TLS, MD5, and CHAPv2. If you are interested I have the PDF of the presentation I attended that shows the flow of how EAP-TEAP will work. This is much better than wasMachineAuthenticated and machine auth caching, which has many down falls.
I currently do machine and user auth I just don't require them. If Machine auth then allow machine on vlan-x with access to AD, DNS, and blah blah. Then a seperate rule to say user auth gets more access, although I require EAP-TLS for both and if you think about it you are accomplishing the same thing if your PKI is setup correctly. Make it so users and machines can only auto enroll, that way you know the only way they got their cert was from GPO policy. I won't go into anymore detail, but there is lots you can do.

VDI3: what happens when the Primary VDI core fails?

A potential customer asked me this and I did not really know how to answer the question ... sorry if this was asked before. So here we go:
What happens when and if the Primary VDI core fails? Will the entire VDI3 setup go down? Will running sessions be lost? And how do you fix that?
I found this page:
http://wikis.sun.com/display/VDI3/MySQL+Cluster+Reconfiguration+Scenarios
So I assume the "Non-VDI host ==> Primary Management Host" scenario is what would need to be done?
http://wikis.sun.com/display/VDI3/MySQL+Cluster+Reconfiguration+Scenarios#MySQLClusterReconfigurationScenarios-NonVdiToPrimary
If this is correct then this would answer the "how do you fix that?" part. OK then.
But still I'd welcome if anyone could explain what exactly would happen when and if a Primary VDI core fails. The customer's opinion on this is that they are a "single point of failure" because the Primary VDI host is not redundant (as opposed to the 2 x Secondary VDI cores) ... So, is this assumption correct or not?
Thanks in advance.

Hi,
Assuming you have 3 VDI core hosts. One of them is the primary. And the primary goes down. So what happens then:
* The underlying database is still running on the remaining hosts
* All desktop sessions are still running on the remaining hosts
* New session requests will be handled by the remaining hosts.
* All desktops are still running on the virtualization hosts.
So in essence, your VDI cluster is still healthy. The operation is just impacted in this way:
* You can't add new VDI core hosts
* You can't change the configuration of the Sun Ray server failover group
* A failure of another VDI core host (data node) will result into a complete outage of the underlying database
You should bring up the primary again as soon as possible in order to gain failover capabilities again.
-Dirk

What happens when secondary fails ?

In 8.1 HTTP session replication.
          What happens when, in the middle of a user session, the secondary fails ?
          Does the primary automatically pick another secondary and update that ?
          -Anu


Goodmorning Gary.
From ACS 5.3 release notes.
View Log Message Recovery
ACS 5.3 provides a new feature to recover any logs that are missed when the view is down. ACS collects these missed logs and stores them in its database.
Using this feature, you can retrieve the missed logs from the ACS database to the view database after the view is up.
To use this feature, you must set the Log Message Recovery Configuration as on. For more details on configuring the View Log Message Recovery, see User Guide for Cisco Secure Access Control System 5.3.
This feature must be enabled, under Monitoring and Reports, Launch Monitoring & Report Viewer. Successivamente Monitoring Configuration, System Operations e Log Message Recovery.
Enable “Log to Local Target” for categories under System Administration > Configuration > Log Configuration > Logging Categories > Global.
Hope this helps.
Regards.
Andrea

What happens when CTAS fails?

Hi,what happens when CTAS fails?
Will the table be created with as much data as it fetched before the error occurred.

Just try it and you will see:
1 create table test_table as
2 select rownum/(case rownum when 5 then 0 else 5 end) as rn
3 from dual
4* connect by level < 10
SQL> /
select rownum/(case rownum when 5 then 0 else 5 end) as rn
ERROR at line 2:
ORA-01476: divisor is equal to zero
SQL> desc test_table
ERROR:
ORA-04043: object test_table does not exist
SQL>

What happen when SSL daughter card fails?

I'm using two CSM with SSL duaghter card with redundancy.
What happen if the card fails? CSM fails too?
Thanks.
Andrea

When the SSL daughter card failure is detected, the SSL daughter card is restarted causing all SSL flows to fail, and they will need to be re-established.
During a supervisor engine switch over, the standby CSM-S fails to initialize and the new standby supervisor engine prints the following message for all CSM-S ports:
%PM-STDBY-4-INT_FAILUP:GigabitEthernet7/2 failed to come up.No internal VLAN available

What happen when Database in Backup Mode?

Hi,
What happen when we kept database in backup mode, Means using command 'Alter database Begin Backup';
Thanks...
Asit

jgarry wrote:
EdStevens wrote:
jgarry wrote:
What do you think of the snapshot backup on page 22 of [url http://en.community.dell.com/techcenter/storage/w/wiki/2638.oracle-11g-backup-and-recovery-using-rman-and-equallogic-snapshots-by-sis.aspx]this paper? (No sarcasm, I'm curious about these snap solutions in general. Though I am really down on Dell for what turned out to be a brain-damaged laptop I got for my wife.)
Well, you can't really make a judgement about a company's enterprise products based on an experience with their consumer products.What if it came from what they call a business products catalog? They intermingle laptops with servers.
Don't know, in general. I do know that for Dell there is a distinct difference between their decidedly consumer laptops (Inspiron) and their "business" Lattitude series. I know that at my last job we had a lot of rock solid HP equipment (servers and SAN) - vs. an HP laptop I had that was trouble from Day One. I'm sure there is a point in desktops and laptops the line can get blurred, but in the case of the OP, he was no where near that fuzzy line.
>
>>
Perhaps I can find time to read the white paper over the weekend ....

What Happens when u kill a backgroud process

What Happens when u kill a backgroud process?
such as kill- 9 ora_smon
Will the oracle automatically perform recovery???
will the database startup?

If you want to face what actually will happen, just make it on test environment (test db).
Then check your db status, instance will be abort.
Do you know what SMON`s purpose ?
If you_dont_know then
make it; (ps -ef | grep smon take PID, then kill -9 PID);
end if;
SMON - System Monitor process recovers after instance failure and monitors temporary segments and extents. SMON in a non-failed instance can also perform failed instance recovery for other failed RAC instance.
Here you can read about Oracle background processes:
http://www.dba-oracle.com/t_background_processes.htm
and
http://download.oracle.com/docs/cd/B10500_01/server.920/a96524/c09procs.htm

How to enable Order release to rejected status when batch derivation fails during release

Hi,
I need to enable production order release to rejected status when batch derivation fails during order release.
one way is to have Batch entry required for the sender material in the material master, with this standard SAP will reject the release.
Below is the scenario:
sender attribute for derivation - VFDAT from batch of the sender material
sender material - Batch Entry not required in material master
All required master data set for derivation.
during order release, since batch entry is not required, system carries out the derivation without sender batch and derivation fails. Order still gets released.
I am looking for advise on how to restrict release in above situation.
appreciate your help.
Thanks
Aheesh

Aheesh, Order release for instance is based on what we see as events/system statuses which are allowed/forbidden etc., for a particular action to happen/be triggered.
If you can figure out if there exists a status related to batch derivation, it may give some further leads.

What happens when Hyper-V replication is paused

Hi,
Could someone please point me in the direction of detailed technical information regarding what happens when replication is paused for a Hyper-V VM? I've had a dig around but not found anything..
Does the source system still generate delta's which accumulate on disk somewhere, ready to be sent to the target once replication is resumed in a similar way to SQL log shipping, or is the whole processes paused and a new replication cycle started?
I need to asses the impact of pausing replication on a number of VM's for an extended period (probably in the region of 4-6 hours) for maintenance on a host, where there is fairly limited replication bandwidth.
Many thanks.

Hi EntArch2012,
You can pause the replication between primary and replica server .
There will be a .HRL file beside the VHD file of the VM which enabled replica .
After you enabled replica successfully , the changes of the VHD will be stored in the HRL file then send to the replica server regularly to achieve synchronization .
Hope this article is helpful :
http://www.microsoft.com/en-us/download/details.aspx?id=29016
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

What happens when HTTPS communication fails during certificate check?

Similar Messages

Maybe you are looking for