8.8 Connection Settings & Trusted Connections

Hi,
Has anyone managed to get 8.8 to use trusted connections from clients rather than a database user?
I have a customer who has two databases, and two groups of users, one that can access one database & one that can access the other, with a few users accessing both.
This has previously been managed using user groups.
We are now having issues as we cannot seem to get anything to save in the Trusted Connections username & password.
Ideally we would like to specify user groups.
I have seen a couple of related threads, but not found anyone who has a resolution?
Thanks

You're welcome Julie.
To know how to use SQL server authentication, pls read the solution in the note 677884. let me know if you can't open the note.
if you use trusted connection:
SQL Server will use WindowsAuthentication to validate your access to the SQL server instance. Depending
on how you are connecting you may use the Trusted_Connection or Integrated Security options in the connection string. It does not mean that you will have permissions to connect or permissions on any securables (although by default local administrators will be allocated System Administrator privileges). These will still need to be granted either directly or indirecty (e.g through a role or windows security group) to that user.
the sa user id login properties can use windows authentication or sql server authentication.
You may check these links to find out the differences between windows authentication and sql server authentication:
http://databases.about.com/od/sqlserver/a/authentication.htm
http://database.ittoolbox.com/documents/windows-authentication-vs-sql-server-authentication-18609
You could to try to create new login id in SQL server 2008 and select windows authentication. you will succeed to create if you have created valid window credential e.g. sboserver\julie_j. you use this new sql login id in the connection strings of license manager.
if the workstation user have had valid window credential to login to the sboserver, then the user is able to run SBO.
JimM

Similar Messages

Hide a company to a windows group connect with trusted connection

I mean, how can I do, to create two groups in the windows active directory, and do users member of the first group and other to the second groups.
Now, when a user from the first group connect with client sap b1 with trusted connections doesn't see all companies (databases) but only those that I decide. The same thinks with the second group.
I don't want to use the 'sa' connections, because in the sap b1 8.8 the connections will be on server.

Not sure if understood correctly.
If you want to assign to each user only specific companies and you are using trusted connection to sql, you may modify
tmsp_getcomplist stored procedure in sbo_common for example as
USE [SBO-COMMON]
GO
/****** Object: StoredProcedure [dbo].[TmSp_GetCompList]    Script Date: 09/04/2009 10:01:56 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
ALTER proc [dbo].[TmSp_GetCompList]
--With Encryption
as
begin
set nocount on
declare @comps int
set @comps = 0
select @comps = count(1) from SRGC
if (@comps <= 0)
begin
     exec TmSp_RefreshCompList
end
declare @user as nvarchar(100)
SELECT @user = SYSTEM_USER
select * from SRGC
      where dbUser =   convert(varchar(50), CURRENT_USER)
and
(@user <> 'John' or (@user = 'John' and dbname = 'Demo') )
end
User John in this example will wee only demo company and the rest users will see all companies. Hope it helps.

Centralize/De-Centralize using Trusted connections

Hi experts,
I have a question regarding Trusted Connections for Centralized GRC implementation. According to some of the SAP guidelines we are using trusted connections (Note: 1701047 and several others). Now the problem that this is creating is that if I use trusted connections for all Connection Settings (AUTH, PROV, ROLMG and SUPMG) then all users need to be created locally (GRC) and in the target system. We have played with the config for S_RFCACL but independent of what we do since is trusted we haven’t found a way to bypass the user creation everywhere. Later we try just having 2 connections (one trusted and another non trusted) for each system but this is creating duplicate values (every data element on trusted and non-trusted version). Is there a way to go around this?

Did you read the file SSLNOTES.txt included with JavaMail?
If you're connecting to a server with a self-signed certificate, you'll need to
load that certificate into your trust store, or you'll need to provide your own
trust manager. The InstallCert program, referenced from the JavaMail FAQ,
might help.

Disabling Firefox 9 Proxy Connection settings using GPO (in Server 2008)

I am planning to disable Proxy Server settings in the connection settings in the Firefox options. I downloaded "firefoxdefaults & firefoxlock". Made these changes in the GPO (mentioned below)
Computer Settings
1. Delete Private Data cookies
2. Phishing Protection - Enabled.
3. Proxy Settings - Disabled
4. HomePage - Enabled.
5. Extension and Theme Installation - Preference State (Locked) & Allow Addin Installation _ Disallowed.
User Settings
6. Proxy Settings - Disabled.
GPO didnt apply properly. Can you please let me know if there is any other options there to disable proxy settings. Hoping to see your message.

Hi,
We can add the sites to trusted site and clear temp files for test. Detail steps are in the following KB.
even though the steps in this KB is related to XP, we can refer to update the steps to apply to windows 7.
How to troubleshoot problems accessing secure Web pages with Internet Explorer 6 Service Pack 2
http://support.microsoft.com/kb/870700/en-us
If it is not the case, this may be an issue with your proxy setup, if you use a proxy server, try turning it off in your windows network settings.
For more information, please see:
Change proxy server settings in Internet Explorer 9
http://windows.microsoft.com/en-in/windows/change-ie9-proxy-server-settings#1TC=windows-7
For more reasons that can cause webpage load slowly or don’t slow at all, please see:
Webpages load slowly or don't load at all
https://support.google.com/chrome/answer/113910?hl=en
Please note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Hope this helps,
Ada Liu
TechNet Community Support

Trusted connectivity with different Clients

Hi all
I have the following problem: The Trusting System SRR (Server) has client 100 and 010 the
Trusted System CLL has client 010.
I tried to make a trusted connectivity with the SRR 100 Client, but Im only able to connect to the SRR 010 Client.
Where can declare to which Client of the Trusting System (Server) the Trusted System (client) Points?
Tnx for your help
Murat

Hi
I solved the problem.
if the Client is not the same you see in the trusted system in RFC menu trusting system an error. "authorization failed". (this was confusing)
You have to create in the Trusting system the authorization object S_RFCACL with the client information for the calling System. You verify the settings with the function module AUTHORITY_CHECK_TRUSTED_SYSTEM.
Once you created the trusted system in the Trusting system. You have to create a NEW RFC connection in the Trusted System for example <SID>_TRUST mark the trusted system and current user with the Client# information. Once saved, try to logon by the "Remote Logon" button. If this works, then you created successfully the trust relationship.
Thanks<u> <i>Wolfgang for the Note you mentioned</i>.</u> I checked that Note before.What I didn't know that the Message in RFC menu Trusting System authorization failed can be ignored since it tries to logon with the current logged on client.
Murat

How to use JNDI datasource instead of database connection settings JDev 10g

Hi,
In order to use the different database from other environments, we are not able to use the JNDI datasource configuration settings, all the time need to configure the database connection settings from JDeveloper by changing the database connectivity settings in the JDeveloper for each environment separately, need a solution on how to make the database connectivity unique using the JNDI datasource name for all the environments for database connectivity settings through the application server console rather than changing the database adapter configuration in JDeveloper.
Please provide the update at the earliest. Your help is greatly appreciated. Thanks in advance..

What are you not clear on?
What you need to do is get your developers to conform to a database naming standard, as stated above, so if you have an oracle database that is for eBusiness Suite you get all developers to create a DB connection in JDev called, ora_esb as an example.
When the developer creates a DB adapter this will create a JNDI name of eis/DB/ora_ebs. When the BPEL project is deployed it looks for the JNDI name in the oc4j-ra.xml file to see its connection details. If they don't exist then they use the developers connection details. The issue with this is that they generally always point to the development DB. It is best practice for the developers to remove the mcf settings in the DB adapter WSDL. This way if the JNDI name has not been configured it will fail.
So when you migrate from dev-test-prod what you have is the JNDI name eis/DB/ora_ebs. The dev points to the dev instance of ebs, test points to the test instance and so on. This means that you don't need to adjust any code in the BPEL projects.
cheers
James

Trusted Connection Problem while creating a project in MDM WD Confg.Manager

Hi Experts,
We have the Netweaver instance (CE7.2) and MDM instance (MDM7.1SP07) installed in the same machine.
In our current scenario we are trying to create a projects in the MDM WD Configuration Manager for displaying the MDM records.
Things Done:-
1) Created allow.ip file and added the IP address of the server and also added the IP address of the Local Host (127.0.0.1).
2) Same user exists in the Netweaver and as well as in the MDM repository with same case.
3) Created a necessary MDM Destination.
4) After adding the entry in the allow.ip file, i have restarted the MDM server too.
Now when i create a project in the Config. Manager, after selecting the MDM destination i get a Trusted Connection error.
Cannot retrieve language list from repository [null] on server [null]. UserConnectionException: Can not connect with UserSessionContext to repository 'Inbox' on the server 'ctsinsapnw7'., Can not connect with UserSessionContext to repository 'Inbox' on the server 10.239.31.178'., Can not resolve JCA connection. Cause exception: Connection Failed: Cannot create JCA connection. Cause exception: Failed to create trusted connection to MDM server '10.239.31.178' for user 'mdmuser' because server is not defined as trusted, error code: ConnectionNotTrusted, com.sap.mdm.internal.protocol.manual.ServerException: The connection is not trusted
Is there anything to be done. Any help on resolving this will be very much appreciated.
Regards,
Prasanna Kumar R Y

Please make sure of below things...
1. Location of allow.ip file.
         Default location is exe folder where your MDM server executable are available.
2. If not using default location,
         Then check the entry of 'TrustedFiles Dir" property in mds.ini file.
3. Is server stops completely?
         Its very important to restart the server.
         Sometime console may show that the server is stopped but server might be running.
         If possible please check whether server stopped, using Console on different machines.
4. Check the log of MDM server while starting and stopping the MDM server.
         Please pest the log messages in this thread to help you better.

What are the normal settings to connect to wifi?

I visited my friend over the weekend and her school required me to change my airport settings in order to connect to the internet. Ever since I got back, I have been unable to connect to my usual wifi source. If I can, it drops off after a few minutes. What are the normal settings to connect to wifi?

As a minimum, the following would be the "normal settings" to connect your Mac to an unsecured Wi-Fi network. These settings can all be found in System Preferences > Network > AirPort or Wi-Fi > Advanced
TCP/IP tab: Configure IPv4: Using DHCP
Proxies tab: Nothing should be checked on this tab, except the "Use Passive FTP Mode (PASV)" option.
Hardware tab: Configure: Manually
On the Wi-Fi tab, you may also want to delete any Preferred Networks that you are not using.

Are there any connection settings for using rtsp:...

In my effort to get access in 'YouTube" steaming videos, I tried to find the scope available in Nokia 3110C handset. After going through the Menu icons, I identified one Menu Item in the path : MAIN MANU>MEDIA>MEDIA PLAYER>GO TO ADDRESS. It is...rtsp://. The help message states ...'Lets you manually enter Web Address...'. I entered : ' rtsp//m.youtube.com. The response was a Note which reads - Check Connection Settings... Again I followed the above path : MAIN MANU>MEDIA>MEDIA PLAYER>STREAM SETT. I click the Stream Settings. The nesponsing note : 'No Settings found. Contact your Service Provider'. So, from the above discussion the net learning I got is I must have the Stream Settings to get YouTube going in my Set. My querry is : Whare those settings and what is the source in getting those settings ? I understood the rtsp (Real Time Stream Protocol) is more versatile than HTTP and MMS in getting Streaming data (numerical, photograph/radio). Please suggest.

I experienced same problem with my 3110c handset. At first the STREAMING SETT was shadowed dark with a restriction to get access there. Later I got contact with BSNL (my SP). After downloading the settings I discovered that the shadowy patch over Streaming Sett. has gone. It now shows an entry ..."bsnlstream."
So far an attempt was made to activate the Youtube, a message reminds me that the software of 3110C is not supporting such application.

How do I add a trusted connection one time in firefox?

I have a user who is trying to access my department's external site. The pages that she is trying to access pulls data from a different domain (One in our DMZ) than the external host domain. This DMZ domain is a trusted domain and pulling data from this domain has worked well for years on multiple browsers without incident. Now for every other page that hits this internal DMZ server the user is getting "This connection is not trusted" and has to go through the manual exception dance to see her data. We host hundreds of pages and having to do this for each one is going to drive people to grab another browser quickly. I got this user working on Chrome without a problem and have tested it in IE without problem.
I have recreated the cert8.db file in her profile and run into the same problem after reboot.
How do I add a trusted connection for this domain one time?

This should add the permanent exception:
[https://support.mozilla.org/en-US/kb/connection-untrusted-error-message#w_bypassing-the-warning Connection Untrusted Error Message: Bypassing the Warning]
However if it is not staying until the next time that the user opens up Firefox, is it possible that they are in permanent private browsing? [[Private Browsing - Browse the web without saving information about the sites you visit]] - that should have instructions to get in and out of it.

XI and R/3 System connection settings for IDOC to File scenerio.

Hi SAP champs,
I am working on a IDOC to File XI scenerio. But I am confused while configuring connection settings at XI system and R/3 system. I am finding problem in transaction IDX2 to maintain the IDOC metadata. Please let me know the complete step by step system cofigurations in XI and R/3 systems for the scenerio. Thanks in advance..
Regards
Sanjeev.

Hi Sanjeev,
We upload Medata in IDX2 to just reduce runtime effort and hence to improve the performance. However it is not a mandetory step to be performed for R/3 TO XI scenario.
You are confused just because here you dont find any F4 help to select the metadata and the PORT.
Thanks
Sunil Singh

You may need to configure the connection settings in the deployment descrip

Hi All
I am new to BPEL and going through Order Booking Tutorial (using 10.1.3.4 version of opmn ) .
I have a problem in 'Designing the Database Adapter to Insert Data' Chapter.
I have installed Oracle 10g Express Edition and BPEL Process Manager on my local system.
In the Example it has been asked to create a daabase connection with Third Party JDBC Driver. Instead I have created a database connection with Oracle(JDBC) Driver.So i didnt have to register any third party driver.
I cud access the Order/OrderItems table as well .
I Deployed the same on the server.But while running the process I get following error--
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
nested exception is:
     ORABPEL-11622
Could not create/access the TopLink Session.
This session is used to connect to the datastore. [Caused by: Listener refused the connection with the following error:
ORA-12519, TNS:no appropriate service handler found
The Connection descriptor used by the client was:
localhost:1521:XE
See root exception for the specific exception. You may need to configure the connection settings in the deployment descriptor (i.e. $J2EE_HOME/application-deployments/default/DbAdapter/oc4j-ra.xml) and restart the server. Caused by Exception [TOPLINK-4002] (Oracle TopLink - 10g Release 3 (10.1.3.4.0) (Build 080602)): oracle.toplink.exceptions.DatabaseException
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
I have checked several post on this error but every post talks about third party database.I have used Oracle Database only so why/What shud I change anything in oc4j-ra.xml?? This is my doubt .
Pls help me on this .Also Let me knowe in my case is there any need to create the datasource.?I am low at concept of database.
Pls help
Regards
Naveen

Hi
I am trying to insert orader and order Items as given in the Order booking tutorial..
Here are the files description
.wsdl file looks like
<service name="DBInsert">
<port name="DBInsert_pt" binding="tns:DBInsert_binding">
<jca:address location="eis/DB/MyConnection"
UIConnectionName="MyConnection"
ManagedConnectionFactory="oracle.tip.adapter.db.DBManagedConnectionFactory"
mcf.DriverClassName="oracle.jdbc.OracleDriver"
mcf.PlatformClassName="oracle.toplink.platform.database.oracle.OraclePlatform"
mcf.ConnectionString="jdbc:oracle:thin:@localhost:1521:XE"
mcf.UserName="system"
mcf.Password="6672B62098892995C8B651EFDF798A59"
/>
</port>
</service>
data source file looks like
<connection-pool name="MyConnection">

<connection-factory factory-class="oracle.jdbc.OracleDriver" user="orabpel" password="->pwForOrabpel" url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=nakhanna)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=XE)))"/>
</connection-pool>
<managed-data-source name="MyConnection" connection-pool-name="MyConnection" jndi-name="jdbc/MyConnectionDS"/>
</data-sources>
oc4j-ra.xml looks like
<connector-factory location="eis/DB/MyConnection" connector-name="Database Adapter">
          <config-property name="xADataSourceName" value="jdbc/MyConnectionDS"/>
          <config-property name="dataSourceName" value=""/>
          <config-property name="platformClassName" value="oracle.toplink.platform.database.Oracle9Platform"/>
          <config-property name="usesNativeSequencing" value="true"/>
          <config-property name="sequencePreallocationSize" value="50"/>
          <config-property name="defaultNChar" value="false"/>
          <config-property name="usesBatchWriting" value="true"/>
          <connection-pooling use="none">
          </connection-pooling>
          <security-config use="none">
          </security-config>
     </connector-factory>
##################################################################3
Still I get the same error .
<bindingFault xmlns="http://schemas.oracle.com/bpel/extension"><part name="code"><code>null</code>
</part><part name="summary"><summary>file:/C:/product/10.1.3.1/OracleAS_1/bpel/domains/default/tmp/.bpel_FulfillOrder_4.0_e77c64251e45eb4711a3a093f92e6a86.tmp/DBInsert.wsdl [ DBInsert_ptt::merge(OrdersCollection) ] - WSIF JCA Execute of operation 'merge' failed due to: java.util.MissingResourceException
java.util.MissingResourceException
; nested exception is:
     ORABPEL-00001
java.util.MissingResourceException
java.util.MissingResourceException
java.util.MissingResourceException
</summary>
</part><part name="detail"><detail>null</detail>
</part></bindingFault>
Pls let me know if something looks wrong in the above files
Thanks
naveen

Unable to apply connection settings. The detailed error message is: 'NoCount' is not a recognized option

My corporate database wizards have created a login for my small subsidiary to use to read selected data from the HR database. It's meant to be used by an SSIS package to bring over data on who's a current employee and who's not.
The package has started returning connection errors, and when I try to log into the HR database via SSMS using this login I get the following message:
"Unable to apply connection settings. The detailed error message is" 'NoCount' is not a recognized option."
If I click on OK I can still log in, but it looks like this error is causing SSIS to produce an error. I've seen articles on vaguely similar errors logging onto an Azure database, but this one's on SQL Server 2012.
Anybody got any ideas? Is there something I can change at my end, or is it a change that has to be made in the remote DB?

I'm getting confused seeing this
The package has started returning connection errors, and when I try to log into the HR database via SSMS using this login
I get the following message:
Whats the purpose of SSIS package if you're trying to connect to DB using SSMS?
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

Help required with (soundcard) connection / settings, thanks in advan

Help required with connection / settings between a Creative Sound Blaster Audigy Platinum EX (soundcard) and a Creative DTT3500 Digital (5. speakers).
The problem
No sound from any of the speakers. (Exception can plug in headphones at front)
Background
My computer has been recently upgraded at my local computer shop and all programs re-installed (including driver update from Creative's website). However after reconnecting speakers and restoring the original settings I?m getting no sound from any of the speakers. I?ve followed all the available advice/instructions I can find on this website and manuals to no avail.
Set-up
Physical
(Digital DIN) Speakers/decoder amplifier (DTT3500) connected to the (digital out) soundcard (Audigy Platinum EX) using minijack to DIN cable. (As per instruction manual)
Software
Creative Audio Consul ? setting as per instructions, however have tried variations in vain. (Note: above tabs there is a select device box with SB Audigy [A0000] in it ? only option. Just wondering what [A0000] means?)
Your advice please. A simple step by step guide would be appreciated, many thanks in advance, Jon

"My computer has been recently upgraded at my local computer shop and all programs re-installed (including driver update from Creative's website). "
Do you have the original installation disk?
If so, try installing THOSE drivers, ESPECIALLY if it worked before. Be sure to uninstall what is there now, first.
Its natural for most people to want the 'latest' drivers for their hardware. However:
After experiencing some difficulties with some CL 'updates' for certain products, I now avoid them UNLESS I am having a PROBLEM with the existing drivers.

Can you retrieve a task list for a user without specifying that user's connection settings?

Hi
I would like to know if it is possible to obtain a list of workspace tasks for a user of my choice. In the following code, taken from the relevant quickstart, I am able to retrieve a list of tasks for "administrator" because it is the "administrator" settings specified in the connection properties when obtaining an instance of ServiceClientFactory. If I wanted to obtain a list of tasks for user "greg", for example, is there a way I can do this without having to specify the settings for "greg" in the connection properties? I tried to invoke the setUserId() method of the TaskFilter interface but no tasks are returned for user "greg" in that scenario. The aforesaid user has 3 tasks assigned to him. If I specify the user name and password for "greg" in connection settings, I am able to retrieve his list of tasks successfully. However, this is undesirable because I want to be able to retrieve a list of tasks for any user of my choice, by passing a parameter. Is that possible? Code follows:
//Start of code
import com.adobe.idp.dsc.clientsdk.ServiceClientFactory;
import com.adobe.idp.dsc.clientsdk.ServiceClientFactoryProperties;
import com.adobe.idp.taskmanager.dsc.client.TaskManagerClientFactory;
import com.adobe.idp.taskmanager.dsc.client.TaskManagerQueryService;
import com.adobe.idp.taskmanager.dsc.client.query.StatusFilter;
import com.adobe.idp.taskmanager.dsc.client.query.TaskFilter;
import com.adobe.idp.taskmanager.dsc.client.query.TaskRow;
import java.util.Iterator;
import java.util.List;
import java.util.Properties;
public class RetrieveTaskInfo {
    public static void main(String[] args) {
        try {
            //Set connection properties required to invoke LiveCycle
            Properties connectionProps = new Properties();
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_DEFAULT_EJB_ENDPOINT, "jnp://localhost:1099");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_TRANSPORT_PROTOCOL,Service ClientFactoryProperties.DSC_EJB_PROTOCOL);
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_SERVER_TYPE, "JBoss");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_USERNAME, "administrator");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_PASSWORD, "password");
            //Create a ServiceClientFactory object
            ServiceClientFactory myFactory = ServiceClientFactory.createInstance(connectionProps);
            //Create a TaskManagerQueryService object
            TaskManagerQueryService queryManager = TaskManagerClientFactory.getQueryManager(myFactory);
            //Define search criteria by performing a search on
            //Assigned tasks (tasks assigned to the user specified
            //in connection properties)
            TaskFilter filter = queryManager.newTaskFilter();
            StatusFilter sf = filter.newStatusFilter();
            sf.addStatus(StatusFilter.assigned);
            filter.setStatusFiltering(sf);
            //Perform the search
            List result = queryManager.taskList(filter);
            //Create an Iterator object and iterate through
            //the List object
            Iterator iter = result.iterator();
            while (iter.hasNext()) {
                TaskRow myTask = (TaskRow)iter.next();
                //Get the task identifier value
                long taskId = myTask.getTaskId();
                //Get the status of the task
                long taskStatus = myTask.getTaskStatus();
                //Get the name of process on which this task is based
                String processName = myTask.getProcessName();
                //Get the task description
                String taskDes = myTask.getDescription();
                System.out.println("The task identifier is " + taskId + "\n" +
                        "The status of the task is " + taskStatus + "\n" +
                        "The name of the process on which the task is based is " + processName + "\n" +
                        "The task description is " + taskDes);
        } catch(Exception e) {
            e.printStackTrace();
//End of code
Thanks
Darren

Paul,
Thanks very much, I never tried just asking for the parameter I was looking at the entire list coming back from a query with no filters. Using the DBMS_LDAP package you can in fact get their GUID.
I understand your concern for the use of the field and for other reasons have moved to a different identifier to tie OID accounts to our internal application user accounts.
Thanks very much, I'm still glad to know how to do get at the info.

8.8 Connection Settings & Trusted Connections

Similar Messages

Maybe you are looking for