AC CUP: User created in CUA with system specified

Hello,
I create a new account request to provision a user in the CUA and child systems.
The user is created in the CUA and the child system: OK.
In SU01 of the CUA the system is specified. The pb is that the user can login directly to the CUA (even if he has no role).
I think the system should not be specified for the CUA. Does anyone have a solution to avoid to specify the system for the CUA?
Regards

Hi Simon,
You can config the CUA to allow the creation of user in child client. But then if the user already exist in the CUA, the CUP request will create the user in the child but with a wrong password.
Regards

Similar Messages

  • How can I provision users to SAP CUA with their passwords Disabled?

    I need to provision users to SAP CUA with their passwords disabled. How can I configure this if at all?
    Thanks!

    Thanks for the quick response. I am confirming with SAP team if its permission issue.
    Following is the snippet from JBOSS log:
    2009-04-14 11:06:26,659 INFO [STDOUT] Running SAP CUA Create User
    2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): Create User Request
    2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): userId :00000209, userGroup:,lastName:Employee 209,firstName:Last Name - 209,userTitle:0003,langComm:,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:,decimalNotation:,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:,userType:,RoleProfile:,RoleProfileOption:Role
    2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
    2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
    2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
    2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
    2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
    2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
    2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
    2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] createUser(): Create User Start
    2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :User 00000209 created
    2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
    2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:102
    2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] addRoleToUser():Add Role to User
    2009-04-14 11:06:29,753 INFO [XL_INTG.SAPCUA] getChildData() :getUserRoles method is Started
    2009-04-14 11:06:29,800 INFO [XL_INTG.SAPCUA] getUserRoles() :getUserRoles method End
    2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
    2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
    2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725190128, maxLifeAfterPassivation=1200000
    2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
    2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 changed
    2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
    2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:048
    2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] Role added successfully to the user.
    2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] changePassword(): Change Password Start
    2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Password Not Allowed
    2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:E
    2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:001
    2009-04-14 11:06:31,284 DEBUG [XL_INTG.SAPCUA] changePassword(): chanegPassword eventPassword Not Allowed
    2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] changePassword():Change Password Error:Password Not Allowed
    2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():ChangePassword error after user creation:SAP.PASSWORD_CHANGE_ERROR
    2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():Deleting the User
    2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] deleteUser(): Delete User Start
    2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
    2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
    2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725192222, maxLifeAfterPassivation=1200000
    2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
    2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
    2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
    2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725194769, maxLifeAfterPassivation=1200000
    2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] deleteUser(): User deleted SUCCESSFUL
    2009-04-14 11:06:43,863 DEBUG [XL_INTG.SAPCUA] createUser(): 00000209:SAP.USER_CREATION_FAILED
    2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
    2009-04-14 11:06:43,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.
    2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
    2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
    2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725203925, maxLifeAfterPassivation=1200000
    2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
    2009-04-14 11:06:44,878 INFO [STDOUT] Running SAP CUA ADD ROLE
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] addRoleToUser() :Add Role
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
    2009-04-14 11:06:44,878 ERROR [XL_INTG.SAPCUA] addRoleToUser() :User Id :00000209 not exist in target SAP system.
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
    2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.

  • Users created in CUA does not distribute to child systems

    Hi
    I searched this forum and after pulling my hair for 2 days I am asking this question. I created a user in CUA and gave him child system access with the necessary roles.
    I was under the impression that the user will get replicated / distributed automaticlaly to the child systems which i selected at the time of user creation in CUA
    But it does not happen. I login the child system and search for the user. It says User does not exist. I saw SCUL in CUA and the log shows a grey icon next to the username and when I place my cursor on the icon, the tect comes " Distribution unconfirmed"
    What am I missing? Everything looks ok to me
    Why is the user or users not geting replicated or distributed to the child systems with the necessary roles / profiles?

    >
    Jackofalltrades wrote:
    > 2. Also the communication user from Client to CUA is getting locked very frequently. When I do a text comparison from CUA, it always pops the username and password login screen and then I have to enter it and the text comparison happens. I don't know what that happens
    >
    > Any ideas for point 1 and 2 ?
    Hi,
    that is an indication, that the RFC-connection is not defined properly. As soon it does not work, you will get the login screen (on the login screen the default client (503) is filled automatically, but that has nothing to do with the problem you have).
    First check the password of the RFC-user you use. Simply change this user to type 'dialog' and try to log on with the password you know. If that works, reenter this password in SM59. Perform the authorization test in SM59 afterwards. Mind possible upper/lowercase problems with the password depending on the releases your systems are.
    You can also try to perform a remote login through sm59 to make sure, tath you can log on with that RFC-user (as long he is of type dailog this will work). If the rfc-user gets locked frequently, then something is wrong with the rfc configuration. In most cases the entered password is simply wrong.
    Check this first!
    b.rgds, Bernhard

  • CUP: user creation in CUA child client but incorrect CUP password feed back

    Hi all,
    This looks like the same unresolved post from Vincent Doux on this forum as well.
    Re: AC CUP: user creation in child client when already exist in CUA
    When we create a request for a new account to create a user in a CUA child client, - and the user already exists in the CUA master - we find that the password fed back by CUP via its email that has the password link in it, is not the one as it was created by CUA in the respective child client.
    Ergo, the user can not log on with the password provided by CUP.
    CUP's provisioning message is OK, the user is properly created in the child client but the the password given by email from CUP doesn't allow to connect user on to the child client.
    As a contra-test: When creating the user directly from  CUA manually the password is however working corrrectly on the child client.
    Does someone know how to have the correct password (CUA) in the CUP email notification or how to solve this?
    Both Java and CUA master and Child Client are on 5.3 SP 6. I checked OSS note 1168508
    Regards
    George

    Hi George,
    Have you got the CUA configuration settings maintained correctly?
    CUP may not be referencing the correct destination and therefore maynot be interfacing correctly to provide the correct password.
    Simon

  • Stop user creating process order with material for specific order type

    Hey Team,
    Is there a way where I can stop creating process order with material for specific order type says Z*. We are using ZNMA  order type to create trial batch and we do not want to create process order with material for this order type.
    Any ideas?
    Thanks
    Bhavesh Patel.

    You can restrict the order creation in CO01 based on authorization, Remove the authorization for Z order type for the particular user,  Check with your basis Guy

  • Avoka Create User Create Group installed with LiveCycle ES2

    I've just noticed that the Avoka Create User Create Group service got installed along with the Adobe services when I installed LiveCycle ES2.  Has this component been licensed by Adobe on behalf of their users?  I see that the Avoka web site indicates that while you can use their components freely for development and testing, they want money before you can use them in production.  Does this apply to the Create User Create Group component too?
    I'm thinking of using this in a solution for a customer however I don't want to incur licensing costs on their behalf.
    Regards,
    Rob

    Hi ,
    Rob is right when you go through step by step instruction one of the step mentioned as:
    "Configuring the sample:
    Note: Before configuring and running this sample, it is necessary to deploy and run the Sample Setup Utility."
    The LCA file mentioned (Adobe-Samples-SetupUtility.lca)  has different Avoka components, services, process which get deployed during this step.
    and the code for Avoka component is not provided ( see AvokaComponent.compjar com.avoka.livecycle.createLocalPrincipal.CreatePrincipleService.class)
    May be it is helpful to have one sample (that just depends on all components and modules from Adobe only )  that shows how this task can be achieved without using  'Sample Setup Utility'. (java / orchestration that calls differnt service and produce same exact result that 'Sample Setup Utility' does)
    Thanks
    YogLC

  • User defined table/object with system form

    Hi,
    I added an extra tab on the invoice form. But I want to save the info in another user defined object.
    The new fields are coupled on the new added dbdatasrource. But it seems like the new added datasource is as much restricted than other dbdatasources on a system form (even if I have added them).
    I see no way to let this thing work though the datasources or registered object (because a registered object is not accessible with the DI API)
    Does anyone has a suggestion to program this?
    greetz
    Eddy

    Hi Filipe,
    I created a usertable of the document type and I created an UDO for it. And I added the fields on an extra tab on the invoice document. Therefore I have to add an extra dbdatasource to the invoice document and I binded the fields to the new added datasource.
    When I started to work with the fields and the dbdatasource I noticed that I couldn't use functions like InsertRecord and setvalue, because it is restricted. And I  didn't expect this because I added the datasource myself.
    Greetz
    Eddy

  • 10.4.9 update creates connection problem with System 9.2.2 clients

    After updating to Mac OS X Server 10.4.9 this morning, my 9.2.2 clients on the network are not more able to copy files on the server: they begin the copy and are suddenly disconnected!
    Does someone else noticed this problem, and can help me solving it?
    Thank you
    Stefano
    G5 2x2 GHz   Mac OS X (10.4.9)   2Gb RAM

    Hi David,
    Thanks for the advice but I don’t think many people have the time to do what you propose: take the server offline for about an hour, boot from another volume and clone every time there is an Apple update, especially for a server that is supposed to be online all the time.
    I have no problem backing up the data but cloning the server every time there is an Apple update ?
    I know this is offtopic but I am amazed at the current situation
    - Apple does not have a solution for people who want to revert to a previous version of Mac OS X
    It is possible to do an Archive and Install on Mac OS X client but not on the server. Why ?
    ****, even Windows has had “System Restore” for ages and from what I see the “Time Machine” in Leopard allows you to go back only for your files, not your system.

  • How can I create a report with a specified format in Answers

    Hello Everyone!
    I want to create a request in Answers gives me a report format like this:
    http://i25.tinypic.com/t6p0ee.jpg
    How can I achieve this?
    Please help!
    -D

    Thanks for quick replies. I think I was not able to give a lot of details.
    So, I am selecting a country, region, branch (branches can be multiple)
    The report is grouped by Branch (I get details of each individual projects within each of the branch, the total sales of individual projects and then total sales of the branch)
    The report then further gives me sum of sales of the branches that selected in my query.
    In the end I want the report to look similar to the pic I posted.
    Thanks!
    -D

  • Unable to see user created in Child system

    Hi There,
    I am facing a peculiar issue with CUA.
    1) A user created in CUA is not appearing in Child system.
    2)When I checked the IDOC status it is Green(03) in both the systems.
    3)When I remove the system in the CUA for that client , it  is fine.
    4)When i again added the system it is fine in IDOCs as well and when I reset the password the status of IDOC in child system  says user does not exist.
    Please let me know if anybody had similar issue and any solutions I could look into

    Just to make things more clear.
    1)logical systems would not be an issue because the idocs would not appear in child system had it been the case.
    2)I tried the option to remove the particular child system from the user profile under systems ,saved and then added the system.
    When I went to child system, the idoc  says user created but again when I reset the password in the CUA for  that system   and check the idoc in child systems it fails saying user does not exist.

  • CUA: Model view not created automatically in Child System

    Hi, I try to create a CUA with just a child system thru txn SCUA. The result of generation is good and all green. The part that is not right is I do not see the model view created in txn BD64 of child system, I can see it created in master system. Both RFC of master and child system are working fine. I do not see errors at WE20 & WE21 as well. Under this situation, I can see CUA active in master system but not child system. Hence, CUA is not working as it says in master system.
    I have setup CUA couple of times before but this is the first time that I encounter such a weird situation. Does anyone has any clue where could have gone wrong?
    Edited by: Annie Chan on Jul 25, 2008 5:23 PM

    Hi Everyone,
    It is indeed a RFC issue but it was a silly mistake with the incorrect hostname that I am suppose to connect to. Hence, the Distribution Model doesn't exist in the child system. Nervertheless, your advise does point to the right direction.
    Thanks so much for your input. Points are granted as accordingly.
    Regards,
    Annie

  • AppModule with manually specified datasource manualy

    Hello,
    I am trying to write an servlet application.
    The user should be able to provide in a webbrowser informations about his DB-username, password and the DB-address(name)of the database.
    With this information i build an new EnvInfoProvider with the following getInfo-Function:
    public Object getInfo(String info, Object connEnvironment)
    ((Hashtable)connEnvironment).put (Configuration.DB_USERNAME_PROPERTY, username);
    ((Hashtable)connEnvironment).put(Configuration.DB_PASSWORD_PROPERTY, password);
    ((Hashtable)connEnvironment).put(Configuration.DB_DATASOURCE_PROPERTY, tnsname);
    ((Hashtable)connEnvironment).put
    and then i create a new applicationModule with:
    appMod = Configuration.createRootApplicationModule("xxx.Module","xxxModuleLocal",myInfoProvider)
    All works fine, i.e. the information about the username and the password is used, but the information about the database-address (DB_DATASOURCE_PROPERTY) is fully ignored.
    I tried even the DB_CONNECTION_PROPERTY and the JDBC_DS_NAME in the InfoProvider, but it is the same effect.
    How can I create an ApplicationModule with an specified DB-address?
    Many thanks,
    Andreas Bardeck.

    Hi,
    Could one of the older (shareware) versions on the following web page possibly be of interest?
    http://www.dalverson.com/zterm/
    Otherwise, there was a communications section in ClarisWorks/AppleWorks, but I do not know if the program suite is available for or compatible with one of your computers.
    Jan

  • ID User name when provisioning new user account in R/3 System with CUP

    Hi,
    Is it possible to configure somehow a rule in CUP for ID user names to be created in the backend system when direct auto provisioning is done?
    Example: User_A creates a request for a new account in System SAP S1.
                   Such user will be created in S1 under ID "XXXX_User_A"
    Many thanks in advance. Best regards,
       Imanol

    Imanol,
    if you want building rules for new users you can user Netweaver Identity Management.
    But I completely agree with Dylan - you really really want to try to have a SINGLE user ID in your systems for a person.
    That's not only helpful for compliance, it's also useful for technical enhancements like Single Sign-On and many other things.
    I usually try to link ActiveDirectory to CUP and retrieve user data, including the UserID from there.
    Frank.

  • Creating users in enterprise portals with CUA as userbase

    Hi All,
       we are using CUA system for maintaining the users and we want this users to be used in enterprise portals. So while installing WebAs itself, we specified the connection details to this CUA system. then we installed portal and we were able to view the users of CUA in portal.
      now i am creating a user from portal, create user option in UserManagement. but i just get an error like, could not create a user.
    i checked out in system administration->umconfiguration-> sap system. all the details that we specified during the webas installation appear there by default.
    so could you please let me know what the problem could be
    thank you

    Raj,
    I know that your problem was solved, but I've come across following SAP link. Hope, it helps other ppl..
    TITLE: Requirements for Service User Used to Connect to SAP Systems
    http://help.sap.com/saphelp_ep60sp2/helpdata/en/8f/67d27676ace84080964d4c4223bb3c/content.htm
    Thanks,
    Pritesh.

  • How to create automatically users&roles in CUA and in chlid systems?

    Hi,
    i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
    i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
    are there any standard BAPI or Funcion modules that can do this job?
    is the role created automatically in CUA can be seen automaticall in the portal child system?
    any help?
    Thanks&Best regards

    You can use one of the various ways Java EE provides you, e.g. container managed authentication.
    It's also all in the Java EE tutorial: [http://java.sun.com/javaee/5/docs/tutorial/doc/bncas.html].
    You can configure it in the application server as well: [http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html].
    Here is an example how to use it in JSF: [http://ocpsoft.com/java/acegi-spring-security-jsf-login-page/].

Maybe you are looking for