Access J2EE keystore & jars are required ....

Hi Experts,
I need jars for the following classes ..
SAPSecurityResources, KeyStoreManager, PermissionMode ..... to access J2EE keystore using J2EE library
com.sap.aii.security.lib
SAPSecurityResources secRes = SAPSecurityResources.getInstance();
KeyStoreManager ksMgr = secRes.getKeyStoreManager(PermissionMode.SYSTEM_LEVEL);
java.security.KeyStore ks = ksMgr.getKeyStore(privKeyView);
can i use above code in EJB to access J2EE keystore to create HTTPS connection.
Please send above jars to -- [email protected]
Thanks
MMK

They're not supposed to be sent over the internet; it's proprietary content.
If you have a S-user, you can download the SAP-XIAFC software component (XI ADAPTER FRAMEWORK CORE 7.00) from Service Marketplace (It is subjected for aproval, though, since it should be downloaded through Solution Manager). It contains both SDAs with these jars.
Regards,
Henrique.

Similar Messages

JAR files required for Portal Application

Hi Experts
I am currently migrating my custom Masthead application from NW 7.0 to NW 7.3. However, when I migrated the PAR into EAR using migration tool from Portal and imported this EAR file into NWDS7.3, the JSP pages in it shows error. Also when this EAR is directly deployed on the NW 7.3 system, it gives Portal Runtime exception.
<%@ page import = "com.sapportals.portal.prt.session.IUserContext" %>
<%@ page import = "com.sapportals.portal.prt.component.*" %>
<%@ page import = "com.sapportals.portal.prt.service.laf.*" %>
<%@ page import = "com.sap.security.api.*" %>
<%@ page import = "com.sapportals.portal.prt.service.license.ILicenseService"%>
<%@ page import = "com.sapportals.admin.wizardframework.util.ILocaleListService"%>
<%@ page import = "com.sapportals.portal.navigation.*" %>
<%@ page import = "com.sapportals.portal.prt.runtime.PortalRuntime" %>
<%@ page import = "com.sapportals.portal.prt.util.StringUtils" %>
<%@ taglib uri="prt:taglib:tlframework" prefix="frm" %>
The errors shown in the JSP page are due to missing JARs. But I am having trouble in locating the required JAR files on the server. Can anybody tell about which all JARs are required and where i can find them??
Also the imported Framework library is not accessible in the application thus there is error "Can not find the tag library descriptor for "prt:taglib:tlframework"".
Can anybody tell me what i am missing here??
Regards,
Deepak

Hi Deepak,
Can you tell me which JAR files you added to resolve build time errors.
I am facing the following errors after importing Std masthead from portal7.3.
Can not find the tag library descriptor for "prt:taglib:tlframework"
Can not find the tag library descriptor for "prt:taglib:tlhtmlb"
componentRequest cannot be resolved
ILocalesListService cannot be resolved
ILocalesListService cannot be resolved to a type
noBtn cannot be resolved
Syntax error on token "}", delete this token
Syntax error, insert "}" to complete Statement
The import com.sap.portal.core cannot be resolved
The method enableCloseAll() is undefined for the type NavigationEventsHelperService
The method getDynamic(String, null) is undefined for the type IUMParameters
The method getDynamic(String, String) is undefined for the type IUMParameters
yesBtn cannot be resolved
Please give your mail Id if possible.
Regards,
Sumangala

What are the Jar files required,that for accessing the Type 4 Drivers.

what are the Jar files required,that for accessing the Type 4 Drivers.
Regards,

Well it is Database Specific.
Howevr there are few 3rd party .jar (Derby) which you can use it for accesing some standard databases.

What are the Jar Files required in J2EE?

What are the jar s required to work with JMS, Java Mail API and Web Services. (Complete J2EE).

Depends on your app server. So check with app server

Acessing J2EE Keystore at Mapping runtime

Guys,
My scenario: to perform a digital signature under some specific parametrization, as requested by receiver side, I have to develop a custom digital signature application. We are trying to use XI's API for digital signature: http://help.sap.com/saphelp_nw04s/helpdata/en/4f/65c3b32107964996a56e4165077e24/frameset.htm
And also, as requested by receiver side, the actual XML message will need to be enveloped as a string in the message definition of the WSDL (wrapped/literal mode). Hence, we can't execute the digital signature application in a adapter module (where it would be "easy" to perform it).
Hence, we need to perform the digital signature at mapping runtime, before the signed message is wrapped as a string in the wsdl message.
We have faced some problems related to the API (specially related to poor documentation ) but right now we are stuck at acessing the J2EE Keystore from the java mapping program.
Have you guys performed this before?
Any hints will be appreciated.
Regards,
Henrique.

This is a 5 year old thread, I hardly remember the details of that implementation, since I've long left that development team.
But going through my old files, this is what I was able to recall:
I ended up discontinuing the Java Mapping idea and went for a XML DigSig EJB, exposed as a web service (not just because it was easier to make it work, but also for maintenance, it was easier to track a full blown project in NWDI instead of a Java Mapping, which usually just exists in the developer's workspace);
I had two Projects, a DigitalSignatureBean (the EJB project), including the core signature functionality, and a DigitalSignature (the EAR project), including the .jar for the EJB project + the 4 other .jars I had in the project;
for the digital signature part itself, I ended up using the tc_sec_ssf.jar and aii_security_lib.jar libraries (both of which, you can find in a PI 7.0 box, not sure about newer versions though);
Here is what my main class code looked like:
* Created on Sep 28, 2007
* To change the template for this generated file go to
* Window>Preferences>Java>Code Generation>Code and Comments
package com.sap.xnfe.dsig.core;
import java.io.IOException;
import java.io.OutputStream;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.cert.CertificateExpiredException;
import java.security.cert.CertificateNotYetValidException;
import java.security.cert.X509Certificate;
import org.w3c.dom.Element;
import com.sap.aii.af.service.resource.SAPSecurityResources;
import com.sap.aii.security.lib.KeyStoreManager;
import com.sap.aii.security.lib.PermissionMode;
import com.sap.engine.lib.xml.signature.Constants;
import com.sap.security.core.server.ssf.SsfDataXML;
import com.sap.security.core.server.ssf.SsfInvalidAlgException;
import com.sap.security.core.server.ssf.SsfInvalidDataException;
import com.sap.security.core.server.ssf.SsfInvalidKeyException;
import com.sap.security.core.server.ssf.SsfPabKeyStore;
import com.sap.security.core.server.ssf.SsfProfileKeyStore;
import com.sap.security.core.server.ssf.SsfRefXMLInfo;
import com.sap.security.core.server.ssf.SsfRefXMLList;
import com.sap.security.core.server.ssf.SsfSigRcpList;
* @author I813314
* To change the template for this generated type comment go to
* Window>Preferences>Java>Code Generation>Code and Comments
public class XMLData {
          private SsfDataXML data = null;
          public XMLData(Element elmt) throws InvalidXMLDataException {
                    if (elmt == null) {
                              throw new InvalidXMLDataException("Empty input data!");
                    } else
                              try {
                                        this.data = new SsfDataXML(elmt);
                              } catch (SsfInvalidDataException e) {
                                        throw new InvalidXMLDataException(
                                                  "Invalid input data: " + e.getMessage());
          public boolean sign(
                    String KeyStoreView,
                    String KeyStoreEntry,
                    String ReferenceId,
                    String sigPrefix,
                    boolean checkCert,
                    OutputStream out)
                    throws XMLSignatureException {
                    boolean res = false;
                    //                    create list of references
                    String trans[] =
                                        SsfRefXMLInfo.TRANS_ENVELOPED_SIGNATURE,
                                        SsfRefXMLInfo.TRANS_C14N_OMIT_COMMENTS };
                    SsfRefXMLList refList = new SsfRefXMLList();
                    refList.add(new SsfRefXMLInfo("#" + ReferenceId, trans));
                    //                    get Profile from keystore service of AS Java
                    SsfProfileKeyStore profile = null;
                    try {
                              SAPSecurityResources secRes = SAPSecurityResources.getInstance();
                              KeyStoreManager manager =
                                        secRes.getKeyStoreManager(PermissionMode.SYSTEM_LEVEL);
                              KeyStore keyStore = manager.getKeyStore(KeyStoreView);
                              profile = new SsfProfileKeyStore(keyStore, KeyStoreEntry, null);
                    } catch (KeyStoreException e) {
                              throw new XMLSignatureException(
                                        "Error accessing KeyStore: " + e.getMessage());
                    //                    Check the certificate's validity
                    if (checkCert) {
                              String sName = null;
                              try {
                                        X509Certificate cert = profile.getCertificate();
                                        sName = cert.getSubjectDN().getName();
                                        cert.checkValidity();
                              } catch (CertificateExpiredException e) {
                                        throw new XMLSignatureException(
                                                  "Certificate for "
                                                            + sName
                                                            + " not valid: Valid date expired./n"
                                                            + e.getMessage());
                              } catch (CertificateNotYetValidException e) {
                                        throw new XMLSignatureException(
                                                  "Certificate for "
                                                            + sName
                                                            + " not valid: Initial valid date in the future./n"
                                                            + e.getMessage());
                    //                    sign the data
                    try {
                              if (sigPrefix == null) {
                                        sigPrefix = "";
                              Constants.setSTANDARD_PREFIX(sigPrefix);
                              res =
                                        data.sign(
                                                  null,
                                                  refList,
                                                  profile,
                                                  SsfDataXML.INC_CERT_OWN,
                                                  false,
                                                  false);
                              if (!res) {
                                        throw new XMLSignatureException("Creation of signature failed.");
                    } catch (SsfInvalidKeyException e) {
                              throw new XMLSignatureException(
                                        "Invalid Private Key: " + e.getMessage());
                    } catch (SsfInvalidAlgException e) {
                              throw new XMLSignatureException(
                                        "Invalid Algorithm: " + e.getMessage());
                    //                    write output data
                    try {
                              data.writeTo(out);
                    } catch (IOException e) {
                              throw new XMLSignatureException(
                                        "Error writing output data:" + e.getMessage());
                    return res;
          public boolean verify(String KeyStoreView) throws XMLSignatureException {
                    boolean res = false;
                    //                    create list of signers or recipients
                    SsfSigRcpList sigList = new SsfSigRcpList();
                    //                    get Personal Addres Book from keystore service of AS Java
                    SsfPabKeyStore pab = null;
                    if (KeyStoreView != null && !KeyStoreView.equals("")) {
                              try {
                                        SAPSecurityResources secRes =
                                                  SAPSecurityResources.getInstance();
                                        KeyStoreManager manager =
                                                  secRes.getKeyStoreManager(PermissionMode.SYSTEM_LEVEL);
                                        KeyStore keyStore = manager.getKeyStore(KeyStoreView);
                                        pab = new SsfPabKeyStore(keyStore);
                              } catch (KeyStoreException e) {
                                        throw new XMLSignatureException(
                                                  "Error accessing KeyStore: " + e.getMessage());
                    //                    verify the data
                    try {
                              res = data.verify(pab, sigList);
                    } catch (SsfInvalidDataException e) {
                              throw new XMLSignatureException(
                                        "Validation of signature failed: " + e.getMessage());
                    return res;

Developer access for admin_client.jar in 10.1.3.1

I would like our developers to be able to deploy their applications to OAS 10.1.3.1 on Solaris via command line. They already have an administrator login for OAS.
It appears that the default permissions for admin_client.jar is 750 meaning that only those in the dba group have read/execute access to this jar by default.
So my question is: What is the typical supported method for allowing developers to deploy their applications via command line?
Do you simply open permissions on the jar and that's fine?
Do you install the remote client administration tool and open permissions on that?
I know that they can deploy very easily in JDeveloper, but many developers here are using eclipse instead, and we may also want to automate the deployment into our build scripts, so I'd like to know how to open the access up to do this via OAS CLI utilities.
Let me know what you all are doing out there for your developers and how this is intended to be used by those that are not DBAs.
Thanks!
Tony

OK, in case anyone else had the same issues, here is what I ended up doing to resolve the issue:
Basically I created a new unix group for those I wished to have access to admin_client.jar util and layed down the oc4j remote administration zip with that user.
In our env the steps looked like this:
1. Create Group oc4jadm
2. Create User oc4jinst (group oc4jadm)
3. Add all users that will deploy apps to the oc4jadm group
4. Unzip the remote client with oc4jinst user
5. All files are now accessible by the oc4jadm group
6. Test admin_client.jar with normal user in the oc4jadm group
7. Everything works great.
This way I could install OAS 10.1.3.1 with the oracle user and dba group like normal and not have to dig around and haphazardly grant access to the various dirs and files required by the admin_client.jar. Everything required is bundled up in the remote admin client zip and it may be installed with a user other than oracle without issue. Plus it has the added bonus of working remote servers in case you don't want your developers accessing the server on which the OAS itself resides.
HTH,
Tony

To download an App the 3 security questions are required. But at the end, apple is not able to complete the task and gives an error message. No more downloads are possible. What can I do?

to download an App the 3 security questions are required. But at the end, apple is not able to complete the task and gives an error message. No more downloads are possible. What can I do?

Very Important, how much Free Space is on your Hard Drive first of all? Click on the Macintosh HD on the Desktop, then do a Get Info on it.
Could be many things, we should start with this...
"Try Disk Utility
1. Insert the Mac OS X Install disc, then restart the computer while holding the C key.
2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu at top of the screen. (In Mac OS X 10.4 or later, you must select your language first.)
*Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.*
3. Click the First Aid tab.
4. Select your Mac OS X volume.
5. Click Repair Disk, (not Repair Permissions). Disk Utility checks and repairs the disk."
http://docs.info.apple.com/article.html?artnum=106214
Then try a Safe Boot, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, reboot when it completes.
(Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.)
If perchance you can't find your install Disc, at least try it from the Safe Boot part onward.
Do they launch OK while in Safe Mode?

Authorizations for which transactions are required in BW?

Hi,
Can any ony please give some information regarding
Authorizations for which transactions are required in BW Production Support?
Regards,
Aryan

Hi Aryan,
Authorizations for the following transactions are required in BW
1. RSA1
2. SM37
3. ST22
4. ST04
5. SE38
6. SE37
7. SM12
8. RSKC
9. SM51
10. RSRV
11.RSPC
13.RSMON
The Process Chain Maintenance (transaction RSPC) is used to define, change and view process chains.
Upload Monitor (transaction RSMO or RSRQ (if the request is known)
The Workload Monitor (transaction ST03) shows important overall key performance indicators (KPIs) for the system performance
The OS Monitor (transaction ST06) gives you an overview on the current CPU, memory, I/O and network load on an application server instance.
The database monitor (transaction ST04) checks important performance indicators in the database, such as database size, database buffer quality and database indices.
The SQL trace (transaction ST05) records all activities on the database and enables you to check long runtimes on a DB table or several similar accesses to the same data.
The ABAP runtime analysis (transaction SE30)
The Cache Monitor (accessible with transaction RSRCACHE or from RSRT) shows among other things the cache size and the currently cached queries. The Export/Import Shared buffer determines the cache size; it should be at least 40MB.
****Assign Points If Helpful****
Regards,
Ravikanth

Jar files required to develop adapter module in 7.1

Hi,
can any one tell me whether below jar files are enough to develop the adapter modules in 7.1,
u2022 aii_af_cci.jar
u2022 aii_af_mp.jar
u2022 aii_af_ms_api.jar
u2022 aii_af_ms_spi.jar
u2022 aii_af_trace.jar
u2022 aii_af_svc.jar
u2022 aii_af_cpa.jar
if not please let me know set of jar files need to develop adapter module in 7.1.
Thank You,
Madhav

Hi ,
Below Jar files Required to develop Adapter Module in PI7.1
com.sap.aii.af.cpa.svc.api
com.sap.aii.af.lib.mod
com.sap.aii.af.ms.ifc_api
com.sap.aii.af.svc_api
sap.comtcloggingjavaimpl
Regards,
Raj

BODS / SAP : what set-ups are required for communicating with each other ?

Hi.
There is a new SAP system
And there is a new BODS installation.
Both on independent server machines but on the same lan network.
On the test system of BODS. We tried to see how the communication happens with SAP.
While we try some test jobs by trying to pull a simple table on SAP R/3
In Dataflow, we used simple SAPR/3 ABAP flow. And put it into target database thro query transformation.
In the datastore,
We used the Generate and Execute option,
with a path on the local directory of BODS server for creating the ABAP program and the dat file.
However,
We are always getting error on batch job schedule.
Although the user is having rights on the R/3 table
And can login into SAP R/3 system and check the table.
Still we get an error saying Databstore unabel to connect to R/3 system. Check for user login etc.
For anyone whose login we use. We get the error.
However, if i directly generate the code on the ABAP flow (without running the job),
make the program available on R/3 system.
and then run the job as execute preloaded
this works fine without any error.
and we are able to see the data in the target table.
Now both the systems are new.
And am not aware of the initial set-ups which are required for communication between SAP / BODS.
Are WE missing something on the SAP side setups - for generate and execute option to be used?
Is there anything specific to be done for ease of the communication between SAP server and BODS server in this regard.
Can anyone share some inputs on this.
Actually for any user with full admin rights too, on the sap side, if we use the user login for R/3 connectivity for this particular "generate and execute" option, it errors out after nearly 10 minutes. Then the error says, login info not correct.
So basically, the communication channel by itself between SAP R/3 and BODS seems to be locked somewhere.
If anyone with SAP admin expertise - can help or advise on this.
Many thanks
Indu
Edited by: Indumathy Narayanan on Sep 13, 2011 9:20 PM

Getting data out of R/3 requires two distinct setup tasks, and they don't have much to do with each other.
The first basic task is to get the little ABAP extraction programs loaded and run in R/3. You can pre-load them and then call them, or generate, upload, and execute them all on-the-fly, at BODS runtime. During development, use "Generate and Execute" for your ABAP.
Once that's done, you have four different choices to get the data back: "Direct download", "Shared directory", FTP, and "Customer Transfer". Normally, you'll use either FTP or "Shared directory". Refer to the documentation (the BODS SAP Supplement) for a description of all this.
In all cases (or at least, quite certainly, using the FTP and Shared Directory methods), the ABAP extraction programs are directed to plop their output as flat files in the "Working directory on SAP server." For testing, you can look in that folder to see if any flat files are appearing when you submit an ABAP data flow. If not, then either 1) your ABAP program isn't getting in there (a Basis admin should be able to tell you), or 2) it's not running (ditto), or 3) it's running but unable to generate the output file (ditto), because a) SAP isn't permitted to write to that folder, or b) the folder doesn't exist (it needs to be defined from the perspective of the SAP server).
If you do see files appear in the "Working directory on SAP server" when you run a BODS job w/ an ABAP dataflow, then the problem is that BODS can't fetch them. If you're using the "Shared directory" method, which is suitable for and often used in all-Windows environments, then the account under which the Job Server in question is running must have access to the "Working directory on SAP server," but this time from the perspective of the Job Server. So if, for instance, SAP was directed to put the flat files on a local folder, say, "E:\USR\SAP\BODS", then you might want to share this folder out as, for instance,
sapdev1\bods (for an SAP host called "sapdev1"), and then enter "
sapdev1\bods" in the "Application path to shared directory" field, in your SAP datastore configuration. If your Job Server service is logging-in as "Local System," though, it won't be able to get there -- it needs to log-in as an AD domain account w/ rights to that share. Get it? Try logging in to your BODS job server computer with the AD "service account" setup for use by the Job Server service, and try to open a file on the "Application path to shared directory". If you can't, then BODS won't be able to get data from ECC, either. FTP works similarly -- if you're using that and having trouble, please re-post.
Best wishes,
Jeff Prenevost
Data Services Practice Manager
itelligence

How to access j2ee servlet directly?

Hi All,
I have a question about Doc 333862.1
My customer wants to follow test case in the CAUSE section.
He wants to call SimpleServlet with bellow URL.
http://hostname:port/j2ee/servlet/SimpleServlet
When I execute it in our test instance, I can't access j2ee servlet directly and faced bellow HTTP 403 Forbidden warning.
"You don't have permission to access /j2ee on this server."
How to access the SimpleServlet?
If you have any solution or advice, please give me the feedback freely.
Regards,

how to create a new project of type J2EE -> EJB Module Project.
First of all u need to have NWDS.
There go to File -> New -> Project -> Select J2EE -> Select EJB Module Project
any prerequisites required to create this apart from the java gui
None. U may create the project here in NWDS and can deploy on XI server.
all in all i want to find how to access J2EE explorer.
J2EE Explorer can be seen under Windows -> Show View -> J2EE Explorer
Regards,
Prateek

Which authorizations are required for assigning a query to a role?

Hi everybody,
we try to set up some roles for "reporting power users". These guys should be alble to define new queries using BEx (works fine) and also should be able to assign these new defined queries to a role, so other users can use these roles.
The idea is simple, but we're searching for the right authorization object (or - as i suppose - set of authorization objects) that enables the user to assign a query to a role (using that "enter to a role" button in the open / save dialog).
At the moment, the user can user that button, and the role, he should the query assigned to is shown. After selecting the role and clicking button "create" it take some seconds and a message "error when saving. entry has not been created" is shown.
Obviously, there is a problem with writing the role (or adding the new information to that role).
So, could anyone help me and provide me with a list of authorization objects that are required.
Thanks in advance,
Alfred

S_RFC
S_TCODE
S_USER_GRP
S_BDS_D
S_OD_SEND
S_RS_AUTH
S_RS_BCS
S_RS_COMP
S_RS_COMP1
S_RS_FOLD
S_RS_ICUBE
S_RS_MPRO
The above mentioned authorization objects are enough to add in the role and required for the accessing a query.
particularly, S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE are the most important auth objects which are directly getting involved in authorization of a query in a role.
SO, you have to assign the respective info area, info cube and info providers names in these auth objects.
The same scenario , i am using in my project to give access to the queries in all the areas for my end users.
The values and access/authorizations restrictions is up to your project requirement.
Hope this would help you.

Saprouter service on windows - which user rights are required?

Hi,
We have the saprouter service running in a windows 2003 server, this service is started by a user account named 'saprouter' which has its password set to never expires.
Due to security concerns, our IT Security Deparment have ask us to apply all the following restrictions to the 'saprouter' user:
   1) 'Logon locally' user right is disabled
   2) Userid is not a member of the Administrators group
   3) Deny access to the user rights: 'Access this computer from network' and      'Logon through Terminal Services'
As per our security policy, non-expiring passwords are allowed only for users that can meet all the conditions listed above.
The questions are ¿Which user rights should be granted to the user account that starts the saprouter service? ¿Could we apply the conditions listed above without impact the saprouter service?
Thank you for your kind attention.
Sokram

following permissions are required to set SAPRouter working :
1. password never expires
2. user never change the password
3. should be member of administrator
4. profile --> home folder :c:\user\sap\saprouter (path of instllables)
5. end disconnected session : never , active session limit : never , idle session limit : never
check if you can apply above points for your users
Regards,

Error: JavaFX runtime components are missing, and are required to run this

I tried to build the application using javafx ant build, generated jar file. But when I run the jar file, issue:
Error: JavaFX runtime components are missing, and are required to run this application.
The javafx-class-path: libs/h2.jar libs/jfxrt.jar libs/log4j.jar
Running the JAR file using:
java -jar app.jar
What could it be?

Which version of iTunes?
When you go to Programs control panel you can see as well as uninstall the current version.
I always uninstall Bonjour, MobileMe etc and itunes will ask if I want to reinstall those (no thanks).
itunes and many apps keep an installer cache so they can do a repair-reinstall without a full install again.
I'd install Microsoft Security Essentials 2.0 which is free and excellent.
Programs don't affect data. But if you don't have backups, you are likely past due.
If you have any doubts about the integrity of your system, if you have had to do a hard power down and likely do have issues, you should / could / might want to do chkdsk on your hard drive (hard drive properties tools scan for errors).

What SAP modules are required for insuance sector

what SAP modules are required for insuance sector

Hi,
Following authorizations are required to be able to use all the functions of Support Package Manager:
S_CTS_ADMI
S_TRANSPRT
Additional objects required and which can be used to restrict further the functionality are:
S_C_FUNCT
S_CTS_ADMI
S_DATASET
S_GUI
S_RFC
As available in the SAP help,standard SAP S_A.SYSTEM contains all necessary access for importing support packages.
Regards,
Nagendran

Access J2EE keystore & jars are required ....

Similar Messages

Maybe you are looking for