AccessEnforcer(User credentials invalid)

Hi all,
i can't able to logon to AE,after enetering username and password it is showing that user credentials invalid. I tried to change the Password by logging as a Administrator even so it is showing the same message .
I don't understand y suddenly it is showing this message.
Kindly do the needful.
Thanks & Regards

Did you set the UME password for this user?
Then you need to change the initial password in another UME application first. This is because AE has its own logon screen which does not support password changes.
Try logging on at http://<server:port>/useradmin and authenticate there. Once you have reset the password, you can logon to AE.
Also, check if the user is locked and/or the end date expired.
Regards,
Daniela

Similar Messages

SAP PI problem: User credentials are invalid or user is denied access

Hi!
I am about to configure SAP PI.
Therefore I have run post installation wizard step PI_00 and get the following errors:
Error: Not able to load Function SWF_XI_BPM_AUTO_CUSTOMIZE
(cause:Name or password is incorrect (repeat logon)).
Step: Execute SWF_XI_BPM_AUTO_CUSTOMIZE
Error: User credentials are invalid or user is denied access
Step: Add Installed Product2
Questions:
How can I identify which user/password makes problems here?
P.S.
My further problems are:
2) It is not possible to work with XI tools, such as:
Integration Directory, Integration Repository, Runtime Workbench
When I try to execute some action in these tools I get the following error:
Cannot connect to Repository
Error during communication with System Landscape Directory: User credentials are invalid or user is denied access.
2) When I try to access the NetWeaver configuration wizard (http://localhost:50000/nwa)
I get the followign warnig:
System Landscape Directory is not available
Only local systems can be maintened
Thank you very much
Thom

Hi,
Check the similar discussion Error in PI postinstallation wizard
Wrong password PISUPER in PI_00 wizard
Thanks!
Edited by: Sudhir Tiwari on Nov 26, 2008 10:29 AM

MDT user credentials error: Invalid credentials: The network path was not found

I have DELL E5400 and DELL Optiplex 760 pc. In the before, DELL630 is working with my MDT service, but now, DELL E5400 and DELL Optiplex 760 not working with my MDT.
When PE loaded and go to User Credentials interface, I input the user name and password(I confirm the user name and password is correct), it will display error message "Invalid credentials: The network path was not found". I checked that the network driver is correct.
After search some information in the website, someone said that maybe the network initializing timeout issue, so I according to Tim Quan guide to add following to startnet.cmd
wpeutil InitializeNetwork
ping localhost
wpeinit
Then I update the deploy location in MDT and then re-loaded it again, but unlucky, I still meet the same issue. I tried to use ipconfig /all command to check the network status, I couldn't find out local network connection. I click "Cancel" to check the error message, it will display"A connection to the deployment share could not be made. The deployment will not proceed. DHCP lease was not obtained for any networking device!Possible cause: check physical connection".
It seems that PE not loaded network driver successfully, but it is very strange that the network driver is correct.
Have someone can help me?
Thanks a lot

Hi,
Are you deploying Windows Vista 32bit or 64bit? Please obtain he latest network card drivers from the following sites:
Dell Latitude E5400:
http://support.dell.com/support/downloads/driverslist.aspx?c=us&cs=19&l=en&s=dhs&ServiceTag=&SystemID=LAT_E5400&os=WLH&osl=en&catid=&impid=
Dell OptiPlex 760:
http://support.dell.com/support/downloads/driverslist.aspx?c=us&cs=19&l=en&s=dhs&ServiceTag=&SystemID=PLX_760&os=WLH&osl=en&catid=&impid=
Please make sure you add the correct network driver to deployment point.
Additional Information:
http://www.techtalkz.com/windows-deployment/501217-deployment-share-connection-issue-since-mdt-2008-waik-1-1-a.html
http://www.deploymentforum.com/Community/Forums/tabid/124/forumid/16/postid/737/view/topic/Default.aspx
Hope it helps.
Tim Quan - MSFT

AppleTV MLB.TV Invalid User Credentials Question

I am trying to log in to my mlb.tv account on appleTV and I'm getting an Invalid User Credentials message with a "identification error on identity point of type fingerprint" submessage.
I went to the support forums on mlb.com and the moderator there was of no help and told me to go to apple. Does anyone here know what "identification error on identity point of type fingerprint" means?
My software is up to date (5.2) and I also have not had any issues logging in on my iPhone or iPad.

I was able to resolve this by going to Settings > General > Reset > Reset All Settings
I had to log back in to all my services, which was a bit of a pain, but MLB is working again. Go Rockies.

BPC 7.5 NW- error 'Name or password of RFC Communication user is invalid '

Hi
Environmen: Win 2008 R2, CPMBPC 7.5 SP09, BW 7.2 Sp09, .NET BPC 7.5 SP09
I just completed installing .NET BPC 7.5 and when I try to open BPC Server manager, i get "cannot coonect to ABAP server' error.
When I try to open the website http://localhost/osoft I get the error "name or password of RFC communication user is invalid".
I see the same error in the BPC logs as well.
I have the tried the following so far:
1. Created single domain user for the three communication users BPC_sysadmin, BPC_admin & BPC_user.
2. I momentarily changed to dialog users and logged in to check their fucntioning.
3. I have generated their relevant profiles. Inlcuded SAP_ALL, SAP_NEW for the sysadmin ID
4. I have disabled firewall, allowed port 80 on Windows firewall.
5. I have disabled UAT
6. I have followed the rest of the installation as per inst guide.
When I run BPC server manager diagnostics, I see error "SAP ABAP server connection:database connection:status error".
Can someone tell is there anything else that I could try ?
many thanks
Sreekanth

Hi,
If when you launch BPC Server Manager, you do not get "Cannot connect to ABAP server", this means user BPC_SYSADMIN is connecting correctly. And assuming you had invalid RFC user in BPC Web, your issue is then only with user BPC_USER (or BPC_ADMIN if the issue is with BPC Admin client only)
If you do get that error, it means the error is for more than one user, so I would look for something big missing.
In point 1 you mention domain users, make sure in BPC Server Manager under "reset login credentials" that you do not have windows users specified there as it's a common mistake, those should be your 3 BW communication users
On BPC .Net server, if you installed SAP GUI, run an MDX_PARSER test in SM59 to check librfc32.dll is working correctly
Also quite common issue it is possible your background users have wrong authorizations; in PFCG check the roles SAP_BPC_SYSADMIN SAP_BPC_ADMIN and SAP_BPC_USER were copied to customer namespace and that the role are active (user tab should be displaying green light) and assigned to the background communication users
Also check the background users are not locked in SU01 (if they are locked the password saved on .Net server was or is not matching the real password defined on NW server)
Thanks,
Julien

How to log in with user credentials from database table

Hello all.
I have a table named users_1 in my database. This table has columns named username, password, email and userid. On userid, I have put a sequence.
Now, I have manually made 1 row in this table, with in it the user credentials.
How can I edit my application so that I can use these credentials to log onto the application?
Please, a step-by-step text would make me rather happy, instead of getting a link with information that I should read. I've read most of it, and it just doesn't make any sense to me, so I prefer a guide-trough.
Thanks..

Hi Magali,
You want only user from database can access your application.
follow the steps given below.
Step1 : create function to authenticate users
create or replace FUNCTION "CUSTOM_AUTHENTICATE" (p_username in VARCHAR2, p_password in VARCHAR2)
return BOOLEAN
is
l_password varchar2(4000);
l_stored_password varchar2(4000);
l_count number;
begin
select count(*) into l_count from users_1 where upper(username) = upper(p_username);
if l_count > 0 then
   select upper(password) into l_stored_password from users_1 where upper(username) = upper(p_username);
   l_password := upper(p_password);
    if l_password = l_stored_password then
      return true;
    else
      return false;
    end if;
else
return false;
end if;
end;
Step2 : create authentication scheme for your application
Go to Application Builder->select your application->shared component->security->authentication scheme->create
a) custom scheme : Based on a pre-configured scheme from the gallery
b) give some name to your scheme like custom_scheme or something
c)scheme type : database account
d) verify function name = return CUSTOM_AUTHENTICATE
e) go to = Login Page
f) Logout url = f?p=&APP_ID.:101 // here 101 is login page no..so you can set your login page no.
step3 : make this scheme as current scheme
select your scheme and click make current
now try to login into your application from your database users..
Hope this will helps you,
Thanks,
Jitendra

Unable to open a report and asking for user credentials

Hi,
when i am trying to open a crystal report, i am asking for user credentials and my URL is directed to the below URL
http://hostname/PlatformServices/service/app/logon.do?appKind=InfoView&service=%2FOpenDocument%2FappService.do&backContext=%2FOpenDocument&backUrl=%2Fopendoc%2FopenDocument.jsp%3FSERVICE%3D%252FOpenDocument%252FappService.do%26OBJIDS%3D20016421%26backUrl%3D%252Fcontent%252Fview.do%26PREF%3DmaxOpageUt%253D200%253BmaxOpageC%253D10%253Btz%253DUS%252FPacific%253BmUnit%253Dinch%253BshowFilters%253Dtrue%253BsmtpFrom%253Dtrue%253BpromptForUnsavedData%253Dtrue%253B%26CONTAINERID%3D6424083%26backContext%3D%252FPlatformServices%26LOC%3Den%26APPKIND%3DInfoView%26PVL%3Den%26ACTID%3D280%26service%3Dtimeout&backUrlParents=1&appName=OpenDocument&prodName=BusinessObjects+Enterprise&cmsVisible=false&cms=servername%3A6600&authenticationVisible=false&authType=secEnterprise&sso=false&sm=true&smAuth=secLDAP&persistCookies=true&sessionCookie=true&useLogonToken=true
Please help me on this

Hi,
This is happening to all of the users. And this kind of behaviour is happening frequently to most of the users but as for me and some of us this is not happening frequently.
And we are using Crystal Reports 2008 ie. CR12.
-VinodC

How do you stop BSPs on WebSEAL for asking for user-credentials?

Hi
We are currently having an issue with BSP Pages. When we test the BSP pages on the R/3 system they work OK. When we test them directly on the Portal then they too also work. The problem is that they are not working properly on our Intranet.
The intranet that we use is an IBM Tivoli product (also known as WebSEAL). We currently have WebSEAL SSO to our SAP Portal. This is working OK. When we use WebSEAL to access the portal we are prompted to enter our user-id and password so that the BSP page can be displayed. This should not be happening and it defeats the purpose of SSO. I have attached a screen shot document to demonstate this.
Some time ago we had a similar issue where the transactions on the portal (when executed from WebSEAL) were giving us a Webdynpro time-out error. I later determined that the cookie information was not being passed to WebSEAL. To fix this, I went to the Visual Administrator and went to server >> services >> web container and for the web container "sap.com/irj" I went to the cookie configuration to add a session cookie. By doing this I fixed my previous problem.
Coming back to my problem, I had a junction created in WebSEAL to point to the bsp directory (sap/bc/sap/bsp/*) on the host concerned. I had both a SSL and TCP junction created both resulted in error messages - stating that the client (SAP) is asking for user credentials.
Hoping that I have provided enough information above my question is as follows:
(1) How can I get the BSP messages to work on WebSEAL such that it will not ask for user credentials to be entered? Would this involve making a further change to a Web Container? If so - which container also needs a session cookie to be generated?
Thanks
Kind Regards
Rajdeep Kumar

Hi Peter
I am having an issue with the re-direct and am hoping you might be able to provide a little assistance. If not then not to worry.
My security department have logged a call with IBM 2 days ago yet have not received any response.
In your document you mention that you need to have a junction to AS-JAVA and a junction to AS-ABAP.
We have created the junctions "/sapep" (for AS-JAVA) and "saphr1" (for AS-ABAP).
The junction /sapep" also contains the junction mapping entries "/irj/" and "/SSOTicket/".
The direct URL to the hidden image is : https://uadsfi01.auiag.corp:53001/SSOTicket/1x1.gif. I have tested this (using my user id and password) and it works OK.
When testing the image through TAM (https://test.insideiaghome.iaglimited.net/sapep/SSOTicket/1x1.gif) we get an "unexpected authentication challenge"
I have reviewed the log below and it seems that we are having an authentication issue with the image:
==(START OF LOG)==
2008-06-16-19:59:58.365+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD ===> BackEnd -
Thread_ID:52943
GET /SSOTicket/1x1.gif HTTP/1.1
via: HTTP/1.1 uattam01:443
host: uadsfi01.auiag.corp:53001
user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; MS-RTC LM 8; .NET CLR 2.0.50727)
iv_server_name: uatin1-webseald-uattam01
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, /
iagsapid: 52975
accept-language: en-au
referer: https://test.insideiaghome.iaglimited.net/sapabap.html
connection: close
iv-user: s52975
2008-06-16-19:59:58.373+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD <=== BackEnd -
Thread_ID:52943
HTTP/1.1 401 Unauthorized
content-type: text/html
date: Mon, 16 Jun 2008 09:59:58 GMT
cache-control: no-cache
content-length: 1787
www-authenticate: Basic realm="Upload Protected Area"
server: SAP J2EE Engine/7.00
expires: 0
pragma: no-cache
connection: close
==(END OF LOG)==
When logging into the SAP Portal directly general user ids have no problem accessing this (Non-Administrator portal users), however through Tivoli it is causing an issue.
Do you know what may be causing this issue?
Thanks in advance for any assistance you can offer.
Kind Regards
Rajdeep Kumar

Not able to pass user credentials in a full trust proxy to call web service in Sandbox solution

Hello,
I am trying to build a sandbox webpart that calls a windows authenticated webservice to fetch some data. I tried to pass the DefaultCredentials to the webservice proxy but The credentials passed are that of the
usercodeserviceproxy process ( in my case it is network service) . I see that the user account trying to authenticate is Domain\machinname$ which is the network service.
My question is - is there a way to pass the logged in user credentials to the web service from sandbox proxy ?

' in Host Names is not allowed. Our hosname has '_'.
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/67/be9442572e1231e10000000a1550b0/frameset.htm

Dynamic user credentials for XI receiver communication channel

Hi Experts,
I am working on File(XML ) to ABAP proxy scenario. I want to know if I get the user-id and password information to login to R/3 system as part of the XML payload, can I use this information to connect to R/3 system in my XI Receiver communication channel?
Using a generic user credentials either in RFC destination or specifying it in communication channel configuration will not work. This is because the requirement is that the objects that will be created in inbound ABAP proxy (for ex Material Master) should be created with the user information that is coming from payload rather than a generic user.
Any pointers how to acheive this?
Thanks and regards,
Prasad
Edited by: Prasad MLN on Nov 16, 2009 4:00 PM

Hi,
You might want to learn more about Principal Propagation in sap XI:
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417300)ID2039785750DB21057082877817322485End?blog=/pub/wlg/7068%3Fpage%3Dlast%26x-order%3Ddate
http://help.sap.com/saphelp_nwpi71/helpdata/en/45/0f16bef65c7249e10000000a155369/content.htm
Regards,
Ravi Kanth Talagana

Windows keeps on asking for my user credentials

Hi.
As per subject, I keep on getting prompted to enter my user credentials whenever I open a mapped drive (which has been mapped before with the same credentials) or when I open the SharePoint site and also when
I check out and edit a document from SharePoint.
This is becoming debilitating.
I have a very lengthy password as per our policy so I'm really despondent to have to enter this password every single time I access SharePoint.
In the past, I only got prompted once during every session. Now, I get prompted multiple times a day. I will be prompted when I access SharePoint and then 10 seconds later, be prompted AGAIN when I check out and edit a document....WHAT?!
I keep on selecting the checkbox "remember credentials" but this is to no avail. I've deleted all the credentials in Credential Manager numerous times and added them manually and then again automatically, all to no avail. I've even tried multiple
entries for example "192.168.1.1" and also "http://192.168.1.1" as well as the FQDN for example "server01". So the same network resource has 3-4 different entries and none work!!
Whenever I enter my credentials and select that checkbox to remember them, I can see in Credential Manager that the respective entries gets updated but what's the point if they are never utilized?
I've also checked the services and changed the Credential Manager to start automatically without delay.
I have appealed for help elsewhere (WindowsForums, SpiceWorks, TechRepublic) but no one seems to have any definitive answers or solutions. I've been having this issue for YEARS now but want to do something about it now as it's becoming debilitating.
Please help!
Setup:
Windows 7, 64bit
Office 2010 (I'm testing Office 2013 as well)
SharePoint 2010
Service Pack 1

Hi,
"Multiple logon prompt issue" can be caused by many factors, please take a look of this blog:
Multiple Logon while open office Document from SharePoint
http://blogs.technet.com/b/steve_chen/archive/2010/06/25/multiple-logon-while-open-office-document-from-sharepoint.aspx
You can bypassing your proxy server for local addresses or adding a team Web site to the list of trusted intranet sites for a test, steps are listed in this link
Troubleshooting: I Keep Getting Prompted for a User Name and Password
http://technet.microsoft.com/en-us/library/cc750194.aspx
Sometimes, when a Intranet site is identified as an Internet site, it will cause Internet Explorer to prompt you for credentials when you access the intranet Web sites that require authentication
Intranet site is identified as an Internet site when you use an FQDN or an IP address
http://support.microsoft.com/kb/303650/en-us
Yolanda Zhu
TechNet Community Support

CR prompts for user credentials after refresh even though I'm using SSO

Hello Experts,
We have a problem with a customeru2019s project concerning Crystal Reportu2019s Single Sign On feature:
Even though weu2019re using SSO, Crystal Reports prompts for user credentials every time a refresh is performed manually in the browser.
We already checked SAP note [1214594 - How to avoid database login prompts when refreshing reports in Crystal Reports|http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_bi/sap%28bd1lbizjptawmq==%29/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333233313334333533393334%7D.do]. The note suggests using Microsoft Windows authentication (trusted connection or operating system authentication) u2013 unfortunately we cannot use this kind of authentication in our project.
Do you have any hint, idea or suggestions?
Thank you in advance!

Hello,
What kind of Project are you developing? Search for Post Back in the SDK forum and Kbase system so you can keep the log on token active. Likely what is happening is the Token or connection times out after 20 minutes, which is IIS's default timeout. Using the postback method is one way of keeping the SSO connection active.
Thank you
Don

Setting proxy-user credentials

Hi!
I'm trying to make database reads through the proxy account ('main' proxy user)
and writes through 'normal' proxy user depending on what user is logged in application and make this writes. Proxy user is authenticated by name and password.
1) I've created accounts for proxy users in Oracle DB.
2) I've implemented session event handler for the preLogin event like in the reference:
http://www.oracle.com/technology/products/ias/toplink/doc/1013/main/_html/dblgcfg008.htm
3)Then I need to acquire all client sessions of any logged in application user
with their own proxy-user credentials, but
a) there is no such event as preAcquireClientSession;
b) when this is done in postAcquireClientSession it has no effect (all writes are performed by the 'main' proxy user).
How to solve 3)? Is there any class or event in TopLink where I can set proxy-user credentials?
Hints or ideas will be so helpfull.
By the way, I'm using TopLink 10.1.3, Spring 2.0.

Thanks for reply. I've already read that, very usefull thread. But before today I could not get where interaction with server is.
Now I think I should investigate in org.springframework.orm.toplink.TopLinkTransactionManager, the key to solve my problem not only in TopLink but in Spring also.

Best practices: Invoking external webservices with user credentials

Hello Experts,
I just need to store and maintain a couple of user credentials when invoking external web servcies. I was thinking of storing them in system-jazn-data.xml as I thought it was easier to change the password due to policy requirements through the AS control.
But how do I read the encrypted password and pass it to the invoked partner link in BPEL ?
Any other suggestions ?
Thanks
Ravi
P.S; I was thinnking a DB table would be too much just for a couple of users.

you can use deployment descriptors in BPEL process to store these variables and pass them

Transport user error: invalid object name while starting CMS in CCM

Hi Experts,
        I'm not able to start the CMS in CCM.It was working fine. Suddenly it went down due to some data base access failure. After that Iu2019m not able to start the CMS.
Kindly find the event viewer error and information.
Error: The root server reported an error Initialization Failure.
Error: Failed to register object..   Reason: Transport user error: invalid object name..
Information: Central Management Server stopped
      Could you please tell me how to start the CMS in CCM? Since I can able to setup CMS Database and audit database successfully.
Regards,
Sridharan

Hi ,
        Thanks for the response.I have trace the CMS.I found some error in log file.any idea on the following errors,
trace message: CNSClientManager::VerifyConnection() : search fails(37) - Transport user error: object with the specified name not found.
trace message: CNSClientManager::VerifyConnection() : Failed to query for APSs. Empty cluster list returned.
trace message: TheAPSServer::RegisterApsInNameServer: Fail to register the current APS(Transport user error: invalid object name.)
trace message: CNSClientManager::ClusterInfo::InvalidateAPS: Removing APS from m_ActiveMembers and adding to m_InactiveMembers
trace message: SIServerController:run: Fail to initialize or uninitialize. Reason is The root server reported an error Initialization Failure.:
Regards,
Sridharan

AccessEnforcer(User credentials invalid)

Similar Messages

Maybe you are looking for