Another FPN Thread: Remote role assignment not working

Hi all,
We have successfully implemented FPN for use in our ESS and BW environment and we are experiencing very little problems with it. We now want to start implementing it for our eRecruitment and SRM systems (as producers). For some reason we are not able to use the Remote Role Assignement functionality.
We have set up trust for the systems and use SSO.
Connection test for the producer is successfull.
We can see the Producer content in the pcd on the consumer.
Server times are the same.
As far as I know I have correctly set permissions on producer and consumer.
Possible cause: We are in the process of upgrading our consumer Portal to NW 7.0 SPS15 and have encountered some problems. The system is partially upgraded, so some components are SP15 and some others are still SP13. This is currently under investigation by SAP. Can this be an issue as our producer portals all are still on SP13?
I hope to hear from you soon. Please ask if you need any screenshots. Thanks in advance.
Best regards,
Jan Laros

Hi Jan,
if remote role assignment not works, you can also use remote delta links. I only work with remote delta links because i have more options   and a better performance.
If your connection works you can go to Content Administration ->Portal Content-> NetWeaver-Content-Producer. Hier you can see your remote system. Now you can copy the role and add it to your portal-content.
If you can not see the content make sure that you have the same user  on both sides also check the premissions on the portal-content of your remote system. To test the connection it is easier to add Everyone group to the content of your remote system.
regards,
Sharam

Similar Messages

  • FPN - error trying to lookup object - remote role assignment not working

    Hello everyone,
    We have implemented a Federated Portal Network connection in our landscape between our portals.
    We use only remote role assignment functionality.
    Everything was working fine, but since 2 days we encounter the following error in the Default trace.
    Error trying to lookup object: alias: <role name>
    It is possible to open the producer portal in the Portal Content Administration and also searching for the Producer portal roles is possible in User administration. But when we assign the remote role the tab is not displayed in the portal only the above mentioned error is shown in the default trace. Our portals run SP 12 and BI Java SP14.
    Is there a solution or workaround for this issue ?
    Martin

    Hi,
    I have the same issue as you, I cannot see role tabs in Consumer portal and I get the same error in the defaulttrace as you.
    What did you do to resolve this issue?
    Many thanks
    Gordon

  • Security-role and security-role-assignment not working in WL7.0

    Hello all..
    Some EJB components that worked fine in WebLogic 6.1 no longer work in
    WL7.0. It has to do with the security-role and security-role-assignment
    descriptor elements no longer allowing anonymous users to be included in the
    authorization for a bean.
    For example, in WL6.1 placing these items in ejb-jar.xml:
    <assembly-descriptor>
    <security-role>
    <role-name>Employees</role-name>
    </security-role>
    <method-permission>
    <role-name>Employees</role-name>
    <method>
    <ejb-name>CustomerEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    </method-permission>
    and mapping WebLogic default users to this role in weblogic-ejb-jar.xml:
    <security-role-assignment>
    <role-name>Employees</role-name>
    <principal-name>guest</principal-name>
    <principal-name>system</principal-name>
    </security-role-assignment>
    worked fine for clients creating their context using a simple
    InitialContext() constructor without specifying SECURITY_PRINCIPAL or
    SECURITY_CREDENTIALS. These users were basically "guest" to WebLogic, and
    the security-role-assignment element above told WebLogic that "guest" was in
    the Employees role for purposes of this EJB archive.
    Worked in WL6.1, no longer works in WL7.0. Client receives typical
    permission exception:
    java.rmi.AccessException: Security violation: insufficient permission to
    access method 'create'
    If I explicity connect as "system" things are fine, or I can create a new
    user in the default realm in WebLogic, put a matching <principal-name>
    element in the section above, and connect as that user. Note that if I leave
    off the <security-role> section completely, or set the required role name to
    "everyone", the anonymous access works fine. Apparently the anonymous user
    is a member of "everyone" behind the scenes even though "everyone" does not
    appear in the realm list of groups or roles.
    So, my question boils down to this: Is there a "magic" username in WL7 like
    "guest" was in WL6.1 that can be mapped to the required role name, or must
    every client connection use a true weblogic-created user with appropriate
    role assignments used to map it to the required role name.
    -Greg
    P.S. Note that none of the EJB examples provided with WL used
    <security-role>..
    Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
    www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

    Below are the screen shots for PFCG:

  • Role assignment not working

    Hi everyone,
    I am trying to assign different roles to different users for GRC - Risk Management 10.0; however it seems like standard roles don't have any affect on type of activity. I have maintained various levels of roles (e.g. risk owner, risk expert, risk manager, etc) using PFCG and assigned almost every role to the users; but it doesn't give them the authorization to create or edit anything, they can only display.
    The only workaround for this was assigning a role with the authorization object GRFN_USER (with 02 Change value enabled) or assigning SAP_GRC_FN_ALL (Power user role which also contains object GRFN_USER). However this would allow users to do "anything" they want which obviously isn't what I seek.
    I have tried changing customization options such as Maintain Custom Agent Determination Rules and Maintain Entity Role Assignment, it hasn't solved anything so far.
    I urgently require your assistance on this issue. Thank you.
    Regards,
    Seckin

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • ABAP centered role assignment not working

    I have been trying to implement ABAP centered role assignment for our users but not really having much luck in gettng it to work. I've been trying to make sense of it by using [the help guide|http://help.sap.com/saphelp_nwmobile71/helpdata/en/d2/3e3842b23d690de10000000a155106/frameset.htm] but I must be doing someting wrong. Here are the steps that  take.
    1. Create a single ABAP role - A single role with no menu or authorizatons
    2. Create a UME Group - I name the group exactly the same as the ABAP single role from the previous step
    3. Assign UME Group to Portal Role
    4. Assign mapped user to ABAP role
    Supposedly the ABAP role assingment is supposed to reflect through to the UME group membership so the portal user then sees the associated portal tab.
    Can you enlighten me?
    Thanks in advance

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • Custom Auth. Object with Profile and role assignment not working

    Hi,
    I have created custom Authorization Object with field ACTVT with allowed values - 01,02, 03. Now test it with custom program using AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ' it is working fine and returning sy-subrc 12. At this point i have not created any role using this Auth Object.
    Now I have created custom role ZPM_**** and assigned above Auth object to it with value ACTVT 03. Assigned this role to user.
    When I try to test the above custom program with any ACTVT value it is giving sy-subrc as 0. Used below custom code in program.
    AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ'
                ID 'ACTVT'  FIELD '01'.
    Am I missing anything? The profiles are generated correctly. 
    Best Regards,
    Nilesh

    Below are the screen shots for PFCG:

  • Another Java Thread...(not working in any browser)

    Alright so here's the story.  For some time my wife has been wanting a Macbook to make her schooling easier, everyone has one and they all say it's amazing.  Now here comes the tricky part, her gaming habits include a game called Runescape, a Java based game for which the specs were non-negotiable when we got her said new laptop.  The salesman at the Apple store was very convincing  in saying that these computers would run the game without fail, however since we've gotten the MacBook Pro 13" home, it's been nothing but a terror and my wife went to bed almost crying last night.  As of right now, the system is at near factory settings, I say near because when we tried to run this game, the Mac said we needed to update, and then started the flood of updates.  Several for the OS, a couple for various programs around the Mac and the like, and of course a Java update.  It said we were running Java 6SE and we needed to update to 1.6 (makes no sense to me, but whatever), and so we did.  No luck still, the game pulls up and then freezes at the login screen, (also it pulls out a separate window to run the applet, which is of no end of annoyance to me).
    Well we figured, ok, maybe it's the browser... chrome, firefox, and opera later, we're in the same place.  I'm gonna leave this here.  I'm gonna go to bed, and I'm hoping for some answers in the morning besides reinstall everything, because... spending 1500$ one day and then reinstalling the system the next... doesn't sound like a fun time to me... I just want my wife to be happy guys... help me out here.

    http://services.runescape.com/m=forum/sl=0/forums.ws?25,26,398,63971108,goto,1
    check that out. worked for me just now.

  • Federation: Remote role assignment vs Remote delta link

    does anyone know whats the difference on what percentage of load falls on the Consumer portal and what percentage of load on producer between federation via remote role assignment and via remote delta link
    which way is better?

    Hi,
        Basically the load differences between RRA and RDL on the consumer and producer is not a good way to look at it.  Technically all the load to run the content and render it is done on the producer portal and the producer portal just has to display the content in either case.
    As to which one is better, it depends on what you want to do.  RRA only works with roles.  If you have roles already created on you producer portal and you just want to use them as is on the consumer portal then RRA is the way to go.  But if you only want to use iViews or pages from the producer then you have use  RDL.  (or remote application integration)  
    You can of course use both if you want.  You don't have to use only one so use the ne that meets you need the best.
    Hope this helps,
    John

  • Federation, remote role assignment based on ABAP roles on producer

    Hi all,
    We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
    Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
    System I: ABAP + JAVA --> ECC 6.0
    Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
    System II: JAVA --> NW 7.0 Portal
    Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
    System III: ABAP + JAVA --> SRM
    Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
    +PROBLEM+
    We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
    Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
    Best regards,
    Jan Laros

    Jan,
    Interesting question. Let me share my experience and hope that's of some use to you.
    We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
    - B's UME points to Active Directory
    - A's UME points to BI ABAP user store
    - User ids are identical in both systems
    We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
    - A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
    However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
    Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
    In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
    Either my story is applicable or I must have got you totally wrong,
    Kiran

  • HT204053 i RECENTLY PURCHASED ANOTHER IPHONE.  MY INTERNET IS NOT WORKING.  I JUST CREATED AN APPLE ID.  WHAT'S NEXT?  I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES.  HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

    I RECENTLY PURCHASED ANOTHER IPHONE.  MY INTERNET IS NOT WORKING.  I JUST CREATED AN APPLE ID.  WHAT'S NEXT?  I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES.  HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

    Welcome to the Apple community.
    iTunes and iCloud and different accounts, you will need to delete both accounts from your device before adding the new details in their place.
    For iCloud go to settings > iCloud, scroll down and hit the delete button. You can then sign back in using your correct details. For iTunes go to settings >store, tap your account ID and then sign out, you can then sign back in using your correct Apple ID.

  • My home sharing and remote app does not work. How do I fix it? I am on a university network.

    My home sharing and remote app does not work.
    Here is my setup:
    Macbook 2009 running Mac OS X 10.6.8
    Itunes 10.6.1
    Ipod Touch 4th gen Mac OS X 5.1
    I am on a university secured network.

    Hi Charles, chinese may be difficult, see our resident language ecxpert, Tom's reply here...
    https://discussions.apple.com/message/20061347#20061347
    On the slowness...
    See if the Disk is issuing any S.M.A.R.T errors in Disk Utility...
    http://support.apple.com/kb/PH7029
    Open Activity Monitor in Applications>Utilities, select All Processes & sort on CPU%, any indications there?
    How much RAM & free Disk space do you have also, click on the Memory & Disk Usage Tabs.
    Open Console in Utilities & see if there are any clues or repeating messages when this happens.
    In the Memory tab of Activity Monitor, are there a lot of Pageouts?
    https://discussions.apple.com/servlet/JiveServlet/showImage/2-18666790-125104/AM Pageouts.jpg

  • Remote DVR will not work?

    I signed up for FIOS when it first came to my area. Verizon installed a basic Netgear router. I since upgraded to a wireless Netgear router about 4 years ago. We just upgraded our DVR to a Home Media and tried to turn on the remote DVR. But when I go to the web site it says remote DVR will not work without original Verizon router. I don't understand why it won't work. Is there a setting or something in the router to make it work or do I need a different router that Verizon has to provide? I am guessing the original router I had wouldn't work either because it is the same brand as the one I have now.

    Called and got a Westell router today. Got it all hooked up and internet and TV are working fine but I still can't activate remote DVR. The DVR has an access code listed, tells me to go to the website and sign in with my verizon.net id. I do and I still get the error remote DVR not possible with third party router. Any more help?

  • Remote desktop connection not working in windows 7 Pro x64 bit sp1 3389 port not working

    i have still facing same problem in last two week in my  system RDC not working . i have installed in my system windows 7 x64 bit Pro sp1 then i check 3389 port working or not  in my system use the command netstat -a -o command in
    command prompt but this is  my bad luck  its not woking in my machine after i have decide to change RDC listening port via registry  i have change it 3389 to 3391 after restart my system,  and
    after again testing using same command but no any change again rdc not listening . After i have  search this issue on search engine google bing and microsoft , i have found more solutions  but i have try one
    uninstalled two microsoft updates first is kb  KB2621440 second is KB2667402 and after again restart my system and again installed KB 2667402 But not change i have already enabled Remote Desktop connection in windows 7 and select the option
    any version computer running , i have try  three and four time enable  disable remote desktop connection in my machine . but not change i have all windows firewall disable and uninstalled anti virus they intalled in my machine , and using the Mcafee
    stinger tools to scan my machine to remove virus but stinger is not found any thread in system.  ihave already run this command in my system sfc /scannow  Please Can you help me to fix  this issue.

    Hi,
    When you try to start the Remote Destop Connection, what errors it showed out?
    Could the other PCs connect this PC with the RDC?
    So you have read this blog?
    RDP connections might fail due to a problem with KB2621440 - MS12-020
    Did you reinstalled the KB2621440?
    Besides, did you follow this guide to enable the RDC connection?
    Connect to another computer using Remote Desktop Connection
    And also this guide?
    Why can’t I connect using Remote Desktop Connection?
    Please take a check with those settings again.
    Best regards
    Michael Shao
    TechNet Community Support

  • Remote Desktop Connection not working

    I am able to remote desktop connect to my home computer from work; however, I can't remote desktop connect to my work comptuer and server. I believed it has something to do with my Linksys E3000 access point settings but I'm not sure where to look for and verify. I took my home laptop to work and able to do remote desktop connect to the server. I also took a laptop that's working fine with remote desktop connect to the server home and tried to remote desktop connect to the server at work and it's not working. Therefore, I've concluded that it has something to do with the access point and not the settings in the computer because it works fine when I took it out of my home network. I also VPNP in to my work place so that it has the same IP address as at work and still, remote desktop connection from home to work is not working. Any suggestion is much appreciated.

    thebluemamba_24 wrote:
    Connecting from home to your remote desktop server has nothing to do with your router. Certain ports are needed to be opened from the server’s end in order to host an application. Try to connect your computer to your modem or to another wireless network just to check if your work’s remote desktop will work. In case it will not work, then contact your IT guy.
    If you read my previous post it said:
    "I took my home laptop to work and able to do remote desktop connect to the server. I also took a laptop that's working fine with remote desktop connect to the server home and tried to remote desktop connect to the server at work and it's not working. Therefore, I've concluded that it has something to do with the access point and not the settings in the computer because it works fine when I took it out of my home network."
    I think my above statement answers your question of "Try to connect your computer to your modem or to another wireless network just to check if your work’s remote desktop will work." However, your statement prompts me think of something else. What I have tried is bring my laptop to work and tried connect via RDC to the server and it works but it just not working when trying at home. What I have not done is instead of brining my laptop to work and try RDC there, perhaps I should I try it on a friend's or relative's network and see if I can do RDC to my server at work. If this does not work as well, then, could it be that at work there is something something outside RDC coming? But even if this is so, why can't VPN work?

  • Remote on Headphones not working...and it isn't fluff

    Hi,
    So today randomly the remote on my (latest Apple) headphones stopped working. As in it won't play, pause, skip, adjust the volume, or start voice control. I know it's not the "fluff" people on other threads have talked about swabbing out of your headphone jack because a) I tried that and b) the remote doesn't work on multiple devices I've use it with in the past. I don't know if this is related to the wire because I hear sound out of the right plug, but the remote on the right wire doesn't work. And this literally just happened today.
    I bought an iPod touch 4G last September w/ Apple Care, and then bought the remote headphones for $30 from apple in February. Does the AppleCare cover these, even if I didn't buy them with the iPod? (probably not, stupid question). Can I swap these for new ones after 7 1/2 months? I'm not paying $30 AGAIN because the remote feature just stopped working one day, in the middle of a bunch of days of normal usage. And that feature is the reason I went and spent the $30.
    Any suggestions? Any policy/warranty stuff? Anything will be appreciated since I use the play/pause/volume buttons pretty much every day.
    Thanks!
    Jake

    I would bring them into your local Apple Store/Genius Bar and demonstrate this issue to them.  The headphones should still be covered under the 1 year warranty against manufacturer defects meaning Apple should swap them out of for you.  Either way, a trip your local Apple Store would be your next best bet.
    B-rock

Maybe you are looking for