Auditing SAP Application - users lists

Hello everybody,
i am trying to find a way to report a list of users that have the following authorizations:
u2022     access to administrative tasks
u2022     access to batch input administration
u2022     access to monitoring tools and logs
u2022     access to promote to production
u2022     access to table access
u2022     access to user management
It is obvious according to SOx compliance (security purposes) that this access should be restricted to a group of users. So i have to retrieve the data of SAP application to solve my wonder.
could anyone tell me what should i do? which authorization objects and values should i use to create each report?
Thanx in advance,
S

Hi,
Check the report RSUSR002 or SUIM (transaction code) for selecting the users based on various parameters
regards
Naveen kumar

Similar Messages

Wlc 5508 : guest users to be configured only give access for internal SAP application

Hi,
I have one new requirement with one of the client.
I have wlc 5508 with 6.0 firmware. I need to have one guest wlan which will have access only for internal SAP application.
I have gone through cisco document for internet guest users , where web page will be redirected with user name and password once it is authenticated , we can access internet.
Provided if we have access list configured in wlc ... for internet access only /
what about this mentioned scenario ?
can anybody suggest on the same ?

Hi Vinod,
Go for the ACL on any Router or the switch.. i prefer not on the WLC..
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
Here is the link as well to do it on the WLC
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807810d1.shtml
Lemme know if this answered ur question..
Regards
Surendra

Inactive status - v$session users list over WEB application

Hi all
When user connect through asp or asp.net, we create a connection in the session object. New sid gets created with each session.
When user normally logs out the application, his sid gets finished in the v$session users list. But when he dees not logs out in the normal way as we can not force thousand of users over WEB to log out normally, what will happen to the v$session ?.
1st - We wish to know to know that whether the list will run into thousands of inactive status users OR they automatically gets finished over time. We use the default profile as applicable to new user.
2nd - If the list of inactive status users gets increased to thousands of users which can be possible for the WEB application , there must be some limit fixed by Oracle 8i/ 10g database OR there may be serious performance problems. This simultaneous connection of thousands of users over WEB is easily possible and when connection is created in session object , what could be the scenario. We avoid creating connection object in the application start event to improve performance for the given sesion.
Any help is appreciated.
Suresh bansal

Thanks for prompt reply
1st - Can u give some idea for create connection pools using asp.net environments. Further in the connection pool environment as to how much simultaneous running connections we should need to open and how.
2nd - If we have pool of say 100 connections and there are more number of simultaneous WEB users, what will happen to the application as to whether it gets to hanging /waiting for the pool connection to be free or give error ?.
Suresh Bansal

Auditing Alternatives with Application User Tracking

I'm looking for an auditing solution that does exactly what Change Data Capture (CDC) does, except I need it to also track the application user that made the change. I'm currently using SQL Server 2012 Enterprise and may be upgrading to 2014 later
this year.
We already have an auditing solution in place that leverages Delete, Insert, and Update triggers, but some new requirements might force us to update every audit trigger and corresponding audit table. Given various problems we've run in to with that
solution over the years, this seems like as good a time as any to reevaluate and potentially replace the solution.
To give you an idea of what I'm currently working with (and may be able to leverage), we use a stored procedure (ConnectionInitialize) to store a user id with a SPID in a table (ApplicationUser) and then we delete the row using another stored procedure (ConnectionReset)
once we're done making our deletes, inserts, and updates.
Were we to use CDC, I looked into adding a trigger to something like the cdc.lsn_time_mapping table, but I couldn't find a way to map the LSN back to the SPID (and therefore the user id) that was being used. This also presented some other issues in
that CDC is always a little bit behind.
I looked into SQL Server Audit a little bit, but that presented some challenges of its own. We're using Transparent Data Encryption (TDE) to appease some of our security requirements, but SQL Server Audit looks like it'd need a separate encryption
strategy; that and I'm more interested in the columns than in the actual SQL statements. Even so, these aren't deal-breakers for me, so I'm still looking into it.
Given what I'm trying to accomplish, does anyone have any feedback or recommendations? I realize that there's another
post that addresses what I'm trying to accomplish. Unfortunately, adding some sort of "modified by" column to all of our tables isn't a very good option for us. Given the fact that, that thread was resolved 2 years ago, I'm hoping
there will be some new ideas.

Microsoft does not have a good auditing story. CDC can tell you what was changed, but not my whom. And while SQL Audit can tell you who made the change, it can in the general case not tell you want change; you will only see parameter values.
What is left? Running your own triggers, I'm afraid.
Erland Sommarskog, SQL Server MVP, [email protected]

Exclued Application user from audit

Hi ,
My database 9.2.0.7.0 is configured with below init. parameters.
NAME TYPE VALUE
audit_file_dest string ?/rdbms/audit
audit_sys_operations boolean TRUE
audit_trail string DB.
I need to exclued "Application user" logins from auditing.
can someone please help on this?.
Thanks

Thanks Z.K for your response, I did read mentioned articale on Oracle base.
but as I have mentioned previously we use Oracle basic auditing method and FGA is not used.
please let me know if you have other suggestion.
Edited by: user9123331 on Mar 28, 2010 5:06 AM

Loggin intp BSP applications using SAP Dialog user

Hi,
I used SAP - service type user to log into my BSP applications in the following way:
========================================
data: usr type bapialias,
pwd type bapipwd.
data: return type table of bapiret2,
wa_return type bapiret2,
bname type USUSERNAME.
usr = request->get_form_field( 'username' ).
pwd = request->get_form_field( 'password' ).
CALL FUNCTION 'SUSR_INTERNET_USERSWITCH'
EXPORTING
ALIAS = usr
PASSWORD = pwd
IMPORTING
BNAME_AFTER_SWITCH = bname
TABLES
RETURN = return.
loop at return into wa_return.
err_msg = wa_return-message.
endloop.
if bname is not initial.
navigation->goto_page( 'main.htm' ).
endif.
===========================================
From the above, i am able to log in successfully. INow i need to log in as SAP Dialog user. Is there any way where i can log into BSP where the sap users are dialog types..
Thx,
Rajesh

Hey Raja,
Thanks for ur timely suggestions.
Now its working fine.
I am closing this issue.

How to find number of Real Applications users available in SAP R/3 system.?

Hello Experts,
How to check the Number of Real application users available in R/3 system (except system , communication users and Admin users)
Is there any TCODE to check this..
Please let me know how to do.
Regards,
Ravi Maddela

Hello ,
Thnx for the Immediate response
But Al08 or Sm04 will show only active users
I want all Real application users available in the R/3 system.
When I check few users may not login.
I want all the users available even though they were not logged in
Regards,
Ravi Maddela

Can not start SAP application server

Hi All,
I use RZ10 to change instance profile, after that I shutdown SAP application but nothing can start.
In process list : msg_server.exe : stopped
                         disp+work.exe : stopped
                         igswd.exe : stopped
Pls help me resolve it.

Hi,
This is new dev_disp file: ______________
trc file: "dev_disp", trc level: 1, release: "700"
sysno      00
sid        DEV
systemid   562 (PC with Windows NT)
relno      7000
patchlevel 0
patchno    185
intno      20050900
make:      multithreaded, Unicode, 64 bit, optimized
pid        944
Fri May 27 08:54:12 2011
kernel runs with dp version 241000(ext=110000) (@(#) DPLIB-INT-VERSION-241000-UC)
length of sys_adm_ext is 576 bytes
SWITCH TRC-HIDE on ***
***LOG Q00=> DpSapEnvInit, DPStart (00 944) [dpxxdisp.c   1285]
     shared lib "dw_xml.dll" version 185 successfully loaded
     shared lib "dw_xtc.dll" version 185 successfully loaded
     shared lib "dw_stl.dll" version 185 successfully loaded
     shared lib "dw_gui.dll" version 185 successfully loaded
     shared lib "dw_mdm.dll" version 185 successfully loaded
rdisp/softcancel_sequence : -> 0,5,-1
use internal message server connection to port 3900
Fri May 27 08:54:17 2011
WARNING => DpNetCheck: NiAddrToHost(1.0.0.0) took 4 seconds
***LOG GZZ=> 1 possible network problems detected - check tracefile and adjust the DNS settings [dpxxtool2.c 5418]
MtxInit: 30000 0 0
DpSysAdmExtInit: ABAP is active
DpSysAdmExtInit: VMC (JAVA VM in WP) is not active
DpIPCInit2: start server >dianasvr1_DEV_00                        <
DpShMCreate: sizeof(wp_adm)          29792     (1752)
DpShMCreate: sizeof(tm_adm)          5912704     (29416)
DpShMCreate: sizeof(wp_ca_adm)          24064     (80)
DpShMCreate: sizeof(appc_ca_adm)     8000     (80)
DpCommTableSize: max/headSize/ftSize/tableSize=500/16/552064/552080
DpShMCreate: sizeof(comm_adm)          552080     (1088)
DpSlockTableSize: max/headSize/ftSize/fiSize/tableSize=0/0/0/0/0
DpShMCreate: sizeof(slock_adm)          0     (104)
DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0
DpShMCreate: sizeof(file_adm)          0     (72)
DpShMCreate: sizeof(vmc_adm)          0     (1864)
DpShMCreate: sizeof(wall_adm)          (41664/36752/64/192)
DpShMCreate: sizeof(gw_adm)     48
DpShMCreate: SHM_DP_ADM_KEY          (addr: 000000000F1D0050, size: 6614016)
DpShMCreate: allocated sys_adm at 000000000F1D0050
DpShMCreate: allocated wp_adm at 000000000F1D21F0
DpShMCreate: allocated tm_adm_list at 000000000F1D9650
DpShMCreate: allocated tm_adm at 000000000F1D96B0
DpShMCreate: allocated wp_ca_adm at 000000000F77CF30
DpShMCreate: allocated appc_ca_adm at 000000000F782D30
DpShMCreate: allocated comm_adm at 000000000F784C70
DpShMCreate: system runs without slock table
DpShMCreate: system runs without file table
DpShMCreate: allocated vmc_adm_list at 000000000F80B900
DpShMCreate: allocated gw_adm at 000000000F80B980
DpShMCreate: system runs without vmc_adm
DpShMCreate: allocated ca_info at 000000000F80B9B0
DpShMCreate: allocated wall_adm at 000000000F80B9C0
MBUF state OFF
DpCommInitTable: init table for 500 entries
rdisp/queue_size_check_value : -> off
ThTaskStatus: rdisp/reset_online_during_debug 0
EmInit: MmSetImplementation( 2 ).
MM global diagnostic options set: 0
<ES> client 0 initializing ....
<ES> InitFreeList
<ES> block size is 4096 kByte.
<ES> Info: em/initial_size_MB( 18431MB) not multiple of em/blocksize_KB( 4096KB)
<ES> Info: em/initial_size_MB rounded up to 18432MB
Using implementation view
<EsNT> Using memory model view.
<EsNT> Memory Reset disabled as NT default
<ES> 4607 blocks reserved for free list.
ES initialized.
mm.dump: set maximum dump mem to 96 MB
rdisp/http_min_wait_dia_wp : 1 -> 1
***LOG CPS=> DpLoopInit, ICU ( 3.0 3.0 4.0.1) [dpxxdisp.c   1692]
***LOG Q0K=> DpMsAttach, mscon ( dianasvr1) [dpxxdisp.c   12429]
DpStartStopMsg: send start message (myname is >dianasvr1_DEV_00                        <)
DpStartStopMsg: start msg sent
CCMS: AlInitGlobals : alert/use_sema_lock = TRUE.
CCMS: Initalizing shared memory of size 60000000 for monitoring segment.
CCMS: Checking Downtime Configuration of Monitoring Segment.
CCMS: start to initalize 3.X shared alert area (first segment).
DpMsgAdmin: Set release to 7000, patchlevel 0
MBUF state PREPARED
MBUF component UP
DpMBufHwIdSet: set Hardware-ID
***LOG Q1C=> DpMBufHwIdSet [dpxxmbuf.c   1050]
DpMsgAdmin: Set patchno for this platform to 185
Release check o.K.
Fri May 27 08:54:57 2011
my types changed after wp death/restart 0xbf --> 0xbe
my types changed after wp death/restart 0xbe --> 0xbc
my types changed after wp death/restart 0xbc --> 0xb8
my types changed after wp death/restart 0xb8 --> 0xb0
my types changed after wp death/restart 0xb0 --> 0xa0
my types changed after wp death/restart 0xa0 --> 0x80
DP_FATAL_ERROR => DpWPCheck: no more work processes
DISPATCHER EMERGENCY SHUTDOWN ***
increase tracelevel of WPs
NiWait: sleep (10000ms) ...
NiISelect: timeout 10000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:07 2011
NiISelect: TIMEOUT occured (10000ms)
dump system status
Workprocess Table (long)               Fri May 27 01:55:07 2011
========================
No Ty. Pid      Status Cause Start Err Sem CPU    Time Program          Cl User         Action                    Table
0 DIA     3652 Ended         no      1   0        0
1 DIA     2964 Ended         no      1   0        0
2 DIA     3956 Ended         no      1   0        0
3 DIA     2992 Ended         no      1   0        0
4 DIA     3308 Ended         no      1   0        0
5 DIA     1072 Ended         no      1   0        0
6 DIA     1112 Ended         no      1   0        0
7 DIA     1820 Ended         no      1   0        0
8 DIA     3456 Ended         no      1   0        0
9 DIA     2496 Ended         no      1   0        0
10 UPD      608 Ended         no      1   0        0
11 ENQ     1368 Ended         no      1   0        0
12 BTC     2972 Ended         no      1   0        0
13 BTC     3656 Ended         no      1   0        0
14 BTC     3604 Ended         no      1   0        0
15 SPO     2724 Ended         no      1   0        0
16 UP2     3528 Ended         no      1   0        0
Dispatcher Queue Statistics               Fri May 27 01:55:07 2011
===========================
--------++++--
+
Typ
now
high
max
writes
reads
--------++++--
+
NOWP
0
2
2000
5
5
--------++++--
+
DIA
5
5
2000
5
0
--------++++--
+
UPD
0
0
2000
0
0
--------++++--
+
ENQ
0
0
2000
0
0
--------++++--
+
BTC
0
0
2000
0
0
--------++++--
+
SPO
0
0
2000
0
0
--------++++--
+
UP2
0
0
2000
0
0
--------++++--
+
max_rq_id          12
wake_evt_udp_now     0
wake events           total     8, udp     6 ( 75%), shm     2 ( 25%)
since last update     total     8, udp     6 ( 75%), shm     2 ( 25%)
Dump of tm_adm structure:               Fri May 27 01:55:07 2011
=========================
Term    uid man user    term   lastop mod wp ta   a/i (modes)
Workprocess Comm. Area Blocks               Fri May 27 01:55:07 2011
=============================
Slots: 300, Used: 1, Max: 0
--------++--
+
id
owner
pid
eyecatcher
--------++--
+
0
DISPATCHER
-1
WPCAAD000
NiWait: sleep (5000ms) ...
NiISelect: timeout 5000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:12 2011
NiISelect: TIMEOUT occured (5000ms)
DpHalt: shutdown server >dianasvr1_DEV_00                        < (normal)
DpJ2eeDisableRestart
DpModState: buffer in state MBUF_PREPARED
NiBufSend starting
NiIWrite: hdl 2 sent data (wrt=110,pac=1,MESG_IO)
MsINiWrite: sent 110 bytes
MsIModState: change state to SHUTDOWN
DpModState: change server state from STARTING to SHUTDOWN
Switch off Shared memory profiling
ShmProtect( 57, 3 )
ShmProtect(SHM_PROFILE, SHM_PROT_RW
ShmProtect( 57, 1 )
ShmProtect(SHM_PROFILE, SHM_PROT_RD
DpWakeUpWps: wake up all wp's
Stop work processes
Stop gateway
killing process (1252) (SOFT_KILL)
Stop icman
killing process (4044) (SOFT_KILL)
Terminate gui connections
wait for end of work processes
wait for end of gateway
[DpProcDied] Process lives (PID:1252 HANDLE:324)
waiting for termination of gateway ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:13 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process died (PID:1252 HANDLE:324)
wait for end of icman
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:14 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:15 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:16 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:17 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:18 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:19 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:20 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:21 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:22 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:23 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process lives (PID:4044 HANDLE:336)
waiting for termination of icman ...
NiWait: sleep (1000ms) ...
NiISelect: timeout 1000ms
NiISelect: maximum fd=357
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Fri May 27 08:55:24 2011
NiISelect: TIMEOUT occured (1000ms)
[DpProcDied] Process died (PID:4044 HANDLE:336)
DpStartStopMsg: send stop message (myname is >dianasvr1_DEV_00                        <)
AdGetSelfIdentRecord: >                                                                           <
AdCvtRecToExt: opcode 60 (AD_SELFIDENT), ser 0, ex 0, errno 0
AdCvtRecToExt: opcode 4 (AD_STARTSTOP), ser 0, ex 0, errno 0
DpConvertRequest: net size = 189 bytes

Error in eRecruitment configuration step Define user list for support teams

Hi Erecruitment experts,
I am new to SAP Erecruitment and trying to get the system running in ERP 6.00 with EP7.
When I progress the customising steps under technical settings -->User administration --> Define user list for support teams, I am facing problem of ABAP Dump.
It says
Error in the ABAP Application Program
The current ABAP program "SAPLHR_RCF_CUST_01" had to be terminated because it
has come across a statement that unfortunately cannot be executed.
Key words are
"MESSAGE_TYPE_UNKNOWN" " "
"SAPLHR_RCF_CUST_01" or "RCF_CUST_F01"
"CHECK_VALID_USR"
I think there is a link between Object types CP, BP and relation ships A650, A209 etc in this process.
Can some one guide me how to overcome this error.
Tks
Dhina

Hi all
I got them fixed, as they are due to BP creation integration issue.
Thanks and regards
Dhina

SAP application penetration testing.

Dear All,
Does anyone have information on penetration testing of SAP application? I am looking for the following:
· Tools
· Methodology including any reference material
phenoelit has some resources/vulns for SAP.
http://www.phenoelit.de/whatSAP/index.html
and also:
http://www.it-audit.de/html/ian_sp_sap_sp.html
Thanks in advance,
Elad Shapira, CISSP

Elad,
SAP Security Testing is at the complex end of Application Testing. It's easy to test individual components (e.g. EP or ITS apps can be tested to some extent by more or less any outfit with Web App experience). We've been 'doing' SAP Security Testing for most modules, WAS, EP and ITS for a while now and it's a very strange beast indeed.
The bad news: There aren't any tools (beyond ABAP Workbench and Access/TOAD).
Generally in an SAP test you're looking for the following:
Assurance that underlying infrastructure and databases are secure (So, classic Vulnerability Assessment and Database testing)
Assurance that the SAP instances themselves are sufficiently secured (Authorizations, audit focused points, source code review for Z* and Y* transactions, Interfaces, User Exits etc.)
Assurance that the documentation and procedures are up to scratch (normally a fairly swift policy review, usually highlights the areas that are different).
Please feel free to send me a message offline if there's any specifics you'd like to discuss.
Steve

E-Recruiting 6.0 -- Assignment of Users to User Lists

You all have been very helpful. Of course that means I have to ask more questions.
I have a recruiter who changed her user name... went from "XXXXX" to "YYYYY". She was in the userlist of recruiters prior to the change with her old user name. When I try to edit this (T77RCF_USR_SGRP using the V77RCF_USR_SGRP), I get an error message that "No candidate could be found for US XXXXX".
How can I change her username in the user list to her new YYYYY ??
Thanks,
John

Hello William,
OTR refers to On-line Text repository. You can find SAP standard texts defined via Transaction code SOTR_EDIT. You can find e-rec related standard texts under PAOC_RCF_UI (in transaction code SOTR_EDIT).
OTR Alias Link - Link you find against PAOC_RCF_UI Example:- PAOC_RCF_UI/CAND_PROFILE
OTR Alias Title - As per requirement
OTR Alias Description -
Image Width - Refers to the width of the image you want to display on the page
Image Height - Refers to the height of the image you want to display on the page
Image Data src - In SE80 transaction --> BSP application --> hrrcf* --> MIMEs
Example ../hrrcf_start/portrait_form_pencil_pers
Best Regards
G Raj

How to find out the user list that created by someone?

Hi all:
Now I want to develop a program that can find out the user list created by someone.
such as :
John create 3 user in SAP ,they are u1,u2,u3.
Susan create 2 user in SAP , they are s1,s2.
I input the the parameter such as John , the program can give me the list :u1,u2,u3.
Could you tell me which table should I use in this program?
Thanks .
Elisa.

Hi Ling,
As per my understanding, you are looking for listing down the number of Users created by a particular users of the System. Like a System Administrator has created some 30 users. If this is correct, then you can use the table
USR02 - Logon Data (Kernel-Side Use). This table has 2 fields which are of importance - BNAME - User Name in User Master Record & ANAME - Creator of the User Master Record. You can query the ANAME with the username of the system and you will get the resultant users.
But I would reccomend to search the Table for a standard class, function module or RFC or BAPI so that you can reuse the same and need not to develop from the scratch.
Hope this will help.
Thanks,
Samantak.

SSO to non SAP Application (ASP)

We have followed the sample steps for SSO to non SAP Applications in ASP, but we're receiving the following results:
Start SSO2TICKET main
Version: SAPSSOEXT 2
Ticket verifying failed. Return codes error=1 and ssf error=0
Does anyone know what the problem is and how to solve it?
Thanks!

hi ive,
u cn refer to this links.......these r some of the blogs that u cn go throu.its useful.
<b>User Mapping-based Single Sign On,
SAP Logon Ticket-based Single Sign-On>
regards
bhargava

SSO to non SAP Application using SAP Logon Ticket

Hi Experts,
I Have EP 7 SP 15 using SPNego Wizard to SSO with Active Directory and SSO between EP and ECC using SAP Certificates.
Now I have a demand to SSO some JAVA based applications (non SAP) to my portal using the SAP Logon Ticket.
I Have followed some blogs that directed me to use SAPSSOEXT (some libs) to read the MYSAPSSO2 cookie. The problem is that I didn't found this cookie, I even executed the command javascript:document to look for this cookie but the browser just show me the JSESSIONID info.
Does anybody knows where I can find this cookie or if there's a better way to set up this SSO? It´s necessary to say that I cannot SSO these application to the kerberos protocol because some security reasons on my company.
Thanks
Armando

Hi,
I dont have much info related but i can giv u hint
refer OSS Notes 442401 and 723896.
When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
In the first case, the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
In the second case, the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
You can refer following link :-
http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
user authentication and SSO
http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
Authentication Using a Directory with SSO Integration Using Logon Tickets
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
SSO
SAP Logon Ticket-based Single Sign-On
http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

How to link SAP Application to Digital Signature

Dear all,
As per the sap note 593041,594010 and 827417 we have done the config setting and executed program DSIG_BOOKING_EX
in tcode DSAL we are getting the message "Signature process was successfully completed by user" please suggest us
how to link this to any SAP application ( Ex. Check printing ,PO Printing.) we r using script for printing these application.
Regards,
Nikhil

Hi Nikhil,
please refer to this document:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/e0fbaa71-cd8d-2910-5982-e30626035400&overridelayout=true
Best wishes,
Jan

Auditing SAP Application - users lists

Similar Messages

Maybe you are looking for