Authentication issue in Webservice - PI - R3 scenario

Hi experts,
We have a scenario Webservice - > PI -> R3 wherein data is being pushed using SOAP messages from webservices . We have used a sender SOAP adapter.
Normally when data is pushed from any webservice it asks for UID and PWD where the UID and PWD of XI needs to be given
Now the problem is the sender Webservice here is not developed to support any authentication .and they want they should be able to pass the data to PI without such authentiction.
Is it possible ? If yes how
Points will be rewarded

hi santhosh
here XI will act as a webserver and regarding authentication check the below blog
*How to use Client Authentication with SOAP Adapter     *                         
How to use Client Authentication with SOAP Adapter                              
reward points if helpfull
regards
kummari

Similar Messages

  • Wireless Client Authentication issues when roaming Access Points (Local)

    I have a Cisco 5508 with Software version 7.4.121.0 and Field Recovery 7.6.101.1.
    There are a handful of clients that when roaming between AP's with the same SSID that get an authentication issue and have to restart the wireless to get back on.
    From Cisco ISE
    Event
    5400 Authentication failed
    Failure Reason
    11514 Unexpectedly received empty TLS message; treating as a rejection by the client
    Resolution
    Ensure that the client's supplicant does not have any known compatibility issues and that it is properly configured. Also ensure that the ISE server certificate is trusted by the client, by configuring the supplicant with the CA certificate that signed the ISE server certificate. It is strongly recommended to not disable the server certificate validation on the client!
    Root cause
    While trying to negotiate a TLS handshake with the client, ISE expected to receive a non-empty TLS message or TLS alert message, but instead received an empty TLS message. This could be due to an inconformity in the implementation of the protocol between ISE and the supplicant. For example, it is a known issue that the XP supplicant sends an empty TLS message instead of a non-empty TLS alert message. It might also involve the supplicant not trusting the ISE server certificate for some reason. ISE treated the unexpected message as a sign that the client rejected the tunnel establishment.
    I am having a hard time figuring out what is causing this. My assumption is if there were a problem with the Controller or AP configurations then it would happen to everyone. My further assumption is if the client had a problem with their laptop (windows 7) then why does work at other times? So I have checked and the ISE certificate is trusted by client.
    Is something happening that the previous access point is holding on to the mac and the return authentication traffic is going to the old AP instead of the new one or something like that which is corrupting the data?
    I also had this from Splunk for the same client:
    Mar 5 13:44:51 usstlz-piseps01 CISE_Failed_Attempts 0014809622 1 0 2015-03-05 13:44:51.952 +00:00 0865003824 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario
     FailureReason="12929 NAS sends RADIUS accounting update messages too frequently"
    Any help on this would be appreciated. These error messages give me an idea but doesn't give me the exact answer to why the problem occurred and what needs to be done to fix it.
    Thanks

    Further detail From ISE for the failure:
    11001
    Received RADIUS Access-Request
    11017
    RADIUS created a new session
    15049
    Evaluating Policy Group
    15008
    Evaluating Service Selection Policy
    15048
    Queried PIP
    15048
    Queried PIP
    15004
    Matched rule
    15048
    Queried PIP
    15048
    Queried PIP
    15004
    Matched rule
    11507
    Extracted EAP-Response/Identity
    12500
    Prepared EAP-Request proposing EAP-TLS with challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12301
    Extracted EAP-Response/NAK requesting to use PEAP instead
    12300
    Prepared EAP-Request proposing PEAP with challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12302
    Extracted EAP-Response containing PEAP challenge-response and accepting PEAP as negotiated
    12318
    Successfully negotiated PEAP version 0
    12800
    Extracted first TLS record; TLS handshake started
    12805
    Extracted TLS ClientHello message
    12806
    Prepared TLS ServerHello message
    12807
    Prepared TLS Certificate message
    12810
    Prepared TLS ServerDone message
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    12305
    Prepared EAP-Request with another PEAP challenge
    11006
    Returned RADIUS Access-Challenge
    11001
    Received RADIUS Access-Request
    11018
    RADIUS is re-using an existing session
    12304
    Extracted EAP-Response containing PEAP challenge-response
    11514
    Unexpectedly received empty TLS message; treating as a rejection by the client
    12512
    Treat the unexpected TLS acknowledge message as a rejection from the client
    11504
    Prepared EAP-Failure
    11003
    Returned RADIUS Access-Reject

  • How To Develop a Simple WebService App XI Scenarios

    Hi,
    How can I develop A simple Webservice for any scenario, for example, if am doing File to file scenario, and i want to develop a Webservice for the same scenario,
    I think in ID we have an option Under Tools "Define Webservice" where in we can use wsdl format of the message interfaces.
    How should i proceed to develop the Webservice?
    Regards,
    Varun

    Hi Varun,
    After creating the wsdl file u can deploy using MS visual studio.
    Follow the steps and run the scenario.
    use it in a Client Program in .NET : (assuming Maths as the WSDL and Webserice name)
    1.) Place maths.wsdl in C:/Sample/ folder
    2.) Open Visual studio command prompt using the Start Menu
            Start->Programs->Microsoft Visual Studio 2005->Visual Studio Tools->Visual Studio 2005 Command Prompt
    3.) In the Command prompt go to that directory
        > C: 
        > CD\
        > CD Sample
        > wsdl maths.wsdl /out:"c:\sample"
    4.) The previous step will create a file called Maths.cs , go to that folder and confirm this
    5.) Open Microsoft Visual Studio 2005, open the Client application where this webservice needs to be called
    6.) If your Client application is a web application, the see if the website has a folder called "App_Code"
        If not then create this folder. Right Click on this folder and click on "Add Existing Item"
    7.) Browse to C:/sample and select the Maths.cs file
    8.) If your client is a Desktop application , just add this file in a similar manner to the project(no need of creating any folder)
    9.) After the file gets added, open Maths.cs file
    10.) Add a namespace to it for convinience
            eg:
                namespace SAP
       This should come before the Class Declaration and close it after the class
        eg: See the red lines
        namespace SAP
        /// <remarks/>
        [System.CodeDom.Compiler.GeneratedCodeAttribute("wsdl", "2.0.50727.42")]
        [System.Diagnostics.DebuggerStepThroughAttribute()]
        [System.ComponentModel.DesignerCategoryAttribute("code")]
        [System.Web.Services.WebServiceBindingAttribute(Name = "Equi_get_NotifBinding", Namespace = "http://Equipment_Get_Notifications")]
        public partial class Equi_get_NotifService : System.Web.Services.Protocols.SoapHttpClientProtocol
          functions....
    11.) Save the Maths.cs file
    12.) Open the Webform or windows form code where this webserive will be called
    13.) The webservice will now be available here under the SAP namespace
            so when u type "SAP." u will get all the classes in it.
            Add credential in this code as shown below
        eg:
        private void GetNotifications()
            try
                SAP.Equi_get_NotifService ser1 = new SAP.Equi_get_NotifService();       //This is the Webserive Proxy class
                SAP.Equi_get_Notif_Request req = new SAP.Equi_get_Notif_Request();      //Request Class
                req.Equipment = SAPID;
                req.Date = Calendar1.SelectedDate;
                System.Net.CredentialCache ch = new System.Net.CredentialCache();                                    //Adding Credentials for authentication on webservice server
                System.Net.NetworkCredential cr = new System.Net.NetworkCredential("xisuper", "infotech");
                ch.Add(new Uri(ser1.Url), "Basic", cr);
                ser1.Credentials = ch;                // Assing this Credential to the ProxyClass.Credentials property as shown here
                SAP.Equi_get_Notif_ResponseNotifications[] res = ser1.Equi_get_Notif(req);        //Call the webservice, res is the responce object
                GridView1.DataSource = res;
                GridView1.DataBind();
            catch (Exception ex)
                Response.Write(ex.Message);
    "Award points if it is helpful"

  • Mapping issue in idoc to JDBC scenario

    mapping issue in idoc to JDBC scenario
    source structure
    E1KNB1M
      BUKRS = 1000
    E1KNB1M
      BUKRS=  9000
    E1KNB1M
      BUKRS=  2000
    THE NODE E1KNB1M is repeated many times and the field BUKRS is also repeated with E1KNB1M as above
    TARGET field : ISFRANCHISE
    if any where value of BUKRS =9000 we have to pass Y to the target filed, else N
    if BUKRS = 9000   THEN ISFRANCHISE= Y
                   ELSE
                ISFRANCHISE=N
    I've done the mapping as below
    BUKRS = 9000--> IF THEN Y ELSE N--
    > ISFRANCHISE
    BUT everry time the target value is N only
    pl suggest
    rgds
    mojib

    mapped like this
    BUKRS--->SORT---->
                                                 EQUALS --------IF---THEN    Y
    9000------------------------>                                               ----------------->ISFRANCHISE
                                                                  ELSE   N
    context of BUKRS set to parent node
    its worked
    thanks to all for valuable suggestions
    rgds
    mojib

  • Issue in webservice

    Hi Team,
    This is Naresh and i am having issue in Webservice while using Webservice Datasource through PowerBuilder 12.5.  After entering the URL in the Select WSDL File prompt, i am getting the error 'Cannot Access the WSDL or the WSDL file is Invalid'.  I have Created the WSDL file using SOAP webservice - JAX WS.
    Please find the below WSDL file for your reference. Could you please help me on this?
    Thanks
    Naresh
    --WSDL FILE Content
    <?xml version="1.0" encoding="UTF-8"?><!-- Generated by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is JAX-WS RI IBM 2.2.1-11/28/2011 08:28 AM(foreman)-. --><definitions name="SOHCustomerService" targetNamespace="http://service.soh.metlife.com/" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="http://service.soh.metlife.com/" xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata" xmlns:wsp="http://www.w3.org/ns/ws-policy" xmlns:wsp1_2="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <types>
        <xsd:schema>
          <xsd:import namespace="http://service.soh.metlife.com/" schemaLocation="SOHCustomerService_schema1.xsd"/>
        </xsd:schema>
        <xsd:schema>
          <xsd:import namespace="http://com/metlife/soh/service/bean/" schemaLocation="SOHCustomerService_schema2.xsd"/>
        </xsd:schema>
        <xsd:schema>
          <xsd:import namespace="http://com/metlife/soh/common/bean/" schemaLocation="SOHCustomerService_schema3.xsd"/>
        </xsd:schema>
      </types>
      <message name="getCustomer">
        <part element="tns:getCustomer" name="parameters"/>
      </message>
      <message name="getCustomerResponse">
        <part element="tns:getCustomerResponse" name="parameters"/>
      </message>
      <message name="upsertCustomer">
        <part element="tns:upsertCustomer" name="parameters"/>
      </message>
      <message name="upsertCustomerResponse">
        <part element="tns:upsertCustomerResponse" name="parameters"/>
      </message>
      <portType name="CustomerServiceDelegate">
        <operation name="getCustomer">
          <input message="tns:getCustomer" wsam:Action="http://service.soh.metlife.com/CustomerServiceDelegate/getCustomerRequest"/>
          <output message="tns:getCustomerResponse" wsam:Action="http://service.soh.metlife.com/CustomerServiceDelegate/getCustomerResponse"/>
        </operation>
        <operation name="upsertCustomer">
          <input message="tns:upsertCustomer" wsam:Action="http://service.soh.metlife.com/CustomerServiceDelegate/upsertCustomerRequest"/>
          <output message="tns:upsertCustomerResponse" wsam:Action="http://service.soh.metlife.com/CustomerServiceDelegate/upsertCustomerResponse"/>
        </operation>
      </portType>
      <binding name="SOHCustomerServicePortBinding" type="tns:CustomerServiceDelegate">
        <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
        <operation name="getCustomer">
          <soap:operation soapAction=""/>
          <input>
            <soap:body use="literal"/>
          </input>
          <output>
            <soap:body use="literal"/>
          </output>
        </operation>
        <operation name="upsertCustomer">
          <soap:operation soapAction=""/>
          <input>
            <soap:body use="literal"/>
          </input>
          <output>
            <soap:body use="literal"/>
          </output>
        </operation>
      </binding>
      <service name="SOHCustomerService">
        <port binding="tns:SOHCustomerServicePortBinding" name="SOHCustomerServicePort">
          <soap:address location="http://10.237.241.52:9081/SOHService/SOHCustomerService"/>
        </port>
      </service>
    </definitions>

    Anytime you have problems generating a proxy from a WSDL you can run the WSDL utility from the .Net SDK directly on the file or URL.  That utility gives you a lot more information about what the problem is, and it's what PB uses under the covers to generate the proxy.
    When I do that with the WSDL you provided, I get:
    Error: Unable to import binding 'SOHCustomerServicePortBinding' from namespace '
    http://service.soh.metlife.com/'.
      - Unable to import operation 'getCustomer'.
      - The element 'http://service.soh.metlife.com/:getCustomer' is missing.
    The big problem, at least when I run it, is that you've got references to three imports, and I don't have those files.
        <xsd:schema>
          <xsd:import namespace="http://service.soh.metlife.com/" schemaLocation="SOHCustomerService_schema1.xsd"/>
        </xsd:schema>
        <xsd:schema>
          <xsd:import namespace="http://com/metlife/soh/service/bean/" schemaLocation="SOHCustomerService_schema2.xsd"/>
        </xsd:schema>
        <xsd:schema>
          <xsd:import namespace="http://com/metlife/soh/common/bean/" schemaLocation="SOHCustomerService_schema3.xsd"/>
        </xsd:schema>

  • WebService to File Scenario

    Hi All,
    I am doing WebService to File Scenario.
    Here I am facing problem when I  am sending request .
    It is saying
    " http error.Could not post file"
    I have given the url as   
    http://<server>.domain:<port>/XISOAPAdapter/MessageServlet?channel=:BS_SOAP2FILE:CC_SOAP2FILE_SENDER
    Can anyone suggest me why is this coming.
    I searched for SDN and changed the address location in wsdl file to above url.
    but still it is coming.
    I checked the url in browser .It is saying "Message Servlet is in Status OK ......."
    Any kind of tips or suggestion will be appreciated.
    Thanks
    Rabi
    Edited by: RabiPanda on Nov 15, 2011 8:21 AM

    Hi,
    I agree with Ganesh. Try to use SOAP UI to call your service URL to see if it's working.
    You can find a tool called TCPGateway in the attachment section of the SOAP Adapter FAQ note 856597. Please see tcpgw.zip for more details. Use it on Client side to see the complete HTTP response from PI for more info. If it does not help, try to compare your HTTP request and request generated by SOAP UI if they are created the same way. Especially HTTP header parameters like Content-Type.
    Let us know if you find the problem.
    Martin

  • Authentication issue getting "UMELoginException"

    Dear Guys,
    I am facing an authentication issue. The situation is like this,
    My NT password was about to expire (had 6 more days for expiry). I was able to login till yesterday and all of the sudden today, when I was trying to login, I was not able to (it gave me password change message). So I went back and changed my NT password and tried to login again into the portal, however I am still not able to. I am pasting the stack trace,
    #1.5#001143FDCEA7006700000008000018C40004196E4AD849E8#1153861399615#com.sap.security.core.imp#sap.com/irj#com.sap.security.core.imp.[cf=com.sap.security.core.sapmimp.logon.SAPMLogonLogic][md=doLogon][cl=20282]#Guest#192####fff21cf01c2011dba425001143fdcea7#SAPEngine_Application_Thread[impl:3]_0##0#0#Error##Java###doLogon failed
    [EXCEPTION]
    #1#com.sap.security.core.logon.imp.UMELoginException
         at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.logon(SAPJ2EEAuthenticator.java:318)
         at com.sapportals.portal.prt.service.authenticationservice.AuthenticationService.login(AuthenticationService.java:344)
         at com.sapportals.portal.prt.connection.UMHandler.handleUM(UMHandler.java:126)
         at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:186)
         at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:312)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:368)
         at com.sap.portal.navigation.Gateway.service(Gateway.java:101)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
    Please help.
    Regards,
    Deepak

    Hi Deepak,
    it is most times that it needs to replicate through your system(s).
    Regards,
    Kai
    PS: Please reward points if that was helpful.

  • Authentication Issue, When Profile ReCreate

    Hi,
    i face authentication issue in SQL Server 2012 Evalution after i login in new account.
    Take a look situation and what i did.
    1) I install SQL Server 2012 in Member Server (Server 2012 Standard).
    2). Every Thing i Did i by using AD User name "SP_Farm"
    3). I install SQL in Windows Authentication Mode only and i provide User ****\SP_Farm, when Ever Installation Ask.
    Note: during the whole process i only use SP_Farm (AD Admin User)
    Every thing going working fine till my mistake. By mistake i delete account SP_Farm from AD and i re create it.
    after that i cant access Management Studio. :(
    Please Guide if is there any other way.
    Thanks you 
    Shariq Ayaz
    [email protected]
    www.shariqdon.com
    www.shariqdon.com/itworld
    www.shariqdon.com

    Hi,
    i face authentication issue in SQL Server 2012 Evalution after i login in new account.
    Take a look situation and what i did.
    1) I install SQL Server 2012 in Member Server (Server 2012 Standard).
    2). Every Thing i Did i by using AD User name "SP_Farm"
    3). I install SQL in Windows Authentication Mode only and i provide User ****\SP_Farm, when Ever Installation Ask.
    Note: during the whole process i only use SP_Farm (AD Admin User)
    Every thing going working fine till my mistake. By mistake i delete account SP_Farm from AD and i re create it.
    Creating a user with the same name is
    not the same user :-)
    A user has a unique ID and you did not create the same ID, but a new user with same name.
    after that i cant access Management Studio. :(
    Please Guide if is there any other way.
    Thanks you 
    Shariq Ayaz
    [email protected]
    www.shariqdon.com
    www.shariqdon.com/itworld
    www.shariqdon.com
    You can try to use This solution:
    http://blogs.msdn.com/b/raulga/archive/2007/07/12/disaster-recovery-what-to-do-when-the-sa-account-password-is-lost-in-sql-server-2005.aspx
    * After the SQL Server Instance starts in single-user mode, the Windows Administrator account is able to connect to SQL Server using the sqlcmd utility using Windows authentication.
    [Personal Site] [Blog] [Facebook]

  • Essbase 6.5 External Authentication Issue!! Urgent Please!!

    Hi all,
    I am great trouble over an external authentication issue in Essbase 6.5. I request you all to please give me your feedback on the same as soon as possible.
    I am in a situation where I need to get my Essbase 6.5 external Authentication converted from LDAP to Active Directory services.
    I suppose there has been necessary changes done to the .cfg file for the same. However, I think I am getting an error
    "User [vikc]'c external authentication protocol [MSEX]'s password check module is not loaded".
    Please let me know if you have come across such an issue earlier and can anybody to able to help me with the same.
    Its kinda Urgent. so any replies for the same will be appreciated.
    Thanks and Regards,
    Vikram

    Vikram,
    Yes you will have to reconfigure the CSS.xml and cfg file for external auth.
    Here is the Sample CSS
    <spi>
              <provider>
                   <msad name="full360">
                        <trusted>false</trusted>
                        <url>ldap://192.168.1.100:389/DC=full360,DC=com</url>
                        <userDN>CN=Ravinder Singh,DC=full360,DC=com</userDN>
                        <password>full@360</password>
                        <authType>simple</authType>
                        <identityAttribute>dn</identityAttribute>
                        <maxSize>1000</maxSize>
                        <user>
                             <loginAttribute>sAMAccountName</loginAttribute>
                             <nameAttribute>dn</nameAttribute>
                        </user>
                        <group>
                             <nameAttribute>cn</nameAttribute>
                             <objectclass>
                                  <entry>group?member</entry>
                             </objectclass>
                        </group>
                   </msad>
    Download this toll "http://www.ldapbrowser.com/download.htm"
    LDAP browser to get the perfact DN information.
    Let me know the status
    Ravikant

  • ACS 5.2 Authentication Issue with Local & Global ADs

    Hi I am facing authentication issue with ACS 5.2. Below is AAA flow (EAP-TLS),
    - Wireless Users >> Cisco WLC >> ADs <-- everything OK
    - Wireless Users >> Cisco WLC >> ACS 5.2 >> ADs <-- problem
    Last time I tested with ACS, it worked but didn't do migration as there'll be changes from ADs.
    Now my customer wants ACS migration by creating new Group in AD, I also update ACS config.
    For the user from the old group, authentication is ok.
    For the user from the new group, authentication fails. With subject not found error, showing the user is from the old group.
    Seems like ACS is querying from old records (own cache or database). Already restared the ACS but still the same error.
    Can anyone advice to troubleshoot the issue?
    Note: My customer can only access their local ADs (trusted by Global ADs). Local ADs & ACS are in the same network, ACS should go to local AD first.
    How can we check or make sure it?
    Thanks ahead,
    Ye

    Hello,
    There is an enhacement request open already:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCte92062
    ACS should be able to query only desired DCs
    Symptom:
    Currently on 5.0 and 5.1, the ACS queries the  DNS with the domain, in order to get a list of all the DCs in the domain  and then tries to communicate with all of them.If the connection to even one DC fails, then the ACS connection to the domain is declared as failed.A lot of customers are asking for a change on this behavior.
    It  should be possible to define which DCs to contact and/or make ACS to  interpret  DNS Resource Records Registered by the Active Directory  Domain Controller to facilitate the location of domain controllers.  Active Directory uses service locator, or SRV, records. An SRV record is  a new type of DNS record described in RFC 2782, and is used to identify  services located on a Transmission Control Protocol/Internet Protocol  (TCP/IP) network.
    Conditions:
    Domain with multiple DCs were some are not accessible from the ACS due to security/geographic constraints.
    Workaround:
    Make sure ALL DCs are UP and reachable from the ACS.
    At the moment, we cannot determine which Domain Controller on the AD the ACS will contact. The enhacement request will include a feature on which we can specify the appropriate the Domain Controllers the ACS should contact on a AD Domain.
    Hope this clarifies it.
    Regards.

  • Webservice to RFC scenario

    Hi
    In the webservice to RFC scenario i am trying to create a webservice from the tools->define webservice option. the system takes to me a webservice creaton wizard and it asks for the Integration Server SOAP inbound channel URL I know that the  syntax of the URL is like shown below.
    http://host:port/XISOAPAdapter/MessageServlet?channel=party:service:channel
    How do I know what is the host and port of the system??
    Also we need java knowledge to excel in XI. I want to know to what extent we need to learn Java to be able to excel in XI. Is there any blog or link which discuss about this?
    thanks,
    sankar

    Hi,
    TCODE: SXMB_IFR
    Then you'll see then server, port .
    Also:
    SMICM -> goto -> services
    Java basic knowledge is required where u can able to write the user defined function in graphical mapping,
    but sometime the requirement is not fullfilled then u need to to go for advance java for writing a java mapping or adapter module program.
    We use ABAP Proxies in case of we are dealing with the ABAP Based Applications
    We use JAVA Proxies in case of we are dealing with the JAVA based application
    in SAP XI We have two ways of connectivity
    1) adapter
    2)proxy
    in applications based on WAS 6.20 or above we can directly communicate to XI through Proxies
    while application based on below WAS 6.20 you have to use adaptyer to communicate to XI
    proxies seperate business application logic from the integration logic of integration logic
    proxy generation converts non language specific interface description in WSDL into executable interface
    Java proxy is generated from the WSDL description opf interface and this is generated as a JAR file in IR
    while ABAP proxy is generated by transaction SPROXY
    on Application server based on WSDL description of message interface
    PROXIES have same mode and direction as Interfaces have
    To learn Java you should know only basic concepts of java means you must have basic java programmin skill
    Java proxy can be generated through wizard also this is an inbuild functionality of SAP XI
    to lear java follow this link
    java.sun.com/docs/books/tutorial/
    To learn ABAP you should know beginner level ABAP4GL
    ABAP is very simple language and coding is like that you are writing simple english sentence so you would be feeling comfortable withABAP with a little practice
    GO to T CODE se24 and start developing
    learn ABAP with this link
    http://www.itquestionbank.com/sams-teach-yourself-abap-4-in-21-days.html.
    Regards,
    Vinod.

  • Need help in webservice to JDBC scenario

    Hi All,
    My scenario is a synchronous webservice to JDBC scenario. The SOAP request contains two fields one is ID & the other field is Date which is an optional field. I need to perform a SELECT statement on JDBC based on ID & Date. SOAP request will always contain ID field & Date may or maynot be there in the request. If Date present then search should be based on ID & Date , if Date not present search should be based on ID only. How to achieve this with the help of standard JDBC reciever structure or is there any other way to achieve this?
    Thanks
    Navin

    You can create your target structure as shown below and check the existence of DATE field in the source(using standard function "Exists" ) and then only create the target DATE node.
    <StatementName>
              <dbTableName action=u201DSELECTu201D>
                  <table>realDbTableName</table>
                  <access>
                      <col1/>
                     <col2/>
                     <col3/>
                  </access>
                  <key1>
                     <DATE/>
                     <ID/>
                  </key1>
              </dbTableName>
       </StatementName>
    http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=%28J2EE3417700%29ID0591392850DB01436613452367233705End?blog=/pub/wlg/3928
    Pooja

  • CPAChannelStoppedException for Webservice - XI - JDBC scenario

    Hi Experts,
    When I have tried to test Webservice -> XI -> JDBC scenario, I am getting the below error. In the ID, the SOAP Adapter communication channel is <b>active</b>.
    <s:SystemError xmlns:s="http://sap.com/xi/WebService/xi2.0">
                             <context>XIAdapter</context>
                             <code>CPAChannelStoppedException</code>
                             <text><![CDATA[
    com.sap.aii.af.service.administration.api.cpa.CPAChannelStoppedException: Channel stopped by administrative task.
         at com.sap.aii.af.service.administration.impl.cpa.CommonCPA.checkChannelState(CommonCPA.java:58)
    Please share your suggestions.
    Regards
    Sara

    Hi All,
    Thanks for your immediate responses. In RWB --> Component Monitoring --> Comm Channel Monitoring the SOAP CC was stopped. Just started it. Now the status is active.
    Regards
    Sara

  • Problem with Webservice - XI - JDBC scenario

    Hi Experts,
    When I have tried to test the Webservice -> XI -> JDBC scenario with the mention address, I am getting the below error.
    <b>Address :</b> http://<Host>:50100/XISOAPAdapter/MessageServlet?channel=:WEB_SERVICE:SOAP_CC&version=3.0&Sender.Service=WEB_SERVICE&Interface=http%3A%2F%2Fatl.com%2Ftar%5EMI_Outbound
    <b>Error:</b>
    <s:SystemError xmlns:s="http://sap.com/xi/WebService/xi2.0">
                             <context>XIAdapter</context>
                             <code>RecoverableException</code>
                             <text><![CDATA[
    com.sap.aii.af.ra.ms.api.RecoverableException: com.sap.aii.af.ra.ms.api.DeliveryException: Application:EXCEPTION_DURING_EXECUTE:
         at com.sap.aii.af.mp.soap.ejb.XISOAPAdapterBean.process(XISOAPAdapterBean.java:919)
         at com.sap.aii.af.mp.module.ModuleLocalLocalObjectImpl3.process(ModuleLocalLocalObjectImpl3.java:103)
         at com.sap.aii.af.mp.ejb.ModuleProcessorBean.process(ModuleProcessorBean.java:258)
    JDBC Part works fine only problem with the SOAP sender side. Any suggestion please..
    Regards
    Sara
    Message was edited by:
            Sara D

    Hi,
    As per Bhavesh & Krishna's suggestion, I have changed the JDBC Data type. Now I could able to see the SXMB_MONI error too.
    Latest error:
    When I have tried to test the scenario using xmlApy, I am getting the below error.
    <b>RWB error:</b>
    2007-06-21 03:04:24 Success Receiver JDBC adapter: processing started; QoS required: BestEffort
    2007-06-21 03:04:24 Success JDBC adapter receiver channel DB_CC: processing started; party  , service DB_SERVICE
    2007-06-21 03:04:24 Error Unable to execute statement for table or stored procedure. 'Address' (Structure 'STATEMENT') due to java.sql.SQLException: FATAL ERROR document format: structure 'STATEMENT', no key element found
    <b>xmlSpy Error:</b>
                   <context>XIAdapter</context>
                             <code>RecoverableException</code>
                             <text><![CDATA[
    com.sap.aii.af.ra.ms.api.RecoverableException: com.sap.aii.af.ra.ms.api.DeliveryException: XIAdapterFramework:GENERAL:com.sap.aii.af.ra.ms.api.DeliveryException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'Address' (structure 'STATEMENT'): java.sql.SQLException: FATAL ERROR document format: structure 'STATEMENT', no key element found
         at com.sap.aii.af.mp.soap.ejb.XISOAPAdapterBean.process(XISOAPAdapterBean.java:919)
         at com.sap.aii.af.mp.module.ModuleLocalLocalObjectImpl3.process(ModuleLocalLocalObjectImpl3.java:103)
         at com.sap.aii.af.mp.ejb.ModuleProcessorBean.process(ModuleProcessorBean.java:258)
    I have mapped the EmpId in the mapping as well as in the DB the EmpId is Primary Key. Could you please tell me,what I am missing here?
    Regards
    Sara
    Message was edited by:
            Sara D

  • Two way Asynchronous business process for Webservice to JDBC scenario

    Hi Experts,
    For the webservice to JDBC scenario, I have to use two way Asynchronous business process. Is it possible?
    Scenario : Webservice to JDBC -> Async Call
    JDBC to Webservice -> Async Call
    I have already done with two way Synchronous. Here I would like to know about only Async call. Please provide your suggestions.
    Is it recommended to use Async call when we have Synchronous option?
    For the above requirement I have to create two separate services and in BPM, I have to call one by one..Is it correct?
    Regards
    Sara
    Edited by: Sara D on Dec 18, 2007 8:05 AM

    hi sara,
    yes it is possible.
    In receiver channel JDBC we have a special parameter "Exactly Once Handling " which is to assure async incoming data to be written only once to avoid redundancy.
    Although Synchronous is "Best Effort" but it is considered to be "Worst Case". We can use Sync but try to use Async as much as possible to ensure system performance.
    Ques : For the above requirement I have to create two separate services and in BPM, I have to call one by one..Is it correct?
    yup you have to create two services and you are following right path but this scenario should be in two steps seperately.
    Rergards,
    Mandeep Virk

Maybe you are looking for

  • Itunes 10 adding playlist off itunes to iphone 5

    put 70 songs on itunes fully synced everything onto iphone but playlist wont go over songs have gone onto the iphone but play list hasnt how can i get playlist on iphone with out having to add 1 by 1 on iphone.?? i want to keep my entire library dont

  • Is it possible to post a picture on the Solutions Homepage?

    Hi, We're building a PRM system and we want to spice up our application. We added a picture on the homepage by creating a Global Web Applet but there doesn't seem to be functionality in the other Tabs. Since the Solutions Tab is a tab which is used m

  • "An error occurred while installing OS X" message

    I've got this message during the installation of OS X Maverick : "An error occurred while installing OS X" It seems blocked since a half hour right now, I can't proceed in any way because there are no "buttons", just turning off the power. What shoul

  • Trouble Updating to Windows 8.1 - Error: 0x101-0x30017

    When I try to update to Windows 8.1 from Windows 8, all the initial processes (like updates checking, etc) appear to be happening normally. But finally, I get an Error message saying, Windows 8.1 could not be installed and so, current version of wind

  • When I open Safari, how do I expand the size of the box?

    I can't seem to figure out the MBP command to expand the box once I click on Safari, or another application. I would like for it to take over the entire screen.