Best/Recommended Practices regarding realms & psearches

Update: I've found documentation and materials stating that the performance issues related to having multiple realms and their associated psearches (persistent searches) has been fixed in OpenSSO. While this is reassuring in that my initial design should work, it doesn't necessarily mean it is the best method for deployment. If anyone has an opinion on this I would like still like to hear it.
Hi everyone,
First of all, thank you for any information you have provided/will provide to me. I am new to OpenSSO, so this forum has been a useful early stop for answers to questions.
In my scenario I have a small number of applications (less than 10). Each one has different requirements for HTTP Header variables/parameters, and there are no authorization requirements (fine or coarse). My question is regarding the initial realm configuration:
I have been planning to deploy a single sub-realm for each application. The idea was that it would allow for greater flexibility and customization for each application down the road. I have heard some interesting stories regarding multiple realms, persistent seaches and performance from Access Manager 7.1. In the documentation, I see that persistent searches are disabled by default in OpenSSO 8.0 and that there are a significant number of configuration options available.
-In OpenSSO 8.0, is one sub-realm for each application a recommended or even a good practice method?
--If not, can I still separate header variables by application, or will I need to deliver all the variables to each application and let them take what they want?
-Should I be aiming to configure persistent searches?
--If so, what sort of configuration would be a good baseline to start from?
Any assistance is greatly appreciated.
Edited by: AJS418 on Jun 16, 2009 1:04 PM

sirinek,
I want to provide the ability for other systems, outside of my network domain (Linux and VMS servers), to deliver data files to my server for processing on a regular recurring basis. These file transfers will be unattended and executed via scheduling utilities on those remote systems.
While these remote systems are managed by a trusted sister organization, I want to provide this access in a way that minimizes risk to servers under my responsibility.
What tools and configurations are best suited for this? SFTP? SSH Authorized keys?
Should the account be configured in a manner that limits access?
Thanks for your help.

Similar Messages

What is the best practice and Microsoft best recommended procedure of placing "FSMO Roles on Primary Domain Controller (PDC) and Additional Domain Controller (ADC)"??

Hi,
I have Windows Server 2008 Enterprise and have
2 Domain Controllers in my Company:
Primary Domain Controller (PDC)
Additional Domain Controller (ADC)
My (PDC) was down due to Hardware failure, but somehow I got a chance to get it up and transferred
(5) FSMO Roles from (PDC) to (ADC).
Now my (PDC) is rectified and UP with same configurations and settings. (I did not install new OS or Domain Controller in existing PDC Server).
Finally I want it to move back the (FSMO Roles) from
(ADC) to (PDC) to get UP and operational my (PDC) as Primary.
(Before Disaster my PDC had 5 FSMO Roles).
Here I want to know the best practice and Microsoft best recommended procedure for the placement of “FSMO Roles both on (PDC) and (ADC)” ?
In case if Primary (DC) fails then automatically other Additional (DC) should take care without any problem in live environment.
Example like (FSMO Roles Distribution between both Servers) should be……. ???
Primary Domain Controller (PDC) Should contains:????
Schema Master
Domain Naming Master
Additional Domain Controller (ADC) Should contains:????
RID
PDC Emulator
Infrastructure Master
Please let me know the best practice and Microsoft best recommended procedure for the placement of “FSMO Roles.
I will be waiting for your valuable comments.
Regards,
Muhammad Daud

Here I want to know the best practice
and Microsoft best recommended procedure for the placement of “FSMO Roles both on (PDC) and (ADC)” ?
There is a good article I would like to share with you:http://oreilly.com/pub/a/windows/2004/06/15/fsmo.html
For me, I do not really see a need to have FSMO roles on multiple servers in your case. I would recommend making it simple and have a single DC holding all the FSMO roles.
In case if
Primary (DC) fails then automatically other Additional (DC) should take care without any problem in live environment.
No. This is not true. Each FSMO role is unique and if a DC fails, FSMO roles will not be automatically transferred.
There is two approaches that can be followed when an FSMO roles holder is down:
If the DC can be recovered quickly then I would recommend taking no action
If the DC will be down for a long time or cannot be recovered then I would recommend that you size FSMO roles and do a metadata cleanup
Attention! For (2) the old FSMO holder should never be up and online again if the FSMO roles were sized. Otherwise, your AD may be facing huge impacts and side effects.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

Best Practices regarding AIA and CDP extensions

Based on the guide "AD CS Step by Step Guide: Two Tier PKI Hierarchy Deployment", I'll have both
internal and external users (with a CDP in the DMZ) so I have a few questions regarding the configuration of AIA/CDP.
From here: http://technet.microsoft.com/en-us/library/cc780454(v=ws.10).aspx
A root CA certificate should have an empty CRL distribution point because the CRL distribution point is defined by the certificate issuer. Since the roots certificate issuer is the root CA, there is no value in including a CRL distribution point for
the root CA. In addition, some applications may detect an invalid certificate chain if the root certificate has a CRL distribution point extension set.A root CA certificate should have an empty CRL distribution point because the CRL distribution point is defined
by the certificate issuer.
To have an empty CDP do I have to add these lines to the CAPolicy.inf of the Offline Root CA:
[CRLDistributionPoint]
Empty = true
What about the AIA? Should it be empty for the root CA?
Using only HTTP CDPs seems to be the best practice, but what about the AIA? Should I only use HTTP?
Since I'll be using only HTTP CDPs, should I use LDAP Publishing? What is the benefit of using it and what is the best practice regarding this?
If I don't want to use LDAP Publishing, should I omit the commands: certutil -f -dspublish "A:\CA01_Fabrikam Root CA.crt" RootCA / certutil -f -dspublish "A:\Fabrikam Root
CA.crl" CA01
Thank you,

Is there any reason why you specified a '2' for the HTTP CDP ("2:http://pki.fabrikam.com/CertEnroll/%1_%3%4.crt"
)? This will be my only CDP/AIA extension, so isn't it supposed to be '1' in priority?
I tested the setup of the offline Root CA but after the installation, the AIA/CDP Extensions were already pre-populated with the default URLs. I removed all of them:
The Root Certificate and CRL were already created after ADCS installation in C:\Windows\System32\CertSrv\CertEnroll\ with the default naming convention including the server name (%1_%3%4.crt).
I guess I could renamed it without impact? If someday I have to revoke the Root CA certificate or the certificate has expired, how will I update the Root CRL since I have no CDP?
Based on this guide: http://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx,
the Root certificate and CRL is publish in Active Directory:
certutil -f -dspublish "A:\CA01_Fabrikam Root CA.crt" RootCA
certutil -f -dspublish "A:\Fabrikam Root CA.crl" CA01
Is it really necessary to publish the Root CRL in my case?
Instead of using dspublish, isn't it better to deploy the certificates (Root/Intermediate) through GPO, like in the Default Domain Policy?

Best Practices regarding program RCOCB004

Dear Colleagues
I'd like to discuss the Best Practices regarding the setup of jobs to send Process Messages
In my company we have a batch job with two steps. Each steps contain one variant of program RCOCB004.
The first step will send messages with Status "To be sent", "To be resubmitted" and "To be resubm. w/warng"
The second step will send messages with Status "Destination Error", "Terminated", "Incomplete"
However, this job sometimes fails with error "Preceding job not yet completed (plant US07)"
I'd like to discuss what is best way to set up this job in order to avoid this error and also improve performance.
Thanks and Regards

Dear,
To keep the number of message logs in the system low, proceed as follows:
      1. Check the report variants for report RCOCB004 used in your send jobs.The sending of messages in status "Destination error" or "Terminated" is only useful if the error is corrected without manual intervention;for example with messages of category PI_PHST, if the sequence of the messages or time events was swapped in the first send process.
      2. Regularly delete the logs of the messages that were not sent to the destination PI01 using report RCOCB009 (Transaction CO62).
      3. Check whether it it is actually required to send messages to the destination PI01.This is only useful if you want to evaluate the data of these messages by means of the process data evaluation, or if the message data including the logs are to be a part of the process data documentation or the batch log. Remove destination PI01 for the message categories to which the above-mentioned criteria does not apply.You can activate destination PI01 again at a later stage.
      4. If you still want to send process messages to destination PI01, carry out a regular archiving of your process orders.As a result of the archiving, the message copies and logs in the process message record are also deleted.
      5. If the described measures do not suffice, you can delete the logs using Transaction SLG2.
Control recipe send = RCOCB006 and you need to set the job to run after event SAP_NEW_CONTROL_RECIPES
Process message send = RCOCB002 (cross plant) and RCOCB004 (specific plant). You need to create variants for these.
Check the IMG documentation in PPPI for control recipes and process instructions where there is more information about this. Also standard SAP help is quite good on these points.
Finally, if you are automatically generating process instructions then you need program RCOCRPVG plus appropriate variants.
Hope it will help you.
    Regards,
R.Brahmankar

Need help regarding mm best purchasing practices..

hi
could any one tell me about the sap mm best purchasing practices.

Here find below for the best practices that can be considered in General
1) Master Data
a) Central Master data with uniform naming convention
b) Master Maintenance tool (MDM) with workflow for approval
2) Collection of Requirements from User departments and Approval-
a) Creation of PR in SAP and Release strategy with work flow
b) PR creators and PR Release authorities (work flow) are linked with HR org structure.
c) Approval/Notifications for in action/Reminders can be routed with the help of workflow.
3) Budget Control for PR-
a) By activating Funds Management OR
b) By Internal Order OR
c) Customer Exit to validate The PR value/Price according to allocated budget
4) Buyer activity
a) Automatic source determination and automatic creation of PO with release strategy.
b) PO creation with reference to Long term contract (Release orders) for regular vendors plus Global contract
c) Uniform way of raising PO with terms and conditions
c) RFQ for Bidding Process plus release strategy.
d) Vendor rating
e) PO Price Difference Tolerance check/Validation in comparison with PR.
5) GRN
a) Central warehouse
b) Acceptance of Materials subject to quality check
c) Normal Service Procurement with Service Master
d) Service entry sheet with release strategy.
5) Invoice
a) Invoice Block parameters/Tolerances
b) Invoice Approval work flow
c) GR based invoice Verification for Normal Purchase.
d) Activate Material Ledger to overcome the disadvantages of posting Invoice with Price difference in terms of valuation
e) Uniform way of Invoice Posting/Payment
f) ERS

Best Business practice document for FI.

Hi All,
where i can get the Best Business practice documents for FI. please give me Link.
Regards
Manohar

hi
pls go through this link
http://help.sap.com/bp_bblibrary/600/BBlibrary_start.htm
Thanks & Regards
phaneendra

Whats the BEST Deployment Practice for appsTier (2 Node) with RAC Database

Hi All,
Whats the BEST Deployment Practice for appsTier on Shared APPL_TOP between two application tier Nodes and a RAC Database.
Regards
Satish

Satish,
Could you elaborate; are you looking for how to distribute the tiers(forms, web, conc., etc.); are you asking about PCP (parallelt concurrent processing)..
Regards,

Best business practices

I want to know the best business practices suggested by SAP to improve client revenues.

11,
Your question is vague. For an equally vague answer, try the SAP Best Practices web site.
http://help.sap.com/bestpractices
ERP Baseline BP Building blocks, localized for India, can be found at
http://help.sap.com/saap/sap_bp/BL_ERP605_IN/html/Content_Library_BL_EN_IN.htm
Best Regards,
DB49

What are the best security practices for your forms and databases

What are some of the best security practices to follow to
ensure your database isn't attacked with injections, forms abused
with snippets of code, and mass spam DB inserts on your
forms?

On Sat, 29 Mar 2008 17:17:01 +0000 (UTC), "jsteinmann"
<[email protected]> wrote:
>What are some of the best security practices to follow to
ensure your database isn't attacked with injections, forms abused
with snippets of code, and mass spam DB inserts on your forms?
David Powers books on php for Dw give detailed advice on how
to do
forms, first with html, and then validate them with secure
php
scripts.
http://foundationphp.com/
~Malcolm N....
~

How to follow best coding practices and make this code runable.

How to change this code to make it work and follow best coding practices.
This code is to add fields to internal table LIST which already exist.
In the loop are all the selections which are to be made.
But i am new to ABAP and not sure how to make this work.
please help me.
DATA: wa_list LIKE LINE OF list,
      l_v_index TYPE i.
DATA: t_price_result1 TYPE STANDARD TABLE OF komv WITH HEADER LINE INITIAL SIZE 0.
DATA: wa_result LIKE LINE OF t_price_result1.
LOOP AT list INTO wa_list.
l_v_index = sy-tabix.
*GET MATERIAL DOCUMENT(MBLNR) AND DELIVERY NUMBER(XBLNR)
SELECT mkpf~mblnr
          mkpf~xblnr
   into (wa_list-mblnr, wa_list-xblnr )
*            INTO i_list
   from mkpf inner join mseg
*   up to 1 rows
    on mkpf~mandt = mseg~mandt
    and mkpf~mblnr = mseg~mblnr
    and mkpf~mjahr = mseg~mjahr
    where mseg~matnr = wa_list-matnr
     and mseg~charg = wa_list-charg
     and mseg~kunnr = wa_list-kunnr
     and mseg~sobkz = wa_list-sobkz
     and mseg~werks = wa_list-werks
     and mkpf~budat in budat.
                                                            "RFC3762
ENDSELECT.
wa_list-mblnr = list-mblnr.
wa_list-xblnr = list-xblnr.
* GET POSNR FROM TABLE LIPS
SELECT posnr
FROM lips
INTO list-posnr
up to 1 rows
WHERE vbeln = wa_list-xblnr AND
             matnr = wa_list-matnr.
ENDSELECT.
wa_list-posnr = list-posnr.
* GET SALES ORDER #
SELECT vbelv
FROM vbfa
INTO list-vbelv
up to 1 rows
*        INTO wa_list
WHERE vbeln = wa_list-xblnr.
ENDSELECT.
wa_list-vbelv = list-vbelv.
*GET PO
SELECT bstkd
FROM vbkd
INTO list-bstkd
up to 1 rows
WHERE vbeln = wa_list-vbelv
      AND posnr = 0.
ENDSELECT.
wa_list-bstkd = list-bstkd.
*get serial number
SELECT SINGLE obknr
   FROM ser01
   INTO list-obknr
   WHERE lief_nr = wa_list-xblnr
       AND posnr = wa_list-posnr.
wa_list-obknr = list-obknr.
SELECT sernr
FROM objk
INTO list-sernr
up to 1 rows
WHERE obknr = wa_list-obknr.
ENDSELECT.
wa_list-sernr = wa_list-sernr.
*get date
SELECT budat FROM mkpf
INTO list-budat
up to 1 rows
where mblnr = wa_list-mblnr.
ENDSELECT.
wa_list-budat = list-budat.
*get CLP
SELECT   vkorg vtweg spart
INTO (list-vkorg, list-vtweg, list-spart)
up to 1 rows
FROM vbak WHERE vbeln = wa_list-vbelv.
ENDSELECT.
wa_list-vkorg = list-vkorg.
wa_list-vtweg = list-vtweg.
wa_list-spart = list-spart.
SELECT pstyv
INTO list-pstyv
FROM vbap
up to 1 rows
WHERE vbeln = wa_list-vbelv AND posnr = wa_list-posnr.
ENDSELECT.
wa_list-pstyv = list-pstyv.
CALL FUNCTION 'Z_SD_PRICING_CONDITION'
EXPORTING
i_organization                  = wa_list-vkorg
i_dist_channel                  = wa_list-vtweg
i_division                      = wa_list-spart
i_customer                      = wa_list-kunnr
i_plant                         = wa_list-werks
*      i_pricng_date                   = sy-datum
i_material                      = wa_list-matnr
*   I_SALES_UNIT                    = 'EA'
*   I_QUANTITY                      = '1.000'
i_stor_loc                      = '0001'
i_item_cat                      = 'TAN'
*   I_AUART                         =
*   I_REFRESH                       = 'X'
*   I_KOMP                          =
*   I_KOMK                          =
* IMPORTING
*   E_MES_TYPE                      =
*   E_MES_NUMBER
*   E_MESSAGE                       =
TABLES
t_price_result                  = t_price_result1
* EXCEPTIONS
*   CUSTOMER_NOT_FOUND              = 1
*   PLANT_NOT_FOUND                 = 2
*   MATERIAL_NOT_FOUND              = 3
**   PLANT_MATERIAL_NOT_FOUND       = 4
*   SALES_DATA_NOT_FOUND            = 5
*   ORG_UNIT_NOT_FOUND              = 6
*   UNABLE_TO_CALCULATE_PRICE       = 7
*   UNABLE_TO_FORMAT_PRICE          = 8
*   MANDATORY_INFOR_MISSING         = 9
*   OTHERS                          = 10
LOOP AT t_price_result1.
IF t_price_result1-kschl = 'ZPR2'.
    wa_list-kbetr = t_price_result1-kbetr.
ELSE.
    wa_list-kbetr = 0.
ENDIF.
ENDLOOP.
MODIFY list FROM wa_list INDEX l_v_index.
ENDLOOP.

Hi,
Lets first start from your Select Statement.....Replace your SELECT ....ENDSELECT by SELECT Into Internal Table
Your program is having a SELECT...ENDSELECT within LOOP...ENDLOOP........One should avoid doing this as far as possible.
SELECT mkpf~mblnr
              mkpf~xblnr
INTO itab
for all entires i_list
from    mkpf inner join mseg
    on   mkpfmandt = msegmandt
    and mkpfmblnr = msegmblnr
    and mkpfmjahr = msegmjahr
    where mseg~matnr = i_list-matnr
       and mseg~charg = i_list-charg
       and mseg~kunnr = i_list-kunnr
       and mseg~sobkz = i_list-sobkz
       and mseg~werks = i_list-werks
       and mkpf~budat in budat.
Restructure youe complete code with this approach and Share your Finding's.
You can also think of using a SAP Standard FM.
Anyway..What is the objective/Output of this report?

Best/Easiest Practice for Distribution of Webhelp files for Fat(ish) Client Application

So another in my long line of questions in trying to change the implementation of the help systems at my new employer.
So, the pressure is to convince the existing guard to toss out the old method and go with a new method... One of the issues has come up for CSH Webhelp (via RH10)...
Apparently, in the old method (where every help topic was it's own CHM - no, I'm not kidding). They kept it that way so that any time a help file was updated, they could just send out that one chm to update that one topic.
Now they are worried that if we switch to webhelp using topics in one single big project that we can't just send out a single updated file any more...
So I'm trying to get ammunition as to how updates to the help can be distributed without it being a big hassle...
We do have small updates that go out about every week, and they are afraid that going to the webhelp (1 project with lots of topics) method will require more time and effort for the techs because they will have to complete the update of a huge help system every time.
One solution we have suggested is that we only update help files on major releases and add any changes to help procedures in the Release Notes or in a separate PDF and also include a note that the help files "will be updated to reflect this change in the XX/2015 XYZ Release).
Does ANYONE have any other ideas of how distribution could be done efficiently so that we don't have to continue this "project per topic" fiasco?
HELP!!! PLEASE!!!!

Amebr - you hit the nail on the head... i want to apologize to everyone for all this mass hysteria...but this has been a freaking rollercoaster... one day they are happy with the plan, the next day they decided they want to complicate it more... So now my job is to find out how viable and how tricky and perhaps how dangerous it will be to send out JUST the files that have been changed. Especially for CSH!
Anyone have any experience with this or have any advice? Peter? I suspect you might know how this might work... are they any pitfalls to watch out for.. I just have this fear of sending out a few files from an entire project... Altho, it appears when I publish, ONLY the files that have been edited in some way show a new date.. that includes non-topic files - so i'm assuming sending all those will keep the TOC, Index, and Search features working properly... as well as incoming and outgoing links from an edited topic?
Another question would be how to handle new images in a project... as the image folder tends to be the largest, i don't want to have to send the entire image folder... Thoughts...???? Advice? Jeff? Peter? Amebr? Bueller? Bueller? Bueller....?
THANKS!Best/Easiest Practice for Distribution of Webhelp files for Fat(ish) Client Application
OH... and Jeff... my apologies for the misnomer of using the term "Fat-ish" client in reference to this... I totally misspoke and should have said Mobile App... but in my mind, any time you have to download something to use it, it's a fat client... sorry! :-/

Orcle inventory-is it integrated and does it capture best busness practics

Hello all,
I have a basic but imp qn , for which I have tried to find a comprehensive answer but in vain
I would like to know what features in oracle apps make you say that it is integrated and captures best business practices..
provide your views or help me to find resources that will clear my query....
Thanks a lot
Anand

Anand,
Your question is not clear for me to provide an answer. Basically, the shared entities like item, SOB etc provides the integration of various models and Security, Validation Rules provide the security for the data.
Make your question clear, I will try to answer.
Thanks,
Saravanan

Oracle inventory-does it capture best business practices

Hello all,
I have a basic but imp qn , for which I have tried to find a comprehensive answer but in vain
I would like to know what features in oracle apps make you say that it is integrated and captures best business practices..
provide your views or help me to find resources that will clear my query....
Thanks a lot
Anand

Anand,
Your question is not clear for me to provide an answer. Basically, the shared entities like item, SOB etc provides the integration of various models and Security, Validation Rules provide the security for the data.
Make your question clear, I will try to answer.
Thanks,
Saravanan

Reg: Provide the best possible Scenarios regarding Planning feature of Analysis office as given below

Hello Everyone,
I am able to save the data back to the target from analysis workbooks using the Planning feature of the tool.
Please, can anyone Provide the best possible Scenarios regarding Planning feature of Analysis office.
Any answer is appreciable
Regards,
Karteek

Hi
Thank you for your post.
The reason why your contacts didn't display is currently the Tamil language is not supported by the Windows 7.5 OS and we do not have any information if this language will be supported in the future or not. The current list of supported languages are:
Brazilian Portuguese, Chinese (simplified and traditional), Czech, Danish, Dutch, Finnish, Greek, Hungarian, Japanese, Korean, Norwegian (Bokmål), Polish, Portuguese, Russian, and Swedish.
In regards to being a smart phone, these come from a variety of manufactures using a variety operating systems each having there own unique way of functioning and features and as such it is the responsibility of the consumers to make an informed choice on what device would suit them based on specifications of the device which includes hard ware or software. There is no unified smartphone requirements as each use's different operating systems.
So when purchasing a new device it is advisable to do some research on what device would suit your needs and if need be to speak to your local authorised mobile phone retailers for there expert advice. If at the point of purchase you were mis-advised and told that the Windows OS did support the Tamil language then this is something you will need to go back to the point of purchase otherwise it is your responsibility to make sure you choose a device that fully suit your needs.
Regards
If you find this post helpful, a click upon the white star at bottom would always be appreciated.
If it also solves your problem, clicking ACCEPT AS SOLUTION below it will benefit other users!

Best Recommendation to link Central SLD to LMDB

hi
What is your suggestion to connect central SLD on SAP Netweaver to LMDB on Solution Manager 7.1 ?
Q1.
I can think of 2 options:
1) Central SLD (NW) > Local SLD (SM7.1) > LMDB
2) Central SLD (NW) > LMDB
Is it necessary to configure a local SLD on solution manager 7.1 and pull data from the central sld (NW) to syn to the LMDB?
Or can we direct syn from central SLD to LMDB?
What are the pro and cons for the 2 options?
Q2.
During the setup of the solution manager, it is required to choose an option of the SLD Destination
1) Register in existing central SLD
2) Configure a local SLD
I realise both questions are somehow link and can affect my setup.
For instance:
if i decided for (Central SLD (NW) > Local SLD (SM7.1) > LMDB) , i will need to choose Configure a local SLD
If i decided for (Central SLD (NW) > LMDB), i will choose Register in existing central SLD.
So which is better decision? Secondly, SAP recommended to configure a local SLD. Can i configure and not used it if i happened to go for Central SLD (NW) > LMDB? SInce no local SLD is required.
Pls advise. Thanks in advance
Regards
Gary

Hello Gary,
The right option is
2) Central SLD (NW) > LMDB
Is it necessary to configure a local SLD on solution manager 7.1 and pull data from the central sld (NW) to syn to the LMDB?
No, it is not necessary. Solution Manager's LMDB needs to be fed with a SLD, local or not.
Or can we direct sync from central SLD to LMDB?
Yes, you can.
What are the pro and cons for the 2 options?
There aren't really pros and cons. It's up to you to maintain a SLD centrally outside Solman or a local SLD in the Solution Manager.
Regarding your Q2, please make sure you are not refeering to Solution Manager 7.0 EHP1 recommendations, because the documentation for EHP1 in fact recommends a local SLD.
For configuration options and examples, check the [Setup Guide Landscape Management Database|https://websmp109.sap-ag.de/%7Esapidb/011000358700000551222011E.URL]. Also there's a Wiki topic article: http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=250514114
I will leave the official recommendation part to another contribuitor to share thoughts in this topic. Meanwhile may you please point out where did you see such recommendation?
Regards
Guilherme
Edited by: Guilherme Balbinot on Sep 30, 2011 11:40 AM

Best/Recommended Practices regarding realms & psearches

Similar Messages

Maybe you are looking for