CALL_FUNCTION_SINGLE_LOGIN_REJ- No authorization to log on as a Trusted System (L- RC=1 T-RC=1).
Hi All,
i have created a trusted connection(say system A_100 and B_100,---100 is a client) as per SAP note 128447 - Trusted/trusting systems
I have all required authorisation i.e s_rfcacl,S_rfc ,s_rfc_tt.
i am able to remote logon from system B_100 to system A_100 ,but issue in when i try to logon from system A_100 to system B_100.
error is -
No authorization to log on as a Trusted System (L- RC=1 T-RC=1).
i can see run time error in system B_100 as with user SAPSYS and client 000(why it is showing this user and client )
CALL_FUNCTION_SINGLE_LOGIN_REJ
Details-
Category Installation Errors
Runtime Errors CALL_FUNCTION_SINGLE_LOGIN_REJ
Date and Time 08.08.2014 09:07:04
Short text
No authorization to log on as a Trusted System (L-RC=1 T-RC=1).
What happened?
The current program had to be terminated because of an
error when installing the R/3 System.
What can you do?
Note which actions and input led to the error.
For further help in handling the problem, contact your SAP administrator
You can use the ABAP dump analysis transaction ST22 to view and manage
termination messages, in particular for long term reference.
Error analysis
An RFC call (Remote Function Call) was send with an invalid user ID
"XXXX " or the caller system is not registered as a Trusted System in the
target system.
Information on where terminated
Termination occurred in the ABAP program "SAPMSSY1" - in
"REMOTE_FUNCTION_CALL".
The main program was "SAPMSSY1 ".
In the source code you have the termination point in line 113
of the (Include) program "SAPMSSY1".
Source Code Extract
Line SourceCde
83 COMMUNICATION SEND ID convid BUFFER header.
84 IF sy-subrc EQ 0.
85 PERFORM (sy-xform) IN PROGRAM (sy-xprog).
86 ELSE.
87 MESSAGE a800.
88 ENDIF.
89 ENDFORM. "cpic_call
90
91 *&---------------------------------------------------------------------*
92 *& Form remote_function_call
93 *&---------------------------------------------------------------------*
94 * text
95 *----------------------------------------------------------------------*
96 * -->VALUE text
97 * -->(TYPE) text
98 *----------------------------------------------------------------------*
99 FORM remote_function_call USING value(type).
100 DATA rc TYPE i VALUE 0.
101 DATA: l_syxform TYPE syxform,
102 l_syxprog TYPE syxprog,
103 l_cbe TYPE i.
104
105 * necessary variables for class based exceptions
106 DATA: l_root TYPE REF TO cx_root.
107
108 DO.
109 *
110 * with ID 'CLException' we determine, whether the caller is
111 * class based excptions or not
112 *
>>>> CALL 'RfcImport' ID 'Type' FIELD type
114 ID 'SYXForm' FIELD l_syxform
115 ID 'SYXProg' FIELD l_syxprog
116 ID 'CLException' FIELD l_cbe.
117
118 IF l_syxprog = 'JAVA'.
119 SYSTEM-CALL plugin
120 ID 'JAVA' VALUE 'FORW_JAVA'
121 ID 'RC' VALUE RC.
122 * if there is no rollout on the JAVA side which
123 * rolls both, JAVA and ABAP, we return to the
124 * C-Stack and reach this point
125
126 * in case there was an rollout, the ABAP-C stack is lost
127 * and we jump direkt to this point
128
129 * here we trigger the rollout on this Abap side with
130 * the following statement
131 SYSTEM-CALL plugin
132 ID 'JAVA' VALUE 'ROLL_OUT'
I have also referred sap note-1627901 - Trusted RFC troubleshooting
No luck.
Do let me know if additional information is needed .
Kind Regards,
Sumit
Hi Sumit
1. Is this both system Support pack level are same?
2. As you said that you SAP_Basis 7.31 - support package level?
3. Have you check the SAP note 128447 - Trusted/trusting systems they are given ABAP runtime correction 2021691 - CALL_FUNCTION_SINGLE_LOGIN_REJ and trusted RC=1
4.
one question - why it is working in system B and not in system A.
Its may be software bug for that they give ABAP runtime correction
Regards
Sriram
Similar Messages
-
Authorization to logon as trusted system (Trust
Hello everybody,
I want to configure the RFC between the solman and IDES server. so i have done the following things
1. Create a user sapuser in solman and Ides server with the Authorizations, SAP_SUPPDESK_CREATE,SAP_SV_FDB_NOTIF_BC_ADMIN,ZSAP_S_RFCACL,ZSAP_SOL_SERVTRANS_CREATE
2. Create the RFC named SOLTRUSTED in IDes with detail as
Target Host :- solman
I.P :- 192.168.1.4
System No :- 00
Trusted System : No
After that i have test the connection its working, Same as Remote Logon, . Logon screen asking for user name and password is also working fine.
3. execute the T.cdoe SMT1 create a Trusted System SOL with details as
Trusted System SOL
Technical settings
RFC Destination SOLTRUSTED
Authentication type 3
message server solman
Trusting system
Trusting system RIS
Application server ides_RIS_08
here when select Entry-->authorization check -->trusting system here 2 times logon screen appear for solman logging and generate the Error " Error when opening an RFC connection
I have also set the authorization for the object S_RFCACL with required field value as *
Also i have check the TRUSTING_SYSTEM@SOL Rfc, then the connection test successfully done but at Remote Logon No, generate error as - authorization to logon as trusted system (Trust
So please guide/suggest me that any missing or additional steps missing for configure the trusted and trusting system
Thanks
GaneshHello,
As per your suggestion, i have two system Solman and IDES, I want to connect solman and Ides
1. i have create the RFC in IDES
RFC name SOLTRUSTED
Connection type 3
Target Host SOLMAN
System No 00
ON clicking Connection Testing - successfully
On clicking Remote Loging, Logon screen is display, on entering Client, Username, and password successfully logon to the solution manager.
IP address 192.168.1.4
As per suggetion of second step, I have been trying to create the trusted system, i enter the name SOLTRUSTED,at the logon screen enter the client 901, user name and password
Now on the Trusted System means on Solution Manager
create the RFC named RISCLNT999
Connection type = 3 and descrption
enter the target host - ides
system number - 08
trusted system = yes
client -999
check the current user option
and SAVE
All the setting i have done, but from the IDes server when i use the command Smt1 and select Entry-->Authorization check -->Trusting system, it display logon to solman screen 2 times display the error message "Error when opening an RFC connection"
Entry-->Authorization check -->Current server, it display logon to solman screen display the error message "No authorization to logon as trusted system (Trusted RC=0)"
I have metion in previous message that i was maintain all the necessary authorization.
so please suggest me how to solve the authorization problem?
Thanks
Ganesh -
Error message 'Please log on to the SAP system' when selecting 'shop'
In SRM when we click on 'shop' or 'Goods Receipt' we get the error 'ITS System Information 'Please log on to the SAP System' where it prompts user to log on again. However when user logs on it opens up the same screen again saying please log on to the sap system.
This only happens when we shop using the External ITS (wgate), EBP works fine using the Internal ITS.
Please can someone help.
Kindest Regards
PaulHi
<b>Please try this -></b>
<b>Look using SRM transaction SITSPMON and RZ20, RZ21.</b>
Also Please check <u>SAP OSS Note 517860</u>
<b>-> For ITS, You need to maintain the RFC connection in the connection type "T" i.e TCP/IP. Maintain in the Table - TWPURLSVR.
Ensure that you have maintained correct entries in the TWPURLSVR table using SM30 transaction for the ITS Web path (http or https address path). Note you are passing port - 8001 in the address here. Incase you face problems, Please ask you BASIS person to help you out.
-> Please ask you BASIS person to help you out for maintaining ITS settings. (Ensure IACOR service is running properly - ITS server is running), through the transaction SMICM
-> What all logs appear in SLG1 and SM21 transactions after publishing all the Internet services.
-> If you are using ITS 6.2,you need to do the IACOR settings for SRM on the ITS server.Also in SE80 mainatin the Site for SRM system.After this ,you can publish all the ITS services usig the report,W3_PUBLISH SERVICES.</b>
<u>Related links -></u>
Integrated ITS :Login Problem
Re: ITS_CANT_LOAD_INCLUDE in BBPstart service
Re: ITS_DEST_NOT_FOUND
Re: ITS Configuration
Re: ITS Template not found
Do let me know.
Regards
- Atul -
Unable to log in to portal after system copy
Good day
I have copied my production portal system to a test system. I am using an ECC Abap system as my user store. The portal start successfully and I am able to access the Visual administrator.
I am however unable to log on to the portal. The error I get is "User authentication error".
Below is an extract from the security log:
#1.5#0011259C05FB0054000002F500001B9800043F56F6157AED#1195542635224#/System/Security/Authentication#sap.com/irj#com.sap.engine.services.security.authentication.logincontext#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Error#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED
User: N/A
Authentication Stack: ticket
Login Module Flag Initialize Login Commit Abort Details
com.sap.security.core.server.jaas.EvaluateTicketLoginModule SUFFICIENT ok false false true
com.sap.security.core.server.jaas.CreateTicketLoginModule SUFFICIENT ok false false true
com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule REQUISITE ok true true true
com.sap.security.core.server.jaas.CreateTicketLoginModule REQUISITE ok true exception true null#
#1.5#0011259C05FB0054000002F700001B9800043F56F61580BC#1195542635240#/System/Security/Audit#sap.com/irj#com.sap.security.core.util.SecurityAudit#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Warning#1#com.sap.security.core.util.SecurityAudit#Plain###Guest | LOGIN.ERROR | null | | Login Method=[default], UserID=[oostw], IP Address=[172.27.2.137], Reason=[Access Denied.]#
Please can someone assist.
Thanks
WilhelmHello!
It looks like your system is configured for ticket authentication. As you did a system copy the SSO-ticket might not be working anymore. If this is the case you need fix the SSO or you need to re-configure your Portal (at least temporarily) to allow other authentication methods (like basic password authentication).
You can configure the order of the authentication methods in VisualAdmin and set the 'levels' (Required/Sufficient/etc.) there as well.
Hope this helps,
Jörg -
Error in Local Message System: No authorization to logon as trusted system
Dear all,
When I am posting the message in Production system which I have configured with my solution manager
I am getting the error like "Error in Local Message System: No authorization to logon as trusted system. So trusted message can not be posted"
I checked with SM59 which I created the RFC destination, in that i selected for both the system ie Solution manager as well Production system 'Trusted System=Y'
Please suggest me how to solve this issue
Regards
SudharshanHi,
please use the search function.
There are ALOT of topics regarding Trusted RFCs, table BCOS_CUST, RFC Back Destination to Sol Man and so on.
/cheers -
SMT1 creating trusted system error No authorization for object S_ADMI_FCD
SMT1 creating trusted system gives error No authorization for object S_ADMI_FCD even after giving authorizations in both the system. Was not able find the issue by debugging.
Thanks and appreciate your response.
Betcy
Moderator message: not directly related to ABAP development, please have a look in the SAP Netweaver or Security forums.
Edited by: Thomas Zloch on Jan 26, 2012 10:37 PMHi,
Have you tried assigning authorizations to the id from which you are creating trusted system?
If no, please do it and check.
Also check in SU53 after getting the authorization error.
Also check the connection between two systems in SM59.
Cheers,
Raja.D -
Can't log-in to iCloud in System Preferences using Apple ID
Hi,
I've recently updated to iCloud and have now also recently got a new MacBook Pro Retina running Lion 10.7.4
I'm trying to log in to iCloud through System Preferences but when I enter my Apple iD password - it won't accept it - the process just hangs.
I can sign in to iCloud.com without any problem - I can also sign into iTunes and my Mac email without any problem either. I can log in using my Apple iD on my iPhone and iPad too with no problem.
I had already verified my me/mac.com email address with iCloud before this.
A possible related problem is that now the Mail program will not remember my mac.com email address settings (I have to re-enter all the details each time I open Mail - have swapped over to Thunderbird for now) and Safari won't remember any of my bookmarks when I quit the program.
I have also tried resetting my Apple iD password and this made no difference to logging into iCloud.
Anybody else having similar problems?
Thanks
JohnI do have the same problem, can't access to my iCloud account on my Mac, but have no problems accessing with my mobile devices and through internet.
I get a message error: "password or user name not recognized"
On the other hand, before this problem, iCalendar was working properly, but adressbook didn't sync.
Lets see if we get soon this problem solved! -
Run DeploymentType NEWCOMPUTER logged in to existing Operating System.
Hi,
I've read quite a few articles but don't seem to be able to find the answer I'm looking for.
Is it possible to run a NEWCOMPUTER deployment Scenario when the user is already logged into the old operating system / computer.
So the service desk will run the litetouch.vbs from the clients computer and there will be two task sequences available
Refresh: Run Scanstate and install Win 7 on current system drive, loadstate.
NewComputer: Do not run Scanstate, reboot, repartition, reformat and install win 7
I have tried creating a task sequence and adding "Task Sequence Variables" for SkipDeploymentType=YES and DeploymentType=NEWCOMPUTER but it always runs a Refresh with USMT.
I have also tried adding the above variables to the litetouch.vbs command line.
Thanks,
Jason.Sorry, I know this post is quite old but it was the first thing that came up in my searches while researching and just want to add my 2 cents.
Actually, it is possible to get a new computer task sequence working from the OS. WinPE does get placed on the local disk, but it is loaded into the RAMdrive at boot so the sequence process does not get lost (at least, this is my understanding).
I modified a standard client task sequence in MDT 2012 as follows:
At the start of the validation and state capture phases, set task sequence variable "DeploymentType" to "NewComputer" to override the script's attempts to call it a "refresh".
In the state capture phase, modify the constraints on the 'refresh only' folders to: "Task Sequence Variable OSVersion not equals WinPE".
In the preinstall phase, I got rid of the 'new computer only' after moving the 'format and partition disk', 'copy scripts' and 'configure' items up above 'enable bitlocker'/'inject drivers'.
At this point, I was getting an error after rebooting in the preinstall phase when it attempted to inject the drivers. I discovered that the error was caused by the script attempting to find the windows partition as sized and serial-numbered BEFORE
the task sequence formatted and repartitioned the drive. I did not see where the task sequence variables for this information were being set, so I backed up and modified ZTIUtility.vbs to exclude the search constraints by partition size and volume serial
number.
In my ZTIUtility.vbs, line 3403 now looks like this:
oEnvironment.Item(sTagVariable) = "SELECT * FROM Win32_LogicalDisk WHERE VolumeName = '" & oDiskPart.VolumeName & "'"
In effect, If your OS had more than one drive, or a non-system disk labeled the same as the volume name you assign in your task sequence, you could run into problems.. But this isn't an issue for us.
After doing that, I can now use this task sequence either from pxeboot or directly from the OS. Now if I get a ticket complaining that the computer is running slow, I can just RDP in from home and it'll have a fresh image and be back on the domain
in the morning :) -
Specify log off page for each system in WebUI
I am trying to define log off URL for the CRM WebUI. I have been able to define the URL on the technical profile. The problem for me is that the url points to a system specific page. In other words, when I define in the development system that I want to go to the logon page when I log off I use the URL of that points there. When this customizing later is transported to the quality system and later to the production system, the log off URL still points to the log on page of the development system.
Is there any way to specify that this url points to the log on page of the system that were logged off?Hi Erik,
this is not possible in the SAP standard AFAIK.
The URL in the customizing of the technical role profile is read using the method CL_CRM_UI_TP_SRV->GET_URL_PART( ). In order to implement your requirement you could, e.g. implement a custom table containing the client, system name and URL. Additionally, you could then enhance CL_CRM_UI_TP_SRV->GET_URL_PART( ) using an implicit enhancement spot to read this custom table an return the entry for the system ID if present and the default customizing otherwise.
Best,
Christian -
How can I turn off archive logs are being generated by system? (ugrent)
Dear all,
How can I turn off archive logs are being generated by system?
Best Regards,
AmySorry not to you @kamran its to OP.accidently it reply button pressed for you
SQL> shutdown immediate
Database closed.
Database dismounted.
ORACLE instance shut down.
SQL> startup mount
ORACLE instance started.
Total System Global Area 171966464 bytes
Fixed Size 787988 bytes
Variable Size 145750508 bytes
Database Buffers 25165824 bytes
Redo Buffers 262144 bytes
Database mounted.
SQL> alter database noarchivelog
2 /
Database altered.
SQL> Khurram -
Does MAC OS log DVD burning in any system log?
Hellor MAC experts,
We have many MAC OS X computers in our organization. There is a possibility that one user has burned all his computer data to a DVD.
Does MAC OS X log such activity in any system log? If yes, how to locate that? What about connecting external HDDs and flash drives also?
Sunrise?? which log does what ? >>
http://www.mactech.com/articles/mactech/Vol.23/23.03/2303Shell-WhichLog/index.ht ml -
No authorization to logon as trusted system (Trust ed RC=0)
Hi Guys,
I am working in CHARM implementation and i am facing a problem while importing the transport request from development to quality system.
once i select the pass correction to test action in urgent correction the system is giving an warning message(No import into test system has taken place yet).
When i go to task plan there the system is showing the transport request is succesfully released, but Import transport request as RED.
Description of the Error: System cancel RFC destination SM_QASCLNT410_TRUSTED, Call TMW_SET_PROJECT_SWITCHES: No authorization to logon as trusted system (Trust ed RC=0).
But when i do the pass correctio to test with SAP_ALL in Quality system it is successfully importing to quality system.
I have also assigned S_RFCACL to developer role in quality system. kindly give ur valuable inputs as it is very urgent.
Thanks&Regards
RajuPenmetsa,
Interesting name - trusted connections are somewhat interesting to work with - please check them by using the 'Remote Logon' button with the username check set to current user (if you are using a specific user, there is no real reason to use a trusted connection). When doing this, follow OSS Note: 128447 which is all the troubleshooting for Trusted Connections with all the return codes.
From what you are showing with the RC=0, that is ususally authority - you probably don't have the role setup right on the QA system. Personally, I wouldn't bundle this because there are different flavors of this role that should be assigned to certain users. You should go check with your Security people for the best way to assign the proper credentials to end-users. A improperly configured S_RFCACL will allow one to access a remote system with a different userid!! Which is not really a good thing to have as a possiblity for daring developers that are looking for interesting things to play with.
Anyhow - hope that helps, if it answers your question, please set the thread to answered. -
Authorize mulitiple log ins --1 computer
if i authorize a computer under my itunes account will it work for all users on that machine? My kids have different log ins on the same computer. But we all use my account
Ok thank you. So itunes needs to be open for both people at the same time in order to share? I used to use homeshare when i was in a flatshare and could access libraries even if my flatmates were not in and their computers turned off so was hoping that it would also work on separate log-ins.
And given the above out only option would be for me to import the songs i want into my library using the source folder as the same that he stores his music in on the hard-drive? -
Interpreting the authorization trace log: RSSM
The end of the trace log has a list of CHANMID and KID that were not displayed. Does anyone have a quick way of interpreting these in terms of master data and hierarchy nodes?
ThanksThanks for your reply. I am securing on multiple dimensions. The list at the end of the logs "purports" to show the values that I asked for but could not see because of my lack of authorization. I want to be able to interpret those CHANMID values in understandable terms so I can adjust my authorizations etc.
I could look at the tables you suggest but since I am securing on more than one dimension I presume that I would need to know which infoobject was associated with which CHANMID and KID before I started? -
SAP BI 7.3 Analysis authorization transport log
Hi,
We have transported a Analysis authorization to production system, I would like to know the exact changes moved through this transport carrying a particular analysis authorization.
The issue here is RSECVAL_CL has not recorded the changes done on this particular Analysis authorization in development system.
So please suggest if there is any table where we can look to find the exact changes made by this transport request.
Regards,
Ananth
Edited by: Anantharama Shivashankar on Oct 26, 2011 6:48 PMThe issue here is RSECVAL_CL has not recorded the changes done on this particular Analysis authorization in development system
I guess that is a problem and should be reported to SAP. However this table will give the value that has been deleted. New value to be checked in analysis authorization itself.
EDITED : If the AA been transported before then might look their content and compare them.
Regards,
Arpan Paik
Edited by: P Arpan on Oct 31, 2011 3:44 PM
Maybe you are looking for
-
Hi, I am getting an Error while processing Customer Payments on T Code : F-28, The Error is as follows : 1 item(s) was/were not activated due to online payment block : Message no. F5528 Please help me resolve the issue Regards, Sagar
-
i need to reset security question but the email that was saved for changing the password and security question is blocked , what can i do? i purchased my account but i cant use that because apple ask me about security question and i forgot the correc
-
Hi everyone, I did some searching of the forums but didn't find this anywhere. I did a backup of my iphone4 and then used a sqlite browswer to view the data in the messages file. The problem is that the date comes out as a 10 digit number. I did so
-
Hello, I wonder if anyone can help, I have 7 Cisco 3750s that as soon as the Data Collection Schedule kicks in, every 4 hours, SNMP stops on the switches. The switches are still available on the network however Fault Manager and our separate SNMP mo
-
I get an error 1 when I'm building an executable file in Labview 6.0
I'm trying to create an executable file in labview 6.0 but I get an error 1 (see attachment) with a GSim file (control and simulation toolkit). I didn´t install the toolkit (on the computer i´m trying to create the executable) because we lost the CD