Can Portal be configured with Logon Group?

Hi, gurus:
is concept 'logon group' used for Enterprise Portal?
how to configure Logon Group for enterprise?
Thank you
Br,
Chrina

Hi Chrina,
don't get me wrong. You still need a dedicated load balancer system to realize load balancing between multiple application servers. This could be a software load balancer (e.g. SAP Web Dispatcher) or a hardware load balancer (e.g. F5).
If you deploy an application, it is deployed to all application servers. A user who tries to access this applicaion could be forwarded (by the load balancer) to any of your application servers.
But sometimes you do not want this. In case you have an application which has very high CPU usage you can use logon groups to restrict the routing of the load balancer. Basically, you tell the load balancer to forward requests for a specific application to one of your application servers which belongs to a previously defined sub set of your cluster. For example, you have 4 application servers (AS1, AS2, AS3, AS4). Now you define a logon group for a certain application (App1), which is deployed on all servers. By defining the logon group you tell the load balancer to forward all requests for application App1 to either server AS1 or server AS2, but never to server AS3 or server AS4.
This way you avoid that all of your application servers become really busy processing requests for the applicaion with very high CPU usage.
Best regards,
Martin

Similar Messages

  • Configure Balance logon Group in Portal

    Hello experts,
    I've installed the portal central instance in one machine and a dialog java instance for this portal in another machine, after i installed the webdispacher in central instance machine, now I want to configure the Logon Group, does anyone could help me ?
    I don't have idea to do this, if someone does this configuration please help make the same.
    Thanks

    Hi,
    Please check the below link for configuring the logon groups:
    Link: [http://help.sap.com/saphelp_nw70/helpdata/en/c4/3a64b4505211d189550000e829fbbd/content.htm]
    Hope it helps.
    Thanks & Regards,
    Gourav

  • How to logon the j2ee engine with logon group

    hi everyone,
    I have installed an HA j2ee engine system with MSCS.
    But i donot know how to logon the DI&CI with logon group like ABAP system
    Thanks very much
    Regards
    Peter

    http://help.sap.com/saphelp_nw70/helpdata/EN/b5/e8239ef7bd494f896a84625d4b688f/frameset.htm

  • Send Idoc's to R/3 System with logon group

    Hello everybody,
    I have the next scenario
    Sender R/3 Idoc -> XI -> Receiver R/3 Idoc
    now I have a doubt, the receiver system has a logon group, is there any benefits for me in XI to use the logon group to send the Idocs to this system?, and if it's better to use logon group how can I use it, juts by defining the RFC that exists in SM59 that points to the receiver R/3 system in XI as load balancing and pointing to the logon group????, thanks in advance for your answers.

    Julio,
    Yes you are right, load balancing can be achieved using logon groups in the RFC destination for the IDoc adapter. It basically enables the ABAP dispatcher to decide whats the best available application server to process the inbound message sent by PI.The purpose is to load-balance successive connections across a group of ECC application servers.
    To do this a connection is established through the message server (the central ECC instances communication process) to determine which ECC instance is to handle the RFC call.
    The key parameters here are:
    u2022     the hostname, on which the message server process runs,
    u2022     the system name of the ECC central instance, and
    u2022     The logon group, which indicates the cluster of applications servers that an ECC instance will be selected from, to serve the request.
    Greetings,
    Gerardo.

  • Java connector calls against sap system with logon groups

    hi there.
    i want to use java connector to connect to a sap system and run a function. my problem: the sap system has more than one instance and i do not want to connect against the central instance. i want to use a logon group. does anyone have an idea how to handle this?
    thanks,
    martin

    hi,
    check this
    http://help.sap.com/saphelp_nw04/helpdata/en/f6/daea401675752ae10000000a155106/frameset.htm
    http://nwadave.com/NwadExplorer/data/SAPDoc/architecture/SAP-Client_LogonAndCommunication.doc
    let me know  u need any further info
    bvr

  • How (if at all) can Portal be used with Digital Signatures

    We are looking at how to handle a web based Digital Signature/Digital Certificate application. If it was simply client/server the answer is pretty clear using OAS and the "Wallet Manager" on the client side.
    Now, we have a potentially vast number of users who might logically use the web to access and submit information requiring a digital signature. Since they could be any where, we can't be in the business of handing out their certs, but we will have to be able to accept their certs. I'm glossing over the details here.
    Mike Duncan
    Logistics Maangement Institute
    703.917.7196

    Duncan,
    I have moved this question to the 9iAS SSO and Portal Security forum. Please monitor it there.
    Thanks,
    Rich

  • How to configure the Logon Group  of Message Server ?

    Is this the job of BW team or Basis ?
    and what's the T-code of each step?
    Thanks!

    Hi,
    This is a question for Basis.
    Try tcode SMLG.
    Rgds,
    Colum

  • SAP Portal J2EE logon groups

    Please can you help.
    Within ABAP you can go into SMLG and configure logon groups so you can separate user groups to particular application instances.
    I would like to do the same within NW Portal and CE.  We have external and internal users accessing the portal (NW 7.0) I have web dispatchers to load balance across application instances however is it possible to create logon groups and dedicate dedicated application instances to these user groups.  I have read that you able to do this however the user groups would require different URL's and then the Web dispatcher can filter the URL and assign it to the relevant Java logon groups.  The requirement which I have is that I am unable to change my URL so external and internal users use the same URL.Please note I only have 1 set of Portal Web dispatchers.  The Web dispatchers serve both internal and external users.  Also for extra information my portal mainly calls Web Dynpro code from CE.  CE also has Web dispatchers as I have more than 1 CE app server.  I assume if it is possible my requirement would also be to create logon groups within CE so external users use certain EP app servers and CE app servers and internal use other EP app servers and other CE app servers.
    EP is version 7.0
    CE is version 7.2
    WD is version 7.3
    Any help and advice would be appreciated.
    Thanks
    Ajay

    Hi Arjun,
    Thanks - I know how to make the logon groups in Java however I don't want to use different URL's for alias.
    I have 1 URL for example  jo.blogs.com/irj/portal which both my internal and external users use.
    Is there any way I can make use of the logon groups without having to give my users 2 seperate different URLs.
    Thanks
    Ajay

  • Logon groups configuration for JAVA instances using NWA method

    Hello guys,
    we have a BI dual System landscape (CI ABAP+ JAVA plus 2 dialog instance ABAP+JAVA, based on NW04s. I have set up a Web Dispatcher to do a load balancing for JAVA instances. I configured the logon groups according this documentation using NWA (http://help.sap.com/saphelp_nw04/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/content.htm).
    The following point is still quite unclear for me:
    I have defined the instance IDs (of DIs installed on linux servers) and exacte Alias in the logon groups definitions in NWA. Is it possible to proof somehow (while accessing my URL http://<host>:<port>/TestApp~test/<application_resource> ) either in web dispatcher ->Web Administration Interface(Application Server Monitor ?) or somewhere else on which Dialog Instance I actually land to be sure that my load balancing works properly and i don't land on my Central Instance?
    Thanks a lot in advance.
    best regards,
    Polina

    ok, I have understood what you ment in the first passage Thanks!
    When I put javascript:document.cookie in my Internet Explorer Address Bar i got the following information: 
    PortalAlias=portal; saplb_STD_JAVA=(sapt20p_T20_20)207175450; JSESSIONID=(sapt20p_T20_20)ID1892984750DB11747115157906231437End; saplb_test=(lx003207_T20_20)206509050; saplb_*=(lx003207_T20_20)206509050
    what does here saplb_STD_JAVA mean?
    you can use following URLs to access any particular Java Server node of any server.
    https://<host name>:<https port>/irj/portal;saplb_*=<Java serer node number> https://<host name>:<https port>/irj/portal;sapj2ee_irj=<Java server node number>
    What is the difference between saplb_* and sapj2ee_irj?
    Thanks in advance.
    regards,
    Polina

  • Configuring Logon groups for JAVA instances using NWA method

    Hello,
    we have a BI dual System landscape ( CI ABAP+ JAVA plus 2 dialog instance ABAP+JAVA, based on NW04s. I have set up a Web Dispatcher to do a load balancing for JAVA instances. I configured the logon groups according this documentation using NWA (http://help.sap.com/saphelp_nw04/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/content.htm).
    The following points are still quite unclear for me:
    1. according documentation I should specify the following profile parameters:
    [Define the special HTTP URLs, which SAP Web Dispatcher uses to send to the AS Java to retrieve the logon groups information]
    wdisp/J2EE/group_info_location = [?] /JavaEE/public/icf_info/icr_groups
    wdisp/J2EE/url_map_location = [?] /JavaEE/public/icf_info/icr_urlprefix
    Wich values should i take here actually? These one or /J2EE/icr_groups and /J2EE/icr_urlprefix ?
    2. Also I have to configure (in visual administrator) the GroupInfoRequest and UrlMapRequest properties of the HTTP Provider service running on server processes. They recommend to use /J2EE/icr_groups and /J2EE/icr_urlprefix. Should it be the same values as defined in those profile parameters?
    3. I have defined the instance IDs and exacte Alias in the groups definitions in nwa. Is it possible to proof somehow while using my URL http://<host>:<port>/TestApp~test/<application_resource> either im web dispatcher (traces?) or on a web site on which DI I actually land to be sure that my load balancing works properly and i don't land on my Central Instance?
    Thanks a lot in advance for your advices.
    best regards,
    Polina

    Understood, Install the web dispatcher and configre the ABAP Message Server Port and ms/http_port (T-CODE:SMMS). Test this link
    http://host:port/sap/public/icf_info/icr_groups
    and this would retrieve the list of ABAP (SMLG) cofigured groups.
    For java load balancing, icm of that host will send the incoming requests to JAVA Dispatcher. The load balancing happens on the basis of server nodes and can be found in the web dispatcher session dispatching table.
    There are no necessary parameters required for java load balancing except the number of server nodes you'll hookup to that dispatcher.
    There is an option called service based, where we configure the j2ee hosts to accept the connections for the services which are running but I haven't seen much customers using this option.
    Bottom line: No changes are required for java side and enable the "ext rfc" option for abap logon groups and rest will be taken care by Web Dispatcher.
    Use connection pooling and high timeouts to acheive the better througput and use the SSL termination on Web Disp.

  • Purpose of creating Logon groups

    Hello,
    plesae tell me What is the purpose of creating Logon groups ?
    Thanks,
    Teja

    Hi Teja
    LOGON GROUPS, as it's name specifies it allows us to divide the total number of logons into some groups, so as to share the workload
    Logon load distribution allows dynamic distribution of the SAP users to application server instances by setting up multiple logon groups that consists of one or more application instances.
    Every application server group is assigned maximum threshold values for the response time and the number of users that can log on to a particular group server. Especially important logon groups with time-critical transactions can be assigned to application servers with improved response times.
    The process of defining the logon groups is:
    u2022 Choose CCMS > Configuration > Logon Groups. Alternatively, call Transaction SMLG.
    You can configure the logon groups as:
    http://help.sap.com/saphelp_nw04/helpdata/en/c4/3a64b4505211d189550000e829fbbd/content.htm
    after configuring these logon groups, users are asked to create sapgui entries, so as to make them to login into SAP as per logon load balancing
    http://www.cmich.edu/documents/SAP/pdfs/Setting_Up_SAP_Logon_Groups.pdf
    thanks
    Bhudev

  • GL account linkage with activity group for AVC- Funds management

    Hi,
    I have activated (BCS) funds management in my system. My client wants that system will give error message for some expense GL accounts and for other expense GL accounts it will only give information message.
    For that i have created new activity group for AVC but i have no idea how we can link GL accounts with activity group for AVC.
    Request immediate help.
    Thanks in advance.
    Manisha

    Hi,
    The correct way to deal with this is not with activity groups, but with tolerance profiles. Create tolerance profiles with error and warning messages accordingly and then create a tolerance derivation strategy, which on the basis of commitment item, will derive the relevant profile.
    Regards,
    Eli

  • Where do I see Sharepoint user with no group or permission in the UI ?

    Hello All -
    The powershell cmdlet 'New-SPUser' has only 2 mandatory parameters UserAlias and Web. Group and PermissionLevel are not required.
    This means I can create a user with no group or no permission level. However UI does not allow this to happen, it forces you to select either one (group or permission level).
    My question is where do I see the user in UI which was created using powershell without any group or permission level ? The reason I ask is UI when it displays user, a group is always selected.
    Thanks!

    You should be putting the "_catalogs/users/detail.aspx" section into your url. For example if you were to go into your site settings page your url might start as:
    "http://manju.sharepoint.domain.com/sites/manjuTest/_layouts/settings.aspx"
    and it should become:
    http://manju.sharepoint.domain.com/sites/manjuTest/_catalogs/users/detail.aspx

  • Can i do facetime in a group of 3?

    Can I do facetime with a group of 3 people that will be helpful.

    Not that I am aware of...
    Using FaceTime
    http://support.apple.com/kb/ht4319

  • Problemm with dba group vs oinstall group

    Hi to all ;
    This is related to oracle as well as some os related security problems. please clarify it.
    I tried but couldn't solve it All information's given here ..
    Testing from user 'A'
    +# useradd -m -g oinstall a+
    +# passwd a+
    Changing password for user a.
    New UNIX password:
    BAD PASSWORD: its WAY too short
    Retype new UNIX password:
    passwd: all authentication tokens updated successfully.
    su - a
    +[a@testorcl ~]$ export+
    ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
    +$ export PATH=$PATH:$ORACLE_HOME/bin+
    +$ export ORACLE_SID=testdb+
    +$ sqlplus /nolog+
    SQL*Plus: Release 10.2.0.1.0 - Production on Thu Jan 3 01:33:49 2013
    Copyright (c) 1982, 2005, Oracle.  All rights reserved.
    Testing From user 'b' :
    +# useradd -m -g dba b+
    +# passwd b+
    Changing password for user b.
    New UNIX password:
    BAD PASSWORD: its WAY too short
    Retype new UNIX password:
    passwd: all authentication tokens updated successfully.
    su - b
    Password:
    +$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1+
    +$ export PATH=$PATH:$ORACLE_HOME/bin+
    +$ export ORACLE_SID=testdb+
    +$ sqlplus /nolog+
    sqlplus: error while loading shared libraries: libsqlplus.so: cannot open shared object file: No such file or directory
    *>> From oracle user finding libsqlplus.so >>*
    *[oracle@testorcl ~]$*
    *$ find / -name libsqlplus\* -ls 2>/dev/null*
    +1378188 1296 -rw-r----- 1 oracle oinstall 1319436 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.a+
    +1378193 1028 -rw-r----- 1 oracle oinstall 1047293 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.so+
    SQLPLUS LOCATION with associated group
    +$ ls -l $ORACLE_HOME+
    drwxr-x--- 9 oracle oinstall 4096 Dec 24 03:28 sqlplus
    Please Note :
    USER 'a' belongs oinstall group.
    USER 'b' belongs dba group.
    My questions are :
    *1.why OS user can access database with oinstall group ?*
    *2.why OS user can't access database with dba group ?*
    Note: This is concept of oracle
    **To connect as sysdba using OS Authe*ntication ; UNIX OS user must be a part of OSDBA (dba) group.*
    Once the user is part of OSDBA group.
    but in dba group with os user 'b' , can't connect sqlplus , what's the real problem here ?
    version : 10gr2
    *$ uname -a*
    Linux testorcl 2.6.9-42.0.0.0.1.ELsmp #1 SMP Sun Oct 15 14:02:40 PDT 2006 i686 athlon i386 GNU/Linux
    Edited by: 952909 on Jan 4, 2013 1:03 PM

    Hi dude ;
    Thanks for your reply.
    So , You suggest me to change install directory permission from 750 to 775.
    $ cd install
    [oracle@testorcl install]$ ls -l
    total 240
    -rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed1.sh
    -rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed.sh
    -rw-r-----  1 oracle oinstall    977 Dec 24 03:29 envVars.properties
    drwxr-x---  2 oracle oinstall   4096 Dec 24 03:26 jlib
    -rw-r-----  1 oracle oinstall 194849 Dec 24 03:29 make.log
    -rwxr-xr-x  1 oracle oinstall      0 Dec 24 03:29 oratab
    -rw-r-----  1 oracle oinstall    132 Dec 24 04:01 portlist.ini
    -rw-r-----  1 oracle oinstall    221 Dec 24 04:02 readme.txt
    -rwxr-xr-x  1 oracle oinstall    824 Dec 24 03:28 rootdeletenode.sh
    -rw-r-----  1 oracle oinstall   9646 Dec 24 03:28 rootlocaladd
    -rw-r-----  1 oracle oinstall      0 Jun  7  2005 seed.log
    -rw-r-----  1 oracle oinstall   2800 Jun  7  2005 templocal
    drwxr-x---  2 oracle oinstall   4096 Dec 24 03:29 unix
    drwxr-x---  2 oracle oinstall   4096 Dec 24 03:28 utl
    *>> Permission changed as per your suggestion >>*
    *[oracle@testorcl db_1]$ chmod 775 install*
    *[oracle@testorcl db_1]$ ls -l*
    drwxrwxr-x   5 oracle oinstall   4096 Dec 24 04:02 install
    *>> Trying to find changePerm.sh >>*
    [oracle@testorcl db_1]$ cd install
    [oracle@testorcl install]$ ./changePerm.sh
    -bash: ./changePerm.sh: No such file or directory
    [oracle@testorcl install]$ cd
    [oracle@testorcl ~]$ whereis changePerm.sh
    changePerm:
    [oracle@testorcl ~]$
    In my testdb file not found ... Any suggestion  to find DUDE
    Please note :
    http://www.oracle-base.com/articles/10g/oracle-db-10gr2-installation-on-rhel-4.php
    Installation Doc did n't say anything to change permission related to install group +( from 750 to 775 )+
    Can you please clarify this ?
    Thanks Dude ..

Maybe you are looking for