Cannot use create user as j2ee_admin

Hi, All:
The system is: double stack, ABAP & Java, NW04s SR2 SP12, BI + EP, AIX + Oracle.
After successful installation, we logon the portal as j2ee_admin, when choose User Administartion -> Identity management, error occurs with message: "A required service for the identity management user interface is not available. Contact your system administrator ".
Then we go to http://<hostname>:50100/nwa -> administration -> identity management ->create user, error occurs with message:"Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "java.lang.reflect.UndeclaredThrowableException"
We check the UME settings via configtool and also check the sap_j2ee_admin role assigned to j2ee_admin in ABAP, it seems all correct.
So it's so strange that we can logon as j2ee_admin but can't do the user administration job.
Anyone met the same issue?
Any info will be highly appreciated!
Best Regards,
D.H

Hi David,
In the case of dual stack installations, the default admin user for the Java Stack is j2ee_admin, which would be created at the installation time itself. By default, one system user SAPJSF will also be created by default for dual stack installations which is used for the communication in between the ABAP stack and JAVA Stack.
This system user will be used for the commucation in between(UME and ABAP datasource).
You can also see two roles named, SAP_BC_JSF_COMMUNICATION and SAP_BC_JSF_COMMUNICATION_RO. Based on the assigned role to the system user, SAPJSF, one admin user on the Java Stack can only view(if the assigned role is SAP_BC_JSF_COMMUNICATION_RO ) the User related data and can view/edit( if the assigned role is SAP_BC_JSF_COMMUNICATION) the User related informations.
Just check, the assigned role to the SAPJSF user. If the assigned role is SAP_BC_JSF_COMMUNICATION you can modify the user informations(create and modify) on the Java Stack using the j2ee_admin user, if the assigned role is SAP_BC_JSF_COMMUNICATION_RO , you will not be able to modify the user related informations through the Java Stack.
If you want to modify the user related informations through Java Stack, then you have to assign the SAP_BC_JSF_COMMUNICATION role to the system user, SAPJSF. After the role assignment you have to restart the server inorder the changes to take effect.
For data consistency and security, it is not recommended to manipulate the user related informations using both su01(ABAP) and UME(java).
Regards,
Kishor Gopinathan

Similar Messages

Error while creating user in OIM using Create User API

Hi All,
My Setup:
OIM running on Jboss Server where as my custom application to create user using CreateUser API in Tomcat Server.
Below is the code that im trying to run.
try
          System.out.println("Started ---");
               ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
               System.out.println("Login ---");
               Hashtable env = config.getAllSettings();
               tcUtilityFactory ioUtilityFactory = new tcUtilityFactory(env,"xelsysadm","abcd1234");
               System.out.println("Authenticated");
               if (ioUtilityFactory!=null)
                    System.out.println("Login OK ---");
               System.out.println("Getting utility interfaces...");
               tcUserOperationsIntf moUserUtility = (tcUserOperationsIntf)ioUtilityFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
               System.out.println("Starting processing...");
               Map attrs = new Hashtable();
               attrs.put("Users.User ID",request.getParameter("userid"));
               attrs.put("Users.Last Name",request.getParameter("lname"));
               attrs.put("Users.First Name",request.getParameter("fname"));
               attrs.put("Organizations.Key","1");
               attrs.put("Users.Role","Full-Time");
               attrs.put("Users.Xellerate Type","End-User");
               attrs.put("Users.Password",request.getParameter("password"));
               long key = moUserUtility.createUser(attrs);
               System.out.println("Processing DONE...");
               ioUtilityFactory.close();
     catch(Exception e )
     System.out.println("---" + e.getMessage());
     e.printStackTrace();
When i am trying to create user it's throwing the below error message.
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Servlet execution threw an exception
root cause
java.lang.NoClassDefFoundError: Could not initialize class com.thortech.xl.util.config.ConfigurationClient
     com.emulex.productsellers.CreateUser.doPost(CreateUser.java:33)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
note The full stack trace of the root cause is available in the Apache Tomcat/5.0.28 logs.
Apache Tomcat/5.0.28
And one more thing is if i place this code in jboss and it was working there with out any issues.
Please let me know if i am missing anything.
It's bit urgent.
Thanks in Advance.
Siva Pokuri.

URGENT** How to change OIM user password from outside OIM

Cannot use create purchase order in SRM 7.01

Hello,
We are upgrading from SRM 5.0 to SRM 7.0.Classic scenario. In the workset purchasing of the role operational purchasing you can use Create Documents -> purchase order. if I click on it I recieve the following message:
The table does not contain any data
If I then choose start I get the following message:
Transaction type could not be determined; inform system administrator
Can anybody explain to me if is this a purchase order which would be created in SRM ? As we are in the classic scenario we don't want that. If this is a local purchase order how can we create a purchase order in ECC using SRM 7.01
Thanks for your help!
Antoinette

Hi,
In a classic scenario, the SAP SRM system is used mainly to capture procurement requisitions from employees in the form of shopping carts. All other procurement activities take place in the backend materials management system.
So you cannot create po in SRM it will be created in ECC.
Regards,
Goutam Kolluru.

RFC - Receiver create Customer (Cannot see created user and created time)

Hi,
My scenario is JDBC - XI - RFC to create/change customer master. My problem happens with customer created/changed by RFC. When I look at administrative data of customer master, created by and created date are empty. http://www.imagecross.com/07/image-hosting-view-11.php?id=53673.png My requirement is that log on user which i input in receiver cc of RFC in ID should be used as created user in customer master and created date should also be updated too.
Any solution for this? Is there any configuration in XI required or may be a guideline for using ABAP in RFC to do this?
Thanks,
Pavin

Hi
When u execute form se37 it wud update with the user logged in
same wud happen when Receiver Adapter RFC wud log in and update r change
shud update with user wat u have entered in Config
try to run the RFC from se37
rgds
srini

OIM 10g Changing used Create User Response Code Status

Hello OIM Experts,
Using OIM 10g - target system - OID.
During my implementation, i realized that - there are possibility of user existence during OID provisioning. It should be acceptable.
Solution : Create User : Response Code :
USER_ALREADY_EXIST - Set the 'status' to 'C' (instead of 'R').
However, when i tried doing it... that it is not allowing me - "RESPONSE IS ALREADY USED BY 1 OR MORE TASKS'. Everyone know, this is the limitation with OIM.
Then i'm planning of setting the status directly into the database without going through the validations. I'm not able to get the exact database table name. Please let me know. [DB TABLE/COLUMN NAME ?? ]
Any other alternative ?
Thanks,

You can change the task status to C for "User already exists" response after clearing the R status for existing task instances in the table.
Use the following steps:
- Please take OIM backup
- Use the task name to look up the task ID present in the MIL table. Note the value of the task definition key (mil_key)
E.g. select * from mil where mil_name like 'Create%' [Let us say this returns mil_key as 335]
- Find out the task response key for the response that you intend to change using mil_key and the response code name
E.g. select * from rsc where mil_key=335 [Lookup the response code that you want to change. Let us say this returns 1638]
- Use the mil_key value to find task instances corresponding to this task.
E.g. select * from osi where mil_key=335
- Update the response code for tasks in osi.
update osi set rsc_key=1624 where rsc_key in (1638)
commit
I am sure you will figure it out.
All the best,
Chetan

Cannot use Create method with SODataEntity in iOS Native Apps connect to SMP 3.0 SP05

Hi experts,
I am following these blogs:Mobile Application Development Platform for Developers - Native Apps. They are very helpful, thanks Kenichi.
But i have some error when i use Integration gateway.
First, i try method Read, it works perfectly. Then, i try to use method Create, and i meet an error. Here is the error :
Error Domain=NetworkDomain Code=4 "HTTP Response: 403 forbidden" UserInfo=0x7f86d2688040 {NSLocalizedDescription=HTTP Response: 403 forbidden}
I test CRUD method in REST client, and it runs without any errors. I think the difference between Create and Read method is "X-CSRF-Token": Fetch with Read and specific Token with Create. But i do not know how to supply or config "X-CSRF-Token" field when use SOData...
Thanks and Reagrads,
Sao Vu.

Hi Sao,
Is your problem solved?
If not, below code may be able to help you for creation using ODataStore:
MAFLogonRegistrationData *data = [[MyLogonHandler shared].logonManager registrationDataWithError:&error];
    NSString *baseURL = [NSString stringWithFormat:@"%@", data.applicationEndpointURL];
    //opening the store
    self.onlineStore = [[OnlineStore alloc] initWithURL:[NSURL URLWithString:baseURL]
                                httpConversationManager:[MyLogonHandler shared].conversationManager];
    [self.onlineStore openStoreWithCompletion:^(BOOL success) {
//Read request after the store is successfully opened
        SODataRequestParamSingleDefault* readRequest = [[SODataRequestParamSingleDefault alloc] initWithMode:SODataRequestModeRead resourcePath:@"CollectionName"];
        [self.onlineStore scheduleRequest:readRequest delegate:self];
        NSString *finishedSubscription = [NSString stringWithFormat:@"com.sap.sdk.request.delegate.finished.%@", readRequest];
//Going for create once read request is success
        [[NSNotificationCenter defaultCenter] addObserverForName:finishedSubscription object:nil queue:[NSOperationQueue mainQueue] usingBlock:^(NSNotification *note) {
//Creating request for posting the data
SODataRequestParamSingleDefault* insertRequest = [[SODataRequestParamSingleDefault alloc] initWithMode:SODataRequestModeCreate resourcePath:@"CollectionName"];
            insertRequest.payload = entityForCreation; //Assigning the payload
            [self.onlineStore scheduleCreateEntity:entityForCreation collectionPath:@"Collection
Name" delegate:self options:nil];
//Alternatively you can use [self.onlineStore scheduleRequest:insertRequest delegate:self]; also instead of scheduleCreateEntity
If you want to pass X-CSRF-Token with RequestBuilder, you can use the following code:
//Create request for getting the token
      id<Requesting> request = [RequestBuilder requestWithURL:[NSURL URLWithString:[NSString stringWithFormat:endPoint_URL]]];
        /*Set user name */
        [request setUsername:[[NSUserDefaults standardUserDefaults] objectForKey:@"USERNAME"]];
        /*Set password */
        [request setPassword:[[NSUserDefaults standardUserDefaults] objectForKey:@"PASSWORD"]];
        /*Set the required request headers*/
        [request setRequestMethod:@"GET"];
        [odp_Request addRequestHeader:@"X-CSRF-Token" value:@"Fetch"];
        [odp_Request addRequestHeader:@"X-CSRF-Cookie" value:@"Fetch"];
        [request addRequestHeader:@"Content-Type" value:@"application/xml; charset=UTF-8"];
        [request addRequestHeader:@"X-SMP-APPCID" value:applicationConnectionID]];
        [request addRequestHeader:@"X-SUP-APPCID" value:applicationConnectionID]];
        /*Set the delegate to receive the response */
        [request setDelegate:self];
        /*Set the success listener */
        [request setDidFinishSelector:@selector(tokenSuccess:)];
        /*Set the failure listener */
        [request setDidFailSelector:@selector(tokenFailed:)];
        /*Invoke the startAsyncronous API to send the request from client to server asynchronously */
        [request startSynchronous];
//In the tokenSuccess method (- (void)tokenSuccess:(Request*)theRequest), you can use the following code to retrieve the token:
      token=[[theRequest responseHeaders]objectForKey:@"X-CSRF-TOKEN"];
       cookie=[[theRequest responseHeaders]objectForKey:@"SET-COOKIE"];
//Create the request for posting your content to the server
            NSString* requestUrls = [NSString stringWithFormat:@"%@SalesOrders%@", endPoint_URL,filterString];
            postRequest = [RequestBuilder requestWithURL:[NSURL URLWithString:requestUrls]];
            //             odp_Request = [ODPRequest requestWithURL:[NSURL URLWithString:requestUrls]];
            //id<SDMRequesting> request = [SDMRequestBuilder requestWithURL:[NSURL URLWithString: requestUrls]];
            [postRequest setUsername:[[NSUserDefaults standardUserDefaults] objectForKey:@"USERNAME"]];
            [postRequest setPassword:[[NSUserDefaults standardUserDefaults] objectForKey:@"PASSWORD"]];
            [postRequest setDelegate:self];
            [postRequest setRequestMethod:@"POST"];
            [postRequest addRequestHeader:@"content-type" value:@"application/atom+xml;type=entry"];
            [postRequest addRequestHeader:@"X-SMP-APPCID" value:applicationConnectionID]]; //Assinging the applicationConnectionID value to the request
            [postRequest addRequestHeader:@"X-CSRF-Token" value:token]; //Assinging the token value to the request
            [postRequest addRequestHeader:@"Cookie" value:cookie]; //Assinging the cookie value to the request
            [postRequest appendPostData:[xml dataUsingEncoding:NSUTF8StringEncoding]]; //Appending the body of the request
            [postRequest setDidFailSelector:@selector(updaterequestFailed:)]; //Failure delegate method
            [postRequest setDidFinishSelector:@selector(updaterequestFinished:)]; //Success delegate method
            [postRequest setTimeOutSeconds:200]; //Timeout for request
            [postRequest startSynchronous];
Hope this will help you.
Regards,
Dhani

Cannot use created recovery discs for Satellite A350-134

Emm I really hope you can help me.
The Notebook said that you have to create the Recovery Disk by yourself and thats what I did ( on 2 Cds)
So i wanted to reinstall my Notebook and put in the first cd and booted from CD. So i came into the Menu.
Then after a while it asked me to put in the second CD and I did it. Then it said there was a error copying the last 2 files needed.
So now i cant create the Recovery Disk again because I already started the reinstalling. now i have a few questions
What can i do generally ? Because I really dont want to buy for 35 euros a new Recovery Disk :S
I thank everyone who helps me :D

If you want to have factory settings you must install recovery image from recovery disc.
If your discs dont work you must use original Toshiba recovery disc.
My opinion is that you should install Win7 32bit on this machine. I do it on friends A350 and it runs perfectly.

Cannot use user classes in webservices interface of appmodule custom method

Hi,
I need to expose an application module's custom method that uses user defined classes as parameters and return types as a web service interface. I have not been able to do that. Below are more details.
In particular, I have an app module that has a client interface with a custom method that takes and returns a serializable Emp object (user defined classes/objects). I need to expose this app module as a web service through the use of a service interface.
When i run the "Create Service Interface" wizard, under service custom methods (Create Service Interface Step 2 of 4 wizard), i don't see my custom method under "Available."
In addition, the JDev message log says: Business Components: Method "yourCustomMethod(Emp):Emp" cannot be exposed via service interface because the return type "com.mypackage.Emp" is not supported.
From what i understand by reading the docs below, it seems that in an application module's service interface (Webservice) you only can use simple data type or java.util.list or AttributeList (which is a wrapper for any viewRow). In other words, i cannot use my user defined object in the custom method parameters and return types.
This seems to be an artificial limitation of webservice creation through the use of app module because one can use complex/user defined objects in methods of a java class and expose them through a webservice.
I would appreciate if of the tooling PMs can make a well thought out comment.
11.2.3 What You May Need to Know About Method Signatures on the Service Interface
http://docs.oracle.com/cd/E12839_01/web.1111/b31974/bcextservices.htm#CJAEHFJD
9.8.4 What You May Need to Know About Method Signatures on the Client Interface
http://docs.oracle.com/cd/E12839_01/web.1111/b31974/bcservices.htm#CHDFHGII
Thanks,
AJ
ps: I am using Build JDEVADF_11.1.1.5.0_GENERIC_110409.0025.6013.

Hi,
question 2 doesn't apply as the client interface is for Java access to public methods. For the Service Interface, the document lists the supported data types you can use in arguments and return values. To expose a custom methods, what about using a POJO that accesses ADF BC (using create root application module) and then expose your POJO as a JAWS service. This will allow you to expose the data queried from ADF BC through your custom classes.
Frank

Error While Creating user in Portal

Hai Experts...
Errored occured while creating User in portal.
Error : Error occured due to persistance: contact administrator.
Since i have created user in J2EE_ADMIN which has Administrator Role. i am facing this issue.
Kindly help me in this issue..
Regards
Arun Rajan,

Hi ,
Solved problem by changing the UME configuration as ABAP.
after changing the UME configuration , some memory dump problem faced and solved as per server0 getting restarted when i access UME configuration .
Now it is able to create user in portal.
Thanks Juan Reyes and RishiAbrol.
thanks to all helped me to sort out the issue.
Regards
Arun
Edited by: Arun Rajan on Sep 11, 2009 8:43 AM
Edited by: Arun Rajan on Sep 11, 2009 8:45 AM

Create User Workflow

When I login into administrative as configurator I need to find the Create User workflow.
From BPE I can access it. No problem.
But from the debug page when I choose Task Definition and List Objects I cannot find Create User.
Why?
Thank you.

You can find it under ProvisioningTask.
Why they had to put it somewhere different i don't know....
Just to make things akward i guess.
Tine

Help , how to auto create user account

Hi, guys,
i wanna to know how to auto create user account after use the suppliers' api to create supplier.
i didn't find out how to auto create user account by use ap_vendor_pub_pkg.create_vendor_contact procedure.
how to auto create the user account ?
if you know ,tell me ,pls
best Regards !
Edited by: wanjin on 2013-4-15 下午11:50

Hi Gareth，
I wanna create an Oracle E-business Suite use account ,but how to use fnd_user_pkg.createuser procedure to relation the AP suppliers , not employee suppliers.
the result like N:Purchasing Super User -->supplier-->Contact Directory --> create user
then use "Create User Account for this Contact" to create user account
Regards,
Wanjin

Restrict list of Organizations on Create User form

Running OIM 11.1.1.5.0.
We have a couple of companies using our OIM for delegated administration. In the Create User form, if the user searches for an organization they see a list of all of our organizations not just the ones that they can place a user in.
If they place a user in an organization that is not in their auth policy they receive an error:
"You are either not authorized to create user in XXX organization or not authorized to create user in XXX organization without specifying a value for manager."
Is there any way to restrict the list of organizations in the search to the list in their auth policy?

I have have this:
Company A
-- Department A1 (although these are actually set as Organization type Company in OIM)
-- Department A2
Company B
-- Department B1
User Management Auth Policy for AdminA:
-- Data Constraint - Users who are members of Department A1, A2
But when AdminA uses Create User he gets a list of all Company and Department names in the Organization search popup.
Do I take it from your reply that this is supposed to work and it's something that I have setup incorrectly then?
Edited by: Ewan on May 4, 2012 7:37 AM

Create user statement on Procedures

Hi,
How to use create user command in oracle procedure.
Whenever I am using the statemet create user <username> identified by <password> it gives me the error. But whenever I am removing this statement the procedure is compiling successfully.
Is there anyway to use create user statement inside procedure?
Regards,
Indraneel

You have to use dynamic sql :
SQL> begin
2 execute immediate ('create user test_user identified by test_user');
3 end;
4 /
PL/SQL procedure successfully completed.
SQL>Of course the command should be completed with other information (e.g. default tablespace, temporary tablespace, and so on).
Paul

A question from a newbie:create user failed.

Hi,there.
I am a newbie on oracle database,and now I meet a question.It is said in the book that you can use:
create user username
identified by password;
to create a user.But when I test:
create user test1
identified by test1;
the system returns:
ORA-01031: insufficient privileges
How does this happen?

944775 wrote:
It looks just like it.Thank you very much.
And then I can't do any practices on this chapter.
Edited by: 944775 on 2012-7-5 下午11:42Why not? If you are doing "practices on this chapter", I would assume you have your own database to practice on. If that is the case, you - own - the database. You cana be sysdba and grant whatever privileges you want.
And if this isn't your own practice database, why not? See http://edstevensdba.wordpress.com/category/opinion/

11g create user identified by values?

In version 10g and under we could easily migrate users (including the password) from one database to another using:
CREATE USER scott IDENTIFIED BY VALUES '{encrypted password}' ...blah, blah...
What is the 11g equivalent of this command which would allow me to migrate users from one 11g database to another?
Is datapump the ONLY option?

Thanks to both, I did suspect spare4 was the encrypted password but what threw me off was the reference manual does not show the "BY VALUES" option in the "ALTER USER" syntax -- which actually what I needed. The users are already created and I want to synchronize the password with another db.
;)

Cannot use create user as j2ee_admin

Similar Messages

Maybe you are looking for