Change Password Screen error in - External Facing Portal

HI,
We have developed an external facing portal for anonymous users and the EFP has protected content which will redirect the users to enter logon information to access it.
The process of authentication also working well in EFP but we are getting some strange error when the password was "reset' by administrator.
Here is the process...
1. Password 'reset" by administrator
2. user clicks on "protected content"
3. Logon screen displayed
4. After entering details, should be redirected to change their password but instead of that we are getting "Java iView Runtime error"
I need expert views on this to solve.
This is happening only when accessing EFP, user will be redirecting successfully to change password screen when accessing through "/irj/portal"
Any solution.
Thanks
MMK

Here is the scenario ..
1. User's password was reset by administrator.
**That's fine.
2. User gets redirected to change their password when logging (first time after reset) ... when accessing via .. http://<server>:<port>/irj/portal
**That's ok too, this is just a redirection. At this point I would be doing https for external customers though.
3. Occured "Java Ivew run time error" when the user trying to login from External Facing Portal ... via .. http://<server>:<port>/irj/portal/anonymous?guest_user=partners
**At this point you will have to look at your .trc log files. (logviewer) If this is just an access denied issue then look at permissions in the roles or groups. If you are assigning a new password, is that effecting a group or system membership? The .trc files will give a heads up.

Similar Messages

System error in external facing portal

Hi Gurus,
We are implementing an external facing portal,where all the SAP transactions will be published.We are having two different URL for for the portal running in the intranet and internet.
In the ITS host name I have given the FQN of the external facing portal.but at the time of testing the system it is showing port number is not given.Though the port is the default port.After giving the port name it is showing host name could not be resolved successfully.
Regards
Indra

Hi Indranil,
Can you please let us know how did you solved this issue. We are also going to implement External Facing Portal. I would like to know. If the employees want to access the External Facing Portal through Internet. Do we require to host the External Facing Portal on the web or do we need to follow other methods. Hope to see your reply.
Thanks,
Steve.

Standard Error Messages in Custom Change Password Screen

Hi All,
I've developed a custom change password screen in Web Dynpro. I want to use the standard messages that appear in the portal logon screen. I looked in the portal logon par and got the umelogonbase.jar and found in my eclipse dir the com.sap.security.core.jar wich this last one depends. I put then in an externallib and wrapped them in a JEE lib. Declared dependency from my WD DC to the JEE lib and added the library reference in the WD DC.
I have the following code:
try {
     IUserAccount userAcc = UMFactory.getUserAccountFactory().getUserAccountByLogonId(wdContext.currentInfoElement().getLogon());
     userAcc.setPassword(wdContext.currentInfoElement().getOldPassword(), wdContext.currentInfoElement().getNewPassword());
} catch (UMException e) {
     e.printStackTrace();
     error = true;
     LogonMessageBean bean = new LogonMessageBean(WDClientUser.getLoggedInClientUser().getLocale());
     String msg = bean.print(new Message(e.getMessage()));
     wdComponentAPI.getMessageManager().reportWarning(msg);
But when I try to execute my app I get the following exception:
   java.lang.VerifyError: (class: com/cafedecolombia/ols/um/ChangePassword, method: test signature: ()V) Incompatible object argument for function call
    at com.cafedecolombia.ols.um.wdp.InternalChangePassword.(InternalChangePassword.java:109)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:274)
    ... 28 more
Does anyone has successfully done this? Is there any other dependencies? Is there an EASIER way to do this? Is there any initialization needed?
Any help will be highly appreciated.
Regards,
Andrés Acero

Ok so here is how I solved it.
I found this very interesting article called "SAP Authentication Guideline" and there the author mentions that the messages are defined in class SecuritPolicy of the core security jar. So with that in mind this is how my code finally worked out:
try {
     IUserAccount userAcc = UMFactory.getUserAccountFactory().getUserAccountByLogonId(wdContext.currentInfoElement().getLogon());
     IUserAccount mutableUserAcc = UMFactory.getUserAccountFactory().getMutableUserAccount(userAcc.getUniqueID());
     mutableUserAcc.setPassword(wdContext.currentInfoElement().getOldPassword(), wdContext.currentInfoElement().getNewPassword());
     mutableUserAcc.commit();
} catch (UMException e) {
     e.printStackTrace();
     error = true;
     ISecurityPolicy policy = SecurityPolicyFactory.getInstance().getSecurityPolicy();
     wdComponentAPI.getMessageManager().reportWarning(policy.getLocalizedMessage(WDClientUser.getLoggedInClientUser().getLocale(), e));
Here is a link to the article on SDN:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/599ab890-0201-0010-12a1-b988e3a09735
If you have any comments please do.
Cheers,

Error when execute an external-facing portal

Hello world,
I would like to make an external-facing portal for anonymous users who want to access to my iviews created by Visual Composer (I don't know if it's possible)). I have read some documentation about it. I began create a Light Portal Desktop and a Light Framework Page, I gave permission to user called Guest to my Role,.... When I execute this link http://localhost:50000/portal/anonymous, I have this error in Log Viewer :
com.sapportals.portal.prt.component.PortalComponentException: Error in service call of Resource
Component : pcd:portal_content/com.bycn.fdContentBYCN/com.bycn.fdPortalDisplay/com.bycn.fdPortalDesktop/lightDesktop/frameworkPages/lightframeworkpage/com.sap.portal.lightinnerpage/com.sap.portal.lightDetailedNavigationTree
Component class : com.sap.portal.navigation.LightDetailedNavigationTree
User : Guest
My version of SAP Netweaver is 2004s 7.00 SP11
Have you an idea please ?
Best regards
Francois

Hi marcus,
Finally i use Default Desktop Portal instead of Light Desktop Portal because his limitation, and now I can
see my iView (it a Visual Composer iView) always for anonymous user (here "Guest"). My problem is in my
iView I have some drop down lists filled dynamically with the java web services. In fact, it seems these web
services don't work with anonymous user, only with authenticated user.
From portal System Administration / System configuration, I added to alias of the web
service a permission for 'Guest' user ("Administrator" = "Read", "End User" = "checked") and in System
administration / Permissions / Security Zones / sap.com / Netweaver.Portal / low_safety /
com.sap.portal.systems.webservices / components / webservice_system, I added also permission
for 'Guest' user ("Administrator" = "Read", "End User" = "checked"). My web sefvices don't have authentication polycies and in his property the Logon Method = "NONE".
With these modifications, the web services don't work always. Is it possible anonymous users cannot access to back-end system through iViews ?
Best regards
Francois

Trouble adding alias to the web.xml file (External Facing Portal)

I'm trying to implement the external facing portal. I don't really have any real custom content to add to it but have just created an iView that contains a webpage that's contained within a copy of the light framework.
I'm having trouble adding or accessing the alias that I've created to go to this iView.
I can test my iView by adding it to the master rule collection under one of the predefined aliases in the web.xml (e.g. portal/anonymous etc) but when i define my own (e.g. "ext" etc) and then go to http://portal:<port>/irj/ext I'm just getting an error:
The requested resource does not exist.
Details:   Go to main page of this application!
This is what my entry in the web.xml file looks like:
<web-app>
<display-name>The Java iView Runtime</display-name>
<listener>
<listener-class>
com.sapportals.portal.prt.session.HttpSessionHandler
</listener-class>
</listener>
<servlet>
<servlet>
<init-param>
   <param-name>
      portal/anonymous
   </param-name>
   <param-value>
anonymous=1,proxy=0,low_bandwidth=0,include_in_url=1,include_application_name_in_url=1
   </param-value>
</init-param>
<init-param>
<param-name>
   ext
</param-name>
<param-value>
anonymous=1,proxy=0,low_bandwidth=1,include_in_url=1,include_application_name_in_url=1
</param-value>
<init-param>
</servlet>
My master rule collection seems to be correct, since I can test the iView etc by adding it to a predefined alias. I've tried closing all browsers etc. Nothing seems to work.
Any ideas what this could be?
Thanks!
I'll award points for any help.

Hi Beau
Just Have a try.
In the servlet mapping add the following entry.
<servlet-mapping>
<servlet-name> gateway </servlet-name>
<url-pattern> /portal/* </url-pattern>
</servlet-mapping>
<b><servlet-mapping>
<servlet-name> gateway </servlet-name>
<url-pattern> /ext/* </url-pattern>
</servlet-mapping></b>
<servlet-mapping>
<servlet-name> prt </servlet-name>
<url-pattern> /irj/* </url-pattern>
</servlet-mapping>
Restart after making the changes.
Regards
Geogi Luke

External Facing Portal with access to ITS via Transaction Iview

Hi Experts,
We have a requirement to make the portal available externally for third party vendors to access ECC transactions. We have configured a URL with a reverse proxy to the portal server. Portal loads fine from outside the network, but when launching a transaction I-view, a page cannot be displayed error comes up in IE-8 and Chrome says it cannot access the ECC server.
I've searched the forums and come up with a couple of tips, but that brings on a couple more questions.
It seems you can direct traffic from external URL to portal server:port, but when launching an transaction I-view, it needs to be redirected again to the ECC server:port/sap/bc/gui* (or something like that for SICF GUI service). Question here is, once this redirect happens, technically the ECC box is now available externally vs. only the portal? Is this recommended?
Other option I've found is to try and use IAC I-views instead. Is this really much different than a transaction i-view in how portal handles the opening Iframe? Does it allow backend connectios without rerouting internet traffic to the backend server?
Are they any other options to make this type of setup work for external facing portals using transaction iviews to access ITS?
Thanks for the help!

Hi
Did you able to resolve the issue. We have installed Web Dispatcher through we are able to call the EP but when calling the transaction iViews page not found error pops up, since from EP server request to ECC goes via the URL http://<ecchost.domain>.:8000/sap/bc/gui/sap/its/webgui?sap-client=100.
Thanks
Murthy

Connecting to R/3 system from External facing portal

Hi folks,
We have implemented an external facing portal where all the users are been stored in a separate CRM system. Hence for checking whether the user id and password is correct we are using a CRM BAPI call. For making a CRM BAPI call we have created an alias from the portal end to the CRM system and the authentication type which we choose was SAP Logon ticket. Now my question is:
1. Will the SAP logon ticket will be created automatically or not as the users are not stored at the portal but in CRM. If it is not going to create a SAP logon ticket then how this can be achieved.
Your thoughts are highly appreciated.
Regards,
Ponraj M

You have to user user mapping. Choose UIDPW for the logon method.
From user mapping menu choose the generic user/password which you will be using to call the BAPI.
Regards,
Prasanna Krishnamurthy

Flickering Problem in external Facing Portal

Hey
we had some problems developing our external facing portal mainly because of general flickering of the web page ( the page height is set to automatic and it causes the borders to adjust constantly to the current content height).
we have a partial solution for this with:
meta http-equiv="Page-Enter" content="blendTrans(Duration=.01)"
meta http-equiv="Page-Exit" content="blendTrans(Duration=.01)"
this works just as we want, but it seems to have no effects on the first page of every new browser window. have anyone faced a problem like this before?
P.S - Our isolation method is URL and thats
thanks

thanks for the reply , i would like to wait a bit more for similar answer to this problem. so far all the external facing portals i have seen with URL isolation method on IViews have this problem.
With my partial solution the render time looks a lot faster compared to the embedded Isolation tought.
please reply if you know why the meta tag is not working on the first time you open a page on a window
thanks
Edited by: Phatinox on Jun 28, 2011 1:03 AM

SiteMinder integration with the internal and external facing portals

Hi ,
We are in development phase for SiteMinder integration with the internal and external facing portals.The proposed dual authentication scheme which requires both SiteMinder for External facing portal (EFP) and LDAP for Internal portal .is it possible?
and is it possible to main to diff LDAP directories one is external users and one is for internal users.?
If you maintain 2 diff(external & internal) LDAP Directories in Siteminder Policy Server what about external users which are not exit in portal data source .
I appreciate if anyone can help me for my above query .
Regards
Tag

Hey Tag,
We do have a physical external Portal and a physical internal portal. The both the external and internal are connected to 2 LDAP directories.
For example the External Portal is connected to the Employee LDAP Direcotry and the Customer LDAP Directory. The Internal Portal is connected to the US Employee LDAP Direcotry and the EMEA LDAP Directory.
So each one of them is connected to 2 different LDAP Directories.
I believe that the Siteminder Policy is setup such that the Internal portal has a policy and the External portal has a seperate policy on the same Siteminder Server. Then each of the Policies is configured to connect to the approiate LDAP Directories.
You have to maintain the LDAP Directory information in both the portal and Siteminder Policy Server. It is required in the policy server so that it can authenticate the user and it is required in the Portal server so that it can authorize the user and display content based on thier assigned roles.
Hope that helps.
Regards,
Keith

Implementing External facing portal

Hi,
     Some can explain in detail how to implement external facing portal.I am using EP7.0. I need implementation methodology or related document.
Thanks,
Kundan

Hi Sreeni,
                 Thanks for your replay.Actually i have this document but i am confuse to move further.Can you explain little bit on these points
1.      Define user profiles (system administrator).
Set up the portal to accept anonymous users, and define the users and groups to which anonymous and self-registered users are mapped.----
       2.      Assign content to users (user administrator).
Select the content to be accessible to anonymous and self-registered users, and assign these users to the content-----?.
       3.      Configure the navigation cache (system administrator).
To improve performance, the portal caches navigation hierarchies and nodes, so that the portal can retrieve the hierarchy from the cache instead of creating it for each request.
By default, caching is turned off. After the portal is set up and tested, turn on and configure caching by setting the appropriate J2EE parameters.
       4.      Create/modify navigation iViews (developer).
Create your own navigation iViews, or modify the default light navigation iViews to fit your companyu2019s needs. You can use the Navigation tag library to build JSP-based navigation iViews.
       5.      Customize the light framework page (content administrator).
Replace the navigation iViews in the light framework page with your customized navigation iViews.
       6.      Customize styles (system administrator).
The Theme Editor includes styles that are used in the default light navigation iViews.
       7.      Assign the light framework page to users (system administrator).
Using desktop display rules, assign the light framework page to anonymous and self-registered users, as well as other users who need it.
You can assign the framework pages based on the URL alias, role, or group, or the useru2019s network bandwidth.
Thanks,
Kundan

External Facing portal design for the ESS and MSS

Hello Portal Gurus!!!
I need your suggestions regarding implementing external facing portal for the ESS implementation.
What does it take to implement the external facing portal and what are the pros and cons of going for this external facing portal over just exposing the Portal with ESS over the internet?
Thanks for your suggestions in advance!!!
~~~LB

For implementing the External Facing portal.
http://help.sap.com/saphelp_nw70/helpdata/en/04/e5b7c3de384515afeafa0dab8e44e0/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/en/43/031a22dc5d21f0e10000000a155369/frameset.htm
For Limitations :
SAP Note : 853509 and 916545
Regards,
Sandeep

Implement External facing portal

hi all,
I want to learn as how to implement external facing portal. Kindly give me some doc's or links as how to implement external facing portal
Thanks in advance,
Meghana.

Hi,
Check these links.
Implementing External Facing Portal:
http://help.sap.com/saphelp_nw04/helpdata/en/43/031a22dc5d21f0e10000000a155369/content.htm
Nuts and Bolts of EFP:
Nuts and Bolts of the External Facing Portal (EFP)
EFP: Navigation and Framework Tag Libraries
EFP: Layout Tag Library
Regards,
Harini S

What to use instead of HTMLB for external facing portals

Hi all
We all know that HTMLB is on it's way out and I was just wondering what to replace it with, especially when dealing with external facing portals and the simple portal framework.
Since HTMLB and WD won't cut it the only thing there is left is the AbstractPortalConmponent.
Has anyone had success with implementing another framework, like for instance MyFaces (http://myfaces.apache.org/) or Tapestry (http://tapestry.apache.org/), in the APC. Or perhaps someone developed a entirely new framework for the APC to use?
If you have knowledge or ideas, please comment them.
Best regards
Thomas Bentzen

Hi Harini
I was never talking about tags, and I personally like avoid JSP's altogether (strictly personal opinion).
I was thinking more of what to do in the long run. I mean writing JSP's for the view and using APC as the controller is not a very performant way of doing development, perhaps we should aim a little higher and perhaps implement something there already is a standard and already fulfills the requirements of x509. If we're even a little more clever than that we might choose a framework that already have support for AJAX (HttpXML requests).
I don't really know what to do at this time and therefore was asking for ideas, on the architectural level, but also implementable.
Any ideas?

I am getting a Changing Password Failed error when I try to join an active directory

I had a working AD configuration under Snow Leopard. When I upgraded to Mountain Lion, my account was no longer in sync with the domain. I got the red dot on the login screen and my domain password was out of sync. I unhooked from the domain at that point. This was several months ago.
However, over the last few weeks, I keep finding myself locked out of the domain. I suspect it's something on my Mac that is trying to use my old credentials. I was hoping to rejoin the domain and see if I could get my account back in sync. When I get a domain admin to enter his password on the Directory Utility join screen, it first notes that the computer account already exists in the domain. I tell it to continue, but I can't get past this point:
2013-06-24 14:21:20.729935 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - Computer account either already exists or DC is already Read/Write
2013-06-24 14:21:20.732774 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - existing record found 'CN=MYMACHINE,OU=Default,OU=Workstations,OU=MyCity,OU=North America,DC=GLOBAL,DC=OURCORP,DC=NET'
2013-06-24 14:21:20.732822 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - switching to cache 'MEMORY:0x7faef36ed770'
2013-06-24 14:21:20.733141 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - Trying to find service kdc for realm GLOBAL.OURCORP.NET flags 2
2013-06-24 14:21:20.734196 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - connecting to 12
2013-06-24 14:21:20.734221 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - connecting to host: tcp 10.22.94.212:kerberos (1.2.3.4)
2013-06-24 14:21:20.741380 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - host completed: tcp 10.22.94.212:kerberos (1.2.3.4)
2013-06-24 14:21:20.741416 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - krb5_sendto_context done: 0
2013-06-24 14:21:20.741619 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - trying to set password
2013-06-24 14:21:20.741637 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - trying to set password using: MS set password in realm GLOBAL.OURCORP.NET
2013-06-24 14:21:20.741648 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - using TCP since the ticket is large: 1560
2013-06-24 14:21:20.741665 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - Trying to find service change_password for realm GLOBAL.OURCORP.NET flags 2
2013-06-24 14:21:20.742867 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - connecting to 12
2013-06-24 14:21:20.742908 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - connecting to host: tcp 10.22.94.212:kpasswd (1.2.3.4)
2013-06-24 14:21:20.745231 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - host completed: tcp 10.22.94.212:kpasswd (1.2.3.4)
2013-06-24 14:21:20.745250 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - krb5_sendto_context done: 0
2013-06-24 14:21:20.745398 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - set password using MS set password returned: 0 result_code 3
2013-06-24 14:21:20.745417 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - krb5_credential - Changing password failed for '[email protected]' with error '' (3)
2013-06-24 14:21:20.745426 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - setting Computer Password FAILED for existing record - 5103
2013-06-24 14:21:20.745818 EDT - 4934.65016, Node: /Active Directory, Module: ActiveDirectory - ODNodeCustomCall failed with error 'Credential operation failed' (5103)

Reggierror,
Had the same issue and discovered that I made my AD object name too long (16 instead of 15 character which is the limit) You might want to try making the computer object name shorter if you can.

User stuck on "Changing Password" screen after updating expired password, Windows 8.1 Pro

Hi,
We have recently upgraded to Windows 8.1 Professional in our domain (Domain & Forest Functional Level at Windows Server 2003). I am facing an issue where, when a users' password is expired and the user changes his/her password (after being prompted)
on their Windows 8.1 workstation, the user isn't able to login. The login screen displays "Changing Password" along with the little dots going in circles.
I have tried googling for a solution without much luck. Has anyone else faced this situation and is there a fix? Any help would be much appreciated.
Regards,
Sach

Hi Sach,
For this issue,I suggest we try using other computer to change the password.
Meanwhile,please confirm the network connectivity.
Regards,
Kelvin Xu
TechNet Community Support

Change Password Screen error in - External Facing Portal

Similar Messages

Maybe you are looking for