Configure SAP authentication for BusinessObjects
Hi,
I am configuring SAP authentication for BusinessObjects. I created a user account for BusinessObjects Enterprise on SAP with Authorization object, field, Value as "BusinessObjects XI Integration for SAP Solution Installation Guide". After add an SAP entitlement system to BusinessObjects Enterprise, I checked that an entitlement system. It show "User CRYSTAL has no RFC authorization for function group SYST." with CRYSTAL is user of SAP.
Please, help me!!!
Thanks
Duypm
Hi,
My CRYSTAL_ENTITLEMENT Role as below:
CRYSTAL_ENTITLEMENT
|
|--Manually Cross-application Authorization Objects
| |_Manually Authoriaztion Check for RFC Access
| |_ Manually Authorization Check for RFC Access
| |______Activity All activities
| |______Name of RFC to be protected *
| |______Type of RFC objects to protected All value
|
__Manually Basic: Administration
__Manually Authorization for file acccess
___Manually Authorization for file access
__Activity Read, Write
__Physical file name *
__Program Name with Search Help *
__Manually User Master Maintenace: User Groups
__manually User Master Maintenance: User Groups
|___Activity Change, Display
|___User group in user master main *
I login CRYSTAL user directly on your SAP BW server using SAPGUI. It is ok.I don't get any error messages there.
My SAP entitlement system to BOE as below:
System is: PTS
Client: 100
Application
Application server: sap-vpmn (with sap-vpmn is hostname BO server)
System number : 00 (this is value of central instance number)
Username: crystal
Password : pythis
Thanks & Regards
Duypm
Similar Messages
-
Error while configuring SAP authentication in CMC adn Win XP PRO
Hi,
I am new to Business Objects and i was installing the Business Objects integartion Kit for SAP.
I have already installed Crystal Server 2008 and copied the SAP Jco to the specified folders.But whiling trying to configure the SAP authenticatuion, I keep getting the TOMCAT error. I unistalled and reinstalled again. Still not working
Note: My Operating System is Windows XP.
Appreciate any suggestions
Regards,
BijuHello All,
I reinstalled it again based on the link BusinessObjects and SAP - Configure SAP Authentication from Ingo Hilgefort and all are working as expected.
Now I have a different problem, My Company does not intent to go for a portal at this time, but is considering using formatted reports using crystal reports. What are the other options available for the users to access these reports? For instance all the bex users have Bex Analyser installed on each client machine, do we have anything similar for Crystal reports.
Any help is greatly appreciated.
Regards,
Biju -
Error when using SAP authentication for Designer
my error is:
[repo_proxy 13] SessionFacade::openSessionLogon with user info has failed(The
secSAPR3 DLL could not be found or does not exist(hr=#0x80042a01)
can you help me?
regardshi,
pls refer the link
Error when using SAP authentication for Designer
try re-installing BOE and check
hope it helps,
sundar -
Error while configuring SAP authentication in CMC
Hi,
I am trying to set up SAP authentication in CMC to a SAPBI system to which I am able to connect successfully in Designer and Voyager. I have the SAP Integration KIT also installed.
As a first step I created Entitlement and then filled up the options tab ( Have checked the option Automatically Import Users).
But when I click on Role Import Tab, I get the following error.
com/sap/mw/jco/JCO$Function
Is it because I need to install SAP JCo? Please suggest.
If I need install SAP JCo is it freely available? Which version has to be installed?
Any suggestions will surely help.
Thanks in advance,
SumaSame issue here.
Business Objects Enterprise 3.0 is installed on a dedicated machine. I have followed the documented installation procedure, step by step, but I am still facing two issues:
#1. SAP Authentication does not work. When trying to log into InfoView using SAP Authentication, I get the following error:
Account information not recognized:
CSecSAPR3Binding::XRFCCnxBroker::BorrowConnection() failed. See following log entries for details.
Failed while trying to log on to SAP system.
The following RFC error was returned: [Group, Key, Message]:
[103, "RFC_ERROR_LOGON_FAILURE", "Name or password is incorrect (repeat logon)"].
The entitlement system has therefore been disabled in memory.
This may be because the SAP system is unavailable or because the credentials are invalid.
The entitlement system has to be re-enabled before it can be used again.
#2. BOE is unable to import the SAP roles (from CMC SAP Authentication configuration). The application throws the following error:
An error has occurred:
com/sap/mw/jco/JCO$Function
I am using JCo v 2.1.8. sapjco.jar was extracted to C:\Program Files\Business Objects\Tomcat55\common\lib and sapjcorfc.dll was extracted to C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86. librfc32.dll was installed in a prior step by the SAP Front End, and the file exists in C:\Windows\system32.
Any other ideas?
Edited by: Eric Axelrod on Feb 3, 2009 11:24 PM -
Configure Client Authentication for Receiver SOAP Adapter
Hi,
Can you please tell me what i should give in receiver soap channel for KeyStoreEntry and KeyStoreView after checking Configure Client Authentication checkbox,as I have got certificate from third party.
Thanks in advance
Best Regards,
Harleen Kaur ChadhaHi,
Keystore Entry:
Login to Visual Admin --> Server --> Services --> KeyStorage --> TrustedCAs --> Load --> Select the location where you have stored the certificate on your local system
Load function is used as you have already got the certificate....
Once this is done you will find an entry for your certificate in the Entries tab of your TrustedCAs section.
This is your Keystore Entry...in other words it the name of your certificate.
Keystore View:
http://help.sap.com/saphelp_webas630/helpdata/en/16/c0503e1dac5b46e10000000a114084/content.htm
Are you going to consume Logon tickets of the Third party system (which is other than SAP J2ee engine of your XI)? If yes, then you may also need to do some more settings in the J2ee Engine.
Regards,
Abhishek. -
Impliment SAP Authentication for Translation manager BI 4.0
Hello Experts,
We are using SAP Authentication type to logon and to create the reports.The reports are created now.We would need to have these reports translated using Translation Manager (TM) but they have provided a user name on Enterprise login.
But when we try to import the reports it is getting failed and giving an error "InitInitilization Java" exception .
As when the clinet tool TM is opened it is not showing the SAP authentication it has (Enterprise,Windows AD,LDAP,Standalone) and no SAP.
So can you suggest about how to have the SAP login for TM also.We are using BI 4.0 SP 2.7.Reports are created using BEX as back end.
thanks in advance
LekshmiHi Lekshmi,
In your Translation Manager web.xml look for Authentication.default and set sso.sap.primary and set the values as
<context-param>
<param-name>authentication.default</param-name>
<param-value>secSAPR3</param-value>
</context-param>
<context-param>
<param-name>sso.sap.primary</param-name>
<param-value>true</param-value>
</context-param>
Thanks,
Sravanthi -
Configuring Kerberos authentication for SSRS in native mode - SSRS 2008 R2-2012
Hi,
I've a SSRS native mode installation on a server and a SSAS installation on another server.
In order to configure the Kerberos authentication for SSRS native mode, I need to register one SPN for the report server service, one SPN for SSAS service and to configure SSRS to use the negotiate authentication type, isn't it?
ThanksHi pscorca,
If we have applications that only use Kerberos authentication and we are using RSWindowsNegotiate AuthenticationType, we must create a Service Principal Name (SPN) for the Report Server service if we configure it to run as a domain user account.
Before setting up constrained delegation, we must register a
Service Principle Name (SPN) for the Analysis Services instance. We will need the Analysis Services SPN when configuring Kerberos constrained delegation for middle tier services.
There is a document about Enabling Kerberos Authentication for Reporting Services, you can refer to it.
http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx
Hoe this helps.
Regards,
Alisa Tang
Alisa Tang
TechNet Community Support -
Configure SAP Authentication in CMC ..
Hello,
i ve installed a BO Edge Server and realized after Completion of installation, that i only have Enterprise/AD/ ..etc. SAP Authentication is missing.
Question:
How can i install the SAP authentication ??perfect .. Thanx ..
-
Authentication for BusinessObjects; "no RFC authorization"
Hi,
I installed BO Edge XI 3.1 and the Integration Kit; in SAP BW we created a user "bobw" to be used by the Integration Kit. I set the connection details in CMC -> Authentication -> SAP at "Entitlement Systems". When I click on the "Role Import" tab I get the following error message: "User BOBW has no RFC authorization for function group SYS".
We set the rights in BW according to the Integration Kit Installation Guide, page 66.
Is this only a missing right or another error?
Thanks!>
Ingo Hilgefort wrote:
> did you run an authorization trace for the user that is entered in the CMC / entitlement system page ?
Not yet as we have done this once and there were a lot of authorisations to assign. That's why I hoped that the documentation contains the necessary authorisations. -
How to configure basic authentication for external services
I have a BPM Project (11g) and within the composite I've added an external Web Service reference. This service uses basic authentication.
I would like to deploy the composite with the username and password already configured.
I have tried setting oracle.webservices.auth.username as a binding property and also as a property but neither seem to work. When the composite is deployed the basic authentication username is blank within Enterprise Manager.
It also resets after updating it manually during subsequent releases.
Any ideas?hi Mahender,
Thanks for your posting!
For this issue, you could refer to this document and tutorials (Microsoft Antimalware Whitepaper ). And you need use the Azure Powershell (http://msdn.microsoft.com/en-us/library/azure/dn771718.aspx).
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
Error when using SAP authentication for Business object Designer
my error is: [repo_proxy 13] SessionFacade::openSessionLogon with user info has failed(The secSAPR3 DLL could not be found or does not exist(hr=#0x80042a01) can you help me? regards
Hello Barbella,
Might be firewall problem...
This link might help you resolve the issue.. kindly go through it..
Connection between Universe Designer and BO Server can't be established,&nbsp;PROTS&nbsp;|&nbsp;ABAP,&nb…
Let us know the result.
Regards
Subbarao M -
Getting error in SAP Authentication configuration for BO Edge 3.1 SP3
Hi,
I have installed BusinessObject Edge Series 3.1 SP3 and BusinessObject XI 3.1 SAP SP3 on Windows 2008 server.
I am trying to configure SAP Authentication between BO and BI server. In CMC i have provided all the details under Entitlement System and click on update, After that when i click on Role Import tab I am getting "Name or password is incorrect". However, I checked user name and password is correct by login with same user and password to BI server.
I have downloaded sapjco.jar and sapjcorfc.dll and placed it at required locations and also done the transport in BI system as given with Integration Kit
I checked document "SAP BusinessObjects XI 3.1 SP3 Integration for SAP Solutions u2013 Supported Platforms" and found that SAP GUI 720 is not supported with SAP BusinessObjects XI 3.1 SP3.
Supported SAP GUI are:
SAP 640 GUI, patch level 25
SAP 710 GUI patch level 6 (1)
But I dont found those SAP GUI's on Service market place.
Please suggest me how to resolve this issue.
Thanks and regards,
Rehan ManzoorHI,
did you check if the SAP credentials entered on the Entitlement System page have the necessary authorizations to read the roles ?
You can see the details in the Installation Guide.
regards
Ingo Hilgefort -
Enabling HTTPS with Client Authentication for Sender SOAP Adapter on PI7.1
Hello All,
We are currently building up a HTTPS message exchange with an external client.
Our PI 7.1 recieved over HTTPS messages on an already configured Sender SOAP Adapter.
The HTTPS (SSL) connectivity works fine and was completely configured on the ABAP Stack at Trust Manager (TC=STRUSTSSO2)
Login to Message Servlet "com.sap.aii.adapter.soap.web.MessageServlet is required and works fine with user ID and password.
Now we have to configure the addtional Client Authentication.
At SOAP Adapter (Sender Communication Channel) under "HTTP Security Level"you are able to configure "HTTPS with Client Authentication".
But what are the next steps to get this scenario successfully in place?
Many thanks in advance!
JochenHi Colleagues,
following Steps still have to be done:
- Mapping public key to technical user at Java Stack
As preparation you have to activate value "ume.logon.allow.cert" with true under "com.sap.security.core.ume.service" under Config Tool. At NWA under Identity Management at for repecively technical user the public key certificate
- Be sure CA root certivicate at Database under STRUSTSSO2
- Import intermediate Certificate under Certificate List at Trast Manager for the Respecive Server Note
- use Login Module "client_cert" which you have to configure under NWA\Configuration Management\Authentication for Components "sap.com/com.sap.aii.adapter.soap.app*XISOAPAdapter".
Many thanks to all for support!
Regards,
Jochen -
SAP Authentication not available
Hello together!
on a BOE-System (XI 3.1, SP3, FP 3.5) is the SAP Authentication for the InfoView- and the CMC-logon not available. I think the problem is that they haven't installed the SAPJCO correct or did some other mistakes during the installation and configuration process. Until now I tried the following because to install and configurate the system new is not really a opportunity:
check if in the CMC the SAP Authentication is enable
check in the web.xml if the authentication.visible is set to true
copied the sapjco.jar into the Tomcat55\shared\lib and Tomcat55\common\lib
copied the two *.dll from the SAPJCO to the windows\system32 folder
set the classpath
redeployed the Apps: InfoViewApp, InfoviewAppActions, CmcApp, CmcAppActions, PartnerPlatformServices, SAP, OpenDocument and dswsbobje
run the partnercafinstall.bat
and restart the tomcat and the Server Intelligence Agent
Btw the Integration Kit for SAP works - it's just the problem with the missing authentication method.
Another question depending on that problem (maybe) regards the BW Publisher: There is a role for publishing content, this role have the essential rights and the role is added to the corresponding SAP system folder under the SAP structure in the CMC. But if you want to piblish a Crystal Reports report as a BW-User that is a member of the role but is not imported in the CMC you get the error EAS 30001(An error occurred when synchronizing folder hierarchy for role) which means that the user does not have sufficient rights to publish reports. If I put the role to the administrator group everything works fine except that the reports creates a folder structure SAP\2.0\*SYSTEM\New Object11552\New Object11553\REPORT*. Why are the folder "New Object11552" and "New Object11553" created and what's the problem with the rights?
I appreciate any hints what else I can do - because as I mentioned above a complete new-install is not really a opportunity.
Thanks in advance!Thanks Heiko and Ingo for your responses!
@Heiko
Hi Heiko, I couldn't find the SAP JCO 2.1.9 version to download - so I tried the 2.1.10 version; but still the same problem
@Ingo
Hi Ingo,
>>so the SAP Authentication in the CMC is available and you are able to import the SAP Roles ?
yes, the SAP Authentication in the CMC is available and I'm able to import SAP roles - that works absolutely fine; it's just that users can't select the SAP-Authentication method for the logon.
>>EAS 30001
ok, that was also my idea that it is important that the sap user who want's to publish content is imported in the cmc - but because of the problem that the sap authentication is not available at logon that's currently not possible. So, I think if this problem is solved - the problem with EAS 30001 is also gone.
>>Make sure the role as descriptions in transaction PFCG in all the languages that you use for publishing
you're absolutely correct - that was the problem! Thanks Ingo! Could you explain what are the steps I have to do to translate the description of a role in transaction SE63 after I created the role in the transaction PFCG or do you have a link with the HowTo for me? Hope we'll also find a solution for the missing SAP-Authentication method.
Mario -
Issue While Importing Roles in SAp Authentication
Hi Experts,
I have installed BO XI 3.1 SAP Integration Kit.
While Configuring SAP Authentication in CMC i have enetered all the details of SAP system under entitlement system.
Howevere when i click on Role Import tab , i am not able to see any roles avilable.
I see an error messge over there - Name or password is incorrect (repeat logon)
Howevere i am using the correct username and password.
Thanks
Edited by: Ashwani Sharma on Jul 9, 2009 11:18 AMHi, Thanks for reply -
I am connecting to BI 7.0 system.
Before entering username in CMC its working fine with BI 7.0 system and with frontends also.
When i will enter that username and password in CMC and click on Import Roles , Suddenly it shows me error message that -
Name or password is incorrect (repeat logon)
And also that user id got locked in SAP System.
I have tried this with alomost 10 ids..... and same result with all...
Maybe you are looking for
-
How to make paragraphs line up between columns?
I want to make a 2 column chapter, with the text in each column in its own flow. But then I want some of the paragraphs to line up between columns. So, like this: xxxxxxxxxx yyyyyyyyy xxxxxxxxxx yyyyyyyyy xxxxxxxxxx yyyyyyyyy yyyyyyyyy yyyyyyyyy xxxx
-
HELP! I just purchased an Attache 8 GB Flash Drive (from PNY Technologies). I want to use the flsh drive to transfer data between my iBook G4 (1.07 GHz PowerPc G4 with 1.25 GB DDR SDRAM, running Mac OS X version 10.4.9) and my Toshiba Satellite lapto
-
"XFA template Model is empty" error
I have a process that takes an interactive form and makes it non-interactive. It works really well for one form when I use the literal for the input to my Render PDF. I need to be able to give the process any one of about 100 different forms and have
-
Hello, I have read lots of threads for FTP receiver problems wiht overwriting files.... But I am not sure which is the correct solution. We have: - Cluster (6nodes), PI711 (SP03) - a time stamp shoudl be in the file name - there is dynamice filename
-
Getting my Mac/FCP to recognize camera
Hello Everyone! Just wondering if anyone can help me out on this one. I have a Panasonic PVGS400 digital camcorder. It's about three years old and it does have a Firewire connection. I'm ready to do some capturing and logging on my brand new Macbook.