Configuring SSO in AS JAVA (PI 7.11)
Hello, experts!
Can your HELP me?
I try to configure client SSO with certificates.
I configure next parameters and settings on PI 7.11.
Install SAPCRYPTOlLIB for my AIX version, placing the ticket, sapgenpse, and libsapcrypto.o in the correct locations.
Profile settings:
ssl/pse_provider=JAVA
sec/libsapsecu=/usr/sap/<SID>/SYS/exe/run/libsapcrypto.o
ssf/ssfapi_lib=/usr/sap/<SID>/SYS/exe/run/libsapcrypto.o
ssf/name=SAPSECULIB
ssl/ssl_lib=/usr/sap/<SID>/SYS/exe/run/libsapcrypto.o
icm/server_port_2=PORT=5$(SAPSYSTEM)01,PROT=HTTPS
In NWA->Configuration Management->Security->Certificates and Keys create Key Storage ICM_SSL_<j2eeinstanceID>. Then Generate CRS Request, load this code to the service.sap.com/TCS, generate SSL Test Certificate and load to CRS Respone.
Now i can access my system on https. But when i try to log on wiht certificate and mask check box "Create Client Certificate". I`ll redirect to https://tcs.mysap.com/invoke/tc/usercert with error text:
"Error: Incorrect certificate request (CertReq)
One of the following reasons can cause this error:
- You call this service without CertReq
- Your CertReq is not valid or the signature is incorrect
- Your RA is not registered yet
- You apply for certificate within incorrect naming space
Please contact your system administrator.
Whats happen? Why my users couldn`t take certificate?
Please help...
Hello Konstantin,
Please follow the steps in the link:
http://help.sap.com/saphelp_nw70/helpdata/en/3b/6d04c7974743159e0eaeea2b40a537/frameset.htm
You need to use a PSE using the DSA algorithm as your Registartion Authority.
I hope this helps you.
Regards,
Blanca
Similar Messages
-
How to configure SSO for WAS Java stack
Hi all,
I want to configure our WAS server with java stack as a SAP ticket issuing system. This system does not have Portal installed on it.
I want to know weather it is possible or not. if possible how it can be done.
actually ABAP stack their are transaction like SSO2,SSO to do the task. but what about WAS with Java stack?
Thank all.HI Kumar
Follow this link.
http://help.sap.com/saphelp_nw04/helpdata/en/53/695b3ebd564644e10000000a114084/frameset.htm
Hope this helped you
Reagrds,
RK -
Login problem after configuring SSO
Hi All,
After configuring SSO I am not able to login in PORTAL as J2EE_ADMIN User.After entering the password its again redirecting the same screen with any error.
Please help.
Thanks,
Prashant.
Edited by: Prashant Shukla on Mar 12, 2008 8:27 AMHi All,
After restarting the server In SAPMMC Java process sserver0 is not getting up its throwing an error with exit code -11113.
Details of developer trace-:
trc file: "D:\usr\sap\EC6\DVEBMGS01\work\dev_server0", trc level: 1, release: "700"
node name : ID13670550
pid : 5840
system name : EC6
system nr. : 01
started at : Mon Mar 17 11:33:25 2008
arguments :
arg[00] : D:\usr\sap\EC6\DVEBMGS01\exe\jlaunch.exe
arg[01] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[02] : -DSAPINFO=EC6_01_server
arg[03] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[04] : -DSAPSTART=1
arg[05] : -DCONNECT_PORT=3479
arg[06] : -DSAPSYSTEM=01
arg[07] : -DSAPSYSTEMNAME=EC6
arg[08] : -DSAPMYNAME=sapserver1_EC6_01
arg[09] : -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[10] : -DFRFC_FALLBACK=ON
arg[11] : -DFRFC_FALLBACK_HOST=localhost
[Thr 7132] Mon Mar 17 11:33:25 2008
[Thr 7132] *** WARNING => INFO: Unknown property [instance.box.number=EC6DVEBMGS01sapserver1] [jstartxx.c 841]
[Thr 7132] *** WARNING => INFO: Unknown property [instance.en.host=sapserver1] [jstartxx.c 841]
[Thr 7132] *** WARNING => INFO: Unknown property [instance.en.port=3200] [jstartxx.c 841]
[Thr 7132] *** WARNING => INFO: Unknown property [instance.system.id=1] [jstartxx.c 841]
JStartupReadInstanceProperties: read instance properties [D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties]
-> ms host : sapserver1
-> ms port : 3900
-> OS libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> Admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Used property files
-> files [00] : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Instance properties
-> ms host : sapserver1
-> ms port : 3900
-> os libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Bootstrap nodes
-> [00] bootstrap : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] bootstrap_ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [02] bootstrap_ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Worker nodes
-> [00] ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
[Thr 7132] JLaunchRequestQueueInit: create named pipe for ipc
[Thr 7132] JLaunchRequestQueueInit: create pipe listener thread
[Thr 3180] JLaunchRequestFunc: Thread 3180 started as listener thread for np messages.
[Thr 2140] WaitSyncSemThread: Thread 2140 started as semaphore monitor thread.
[Thr 7132] NiInit3: NI already initialized; param 'maxHandles' ignored (1;402)
[Thr 7132] CPIC (version=700.2005.12.02)
[Thr 7132] [Node: server0] java home is set by profile parameter
Java Home: C:\j2sdk1.4.2_16
[Thr 7132] JStartupICheckFrameworkPackage: can't find framework package D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
JStartupIReadSection: read node properties [ID13670550]
-> node name : server0
-> node type : server
-> node execute : yes
-> jlaunch parameters :
-> java path : C:\j2sdk1.4.2_16
-> java parameters : -Djava.security.policy=./java.policy -Djava.security.egd=file:/dev/urandom -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy -Djco.jarm=1 -XX:MaxPermSize=256M -XX:PermSize=256M -XX:NewSize=171M -XX:MaxNewSize=171M -XX:DisableExplicitGC -verbose:gc -Xloggc:GC.log -XX:PrintGCDetails -XX:+PrintGCTimeStamps -Djava.awt.headless=true -Dsun.io.useCanonCaches=false -XX:SoftRefLRUPolicyMSPerMB=1 -XX:SurvivorRatio=2 -XX:TargetSurvivorRatio=90 -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> java vm version : 1.4.2_16-b05
-> java vm vendor : Java HotSpot(TM) Server VM (Sun Microsystems Inc.)
-> java vm type : server
-> java vm cpu : x86
-> heap size : 1024M
-> init heap size : 1024M
-> root path : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\server0
-> class path : .\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> OS libs path : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> main class : com.sap.engine.boot.Start
-> framework class : com.sap.bc.proj.jstartup.JStartupFramework
-> registr. class : com.sap.bc.proj.jstartup.JStartupNatives
-> framework path : D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
-> shutdown class : com.sap.engine.boot.Start
-> parameters :
-> debuggable : no
-> debug mode : no
-> debug port : 50121
-> shutdown timeout : 120000
[Thr 7132] JLaunchISetDebugMode: set debug mode [no]
[Thr 7520] JLaunchIStartFunc: Thread 7520 started as Java VM thread.
JHVM_LoadJavaVM: VM Arguments of node [server0]
-> stack : 262144 Bytes
-> arg[ 0]: exit
-> arg[ 1]: abort
-> arg[ 2]: vfprintf
-> arg[ 3]: -Djava.security.policy=./java.policy
-> arg[ 4]: -Djava.security.egd=file:/dev/urandom
-> arg[ 5]: -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy
-> arg[ 6]: -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy
-> arg[ 7]: -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy
-> arg[ 8]: -Djco.jarm=1
-> arg[ 9]: -XX:MaxPermSize=256M
-> arg[ 10]: -XX:PermSize=256M
-> arg[ 11]: -XX:NewSize=171M
-> arg[ 12]: -XX:MaxNewSize=171M
-> arg[ 13]: -XX:+DisableExplicitGC
-> arg[ 14]: -verbose:gc
-> arg[ 15]: -Xloggc:GC.log
-> arg[ 16]: -XX:+PrintGCDetails
-> arg[ 17]: -XX:+PrintGCTimeStamps
-> arg[ 18]: -Djava.awt.headless=true
-> arg[ 19]: -Dsun.io.useCanonCaches=false
-> arg[ 20]: -XX:SoftRefLRUPolicyMSPerMB=1
-> arg[ 21]: -XX:SurvivorRatio=2
-> arg[ 22]: -XX:TargetSurvivorRatio=90
-> arg[ 23]: -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> arg[ 24]: -Dsys.global.dir=D:\usr\sap\EC6\SYS\global
-> arg[ 25]: -Dapplication.home=D:\usr\sap\EC6\DVEBMGS01\exe
-> arg[ 26]: -Djava.class.path=D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar;.\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> arg[ 27]: -Djava.library.path=C:\j2sdk1.4.2_16\jre\bin\server;C:\j2sdk1.4.2_16\jre\bin;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs;d:\sapdb\programs\bin;d:\sapdb\programs\pgm;D:\OraHome_1\bin;D:\OraHome_1\jre\1.4.2\bin\client;D:\OraHome_1\jre\1.4.2\bin;D:\oracle\product\10.1.0\Db_1\bin;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin\client;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\SYS\exe\uc\NTI386
-> arg[ 28]: -Dmemory.manager=1024M
-> arg[ 29]: -Xmx1024M
-> arg[ 30]: -Xms1024M
-> arg[ 31]: -DLoadBalanceRestricted=no
-> arg[ 32]: -Djstartup.mode=JCONTROL
-> arg[ 33]: -Djstartup.ownProcessId=5840
-> arg[ 34]: -Djstartup.ownHardwareId=B0245063248
-> arg[ 35]: -Djstartup.whoami=server
-> arg[ 36]: -Djstartup.debuggable=no
-> arg[ 37]: -DSAPINFO=EC6_01_server
-> arg[ 38]: -DSAPSTART=1
-> arg[ 39]: -DCONNECT_PORT=3479
-> arg[ 40]: -DSAPSYSTEM=01
-> arg[ 41]: -DSAPSYSTEMNAME=EC6
-> arg[ 42]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 43]: -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
-> arg[ 44]: -DFRFC_FALLBACK=ON
-> arg[ 45]: -DFRFC_FALLBACK_HOST=localhost
-> arg[ 46]: -DSAPSTARTUP=1
-> arg[ 47]: -DSAPSYSTEM=01
-> arg[ 48]: -DSAPSYSTEMNAME=EC6
-> arg[ 49]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 50]: -DSAPDBHOST=sapserver1
-> arg[ 51]: -Dj2ee.dbhost=sapserver1
Mon Mar 17 11:33:26 2008
CompilerOracle: exclude com/sapportals/portal/pb/layout/taglib/ContainerTag addIviewResources
CompilerOracle: exclude com/sap/engine/services/keystore/impl/security/CodeBasedSecurityConnector getApplicationDomain
CompilerOracle: exclude com/sap/engine/services/rmi_p4/P4StubSkeletonGenerator generateStub
CompilerOracle: exclude com/sapportals/portal/prt/util/StringUtils escapeToJS
CompilerOracle: exclude com/sapportals/portal/prt/core/broker/PortalServiceItem startServices
CompilerOracle: exclude com/sap/engine/services/webservices/server/deploy/WSConfigurationHandler downloadFile
CompilerOracle: exclude com/sapportals/portal/prt/jndisupport/util/AbstractHierarchicalContext lookup
[Thr 7520] JHVM_LoadJavaVM: Java VM created OK.
JHVM_BuildArgumentList: main method arguments of node [server0]
[Thr 4220] Mon Mar 17 11:33:28 2008
[Thr 4220] JHVM_RegisterNatives: registering methods in com.sap.bc.krn.perf.PerfTimes
[Thr 4220] Mon Mar 17 11:33:29 2008
[Thr 4220] JHVM_RegisterNatives: registering methods in com.sap.bc.proj.jstartup.JStartupFramework
[Thr 4220] JLaunchISetClusterId: set cluster id 13670550
[Thr 4220] JLaunchISetState: change state from [Initial (0)] to [Waiting for start (1)]
[Thr 4220] JLaunchISetState: change state from [Waiting for start (1)] to [Starting (2)]
[Thr 4696] Mon Mar 17 11:34:07 2008
[Thr 4696] JHVM_RegisterNatives: registering methods in com.sap.mw.rfc.driver.CpicDriver
[Thr 4696] JHVM_RegisterNatives: registering methods in com.sap.i18n.cp.ConverterJNI
[Thr 4292] Mon Mar 17 11:34:08 2008
[Thr 4292] JLaunchIExitJava: exit hook is called (rc = -11113)
[Thr 4292] JLaunchCloseProgram: good bye (exitcode = -11113)
trc file: "D:\usr\sap\EC6\DVEBMGS01\work\dev_server0", trc level: 1, release: "700"
node name : ID13670550
pid : 7852
system name : EC6
system nr. : 01
started at : Mon Mar 17 11:34:11 2008
arguments :
arg[00] : D:\usr\sap\EC6\DVEBMGS01\exe\jlaunch.exe
arg[01] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[02] : -DSAPINFO=EC6_01_server
arg[03] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[04] : -DSAPSTART=1
arg[05] : -DCONNECT_PORT=3479
arg[06] : -DSAPSYSTEM=01
arg[07] : -DSAPSYSTEMNAME=EC6
arg[08] : -DSAPMYNAME=sapserver1_EC6_01
arg[09] : -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[10] : -DFRFC_FALLBACK=ON
arg[11] : -DFRFC_FALLBACK_HOST=localhost
[Thr 4868] Mon Mar 17 11:34:11 2008
[Thr 4868] *** WARNING => INFO: Unknown property [instance.box.number=EC6DVEBMGS01sapserver1] [jstartxx.c 841]
[Thr 4868] *** WARNING => INFO: Unknown property [instance.en.host=sapserver1] [jstartxx.c 841]
[Thr 4868] *** WARNING => INFO: Unknown property [instance.en.port=3200] [jstartxx.c 841]
[Thr 4868] *** WARNING => INFO: Unknown property [instance.system.id=1] [jstartxx.c 841]
JStartupReadInstanceProperties: read instance properties [D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties]
-> ms host : sapserver1
-> ms port : 3900
-> OS libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> Admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Used property files
-> files [00] : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Instance properties
-> ms host : sapserver1
-> ms port : 3900
-> os libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Bootstrap nodes
-> [00] bootstrap : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] bootstrap_ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [02] bootstrap_ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Worker nodes
-> [00] ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
[Thr 4868] JLaunchRequestQueueInit: create named pipe for ipc
[Thr 4868] JLaunchRequestQueueInit: create pipe listener thread
[Thr 6192] WaitSyncSemThread: Thread 6192 started as semaphore monitor thread.
[Thr 6632] JLaunchRequestFunc: Thread 6632 started as listener thread for np messages.
[Thr 4868] NiInit3: NI already initialized; param 'maxHandles' ignored (1;402)
[Thr 4868] CPIC (version=700.2005.12.02)
[Thr 4868] [Node: server0] java home is set by profile parameter
Java Home: C:\j2sdk1.4.2_16
[Thr 4868] JStartupICheckFrameworkPackage: can't find framework package D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
JStartupIReadSection: read node properties [ID13670550]
-> node name : server0
-> node type : server
-> node execute : yes
-> jlaunch parameters :
-> java path : C:\j2sdk1.4.2_16
-> java parameters : -Djava.security.policy=./java.policy -Djava.security.egd=file:/dev/urandom -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy -Djco.jarm=1 -XX:MaxPermSize=256M -XX:PermSize=256M -XX:NewSize=171M -XX:MaxNewSize=171M -XX:DisableExplicitGC -verbose:gc -Xloggc:GC.log -XX:PrintGCDetails -XX:+PrintGCTimeStamps -Djava.awt.headless=true -Dsun.io.useCanonCaches=false -XX:SoftRefLRUPolicyMSPerMB=1 -XX:SurvivorRatio=2 -XX:TargetSurvivorRatio=90 -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> java vm version : 1.4.2_16-b05
-> java vm vendor : Java HotSpot(TM) Server VM (Sun Microsystems Inc.)
-> java vm type : server
-> java vm cpu : x86
-> heap size : 1024M
-> init heap size : 1024M
-> root path : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\server0
-> class path : .\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> OS libs path : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> main class : com.sap.engine.boot.Start
-> framework class : com.sap.bc.proj.jstartup.JStartupFramework
-> registr. class : com.sap.bc.proj.jstartup.JStartupNatives
-> framework path : D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
-> shutdown class : com.sap.engine.boot.Start
-> parameters :
-> debuggable : no
-> debug mode : no
-> debug port : 50121
-> shutdown timeout : 120000
[Thr 4868] JLaunchISetDebugMode: set debug mode [no]
[Thr 5632] JLaunchIStartFunc: Thread 5632 started as Java VM thread.
JHVM_LoadJavaVM: VM Arguments of node [server0]
-> stack : 262144 Bytes
-> arg[ 0]: exit
-> arg[ 1]: abort
-> arg[ 2]: vfprintf
-> arg[ 3]: -Djava.security.policy=./java.policy
-> arg[ 4]: -Djava.security.egd=file:/dev/urandom
-> arg[ 5]: -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy
-> arg[ 6]: -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy
-> arg[ 7]: -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy
-> arg[ 8]: -Djco.jarm=1
-> arg[ 9]: -XX:MaxPermSize=256M
-> arg[ 10]: -XX:PermSize=256M
-> arg[ 11]: -XX:NewSize=171M
-> arg[ 12]: -XX:MaxNewSize=171M
-> arg[ 13]: -XX:+DisableExplicitGC
-> arg[ 14]: -verbose:gc
-> arg[ 15]: -Xloggc:GC.log
-> arg[ 16]: -XX:+PrintGCDetails
-> arg[ 17]: -XX:+PrintGCTimeStamps
-> arg[ 18]: -Djava.awt.headless=true
-> arg[ 19]: -Dsun.io.useCanonCaches=false
-> arg[ 20]: -XX:SoftRefLRUPolicyMSPerMB=1
-> arg[ 21]: -XX:SurvivorRatio=2
-> arg[ 22]: -XX:TargetSurvivorRatio=90
-> arg[ 23]: -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> arg[ 24]: -Dsys.global.dir=D:\usr\sap\EC6\SYS\global
-> arg[ 25]: -Dapplication.home=D:\usr\sap\EC6\DVEBMGS01\exe
-> arg[ 26]: -Djava.class.path=D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar;.\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> arg[ 27]: -Djava.library.path=C:\j2sdk1.4.2_16\jre\bin\server;C:\j2sdk1.4.2_16\jre\bin;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs;d:\sapdb\programs\bin;d:\sapdb\programs\pgm;D:\OraHome_1\bin;D:\OraHome_1\jre\1.4.2\bin\client;D:\OraHome_1\jre\1.4.2\bin;D:\oracle\product\10.1.0\Db_1\bin;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin\client;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\SYS\exe\uc\NTI386
-> arg[ 28]: -Dmemory.manager=1024M
-> arg[ 29]: -Xmx1024M
-> arg[ 30]: -Xms1024M
-> arg[ 31]: -DLoadBalanceRestricted=no
-> arg[ 32]: -Djstartup.mode=JCONTROL
-> arg[ 33]: -Djstartup.ownProcessId=7852
-> arg[ 34]: -Djstartup.ownHardwareId=B0245063248
-> arg[ 35]: -Djstartup.whoami=server
-> arg[ 36]: -Djstartup.debuggable=no
-> arg[ 37]: -DSAPINFO=EC6_01_server
-> arg[ 38]: -DSAPSTART=1
-> arg[ 39]: -DCONNECT_PORT=3479
-> arg[ 40]: -DSAPSYSTEM=01
-> arg[ 41]: -DSAPSYSTEMNAME=EC6
-> arg[ 42]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 43]: -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
-> arg[ 44]: -DFRFC_FALLBACK=ON
-> arg[ 45]: -DFRFC_FALLBACK_HOST=localhost
-> arg[ 46]: -DSAPSTARTUP=1
-> arg[ 47]: -DSAPSYSTEM=01
-> arg[ 48]: -DSAPSYSTEMNAME=EC6
-> arg[ 49]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 50]: -DSAPDBHOST=sapserver1
-> arg[ 51]: -Dj2ee.dbhost=sapserver1
CompilerOracle: exclude com/sapportals/portal/pb/layout/taglib/ContainerTag addIviewResources
CompilerOracle: exclude com/sap/engine/services/keystore/impl/security/CodeBasedSecurityConnector getApplicationDomain
CompilerOracle: exclude com/sap/engine/services/rmi_p4/P4StubSkeletonGenerator generateStub
CompilerOracle: exclude com/sapportals/portal/prt/util/StringUtils escapeToJS
CompilerOracle: exclude com/sapportals/portal/prt/core/broker/PortalServiceItem startServices
CompilerOracle: exclude com/sap/engine/services/webservices/server/deploy/WSConfigurationHandler downloadFile
CompilerOracle: exclude com/sapportals/portal/prt/jndisupport/util/AbstractHierarchicalContext lookup
[Thr 5632] JHVM_LoadJavaVM: Java VM created OK.
JHVM_BuildArgumentList: main method arguments of node [server0]
[Thr 6052] Mon Mar 17 11:34:13 2008
[Thr 6052] JHVM_RegisterNatives: registering methods in com.sap.bc.krn.perf.PerfTimes
[Thr 6052] JHVM_RegisterNatives: registering methods in com.sap.bc.proj.jstartup.JStartupFramework
[Thr 6052] JLaunchISetClusterId: set cluster id 13670550
[Thr 6052] JLaunchISetState: change state from [Initial (0)] to [Waiting for start (1)]
[Thr 6052] JLaunchISetState: change state from [Waiting for start (1)] to [Starting (2)]
[Thr 6040] Mon Mar 17 11:34:40 2008
[Thr 6040] JHVM_RegisterNatives: registering methods in com.sap.mw.rfc.driver.CpicDriver
[Thr 6040] JHVM_RegisterNatives: registering methods in com.sap.i18n.cp.ConverterJNI
[Thr 5440] Mon Mar 17 11:34:41 2008
[Thr 5440] JLaunchIExitJava: exit hook is called (rc = -11113)
[Thr 5440] JLaunchCloseProgram: good bye (exitcode = -11113)
trc file: "D:\usr\sap\EC6\DVEBMGS01\work\dev_server0", trc level: 1, release: "700"
node name : ID13670550
pid : 6036
system name : EC6
system nr. : 01
started at : Mon Mar 17 11:34:41 2008
arguments :
arg[00] : D:\usr\sap\EC6\DVEBMGS01\exe\jlaunch.exe
arg[01] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[02] : -DSAPINFO=EC6_01_server
arg[03] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[04] : -DSAPSTART=1
arg[05] : -DCONNECT_PORT=3479
arg[06] : -DSAPSYSTEM=01
arg[07] : -DSAPSYSTEMNAME=EC6
arg[08] : -DSAPMYNAME=sapserver1_EC6_01
arg[09] : -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[10] : -DFRFC_FALLBACK=ON
arg[11] : -DFRFC_FALLBACK_HOST=localhost
[Thr 5572] Mon Mar 17 11:34:41 2008
[Thr 5572] *** WARNING => INFO: Unknown property [instance.box.number=EC6DVEBMGS01sapserver1] [jstartxx.c 841]
[Thr 5572] *** WARNING => INFO: Unknown property [instance.en.host=sapserver1] [jstartxx.c 841]
[Thr 5572] *** WARNING => INFO: Unknown property [instance.en.port=3200] [jstartxx.c 841]
[Thr 5572] *** WARNING => INFO: Unknown property [instance.system.id=1] [jstartxx.c 841]
JStartupReadInstanceProperties: read instance properties [D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties]
-> ms host : sapserver1
-> ms port : 3900
-> OS libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> Admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Used property files
-> files [00] : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Instance properties
-> ms host : sapserver1
-> ms port : 3900
-> os libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Bootstrap nodes
-> [00] bootstrap : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] bootstrap_ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [02] bootstrap_ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Worker nodes
-> [00] ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
[Thr 5572] JLaunchRequestQueueInit: create named pipe for ipc
[Thr 5572] JLaunchRequestQueueInit: create pipe listener thread
[Thr 6780] WaitSyncSemThread: Thread 6780 started as semaphore monitor thread.
[Thr 5824] JLaunchRequestFunc: Thread 5824 started as listener thread for np messages.
[Thr 5572] NiInit3: NI already initialized; param 'maxHandles' ignored (1;402)
[Thr 5572] CPIC (version=700.2005.12.02)
[Thr 5572] [Node: server0] java home is set by profile parameter
Java Home: C:\j2sdk1.4.2_16
[Thr 5572] JStartupICheckFrameworkPackage: can't find framework package D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
JStartupIReadSection: read node properties [ID13670550]
-> node name : server0
-> node type : server
-> node execute : yes
-> jlaunch parameters :
-> java path : C:\j2sdk1.4.2_16
-> java parameters : -Djava.security.policy=./java.policy -Djava.security.egd=file:/dev/urandom -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy -Djco.jarm=1 -XX:MaxPermSize=256M -XX:PermSize=256M -XX:NewSize=171M -XX:MaxNewSize=171M -XX:DisableExplicitGC -verbose:gc -Xloggc:GC.log -XX:PrintGCDetails -XX:+PrintGCTimeStamps -Djava.awt.headless=true -Dsun.io.useCanonCaches=false -XX:SoftRefLRUPolicyMSPerMB=1 -XX:SurvivorRatio=2 -XX:TargetSurvivorRatio=90 -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> java vm version : 1.4.2_16-b05
-> java vm vendor : Java HotSpot(TM) Server VM (Sun Microsystems Inc.)
-> java vm type : server
-> java vm cpu : x86
-> heap size : 1024M
-> init heap size : 1024M
-> root path : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\server0
-> class path : .\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> OS libs path : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> main class : com.sap.engine.boot.Start
-> framework class : com.sap.bc.proj.jstartup.JStartupFramework
-> registr. class : com.sap.bc.proj.jstartup.JStartupNatives
-> framework path : D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
-> shutdown class : com.sap.engine.boot.Start
-> parameters :
-> debuggable : no
-> debug mode : no
-> debug port : 50121
-> shutdown timeout : 120000
[Thr 5572] JLaunchISetDebugMode: set debug mode [no]
[Thr 6056] JLaunchIStartFunc: Thread 6056 started as Java VM thread.
JHVM_LoadJavaVM: VM Arguments of node [server0]
-> stack : 262144 Bytes
-> arg[ 0]: exit
-> arg[ 1]: abort
-> arg[ 2]: vfprintf
-> arg[ 3]: -Djava.security.policy=./java.policy
-> arg[ 4]: -Djava.security.egd=file:/dev/urandom
-> arg[ 5]: -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy
-> arg[ 6]: -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy
-> arg[ 7]: -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy
-> arg[ 8]: -Djco.jarm=1
-> arg[ 9]: -XX:MaxPermSize=256M
-> arg[ 10]: -XX:PermSize=256M
-> arg[ 11]: -XX:NewSize=171M
-> arg[ 12]: -XX:MaxNewSize=171M
-> arg[ 13]: -XX:+DisableExplicitGC
-> arg[ 14]: -verbose:gc
-> arg[ 15]: -Xloggc:GC.log
-> arg[ 16]: -XX:+PrintGCDetails
-> arg[ 17]: -XX:+PrintGCTimeStamps
-> arg[ 18]: -Djava.awt.headless=true
-> arg[ 19]: -Dsun.io.useCanonCaches=false
-> arg[ 20]: -XX:SoftRefLRUPolicyMSPerMB=1
-> arg[ 21]: -XX:SurvivorRatio=2
-> arg[ 22]: -XX:TargetSurvivorRatio=90
-> arg[ 23]: -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> arg[ 24]: -Dsys.global.dir=D:\usr\sap\EC6\SYS\global
-> arg[ 25]: -Dapplication.home=D:\usr\sap\EC6\DVEBMGS01\exe
-> arg[ 26]: -Djava.class.path=D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar;.\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> arg[ 27]: -Djava.library.path=C:\j2sdk1.4.2_16\jre\bin\server;C:\j2sdk1.4.2_16\jre\bin;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs;d:\sapdb\programs\bin;d:\sapdb\programs\pgm;D:\OraHome_1\bin;D:\OraHome_1\jre\1.4.2\bin\client;D:\OraHome_1\jre\1.4.2\bin;D:\oracle\product\10.1.0\Db_1\bin;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin\client;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\SYS\exe\uc\NTI386
-> arg[ 28]: -Dmemory.manager=1024M
-> arg[ 29]: -Xmx1024M
-> arg[ 30]: -Xms1024M
-> arg[ 31]: -DLoadBalanceRestricted=no
-> arg[ 32]: -Djstartup.mode=JCONTROL
-> arg[ 33]: -Djstartup.ownProcessId=6036
-> arg[ 34]: -Djstartup.ownHardwareId=B0245063248
-> arg[ 35]: -Djstartup.whoami=server
-> arg[ 36]: -Djstartup.debuggable=no
-> arg[ 37]: -DSAPINFO=EC6_01_server
-> arg[ 38]: -DSAPSTART=1
-> arg[ 39]: -DCONNECT_PORT=3479
-> arg[ 40]: -DSAPSYSTEM=01
-> arg[ 41]: -DSAPSYSTEMNAME=EC6
-> arg[ 42]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 43]: -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
-> arg[ 44]: -DFRFC_FALLBACK=ON
-> arg[ 45]: -DFRFC_FALLBACK_HOST=localhost
-> arg[ 46]: -DSAPSTARTUP=1
-> arg[ 47]: -DSAPSYSTEM=01
-> arg[ 48]: -DSAPSYSTEMNAME=EC6
-> arg[ 49]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 50]: -DSAPDBHOST=sapserver1
-> arg[ 51]: -Dj2ee.dbhost=sapserver1
CompilerOracle: exclude com/sapportals/portal/pb/layout/taglib/ContainerTag addIviewResources
CompilerOracle: exclude com/sap/engine/services/keystore/impl/security/CodeBasedSecurityConnector getApplicationDomain
CompilerOracle: exclude com/sap/engine/services/rmi_p4/P4StubSkeletonGenerator generateStub
CompilerOracle: exclude com/sapportals/portal/prt/util/StringUtils escapeToJS
CompilerOracle: exclude com/sapportals/portal/prt/core/broker/PortalServiceItem startServices
CompilerOracle: exclude com/sap/engine/services/webservices/server/deploy/WSConfigurationHandler downloadFile
CompilerOracle: exclude com/sapportals/portal/prt/jndisupport/util/AbstractHierarchicalContext lookup
[Thr 6056] JHVM_LoadJavaVM: Java VM created OK.
JHVM_BuildArgumentList: main method arguments of node [server0]
[Thr 5680] Mon Mar 17 11:34:43 2008
[Thr 5680] JHVM_RegisterNatives: registering methods in com.sap.bc.krn.perf.PerfTimes
[Thr 5680] JHVM_RegisterNatives: registering methods in com.sap.bc.proj.jstartup.JStartupFramework
[Thr 5680] JLaunchISetClusterId: set cluster id 13670550
[Thr 5680] Mon Mar 17 11:34:44 2008
[Thr 5680] JLaunchISetState: change state from [Initial (0)] to [Waiting for start (1)]
[Thr 5680] JLaunchISetState: change state from [Waiting for start (1)] to [Starting (2)]
[Thr 3952] Mon Mar 17 11:35:11 2008
[Thr 3952] JHVM_RegisterNatives: registering methods in com.sap.mw.rfc.driver.CpicDriver
[Thr 3952] JHVM_RegisterNatives: registering methods in com.sap.i18n.cp.ConverterJNI
[Thr 352] Mon Mar 17 11:35:12 2008
[Thr 352] JLaunchIExitJava: exit hook is called (rc = -11113)
[Thr 352] JLaunchCloseProgram: good bye (exitcode = -11113)
trc file: "D:\usr\sap\EC6\DVEBMGS01\work\dev_server0", trc level: 1, release: "700"
node name : ID13670550
pid : 5564
system name : EC6
system nr. : 01
started at : Mon Mar 17 11:35:13 2008
arguments :
arg[00] : D:\usr\sap\EC6\DVEBMGS01\exe\jlaunch.exe
arg[01] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[02] : -DSAPINFO=EC6_01_server
arg[03] : pf=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[04] : -DSAPSTART=1
arg[05] : -DCONNECT_PORT=3479
arg[06] : -DSAPSYSTEM=01
arg[07] : -DSAPSYSTEMNAME=EC6
arg[08] : -DSAPMYNAME=sapserver1_EC6_01
arg[09] : -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
arg[10] : -DFRFC_FALLBACK=ON
arg[11] : -DFRFC_FALLBACK_HOST=localhost
[Thr 7448] Mon Mar 17 11:35:13 2008
[Thr 7448] *** WARNING => INFO: Unknown property [instance.box.number=EC6DVEBMGS01sapserver1] [jstartxx.c 841]
[Thr 7448] *** WARNING => INFO: Unknown property [instance.en.host=sapserver1] [jstartxx.c 841]
[Thr 7448] *** WARNING => INFO: Unknown property [instance.en.port=3200] [jstartxx.c 841]
[Thr 7448] *** WARNING => INFO: Unknown property [instance.system.id=1] [jstartxx.c 841]
JStartupReadInstanceProperties: read instance properties [D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties]
-> ms host : sapserver1
-> ms port : 3900
-> OS libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> Admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Used property files
-> files [00] : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Instance properties
-> ms host : sapserver1
-> ms port : 3900
-> os libs : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> admin URL :
-> run mode : NORMAL
-> run action : NONE
-> enabled : yes
Bootstrap nodes
-> [00] bootstrap : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] bootstrap_ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [02] bootstrap_ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
Worker nodes
-> [00] ID13670500 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
-> [01] ID13670550 : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\instance.properties
[Thr 7448] JLaunchRequestQueueInit: create named pipe for ipc
[Thr 7448] JLaunchRequestQueueInit: create pipe listener thread
[Thr 4468] JLaunchRequestFunc: Thread 4468 started as listener thread for np messages.
[Thr 1984] WaitSyncSemThread: Thread 1984 started as semaphore monitor thread.
[Thr 7448] NiInit3: NI already initialized; param 'maxHandles' ignored (1;402)
[Thr 7448] CPIC (version=700.2005.12.02)
[Thr 7448] [Node: server0] java home is set by profile parameter
Java Home: C:\j2sdk1.4.2_16
[Thr 7448] JStartupICheckFrameworkPackage: can't find framework package D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
JStartupIReadSection: read node properties [ID13670550]
-> node name : server0
-> node type : server
-> node execute : yes
-> jlaunch parameters :
-> java path : C:\j2sdk1.4.2_16
-> java parameters : -Djava.security.policy=./java.policy -Djava.security.egd=file:/dev/urandom -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy -Djco.jarm=1 -XX:MaxPermSize=256M -XX:PermSize=256M -XX:NewSize=171M -XX:MaxNewSize=171M -XX:DisableExplicitGC -verbose:gc -Xloggc:GC.log -XX:PrintGCDetails -XX:+PrintGCTimeStamps -Djava.awt.headless=true -Dsun.io.useCanonCaches=false -XX:SoftRefLRUPolicyMSPerMB=1 -XX:SurvivorRatio=2 -XX:TargetSurvivorRatio=90 -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> java vm version : 1.4.2_16-b05
-> java vm vendor : Java HotSpot(TM) Server VM (Sun Microsystems Inc.)
-> java vm type : server
-> java vm cpu : x86
-> heap size : 1024M
-> init heap size : 1024M
-> root path : D:\usr\sap\EC6\DVEBMGS01\j2ee\cluster\server0
-> class path : .\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> OS libs path : D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs
-> main class : com.sap.engine.boot.Start
-> framework class : com.sap.bc.proj.jstartup.JStartupFramework
-> registr. class : com.sap.bc.proj.jstartup.JStartupNatives
-> framework path : D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar
-> shutdown class : com.sap.engine.boot.Start
-> parameters :
-> debuggable : no
-> debug mode : no
-> debug port : 50121
-> shutdown timeout : 120000
[Thr 7448] JLaunchISetDebugMode: set debug mode [no]
[Thr 4420] JLaunchIStartFunc: Thread 4420 started as Java VM thread.
JHVM_LoadJavaVM: VM Arguments of node [server0]
-> stack : 262144 Bytes
-> arg[ 0]: exit
-> arg[ 1]: abort
-> arg[ 2]: vfprintf
-> arg[ 3]: -Djava.security.policy=./java.policy
-> arg[ 4]: -Djava.security.egd=file:/dev/urandom
-> arg[ 5]: -Dorg.omg.CORBA.ORBClass=com.sap.engine.system.ORBProxy
-> arg[ 6]: -Dorg.omg.CORBA.ORBSingletonClass=com.sap.engine.system.ORBSingletonProxy
-> arg[ 7]: -Djavax.rmi.CORBA.PortableRemoteObjectClass=com.sap.engine.system.PortableRemoteObjectProxy
-> arg[ 8]: -Djco.jarm=1
-> arg[ 9]: -XX:MaxPermSize=256M
-> arg[ 10]: -XX:PermSize=256M
-> arg[ 11]: -XX:NewSize=171M
-> arg[ 12]: -XX:MaxNewSize=171M
-> arg[ 13]: -XX:+DisableExplicitGC
-> arg[ 14]: -verbose:gc
-> arg[ 15]: -Xloggc:GC.log
-> arg[ 16]: -XX:+PrintGCDetails
-> arg[ 17]: -XX:+PrintGCTimeStamps
-> arg[ 18]: -Djava.awt.headless=true
-> arg[ 19]: -Dsun.io.useCanonCaches=false
-> arg[ 20]: -XX:SoftRefLRUPolicyMSPerMB=1
-> arg[ 21]: -XX:SurvivorRatio=2
-> arg[ 22]: -XX:TargetSurvivorRatio=90
-> arg[ 23]: -Dorg.omg.PortableInterceptor.ORBInitializerClass.com.sap.engine.services.ts.jts.ots.PortableInterceptor.JTSInitializer
-> arg[ 24]: -Dsys.global.dir=D:\usr\sap\EC6\SYS\global
-> arg[ 25]: -Dapplication.home=D:\usr\sap\EC6\DVEBMGS01\exe
-> arg[ 26]: -Djava.class.path=D:\usr\sap\EC6\DVEBMGS01\exe\jstartup.jar;D:\usr\sap\EC6\DVEBMGS01\exe\jvmx.jar;.\bin\boot\boot.jar;.\bin\boot\jaas.jar;.\bin\system\bytecode.jar;.
-> arg[ 27]: -Djava.library.path=C:\j2sdk1.4.2_16\jre\bin\server;C:\j2sdk1.4.2_16\jre\bin;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\DVEBMGS01\j2ee\os_libs;d:\sapdb\programs\bin;d:\sapdb\programs\pgm;D:\OraHome_1\bin;D:\OraHome_1\jre\1.4.2\bin\client;D:\OraHome_1\jre\1.4.2\bin;D:\oracle\product\10.1.0\Db_1\bin;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin\client;D:\oracle\product\10.1.0\Db_1\jre\1.4.2\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_16\bin;D:\usr\sap\EC6\SYS\exe\uc\NTI386
-> arg[ 28]: -Dmemory.manager=1024M
-> arg[ 29]: -Xmx1024M
-> arg[ 30]: -Xms1024M
-> arg[ 31]: -DLoadBalanceRestricted=no
-> arg[ 32]: -Djstartup.mode=JCONTROL
-> arg[ 33]: -Djstartup.ownProcessId=5564
-> arg[ 34]: -Djstartup.ownHardwareId=B0245063248
-> arg[ 35]: -Djstartup.whoami=server
-> arg[ 36]: -Djstartup.debuggable=no
-> arg[ 37]: -DSAPINFO=EC6_01_server
-> arg[ 38]: -DSAPSTART=1
-> arg[ 39]: -DCONNECT_PORT=3479
-> arg[ 40]: -DSAPSYSTEM=01
-> arg[ 41]: -DSAPSYSTEMNAME=EC6
-> arg[ 42]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 43]: -DSAPPROFILE=D:\usr\sap\EC6\SYS\profile\EC6_DVEBMGS01_sapserver1
-> arg[ 44]: -DFRFC_FALLBACK=ON
-> arg[ 45]: -DFRFC_FALLBACK_HOST=localhost
-> arg[ 46]: -DSAPSTARTUP=1
-> arg[ 47]: -DSAPSYSTEM=01
-> arg[ 48]: -DSAPSYSTEMNAME=EC6
-> arg[ 49]: -DSAPMYNAME=sapserver1_EC6_01
-> arg[ 50]: -DSAPDBHOST=sapserver1
-> arg[ 51]: -Dj2ee.dbhost=sapserver1
CompilerOracle: exclude com/sapportals/portal/pb/layout/taglib/ContainerTag addIviewResources
CompilerOracle: exclude com/sap/engine/services/keystore/impl/security/CodeBasedSecurityConnector getApplicationDomain
CompilerOracle: exclude com/sap/engine/services/rmi_p4/P4StubSkeletonGenerator generateStub
CompilerOracle: exclude com/sapportals/portal/prt/util/StringUtils escapeToJS
CompilerOracle: exclude com/sapportals/portal/prt/core/broker/PortalServiceItem startServices
CompilerOracle: exclude com/sap/engine/services/webservices/server/deploy/WSConfigurationHandler downloadFile
CompilerOracle: exclude com/sapportals/portal/prt/jndisupport/util/AbstractHierarchicalContext lookup
[Thr 4420] JHVM_LoadJavaVM: Java VM created OK.
JHVM_BuildArgumentList: main method arguments of node [server0]
[Thr 7152] Mon Mar 17 11:35:15 2008
[Thr 7152] JHVM_RegisterNatives: registering methods in com.sap.bc.krn.perf.PerfTimes
[Thr 7152] JHVM_RegisterNatives: registering methods in com.sap.bc.proj.jstartup.JStartupFramework
[Thr 7152] Mon Mar 17 11:35:16 2008
[Thr 7152] JLaunchISetClusterId: set cluster id 13670550
[Thr 7152] JLaunchISetState: change state from [Initial (0)] to [Waiting for start (1)]
[Thr 7152] JLaunchISetState: change state from [Waiting for start (1)] to [Starting (2)]
[Thr 6032] Mon Mar 17 11:35:42 2008
[Thr 6032] JHVM_RegisterNatives: registering methods in com.sap.mw.rfc.driver.CpicDriver
[Thr 6032] JHVM_RegisterNatives: registering methods in com.sap.i18n.cp.ConverterJNI
[Thr 6136] Mon Mar 17 11:35:43 2008
[Thr 6136] JLaunchIExitJava: exit hook is called (rc = -11113)
[Thr 6136] JLaunchCloseProgram: good bye (exitcode = -11113)
Thanks
Prashant -
10g - how to configure sso with iis-
hi, experts, I have followed Oracle® Business Intelligence Enterprise Edition Deployment Guide to configure SSO with IIS.
but I always meet this message.
Not Logged In
You are not currently logged in to the Oracle BI Server.
If you have already logged in, your connection might have timed out, or a communications or server error may have occurred
what steps are missing?
how to check?hi, experts,
I checked C:\OracleBIData\web\log\sawlog0.log on the obi server (windows server 2003 standard).
at Thu Feb 17 14:48:46 2011 , I logined OBI on another machine (not via the browser on the obi server).
however, the log shows the login user is the administrator of the obiserver (obiserver\administrator ).
any setup on IIS are wrong? thank you very much!
=========================================================================================
Running job 'MinutelyMonitor' took 7422 milliseconds, 12.3% of job's frequency (60 seconds).
Type: Error
Severity: 40
Time: Thu Feb 17 14:48:46 2011
File: project/webodbcaccess/odbcconnectionimpl.cpp Line: 371
Properties: ConnId-1,1;ThreadID-1796
Location:
saw.odbc.connection.open
saw.connectionPool.getConnection
saw.subsystem.security.checkAuthenticationImpl
saw.threadPool
saw.threads
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43001] Authentication failed for obiserver\administrator in repository Star: invalid user/password. (08004)
Type: Error
Severity: 42
Time: Thu Feb 17 14:48:46 2011
File: project/webconnect/connection.cpp Line: 276
Properties: ThreadID-1796
Location:
saw.connectionPool.getConnection
saw.subsystem.security.checkAuthenticationImpl
saw.threadPool
saw.threads
Authentication Failure.
Odbc driver returned an error (SQLDriverConnectW).
--------------------------------------- -
Configuring SSO to a URL iView
hi everyone......
i'm relatively new to EP....
and my requirement is.....
i've created a URL iView and when i logon to the portal.....i need my <b>yahoo or gmail inbox</b> to appear in this URL iView.....
i read frm a thread that i need to confgure SSO for this by creating a system....
can u plz guide me how to configure SSO and also the usermapping.......
help is highly appreciated....
thanks and regards,
SudheerHi Sudheer,
Please Ensure The following:
SSO with Yahoo:
UPLOAD:
1.Upload the par in PCD
SYSTEM CREATION:
1)Create ->System from par -> select com.sap.portal.howtos.webapp -> web application->give name & Id
2)Properties-->object->system definition
Name of the server : login.yahoo.com
Port : (empty)
URI :/config/login
3)create alias
4)set user Mapping
IVIEW CREATION:
1)Iview from par
2)Iview type:com.sap-appintegrator.sap
3)template:generic
4)Properties Setting:
System : (system alias name )
URL Template :<System.protocol>://<System.server><System.uri>?<Authentication>
URL Template fragment for UserMapping: <System.protocol>://<System.server><System.uri>?<Authentication>
Regards,
Ramganesan K. -
How to configure sso with SSL step by step
Purpose
In this document, you can learn how to configure SSO with SSL. After user have certificate installed in browser, he can login without input username and password.
Overview
In this document we will demonstrate:
1. How to configure OHS support SSL
2. How to Register SSO with SSL
3. Configure SSO for certificates
Prerequisites
Before start this document, you should have:
1. Oracle AS 10g infrastructure installed (10.1.2)
2. OCA installed
Note:
1. “When you install Oracle infrastructure, please make sure you have select OCA.
2. How Certificate-Enabled Authentication Works:
a. The user tries to access a partner application.
b. The partner application redirects the user to the single sign-on server for authentication. As part of this redirection, the browser sends the user's certificate to the login URL of the server (2a). If it is able to verify the certificate, the server returns the user to the requested application.
c. The application delivers content. Users whose browsers are configured to prompt for a certificate-store password may only have to present this password once, depending upon how their browser is configured. If they log out and then attempt to access a partner application, the browser passes their certificate to the single sign-on server automatically. This means that they never really log out. To effectively log out, they must close the browser.
Enable SSL on the Single Sign-On Middle Tier
The following steps involve configuring the Oracle HTTP Server. Perform them on the single sign-on middle tier. In doing so, keep the following in mind:
l You must configure SSL on the computer where the single sign-on middle tier is running.
l You are configuring one-way SSL.
l You may enable SSL for simple network encryption; PKI authentication is not required. Note though that you must use a valid wallet and server certificate. The default wallet location is ORACLE_HOME/Apache/Apache/conf/ssl.wlt/default.
1. Back up the opmn.xml file, found at ORACLE_HOME/opmn/conf
2. In opmn.xml, change the value for the start-mode parameter to ssl-enabled. This parameter appears in boldface in the xml tag immediately following.
<ias-component id="HTTP_Server">
<process-type id="HTTP_Server" module-id="OHS">
<module-data>
<category id="start-parameters">
<data id="start-mode" value="ssl-enabled"/>
</category>
</module-data>
<process-set id="HTTP_Server" numprocs="1"/>
</process-type>
</ias-component>
3. Update the distributed cluster management database with the change: ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct opmn
4. Reload the modified opmn configuration file:
ORACLE_HOME/opmn/bin/opmnctl reload
5. Keep a non-SSL port active. The External Applications portlet communicates with the single sign-on server over a non-SSL port. The HTTP port is enabled by default. If you have not disabled the port, this step requires no action.
6. Apply the rule mod_rewrite to SSL configuration. This step involves modifying the ssl.conf file on the middle-tier computer. The file is at ORACLE_HOME/Apache/Apache/conf. Back up the file before editing it.
Because the Oracle HTTP Server has to be available over both HTTP and HTTPS, the SSL host must be configured as a virtual host. Add the lines that follow to the SSL Virtual Hosts section of ssl.conf if they are not already there. These lines ensure that the single sign-on login module in OC4J_SECURITY is invoked when a user logs in to the SSL host.
<VirtualHost ssl_host:port>
RewriteEngine on
RewriteOptions inherit
</VirtualHost>
Save and close the file.
7. Update the distributed cluster management database with the changes:
ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct ohs
8. Restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl stopproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl startproc process-type=HTTP_Server
9. Verify that you have enabled the single sign-on middle tier for SSL by trying to access the OracleAS welcome page, using the format https://host:ssl_port.
Reconfigure the Identity Management Infrastructure Database
Change all references of http in single sign-on URLs to https within the identity management infrastructure database. When you change single sign-on URLs in the database, you must also change these URLs in the targets.xml file on the single sign-on middle tier. targets.xml is the configuration file for the various "targets" that Oracle Enterprise Manager monitors. One of these targets is OracleAS Single Sign-On.
1. Change Single Sign-On URLs
Run the ssocfg script, taking care to enter the command on the computer where the single sign-on middle tier is located. Use the following syntax:
UNIX:
$ORACLE_HOME/sso/bin/ssocfg.sh protocol host ssl_port
Windows:
%ORACLE_HOME%\sso\bin\ssocfg.bat protocol host ssl_port
In this case, protocol is https. (To change back to HTTP, use http.) The parameter host is the host name, or server name, of the Oracle HTTP listener for the single sign-on server.
Here is an example:
ssocfg.sh https login.acme.com 4443
2. Restart OC4J_SECURITY instance and verify the configuration
To determine the correct port number, examine the ssl.conf file. Port 4443 is the port number that the OracleAS installer assigns during installation.
If you run ssocfg successfully, the script returns a status 0. To confirm that you were successful, restart the OC4J_SECURITY instance:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Then try logging in to the single sign-on server at its SSL address:
https://host:ssl_port/pls/orasso/
3. Back up the file targets.xml:
cp ORACLE_HOME/sysman/emd/targets.xml ORACLE_HOME/sysman/emd/targets.xml.backup
4. Open the file and find the target type oracle_sso_server. Within this target type, locate and edit the three attributes that you passed to ssocfg:
· HTTPMachine—the server host name
· HTTPPort—the server port number
· HTTPProtocol—the server protocol
If, for example, you run ssocfg like this:
ORACLE_HOME/sso/bin/ssocfg.sh http sso.mydomain.com:4443
Update the three attributes this way:
<Property NAME="HTTPMachine" VALUE="sso.mydomain.com"/>
<Property NAME="HTTPPort" VALUE="4443"/>
<Property NAME="HTTPProtocol" VALUE="HTTPS"/>
5.Save and close the file.
6. Reload the OracleAS console:
ORACLE_HOME/bin/emctl reload
7. Issue these two commands:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Registering mod_osso
1. This command sequence that follows shows a mod_osso instance being reregistered with the single sign-on server.
$ORACLE_HOME/sso/bin/ssoreg.sh
-oracle_home_path $ORACLE_HOME
-config_mod_osso TRUE
-mod_osso_url https://myhost.mydomain.com:4443
2. Restarting the Oracle HTTP Server
After running ssoreg, restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
Configuring the Single Sign-On System for Certificates
1. Configure policy.properties with the Default Authentication Plugin
Update the DefaultAuthLevel section of the policy.properties file with the correct authentication level for certificate sign-on. This file is at ORACLE_HOME/sso/conf. Set the default authentication level to this value:
DefaultAuthLevel = MediumHighSecurity
Then, in the Authentication plugins section, pair this authentication level with the default authentication plugin:
MediumHighSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOX509CertAuth
2. Restart the Single Sign-On Middle Tier
After configuring the server, restart the middle tier:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Bringing the SSO Users to OCA User Certificate Request URL
The OCA server reduces the administrative and maintenance cost of provisioning a user certificate. The OCA server achieves this by authenticating users by using OracleAS SSO server authentication. All users who have an Oracle AS SSO server account can directly get a certificate by using the OCA user interface. This reduces the time normoally requidred to provision a certificate by a certificate authority.
The URL for the SSO certificate Request is:
https://<Oracle_HTTP_host>:<oca_ssl_port>/oca/sso_oca_link
You can configure OCA to provide the user certificate request interface URL to SSO server for display whenever SSO is not using a sertificate to authenticate a user. After the OracleAS SSO server authenticates a user, it then display the OCA screen enabling that user to request a certificate.
To link the OCA server to OracleAS SSO server, use the following command:
ocactl linksso
opmnctl stoproc type=oc4j instancename=oca
opmnctl startproc type=oc4j instancename=oca
You also can use ocactl unlinksso to unlink the OCA to SSO.I have read the SSO admin guide, and performed the steps for enabling SSL on the SSO, and followed the steps to configure mod_osso with virtual host on port 4443 as mentioned in the admin guide.
The case now is that when I call my form (which is developed by forms developer suite 10g and deployed on the forms server which is SSO enabled) , it calls the SSO module on port 7777 using http (the default behaviour).
on a URL that looks like this :
http://myhostname:7777/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
and gives the error :
( Forbidden
You don't have permisission to access /sso/auth on this server at port 7777)
when I manually change the URL to :
https://myhostname:4443/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
the SSO works correctly.
The question is :
How can I change this default behaviour and make it call SSO on port 4443 using https instead ?
Any ideas ?
Thanks in advance -
Error while configuring SSO between Portal 7.0 and Operating System.
Dear all,
I am having an issue,i need to configure SSO between the Portal 7.0 and operating System.I have followed both the Kerberos as well as spNego wizard methods,but i am not able to configure UME settings as we are using datasourceConfiguration_abap.xml. I tried to edit the datasource confuiguration file but after editing the server is not starting.
Please let me know the steps i have to do to edit the datasourceConfiguration_abap.xml
We are not able to Map the Service USer to the UME CONFIGURATION XML File.
Thanks
Ravi.SRavi,
If you have successfully configured the SSO, please pass on the document if any you have.
Regards,
Mohammad. -
Configure SSO for ITS to R/3 using SNC/Kerberos
Our R/3 systems had been configured for SSO using SNC and Kerberos for awhile now. We now have a requirement to configure SSO between ITS and R/3. Since our R/3 env. has been using kerberos library, we won't be able to use SAP Cryptographic library. I had modified the registry, environment and services in itsadmin to point to the kerberos library and principal names for agate and r/3 servers as described in SNC User Guide; also, I updated table SNCSYSACL with the Agate SNC name. That seems to work fine. From the trace file, it recognized GSS-API library for Kerberos and the SNC name for Agate. However, when I tried to logon to R/3 from ITS, I still am being prompted with the logon screen to enter my SAP account/password.
I found several whitepapers and documentations stating that ITS does support Kerberos for SSO but I couldn't find any procedure on how to implement it. Following is the error I'm getting from the sapbasis.trc file but I can't find any document on this error:
=====================================================
[Thr 5284] SncInit(): Initializing Secure Network Communication (SNC)
[Thr 5284] PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
[Thr 5284] SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "C:\WINNT\system32\gsskrb5.dll".
[Thr 5284] File "C:\WINNT\system32\gsskrb5.dll" dynamically loaded as GSS-API v2 library.
[Thr 5284] The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to Kerberos 5/GSS-API v2
[Thr 2888] Sun Jan 15 22:44:59 2006
[Thr 2888] <<- ERROR: SncSetParam()==SNCERR_PARAM_DENIED
[Thr 2888] *** WARNING => NO Domain! domain==NULL means: No domain at all within the cookie. [sapss1_loctr 333]
[Thr 2888] Sun Jan 15 22:45:29 2006
[Thr 2888] *** WARNING => NO Domain! domain==NULL means: No domain at all within the cookie. [sapss1_loctr 333]
=====================================================
Does anyone know what am I missing? Any help is greatly appreciated.
Thank you!
DiemHi Markus,
I also just installed/configured PAS for LDAP authentication using the "PAS for External Authentication Mechanisms" documentation. I think the domain problem probably due to not having the external authentication mechanism install (in this case - PAS). Does that sound right to you?
I tried both options for ~extid_type parameter = "LD" and "UN". I added the DN information to table USREXTID when ~extid_type="LD" but both options gave me error of "LDAP authentication failed". I increased the trace level for sapextaut.trc but I don't see enough detail information. Following are the errors/data from the trace file. Can you please let me know how I can tell what string is being passed for authentication?
I'm quite sure the LDAP host and port data is correct since we've been using the same information for the SAP LDAP connector and we've been using our LDAP connector between MS AD and R/3 for a long time without any problem.
To logon to R/3 through ITS, I entered the AD account (CN attribute in AD) when I got the errors.
Thank you very much for all your help.
Diem Tran
Trace:
=====================================================
2006-01-18T01:39:30.734 p001688 t4992 s0158B4E8 [sapextauth, 437]: W sapextauth: PAS session begins...
2006-01-18T01:39:30.734 p001688 t4992 s0158B4E8 [sapextauth, 456]: sapextauth: SncNameR3 is: "p:na1adm/[email protected]"
2006-01-18T01:39:30.734 p001688 t4992 s0158B4E8 [sapextauth, 462]: sapextauth: SncNameAGate is: "p:[email protected]"
2006-01-18T01:39:30.750 p001688 t4992 s0158B4E8 [sapextauth, 468]: sapextauth: SNC_LIB is: "C:\WINNT\system32\gsskrb5.dll"
2006-01-18T01:39:30.750 p001688 t4992 s0158B4E8 [sapextauth, 568]: sapextauth: XGatConnectSession leaving....
2006-01-18T01:39:30.750 p001688 t4992 s0158B4E8 [sapextauth, 616]: sapextauth: XGatHandleLogin called....
2006-01-18T01:39:30.750 p001688 t4992 s0158B4E8 [sapextauth, 976]: sapextauth: Entering XGatHandleLogin with LDAP...
2006-01-18T01:39:30.750 p001688 t4992 s0158B4E8 [sapextauth, 993]: W Either ~login or ~password missing, returning XGDKRCloginrequired.
2006-01-18T01:39:50.281 p001688 t4992 s00000000 [sapextauth, 398]: sapextauth: XGatEventOpenSession called...
2006-01-18T01:39:50.281 p001688 t4992 s0158B4E8 [sapextauth, 616]: sapextauth: XGatHandleLogin called....
2006-01-18T01:39:50.281 p001688 t4992 s0158B4E8 [sapextauth, 976]: sapextauth: Entering XGatHandleLogin with LDAP...
2006-01-18T01:39:50.296 p001688 t4992 s0158B4E8 [sapextauth, 1059]: sapextauth: LDAP port ist 389
2006-01-18T01:39:50.296 p001688 t4992 s0158B4E8 [sapextauth, 1261]: E sapextauth: LDAP authentication failed.
2006-01-18T01:39:50.296 p001688 t4992 s0158B4E8 [sapextauth, 1277]: E sapextauth: Wrong try for user Tran_Diem
2006-01-18T01:39:59.140 p001688 t4992 s00000000 [sapextauth, 398]: sapextauth: XGatEventOpenSession called...
2006-01-18T01:39:59.156 p001688 t4992 s0158B4E8 [sapextauth, 616]: sapextauth: XGatHandleLogin called....
2006-01-18T01:39:59.156 p001688 t4992 s0158B4E8 [sapextauth, 976]: sapextauth: Entering XGatHandleLogin with LDAP...
2006-01-18T01:39:59.156 p001688 t4992 s0158B4E8 [sapextauth, 1059]: sapextauth: LDAP port ist 389
2006-01-18T01:39:59.156 p001688 t4992 s0158B4E8 [sapextauth, 1261]: E sapextauth: LDAP authentication failed.
2006-01-18T01:39:59.156 p001688 t4992 s0158B4E8 [sapextauth, 1277]: E sapextauth: Wrong try for user Tran_Diem
======================================================= -
Problem in configuring SSO using SAML for applications hosted on diff m/c
Hi Techies,
I am stuck in a weird problem for past month or so without any resolution. Not much help by googling. So I hope i get the answer from the mouth of the horses -
I am trying to use SSO using the sample application appA and appB as stated in the tutorial of SSO by BEA.
I am summarizing the problem below -
Steps followed for Configuring SSO using SAML
1. Created 2 domains on 2 seperate machines namely domainA and domainB
2. Source appliction is deployed on domainA and the target application is deployed on domaninB
The steps mentioned in the following tutorial has been followed-
http://dev2dev.bea.com/pub/a/2006/12/sso-with-saml.html
3. As mentioned in the tutorial the certificate is generated using keytool utility. The same certificate is copied
to WEBLOGIC_HOME/server/lib of destination machine.
4. The certificate was successfully registered on desitnation or host 2 but while activating the configuration
changes(SSL client Ientity Alias and SSL Client Identity Pass Phrase) for Federation services the following error
is thrown -
" SAMLBeanUpdateListener: SAMLKeyManager.prepareUpdate() failed with exception:
weblogic.descriptor.BeanUpdateRejectedException: SAML key Manage failed to validate key (SSL Client) configuration
in the FederationServicesMBean, key alias: testalias "
The interesting bit of the problem is that the same configuration works on 2 domains created on same machine. The
problem only occurs when domains are created on seperate machines.
Alterative to the problem: when the certificate is generated seperately for domainB and copied to
WEBLOGIC_HOME/server/lib, it works. However, the certificate generated in domainA should have been copied.
Note: I am using Weblogic portal 9.2.1
Any quick replies will be much appreciated. Thanks.
Edited by saurabh.agrawal at 02/06/2008 2:01 PMHi François,
You are right about the use of the NameID format. But the issue here is/was that OIF at SP is integrated with OAM, and the authenticated user at OIF-SP and OAM will be the Anonymous user rather than the user who was identified at the IdP even though the remaining attributes sent are for the IdP user. I think these attributes can be used by with OAM for authorization using custom authorization plug-ins but haven't tried that one out.
As for the attribute sharing profile, it's this one - http://www.oasis-open.org/committees/download.php/18058/sstc-saml-x509-authn-attrib-profile-cd-02.pdf, although for the life of me, I cannot remember why I suggested this in the first place!
-Vinod -
Unable to configure SSO in Oracle11g
Hi,
I have tried to install and Configure SSO in Windows 2008 R2 server (64bit). I am facing issue with SSO Metadata repository installaion, please helpful on that.
Steps I did
1. Installed Oracle 11g R2
2. Installed Oracle WebLogic Server (10.3.3)
3. Run the RCU to create repository for IDM and SOA Suite
4. Installed SOA Suite 11g (11.1.1.2.0 && 11.1.1.3.0)
5. Installed Oracle Identity Management (11.1.1.2.0 && 11.1.1.3.0)
6. Configured Oracle Identity management
When i run the SSO Metadata Repository Creation Assistant (10.1.4.3.1), it is completing without any installatin progress. Also i didn't 64bit version in downloads.
Please help me to resolve the SSO configuration issue.Which SSO you are trying to add ?
1. Is this Microsoft SSO i.e. Kerberos ?
2. Oracle 10g SSO a.k.a OSSO ?
3. Oracle Access Manager SSO
Looking at installer "SSO Metadata Repository Creation Assistant (10.1.4.3)" it looks like you are trying to use 10g OSSO , is there any reason for using this ?
10g SSO is mergning to 11g OAM SSO so 11g OAM SSO is one you should use if this is new implementation.
For 10g SSO what error message you are hitting ? Which document you are following ? -
Configuring Transport route in Java system
Hi,
Pls let me know the steps to configuring transport routes in Java System.Hi,
Please look at the following pdf which tells you about CTS+ in portal with only java and non abap objects.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/90d3b550-b6fb-2910-0fa5-ece5d61fb9c3
Rakesh -
Hello everyone,
I have recently installed EP 7.0 and Solman 4.0 and i am trying to connect through SSO. so i followed the following steps.
1) logged into visual admin and created a new certificate in keystore.
2) exported the certificate into local desktop.
3) I then installed the certificate by right clicking on the certificate.
4) I then went to STRUSTSSO2 in solman and imported the certificate and added it to certificate list and in the ACL list i added the portal system (ADP) and the client 001.
5) I also set the login/create_sso2_ticket=2 and login/accept_sso2_ticket=1 in the solman system.
6) I restarted the solman instance after parameter change.
7) I logged into the portal system and now i am not able to see the solman system in there.
can you please tell me if the steps i followed are correct and what additional steps i need to configure.
Thanking you all
SrikanthBelow threads will gove complte information about sso These links will help you..
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e676ec90-0201-0010-cfa3-90b7c1291903
http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a7b5ba90-0201-0010-4dbc-8f999dcd2798
http://help.sap.com/saphelp_nw70/helpdata/en/26/91b8fc431931449f04a1f1ec228021/frameset.htm
Very Good Pdf expalining the same.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0c78148-12de-2a10-27bf-960acc753aab
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/ep/sso%2bchecklist
Connecting SAP systems to Enterprise portal with SSO.
Quick Guide for setting up SSO between EP and R/3
SAP Logon Ticket-based Single Sign-On
I think by configuring sso itself , solution manager wont appear in portal.You have to create system alias to access information from backend( solution manager) .
Create an iview and use system alias to get the required information from backend to portal.
Koti Reddy -
Configure SSO with CAS for calendar
Hello
i try to configure SSO Calendar through communications servers trusted circle technology. I configure ics.conf :
sso.appid = "ics50"
sso.appprefix = "ssogrp1"
sso.cookiedomain = ".univ.fr"
sso.enable = "1"
sso.singlesignoff = "true"
sso.userdomain = ".univ.fr"
sso.ics50.url = "http://pipeau.univ.fr/socp/verifySSO.jsp?"
and then I restart Calendar. pipeau is my CAS/LDAP/tomcat server.
When I launch http://solaris.univ.fr (my calendar server) in my web browser,
there is no request to pipeau (http://pipeau.univ.fr/socp/verifySSO.jsp?) in order to find a valid cookie.
Thank for your help
hugoI have others informations to give you
I have a correct cookie in my favorite web browser when I was authenticated.
.univ.fr||/||ssogrp1-ics50||SOT-zvAdApsYTyTibGDZud06UZIb3EzK5NQ8W9bOghQHaDzpMtmhiC||false||0
When I test my verifySSO.jsp with IP adress of my computer ( http://pipeau.univ.fr/socp/verifySSO.jsp?client=xxx.xxx.xxx.xxx), I get this :
fquid=my_login
authtype=plaintext
My calendar server doesn't seem to test if I am already logged with SSO.
Any ideas ?
Hugo -
Optimal configurations for webobjects using Java Monitor
Can someone please let me know the optimal configurations for webobjects? We need details on the number of instances which can be created per cpu on the application server. Please also provide information on the thread configurations per instance in java monitor.
I do need the threads to communicate. The fact is that I simplified the thing just to understand better responses from you :). The real problem is more complicated. I have a arbitrary number of threads of two different classes. These threads have to access a shared resource (I used the boolean free). Moreover I have to give precedence to one of these two classes. So, I used to integers to represent two queues. The fact is that only the first thread to be ran reaches the end. The others, I saw, reach the wait() method, but then they stops and the program does not finish.
I mean that I thought this: the first thread to reach the wait() passes. Then, this first thread starts to use the resource (free becomes false). Every other thread which reach the while(...) stops there (there is the wait()). Then the first process, at a particular time, release the resource (free = true) and communicate this to another thread which was stuck at the wait() instruction (through the notify()). The problem I see is that every thread reach the wait() and stops there. After the first one is finished, no more... The notify() does not give the monitor to another thread (which would find free = true). This is my problem. Do you understand?
Many thanks for yuor answer anyway. -
Configure SSO between the SAPGUI and ECC 6
Hi,
I need a help to configure SSO between the SAPGUI and ECC 6. I configured the SNC using the parameters:
snc/accept_insecure_rfc = 1;
snc/accept_insecure_gui = 1;
snc/accept_insecure_cpic = 1;
snc/identity/as = p:Domain\SAPService;
snc/enable = 1;
snc/data_protection/use = 1;
snc/data_protection/min = 1;
snc/data_protection/max = 1;
snc/gssapi_lib = D:\usr\sap \ <SID>\SYS\exe\nuc\NTI386\gssntlm.dll.
I configured desktop with the DLL sncgss32.dll but is not functioning. Somebody has some idea the how solve this problem?
Thanks
AlexHi Alex
You have
snc/identity/as = p:Domain\SAPService;
Check the following (wrong user)
snc/identity/as = p:Domain\SAPService<SAPSID>
Where SAPService<SAPSID> is the user who runs the SAP System.
You have
snc/gssapi_lib = D:\usr\sap \ <SID>\SYS\exe\nuc\NTI386\gssntlm.dll
Check the following (nuc is a wrong directory, the correct is uc)
snc/gssapi_lib = D:\usr\sap \ <SID>\SYS\exe\uc\NTI386\gssntlm.dll
Please, reward points if helpful
Edited by: Eydar Del Angel on Apr 21, 2008 4:54 PM
Edited by: Eydar Del Angel on Apr 21, 2008 4:55 PM
Maybe you are looking for
-
How to filter a report based on count?
Here is my scenario: We would like to report activities on a server if there are multiple date in a month. Here is an example: Server Date Activity Server1 7/1/09 Hardware maintenance Server2 7/1/09 Hardware maintenance Server2 7/14/09 Software patch
-
How do I, or can I add a tap-to-call or tap-to-text link to a pdf document?
I'm making a pdf for my newsletter and I wanted to make my phone number a link that would brink up the dialer on a smartphone. I'd also like the email URL to bring up the email app. I now howto do this on html sites, but the code doesn't seem to be
-
Nokia Lumia 800 - Stuck on 'Connect to PC' screen
Connected the Lumia 800 to my macbook air using the proper Windows Phone app on the mac. Phone connected no problem, backed up all my photo's and videos onto my macbook. Noticed there was an update available for the phone so I updated. Towards the en
-
In-app purchase of Hellfire coins taken out of bank through Paypal, even though there was a balance left over from a gift Card in app store.
-
Driver Problem in Windows 8.1 pro
Hello, I have a asus eee pc 1050cx laptop which had windows 7 starter. I upgraded it to windows 8.1 then I realized that metro is crashing and is because of the graphics driver. I need help to sort this out. I have Intel Atom CPU N2600 1.60 ghz.