Create new user session after RFC connects

Hi,
My client is non SAP. They connect to SAP through an intermediate software , using RFC connections. My client requires that when creating a BOM through BAPI, the "created by" column should have a user name they pass, and not the username with which the RFC connected .
Is it possible to have a FM in which I can create a new user session, passing username and password, call the bapi that will create the BOM with this username, and close the session?
Kindly help.
Thanks in advance

Most security audits will trigger a warning when they determinate that the RFC common user is allowed to use another logon id. Usually you can provide auditors a list of such id with explanation before the audit execution, sample of explanation to provide :
- The RFC enabled FM which create the batch job must pass the logon id to be used, and the calling application must not allow user to change this value.
- The RFC default logon, should be allowed to the minimal authorization required, and could be for example allowed to no transaction, only some RFC FM. (start with [Note 460089 - Minimum authorization profile for external RFC programs|https://service.sap.com/sap/support/notes/460089])
Regards,
Raymond

Similar Messages

  • [syntax_error] in Creating New User - After applying SP ABAP & Basis lv 8

    Hi Gurus.
    actually I already created message to SAP regarding this. but i havent receieve any respond. I post here just in case maybe I can have immediate solution from you guys..
    I have 2 system HLC and MFG
    which is using same OS and DB
    DB Information
    DB client lib.     SQL_Server_8.00
    DB releases        MSSQL 7.00.699 or higher, MSSQL 8.00.194
    DBSL version       700.08
    DBSL Patch Level   144
    System Information
    SAP versions       700
    Operating System   Windows NT 5.0, Windows NT 5.1, Windows NT 5.2, Wi
    OP release         5.2
    which have same Kernel and SP patches
    Kernel release    700
    Sup.Pkg lvl.      146
    SAP_ABA     700     0008     SAPKA70008
    SAP_BASIS     700     0008     SAPKB70008
    ST-PI 2005_1_700     0006     SAPKITLQI6
    PI_BASIS     2005_1_700     0005     SAPKIPYJ75
    Problem
    previously both of the system HLC and MFG is in level 6 SP ABAP and BASIS
    when i try to create EWA report for both of them, i have missing module in the report
    and i read a note that i need to upgrade to level 8.
    when i upgrade both of them to level 7, then i run sgen and there are no problem on both system
    but when i upgrade both of them to level 8
    in my MFG system, i can run sgen with no problem.
    in my HLC system, i run sgen and it take a long time to validate the programs which are need to be recompiled. so i never run sgen to recompile on HLC system after i update the SP to level 8. but i believe this shouldnt be an issue.
    the day after i update the SP, one of my user raise an issue.
    (same issue is not happened in MFG system only in HLC system)
    when we try to create new user..
    SU01 -> create new user -> fill all the details -> save -> abap dumps
      Error in the ABAP Application Program
      The current ABAP program "/SAPSLL/CL_IM_BP_ADDRESS======CP" had to be
       terminated because it has
      come across a statement that unfortunately cannot be executed.
      The following syntax error occurred in program "/SAPSLL/SAPLBP_ADDRESS " in
       include "/SAPSLL/LBP_ADDRESSTOP " in
      line 22:
      "Statement "/SAPSLL/DEBUG_DATA" is not defined. Check your spelling . ."
      The include has been created and last changed by:
      Created by: "SAP "
      Last changed by: "SAP "

    Hi all
    problem is solved..
    after doing some debugging, we found out
    there are some missing entries in table TRMAC
    so i just copy the missing entries from my MFG server to HLC server since they are both in same condition.
    now i am wondering why do the support package miss to enter the rows in TRMAC table >.<
    SAPache man..

  • Can't create new users after GroupWise is moved from NetWare to Linux

    Hi,
    I moved GroupWise (Version 6.5 SP 6, single domain and single office)
    from NetWare 6.5 server to SUSE Linux Enterprise server 9. It seems the
    GroupWise server is running oaky. Existing users are able to connect
    their mail box and send and receive messages. But I can't create new
    users on the GroupWise server.
    I used ConsoleOne installed on the Linux server to create new GroupWise
    users. It seemed that I was able to do it. The new users appear on the
    NDS and the GroupWise File IDs were assigned for these users. And I was
    able to add these new users to distribution lists. But the users DB
    files (userXXX.db) were not created under /grpwise/po/ofuser on the Linux
    server and they cannot connect to the server. Old users cannot find them
    in Novell GroupWise Address book.
    Does anyone how to fix the problem?
    Thanks in advance!
    Jinkang

    Hi,
    [email protected] wrote:
    >
    > Hi,
    >
    > I moved GroupWise (Version 6.5 SP 6, single domain and single office)
    > from NetWare 6.5 server to SUSE Linux Enterprise server 9. It seems the
    > GroupWise server is running oaky. Existing users are able to connect
    > their mail box and send and receive messages. But I can't create new
    > users on the GroupWise server.
    >
    > I used ConsoleOne installed on the Linux server to create new GroupWise
    > users. It seemed that I was able to do it. The new users appear on the
    > NDS and the GroupWise File IDs were assigned for these users. And I was
    > able to add these new users to distribution lists. But the users DB
    > files (userXXX.db) were not created under /grpwise/po/ofuser on the Linux
    > server and they cannot connect to the server. Old users cannot find them
    > in Novell GroupWise Address book.
    >
    > Does anyone how to fix the problem?
    This clearly sounds like your domain (which is the part of groupwise
    which you admin against) doesn't/can't talk to the postoffice, so the
    change you made (to the domain) does never get to the PO (which is where
    the addressbook of your other users come from, and is what is
    responsible for creating the user DB). This seems very likely to be
    caused by your move not being done properly, and old information (either
    path or IP address) for the PO still being in the domain and/or domain
    database.
    So how's the domain linked to the PO?
    CU,
    Massimo Rosen
    Novell Product Support Forum Sysop
    No emails please!
    http://www.cfc-it.de

  • Can't create a new user session with KDE

    Hi,
    when I select "Switch user" in KDE, and try to start a new user session, I get dropped to a lockscreen of the currently logged-in user. I first thought this was a KDM issue, but this still persists with SDDM. I'd post any relevant logs, but I'm not even sure where to look for the source of the problem now.
    Thanks in advance!

    I have the exact same problem.
    Using:
    kde-meta-*   14.12.1

  • Create New Service Session at Solution Manager = Product System missing

    We have installed SAP EHP 1 for SAP Solution Manager 7.0 last year but not really use it.
    We have setup in the system landscape:
    Server (ecc6sbx)
    Databases (MCD)
    Product System (MCD) => SAP ERP
    Assigned them to logical component (eg ZECC6DEV)
    RFC destination for MCD was generated
    SDCCN Administration at solutions manager display MCD with SDCCN status in green color.
    At the satellite system MCD, SDCCN Maintenance job was created and scheduled. Initial single run was also done.
    There were no issue. Connection to SDCC_OSS was fine.
    Back to the SOLUTION_MANAGER transaction, we created a new solution ECC ERP - Development.
    In the Solution Landscape => Solution Settings, we have assigned the Logical Component into the System Group.
    However when we expand the tree, and click on the Servers folder it did not display anything.
    Click on the Product Systems also did not display anything.
    We have another Solution Manager which display information on those Servers and Product Systems folder for satellite system.
    Going back to the Solution Manager for the Solution ECC ERP - Development, I tried to Create New Service Session for EarlyWatch Alert. When  I click on the Create button, I could only see SAP EarlyWatch Alert for Solutions, there is no SAP EarlyWatch Alert for the Reference Object MCD (<installation number). I could not create a session for MCD.
    Does anyone have ideas what I am missing here? I am trying to attached a document which have print screen for reference while creating this message, but there is no such function here.
    Adding to link to the document file contain print screen
    [Wihtout System and EarlyWatch Selectable.doc|http://www.easy-share.com/1915633524/Wihtout System and EarlyWatch Selectable.doc]
    [With System and EarlyWatch.doc|http://www.easy-share.com/1915633514/With System and EarlyWatch.doc]
    Edited by: Steven Foo on May 24, 2011 8:00 AM
    Edited by: Steven Foo on May 24, 2011 8:18 AM

    Anyway, in the solution manger  how to we setup earlywatch alert for the SM SID host itself (source system)?
    I have the information on the below from our solution manger
    The data for this session is overdue. Data has not yet been transferred from the associated satellite system.
    Go to the Service Data Control Center (transaction SDCCN) in the satellite system and check why the data has not been sent.
    Typical sources of errors are:
    The RFC connection for the SAP Solution Manager system is not working.
    The 'Task Processor' background job, which collects the session data, has been changed.
    Problems arose while data was being collected (see the detail log for the task that collects the session data).
    A periodic 'SDCC Maintenance Package' task has not been scheduled to check whether your SAP Solution Manager system requests session data.
    I tried to go SDCCN on the solution manager itself and look at the Maintenance Service Definitions:
    I get the information:
    No suitable RFC Destination found in SDCCN settings.
    When I click ok I get the following
    No RFC destionation to source system of service definitions available
    Delete Service Definitions (radio button selected).
    I did not continue and cancel it as I did not want to delete anything.
    I check the Task Processor background job is running at SM host itself.
    I managed to get the Maintenance Package job running. However it failed with the following
    Error refreshing service definitions from destination SM_SSMCLNT001_BACK
    Source and target system may not be identical SSM
    The source and target system is the same ==> SSM, will this be an issue?

  • ITS, New user session denied due to memory bottleneck

    Dear Friends,
    We were facing the following issues
    1) when we access Shopping cart functionality (using Internal ITS)
    through web and it is given error
    500 SAP Internal Server Error (Error: New session was refused due to
    memory bottleneck). For every error in web, we could find the entry
    in SM21 as mentioned below,
    10:39:35 DIA 000 300 PHG02777 W0 D ITS, New user
    session denied due to memory bottleneck.
    10:39:35 DIA 000 300 PHG02777 W0 3 ITS, User
    session could not be created
    10:39:35 DIA 000 300 PHG02777 D0 1 Transaction
    Canceled ITS_P 027 ( )
    2) ST22 Dumps: SYSTEM_NO_SHM_MEMORY
    We have followed SAP note #Note 1232973 - SYSTEM_NO_SHM_MEMORY short
    dump and increased the parameter abap/shared_objects_size_MB from 320
    to 640.After that we have not any SYSTEM_NO_SHM_MEMORY error and we
    monitored in SHMM transaction about the free memory and
    available. Before this change, we used to clean manually the ICF shared
    memory when it got accumulated with high value. This implies that the
    problem regarding SYSTEM_NO_SHM_MEMORY is solved.
    But still we were facing issues mentioned in point no 1). When we have
    more than 100 sessions. This is occurring more from 8:00 CET to 12:00 CET
    (peak load)
    Later we changed the value of abap/shared_objects_size_MB from 640 to
    1664 and also we reduced em/initial_size_MB from 12Gb to 11Gb (since we
    are not using full amount of em initial size).
    ****Important *****
    after this change we are facing more often related to point no 1).
    Moreover, We could find the following in the trace file of W0 as,
    Trace file of W0 is showing,
    Tue Apr 14 12:38:42 2009
    WARNING => ipl_MemAvail already 80 % memory used (itsp:
    highwater = 80 %) [itsplmem.c 534]
    ***LOG W0D=> NULL& [itspxx.cpp 697]
    ERROR => itsp_OpenSession failed rc = 1, send icf error page
    [itsplxx.c 878]
    ***LOG W03=> [itsplxx.c 879]
    ERROR => ipl_OpenSession returns 1(ITSPE_FAILURE) [itsplxx.c
    881]
    ERROR => Raise Last error:[27 from: itspxx.cpp :699]
    [itsplxx.c 1214]
    ERROR => RaiseError(sapdext) ITS_P:27 [itspxx.cpp 699]
    Since the parameter itsp/max_eg_mem_percent was set to 80.
    It is not clear that from which memory layout the eror is occuring.
    According to note :Note 785365 - Extended Global Memory (EG) increased
    from 2 GB to 8 GB
    we could see that The size of the EG is obtained from the total of the
    parameter values em/global_area_MB and abap/shared_objects_size_MB
    We would like you check the system and update us about the memory
    layout defined in our system, more specically em/global_area_MB (we are
    planning to increase the value according to note SAP Note 742048) from
    896 (current) to 1200 (10 % of em/initial_size_MB) and reduce the
    abap/shared_objects_size_MB from 1664 to 640 .
    Any help will be highly appreciated.
    Thanks
    Venkat

    to 1)
    You can monitor the ITS memory usage in transaction SITSPMON, but you are on the right track with increasing em/global_area_MB.
    If you see its sessions lasting for a long time, then you might need to adapt the session timeout to save memory (TIMEOUT of your icm server port). Have a look at note [885580 - Integrated ITS: Configuration Parameters|https://service.sap.com/sap/bc/bsp/spn/sapnotes/index2.htm?numm=885580] for details.
    Regards, Michael

  • Error while creating new user in Oracle 11i EBS

    I am getting following error while creating new user. How solve this issue?
    “Unable to load java class % specified profile option SIGNON_PASSWORD_CUSTOM. Please verify that the class exists and that it implements the java interface oracle.apps.fnd.security.PasswordValidation”.

    Following is the text from Note for Custom Password Validation logic:
    Customers who wish to use their own password validation logic may do
      so by writing their own Java classes that implement the
      oracle.apps.fnd.security.PasswordValidation Java interface.  The
      interface requires 3 methods to be implemented:
      1) public boolean validate(String user, String password)
        - This method takes a username and password, and then returns true
      or false, indicating whether the user's password is valid or invalid,
      respectively.
      2) public String getErrorStackMessageName()
        - This method returns the name of the message to display when the
      user's password is deemed invalid (i.e., the validate() method returns
      false).
      3) public String getErrorStackApplicationName()
        - This method returns the application shortname for the
      aforementioned error message.
      After writing the Java class to perform customized password
      validation, the customer must then set the value of the profile option
      SIGNON_PASSWORD_CUSTOM to be the full name of the class.  If, for
      example, the name of the Java class is
      oracle.apps.fnd.security.AppsPasswordValidation, then the value of the
      SIGNON_PASSWORD_CUSTOM profile option must be
      oracle.apps.fnd.security.AppsPasswordValidation.  Note that AOL/J
      will attempt to load this class dynamically.  Hence it is necessary to
      make the class accessible by AOL/J.  This means that in Forms, the
      class must first be loaded into the database using the loadjava
      command.
    You will need to apply the following patches for 11.5.1:
       1344802
       1363919
       1472974
       1351004
       1377615
    You will need to apply the following patches for 11.5.2:
       1377615

  • Creating new user in enterprise portal 7 .0

    Hi,
    I have installed enterprise portal 7.0 and backend is ECC 6.0 on windows 2003.i have logged with J2EE_ADMIN user.when i am trying to create new user in EP7.0 ,i got this problem.(an error occured,contact system administrator).please help me.

    Hi,
    Go to http://<server>:5<instance no>00
    Click on User Management. After login, go to Configuration tab and there you can check.
    Thanks
    Sunny

  • Error while creating new user

    Hi
    I HAVE LOGGED INTO oracle Portal with user : portal30 passwd : portal30.
    After selecteing the administer tab when i click on create new users I am getting error
    Error: (WWC-00000) with a back link ( which does not work ). I didn't get anything other than this on screen.
    I have tried to found out the soln but never succeded. What you think would be the reason for getting this error?
    do tell me on [email protected]
    Regards and thanks in advance
    Kedar

    Kedar,
    You may be able to find help on this by searching the 9iAS Portal forum, this forum is for questons relating specifically related to the PDK.
    thanks,
    Sue

  • Create New user with ...

    Hi all
    I need to create new user with the following privileges :
    1- access any table data (read only)
    2- access the tables structure (read only)
    3- access the tables relations (read only)
    thanx in advance

    Hi,
    giggs11 wrote:
    I did the following :
    create user youruser identified by yourpassword;
    grant connect to youruser;
    grant SELECT_CATALOG_ROLE to username;
    but I cann't see my tables
    there is no erroExample :-
    Step 1:-
    sql> Conn system/manager@orcl;
    connected.
    step 2:-
    SQL> create user trial identified by trial;
    User created.
    Step 3:-
    SQL> grant connect to trial;
    Grant succeeded.
    SQL>grant SELECT_CATALOG_ROLE to trial;
    Grant succeeded.
    SQL> grant select any table to trial;
    Grant succeeded.
    Step 4:
    SQL> conn trial/trial@orcl;
    Connected.
    SQL> select * from tab;
    no rows selected
    Step 5:
    SQL> select * from scott.dept;
    DEPTNO DNAME LOC
    10 ACCOUNTING NEW YORK
    20 RESEARCH DALLAS
    30 SALES CHICAGO
    40 OPERATIONS BOSTON
    Step 6:
    SQL> desc scott.dept;
    Name Null? Type
    DEPTNO NOT NULL NUMBER(2)
    DNAME VARCHAR2(14)
    LOC VARCHAR2(13)
    you must read about privileges..
    http://download.oracle.com/docs/cd/B10501_01/server.920/a96521/privs.htm
    Regards
    S.Azar
    DBA
    "Question is Unquestionable"
    Edited by: azarmohds on Aug 15, 2009 6:28 AM
    Edited by: azarmohds on Aug 15, 2009 6:32 AM

  • Unable to create new user thru Portal

    Hi,
    I am unable to create user from the oracle portal web page under the Administer tab.
    I have logged in as user PORTAL30 which has DBA rights.
    When I click the Create new user link, it generates an error page WWC-00000.
    Would appreciate if any can help me out urgently.
    OS: NT4 SP5
    9iAS 1.0.2.1
    Vipul
    null

    Cindy,
    Thanks for the solution. It worked fine after changing servername to lowercase.
    The servername was set in in httpd.conf by the 9iAS installer itself. I would like to express that Oracle should have checked before launching or should have listed it in the release notes.
    Once again thanks for the inputs, Cindy.
    Regards,
    Vipul
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by cindy:
    I too was having the same problem. I found this in another post:
    "this is reported as
    BUG:1534919
    the solution is to use lower case server name in httpd.conf. It must be in lower case."
    I made the change and am now able to create users.<HR></BLOCKQUOTE>
    null

  • Cannot create new user in oracle bam

    Hi Guys,
    Can anyone help me in creating new user in oracle bam. I've already follow the steps in bamadmin.pdf but i cannot connect to BAM using the one i've created.
    Please Help.
    Thank you!

    RRA wrote:
    Hello,
    How can I create a new user directly in database instead of creating from System Administrator menu in Oracle Applications R12 ?
    Also, is it possible to apply some default responsibilities when a creation of new user account take place via database ?
    Thanks.This topic was discussed many times in the forum before, please see old threads for the same topic/discussion along with the code you can use.
    Create Application User from the Backend
    https://forums.oracle.com/forums/search.jspa?threadID=&q=Create+AND+Application+AND+User+AND+Backend&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    https://forums.oracle.com/forums/search.jspa?threadID=&q=Create+AND+Users+AND+API&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    Assign Responsibilities API
    https://forums.oracle.com/forums/search.jspa?threadID=&q=Assign+AND+Responsibilities+AND+API&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    FND_USER_PKG API
    https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_USER_PKG&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    FND_USER_PKG.CreateUser
    https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_USER_PKG.CreateUser+&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    FND_USER_PKG.AddResp
    https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_USER_PKG.addresp&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    Thanks,
    Hussein

  • Create new user for Essbase Integration Services

    Hi,I have two users witch creates olap models and metaoutlines.So I would like to create new user at Essbase Integration Services. How to create new user at Essbase Integration Services level?My system:Essbase Server 6.5.1Essbase Integraion Services 6.5.1Essbase Administration Services 6.5.1Thanks,Grofaty

    A user at EIS level is actually a user set up on the relational catalog where your olap models/metaoutlines are stored. For instance if you got to the OLAP model properties dialog and the General tab you can see the owner here is the user you use to connect to your catalog. You can also prevent other users from accessing models not owned by them by setting the security option from the drop-down list on this tab.Mark Rixon www.analitica.co.uk

  • WebCenter Suite: How to create new users ?

    Hi,
    What is the easiest way to create new users for the WebCenter Suite Content DB...
    Regards
    Boris

    Hello,
    I guess you have chosen the file system option. If so you need can drag the jazn-data.xml from your CDB ORACLE_HOME in a JDeveloper project. After right-clicking on this imported file you can select the properties. Now you are in a wizard to create users and groups/roles. After modifying your file you can replace it on the server. To find the right location of the jazn-data.xml you can go to the EM Site http://<host>:<port>/em/console/ias/oc4j/sec/secProvs to look for the security provider of the "content" application. Edit the provider and you will see the location of the jazn-data.xml.

  • Content DB: How to create new users ?

    Hi,
    What is the easiest way to create new users for the Content DB via OID...
    Regards
    Boris

    - http://hostname:7777/oiddas/
    - connect with orcladmin
    - Tab Directory
    - Tab Users : click on Create

Maybe you are looking for