CSM 3.1 and CS-MARS 4.3 integration

Hi, a simple question: does CS-MARS 4.3 integrate with CSM 3.1 only for log to security rules match ?
thank you in advance
RS

You are right, CSM and CS-MARS integration is only for log to security rules match. As of now no other functionality is provided.

Similar Messages

SAP BI 7.0 and BO XI 3.1 Integration Problems

Hi everyone,
After following through every step of:
Re: Checklist for SAP BI 7.0 and BO XI 3.1 integration - Challenges
I still get the following problems:
1. Unable to find SAP in CMC Authentication
2. At the login page of InfoView, I can select SAP as authentication method. However, after inputting the login information, I get the "The plugin secSAPR3 does not exist in the CMS (FWM 02017)"
3. I was able to create a new connection in Designer to connect to SAP BW, and select one of the existing cubes. After uploading the Universe, I created a new Web Intelligence document and dragged couple of objects into Result Objects. After clicking Run Query, I get the following:
A database error occured. The database error text is: The MDX query SELECT { [Measures].[0BBP_BILITM] } ON COLUMNS FROM [$0BBP_C01] failed to execute with the error See RFC trace file or SAP system log for more details. (WIS 10901)
Even tried:
Webi Stucks while trying to create report with BW7.0 (WIS 10901)
and still no luck.
Here's the environment information:
Installed (In Order):
1. BOE XI 3.1
2. Xcelsius 2008
3. LIVEOFFICE
4. SAP GUI 7.0
5. Crystal Report 2008 with SP1
6. BO JCo
7. BO Integration Kit for SAP
Any help will be appreciated, thanks in advance!!
David

Hi Ingo,
I've noticed that in your step by step manual, you are using BO XI 3.0. So I created a Virtual PC with Windows Server 2003, and installed BO XI 3.0, SAP GUI 7.0, Java Connector, BO Integration Kit for SAP.
Without any errors nor issues, now I see "SAP' in CMC's Authendication (not the login). So now I can assume it's because BO Integration Kit only supports BO XI 3.0 and consider it solved?
However, I still get the same error as my 1st post:
3. I was able to create a new connection in Designer to connect to SAP BW, and select one of the existing cubes. After uploading the Universe, I created a new Web Intelligence document and dragged couple of objects into Result Objects. After clicking Run Query, I get the following:
A database error occured. The database error text is: The MDX query SELECT { Measures.0BBP_BILITM } ON COLUMNS FROM $0BBP_C01 failed to execute with the error See RFC trace file or SAP system log for more details. (WIS 10901)
or
A database error occured. The database error text is: The supplied XML is not valid. [0COMP_CODE].[LEVEL00]. (WIS 10901)
Any ideas?
David

The Projects screen to import and export SAP xApp Manufacturing Integration

Hello:
On my SAP Discovery Server, On the Projects screen to import and export SAP xApp Manufacturing Integration and Intelligence (SAP xMII) projects.
Under the projects listed I see one Default project, is listed as a System Project.
I did an import and used one of the sample application, along with the ExportManifest.xml file.
"You can create an external project structure, include it in a zip file, and import it as a new project. You do not need an ExportManifest.xml file to import a project."
Now I see two projects listed as System Projects, is that ok, would that cause any issues? Is there any way that I could correct this?
Note:
If you import a project that already exists, the system overwrites the current project structure and files.
You can import hidden projects that do not appear on the Projects screen or in the SAP xMII Workbench. System-defined projects may appear in the Projects screen and in the SAP xMII Workbench, but you cannot delete them. You can import a project with the same name as a hidden or system-defined project and overwrite its properties. If you do this, they are no longer considered to be hidden or system-defined projects.
Thank you,

You could consider creating a project and exporting it to see the proper format of the zip file, including the ExportManifest. You should find attributes in the xml for setting the description, system type, etc.

SAP and BOBJ XI 3.x Integrated Security Best Practice

I am trying to find any information around SAP and BOBJ XI 3.x Integrated Security Best Practice.
So far i think it is uninversally agred that you should :
1. Utilise the Business Objects platform security model to secure applications, folders and reports.
2. Use BEx queries as the data source for Business Objects Universes and keep the number BEx queries to a minimum
3. Use SAP authorisations over the BEx queries to secure report data at a row level.
Has anyone seen any formal SAP Best Practice document or have any info to add ?
Andrew

Hi,
those three items are all correct. In terms of security you can find lots of material in the standard BW help.
in terms of query design / universe:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/008d15dc-f76c-2b10-968a-fafe5a121129
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b0320722-741c-2c10-afab-93b5c0fc7e96
ingo

I have a hp pavilion dv7 notebook pc and i'm get and error message that my integrated camara is off

i have a hp pavilion dv7 notebook pc and i'm get and error message that my integrated camara is off, and when I go into skype or cyberlink i can not see me

Hey Sam55555,
I see that you're having an issue with the webcam.
Could you provide me with a model and product number of your notebook.
So that I may look into this further to try and provide you with more helpful instructions.
Also, this Document should help you out. If it doesn't let me know the full model name and i will find a document for your notebook.
What i consider doing is the section that says "Reinstalling the original webcam program that came with your computer".
THX sam

Jdeveloper 10 EA and spring frameworks what about integration?

jdeveloper 10 EA and spring frameworks what about integration?

Hi,
there is no integration to Spring in Jdeveloper. You can develop applications that use Spring, but we don't provide specific wizards or dialogs.
Frank

Can't remember the user name and password for the b1 integration framework

Is there a way to find out what the username and password to access the integration framework?

Hi
you can try to enter with safe mode - un this mode you dont need username and password and then create new user name
you have to enter the Xcellerator file in
C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator
and find the part of the safe mode
shachar

Vendor and Material (MARA and LFA1) linking

Hi ,
I have created a view on top of mara marc and mard for one of my report requirements. Here I have mara-mfrnr field is mapping to manufacurer field in BW. Now I need to restrict the data in to this field by acct group which is available in 0vendor as an attribute and 0manufacturer field is referenced by 0vendor. So when I'm loading the data I want to load only particular vendor acct group data in to this mfrnr field....Is this possible at all?
Please advice
Thanks
Edited by: sam on Nov 17, 2010 2:25 PM

>
sam wrote:
> Hi ,
> I have created a view on top of mara marc and mard for one of my report requirements. Here I have mara-mfrnr field is mapping to manufacurer field in BW. Now I need to restrict the data in to this field by acct group which is available in 0vendor as an attribute and 0manufacturer field is referenced by 0vendor. So when I'm loading the data I want to load only particular vendor acct group data in to this mfrnr field....Is this possible at all?
>
> Please advice
>
> Thanks
>
> Edited by: sam on Nov 17, 2010 2:25 PM
1.Rather than working on view ,why don't you load everything to BW(table to flat DSOs) and write business logic in BW side.It will infact be easier and will help in future as well when you want some more changes or filter.
2.Since Your are already loading 0Material_attr .Check if you have that field there.You may enhace it to have the additional info.
Is it essential to restrict accout group??
Whatever you are telling can't be achieved by simple views(because they are static) and you have a dynamic logic.
You have 0Vendor-->referencing 0Manufacturer
-->attribute account group
0material -->attribute 0Manufacturer
You want to restrict all the materials --> who has a manufacturer of particular account group.???
3.Another approach:Load data of 0Vendor to Flat ZVENDSO with keys : Manufacturer & Account Group.(this will be delta enabled fast loading.)
Now :while loading Mara,Marc & Mard View ,use the look up to delete unnecessary data in start routine.
DATA: IT_ZVENDSO LIKE TABLE OF /BIC/AZVEDSO,
WA LIKE LINE OF IT_ZVENDSO.
LOOP AT IT_ZVENDSO in wa.
Delete source_package where manufacturer = wa-manufacturer and account_grp = wa-account_grp.
ENDLOOP.
This will remove unnecessary records.
4.Make an infoset on VIEW DSO & ZVENDSO on keys manufacturer & account group.It will have common keys.
Load data to any infoobject from this infoset.
Regards,
RK

CSM route mode and bridge mode can exist at the same time?

I'm using CSM on ver 4.x,and I used to the bridge mode for firewall load balance,for a new requset,I have to create a new server/client vlan,but the original firewall load balance was effected when I issued the server vlan command,and I'd like to use route mode for the new server farm,I'm wondering that route mode and brige mode can't exist at the same time,because it seems it doesn't make sense.Any reply will be very appreciated.

you can use bridge mode and route mode at the same time.
Traffic with desintation mac address being the CSM will be routed, otherwise it will be bridged.
Gilles.

CSM : Sorry server and Stickyness when reals are overloaded

Hi,
I have a portal of eight real servers and one sorry server, which should redirect new user to another portal, in case of an overload condition of all eight real servers. Server load is measured on each real server using a custom developed agent, which basically measures the real CPU load. If a real server experiences an overload, the local agent uses the CSM XML interface to set the maxcons value in the CSM to stop accepting new connections. However, I want to continue accepting sticky connections (request with a valid cookie). The experience shows that the CSM does accept to create new connections to real server reaching maxcons, even if a cookie exist.
This causes a problem if we want to redirect NEW users to another portal in case of overload, but to keep EXISTING users in the server farm, even if the number of connections could increase slightly above maxconns...
How can I solve the problem ?
Thank you
Yves Haemmerli

Hi Thomas,
Thank you for your comment. I also understand this behaviour like you, however this can have a devastating effect in a global portal environment. Imagine, you have three portals distributed over the world, each having let say 8 real servers. In the real life, it is seldom to replicate data in real time between data centers, due to the distance. However, the user roles and customized bookmarks and other user-specific settings are replicated. This allows to provide a global portal to users. But if a user connects to one particular regional portal, he has to stay on this portal for the duration of the whole browser session, do you follow me ? OK, now imagine that all 8 real servers in a portal reach the maxconns, because 10'000 users are connected to the portal. For new users (users with no sticky cookie), we want to send them to another regional portal. This is achieved with the global site selection provided by the GSS for example. But for existing user already connected to the overloaded portal, we want to KEEP them on the portal ! else, as the user browser continuously opens and closes TCP sessions, all 10'000 users will be immediately transferred to the other regional portal! This means the the other regional portal will becom overloaded as well, while the first portal load will be droped to zero very quickly ! Then, we not only create a situation where users loose their data by being transferred to another portal, but we also create a oscillations in the portal load !
I really don't know if there is a mean to solve this problem...Do you have any idea ?
Regards,
Yves Haemmerli

CSM Fault Tolerance and IGMP Snooping

For "connection redundancy" the redundancy guide says to turn off IGMP snooping.
Is there any way around this?
I need to have multicasting everywhere and I don't want to multicast all streams to every port on this switch.

Most of the show statements are at the end of the attached file in an earlier post. The vservers details are at the end of this post.
I have an ARP entry for the VIP - 0001.64f9.1a64, but it does not respond to pings. I tried both the alias and the server vlan IP as the default gateway of the servers.
I took a trace and found that the VIP sends a TCP reset immediately after a request. I have tried versions 4.2.1 and 4.1.4 with the same result. I wonder if this could be a problem with the Sup720 with 12.2.17d IOS. I also tried the CSM in slots 2 and 3.
720Test2#sh mod csm 3 vserver detail
SOFTRICITY, type = SLB, state = OPERATIONAL, v_index = 10
virtual = 10.10.249.6/32:0 bidir, any, service = NONE, advertise = FALSE
idle = 3600, replicate csrp = none, vlan = ALL, pending = 30, layer 4
max parse len = 2000, persist rebalance = TRUE
ssl sticky offset = 0, length = 32
conns = 0, total conns = 1
Default policy:
server farm = SOFT1, backup =
sticky: timer = 0, subnet = 0.0.0.0, group id = 0
Policy Tot matches Client pkts Server pkts
(default) 1 1 0

CSM concurrent bridge and router mode

Hi,
Is it possible on the CSM to use bridge and router mode at the same time ? Or is it only router mode or only bridge mode ?
E.g. in the example below, when using HTTPS entering the vlan 3 , it will be bridged to vlan 3....But when using HTTP entering vlan 3...it will be routed to vlan 4... Will that work ?
Thanks
vlan 3 client
ip address 3.3.3.1 255.255.255.0
vlan 3 server
ip address 3.3.3.1 255.255.255.0
vlan 4 server
ip address 4.4.4.1 255.255.255.0
vserver HTTPS
vlan 3
virtual 3.3.3.10 tcp https
serverfarm HTTPS
serverfarm HTTPS
no nat server
no nat client
real 3.3.3.11
inservice
real 3.3.3.12
inservice
vserver HTTP
vlan 3
virtual 3.3.3.11 tcp http
serverfarm HTTP
serverfarm HTTP
nat server
no nat client
real 4.4.4.10
inservice
real 4.4.4.11
inservice

HI Michel,
first of all you can run bridged and routed mode at the same time but you can not define the same vlan as client and server. If you would change the above config from vlan 3 server to vlan 30 server and place the reals in vlan 30 it will work. A proper layer 2 configuration is for sure the prerequisit.
Kind regards,
Joerg

Help with dynamic NAT and CSM 4.4 and ASA 8.3

Hello
I currently try to add a dynamic NAT rule into CSM 4.4 for a ASA 8.3 device, but I fails at the deployment with the error message:
Failed to generate delta config
The following commands have not been recognized by the Configuration Parser:
==========================
(inside,outside) source dynamic range-192.168.0.0_24 range-100.0.0.1_32 destination static any any
So let's asume we use the internal IP Range for the users is 192.168.0.0/24 and we received the public IP Address 100.0.0.1/32 from our ISP.
How do I have to do a normal dynamic NAT in CSM 4.4 for this case?
Traffic comes from inside and has to leave the outside with the changed source IP.
I would really appreciate a screenshot from CSM 4.4 which shows the correctly filled fields.
Thanks
Patrick

Matty
Not familiar with SIP so can't say for sure about that in terms of ports but some comments -
1) you don't show other interfaces but presumably the LAN interface(s) has "ip nat inside" enabled
2) the PBX subnet is 10.1.1.0/24 yet your static NATs are referring to 10.18.21.2 ?
3) following on from 2) your PBX_SUBNET acl is wrong, it should be -
ip access-list extended PBX_SUBNET
permit ip 10.1.1.0 0.0.0.255 any <-- note the last octet of the wildcard mask is 255.
Edit - also assuming that any internal subnets not directy connected to the router have routes setup for them so you router knows how to get to them.
Jon

CSM login Steps and Important thing to be observed

I need to Know about some basics of CSM. I am working network security part, i am new to this, as per my team i need to login CSM frequently. But still now i am not able to login. how to login it please provide me with snaps.. Actually i am login from my PC through Remote desktop--> then clicking CSM icon--> Page is opened in internet explorer to enter the credential--> once entered i am receiving error as HTTP 500 status error. Please help me what is the error and also advantages of CSM will be helpful to me..

Cisco Security Manager can do many many things. A full overview of its capabilities is best referenced on the product's home page:
http://www.cisco.com/en/US/products/ps6498/index.htmlhttp://www.cisco.com/en/US/products/ps6498/index.html.
An expired license would normally only be seen of one was using an evaluation license. the normal CSM product licenses dont expire.

CSM, Reverse Proxy, and Sticky

First, here is a diagram of my setup:
CSM w/VIP for Front-End Web Servers (acting as Authorization and Reverse Proxy)
|
SSL Module for termination of HTTPS traffic
|
Front-End Web Servers
|
CSM w/VIP for Back-end Web Servers
|
Back-end Web Servers
What I need a way to do is to ensure that users gets to the same Back-end Web Server for their entire session. The Front-End Web Servers act as a Reverse Proxy for all requests going to the Back-End Web Servers and are configured to send requests to the VIP for the Back-End Web Servers.

Gilles,
Thanks for the response. This is https traffic for the user, but from the Front-End to the Back-End it's just http. Unfortunately it's SAP so it's not a normal HTTP Back-end that can generate cookies. Currently I am only running 3.1(7). What is the status of the 4.1 train? Being new I am concerned about utilizing this level. What has been the experience of customers on this code level in the field?

CSM 3.1 and CS-MARS 4.3 integration

Similar Messages

Maybe you are looking for