CUP RAR Integration - Release 5.3

Hello,
Risk Analysis run through CUP gives TimeOut Error.
I checked in CUP:
- Configuration > Risk Analysis
- Configuration > Connectors
- Configuration > Miscellaneous
and in RAR:
- Configuration > Connectors
- Configuration > SAP Adapter
and every config is correct.
Risk Analysis is also available through RAR.
Can you help me?

Here it is the log:
2011-02-04 14:33:59,843 [SAPEngine_Application_Thread[impl:3]_2] ERROR java.rmi.RemoteException: Service call exception; nested exception is:
     java.net.SocketTimeoutException: Read timed out
java.rmi.RemoteException: Service call exception; nested exception is:
     java.net.SocketTimeoutException: Read timed out
     at com.virsa.ae.service.sap.ws53.Config1BindingStub.execRiskAnalysis(Config1BindingStub.java:90)
     at com.virsa.ae.service.sap.ws53.Config1BindingStub.execRiskAnalysis(Config1BindingStub.java:99)
     at com.virsa.ae.service.sap.RiskAnalysisWS53DAO.getViolations(RiskAnalysisWS53DAO.java:311)
     at com.virsa.ae.service.sap.RiskAnalysisWS53DAO.getViolations(RiskAnalysisWS53DAO.java:451)
     at com.virsa.ae.service.sap.RiskAnalysisWS53DAO.determineRisks(RiskAnalysisWS53DAO.java:558)
     at com.virsa.ae.service.sap.RiskAnalysis53DAO.determineRisks(RiskAnalysis53DAO.java:119)
     at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:182)
     at com.virsa.ae.accessrequests.actions.RiskAnalysisAction.doRiskAnalysis(RiskAnalysisAction.java:1073)
     at com.virsa.ae.accessrequests.actions.RiskAnalysisAction.doAnalysis(RiskAnalysisAction.java:300)
     at com.virsa.ae.accessrequests.actions.RiskAnalysisAction.execute(RiskAnalysisAction.java:109)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:425)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:455)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Caused by: java.net.SocketTimeoutException: Read timed out
     at java.net.SocketInputStream.socketRead0(Native Method)
     at java.net.SocketInputStream.read(SocketInputStream.java:129)
     at java.io.BufferedInputStream.fill(BufferedInputStream.java:183)
     at java.io.BufferedInputStream.read(BufferedInputStream.java:201)
     at com.sap.engine.services.webservices.jaxm.soap.HTTPSocket.readLine(HTTPSocket.java:890)
     at com.sap.engine.services.webservices.jaxm.soap.HTTPSocket.getInputStream(HTTPSocket.java:375)
     at com.sap.engine.services.webservices.jaxm.soap.HTTPSocket.getResponseCode(HTTPSocket.java:284)
     at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.HTTPTransport.getResponseCode(HTTPTransport.java:415)
     at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.outputMessage(MimeHttpBinding.java:553)
     at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.call(MimeHttpBinding.java:1433)
     at com.virsa.ae.service.sap.ws53.Config1BindingStub.execRiskAnalysis(Config1BindingStub.java:83)
     ... 30 more

Similar Messages

Applications Desktop Integrator release 7.2(latest) for Windows

Dear all,
We have installed oracle Apps 11i (11.5.10)under Redhat Linux AS 3.0.
Now we need Applications Desktop Integrator release 7.2 (latest)for Windows.
Where we can get ADI. Please give us the exact download URL.
Regards
Mahtab

In 11i10 ADI 7.2 is included in the startCD. You can launch the startCD/Disk1/rapidwiz/ClientWiz.cmd
to start the wizard for client applications
or startCD/CL3/SetupAdi.exe to install ADI directly.

Advice needed on installing CA on Windows Server 2008 for CUPS Calendar Integration

Hi,
I am trying to configure CUPS 8.0 to connect to Exchange 2008 to retrieve calendar information as detailed in the integration note at the link below:
http://www.cisco.com/en/US/docs/voice_ip_comm/cups/8_0/english/integration_notes/ExchInt.html
I have successfully completed everything up to the section Installing the CA on Windows Server      2008 but am now running into problems.
When I run the Role Services Wizard I get options to install Certificate Authority and Certificate Authority Web Enrollment but not Online Responder.
Can anyone advise why this would be the case?
It may or may not be relevant but the server that the customer has told me to install the CA on is a domain controller - could this be the issue?

A bit more information - below is some of the output generated by the Windows systeminfo cli command.
Host Name:                 DOMDAT02
OS Name:                   Microsoft® Windows Server® 2008 Standard
OS Version:                6.0.6001 Service Pack 1 Build 6001
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Primary Domain Controller
OS Build Type:             Multiprocessor Free
Registered Owner:          V2C
Registered Organization:   V2C
Product ID:                55041-339-2169613-76816
Original Install Date:     25/01/2009, 18:29:39
System Boot Time:          11/06/2011, 08:50:34
System Manufacturer:       VMware, Inc.
System Model:              VMware Virtual Platform
System Type:               X86-based PC
Processor(s):              1 Processor(s) Installed.
                           [01]: x64 Family 6 Model 23 Stepping 10 Genuine ~2494 Mhz
BIOS Version:              Phoenix Technologies LTD 6.00, 22/09/2009
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume1
System Locale:             en-gb;English (United Kingdom)
Input Locale:              en-gb;English (United Kingdom)
Time Zone:                 (GMT) Greenwich Mean Time : Dublin, Edinburgh,, London
The server is running Windows Server 2008 Standard and according to the Microsoft doc at the link below this does not support the Online Responder service.
http://technet.microsoft.com/en-us/library/cc772393(WS.10).aspx
Could the problem be that I need a server running Windows Server 2008 Enterprise?

ANN: Spring 1.2 with TopLink Integration Released

Version 1.2 of the Spring Framework has been released. New in the 1.2 final release is support for TopLink "out of the box". Prior to 1.2, TopLink support was an "add on" that was available on OTN. Now Spring ships with the integration code required to use TopLink as a persistence provider. TopLink 10.1.2 (9.0.4) and 10.1.3 (preview) are supported.
To get started, try out the Pet Clinic sample app configured to use TopLink.
NB: Spring doesn't include TopLink; it provides the necessary integration classes. You still need to download both Spring and TopLink.
- Shaun
Spring Home page: http://www.springframework.org
Spring 1.2 Announcement: http://www.springframework.org/node/86

Version 1.2 of the Spring Framework has been released. New in the 1.2 final release is support for TopLink "out of the box". Prior to 1.2, TopLink support was an "add on" that was available on OTN. Now Spring ships with the integration code required to use TopLink as a persistence provider. TopLink 10.1.2 (9.0.4) and 10.1.3 (preview) are supported.
To get started, try out the Pet Clinic sample app configured to use TopLink.
NB: Spring doesn't include TopLink; it provides the necessary integration classes. You still need to download both Spring and TopLink.
- Shaun
Spring Home page: http://www.springframework.org
Spring 1.2 Announcement: http://www.springframework.org/node/86

CUP-RAR Risk Analysis error

Hello experts,
When an approver does risk analysis for adding a role to a user in CUP before approval, the system shows 0 risk(0 risks found), However when the role is added to the user in RAR simulation, there are Risks.
Similarly,
When an approver does risk analysis for a role in CUP before approval, the system shows 0 risk(0 risks found), However when the role is analysed in RAR, there are Risks.
I have checked the Org Rules parameter in RAR (It was set to No as we are not using Org Rules).
When I set the org rule parameter to Yes, I got exception " Risk analysis failed: EXCEPTION_FROM_THE_SERVICEInconsistency Org Rule Analysis Flag Parameter". I reset the parameter to NO.
Many thanks,

Hello Raghu
Here is the note number: Note 1168120 - Risk Analysis and Remediation 5.3 Support Package (VIRCC).
Also I would suggest going to:
1. CUP - configuration -Risk analysis - And see if the web service link for Risk analysis is correct.
Better would be to go to Netweaver Administration -Webdynpro console -and get the correct link.
2. CUP -configuration - Mitigation and here also put the correct link for all four options there i.e. (Risk analysis, Mitigation etc),
Hopefully this should solve the problem .I donu2019t think it is related to org level.
If problem still persist, kindly paste the log.
Best Regards
Asheesh

CUP (AE) integrated with LDAP

Hi GRC Guys,
I had a question about the integration between CUP (AE) and LDAP.
I know that with LDAP as the detail user source and Manager as the standard approver, AE will automatically find the manager and route the approval flow to this person. However my request is can we use this LDAP integration to automatically find the manager's manager, or more freely any person within the organization? Do we need to use some CAD to realize this?
Thanks.
Benny Ren From Deloitte GRC Team

Dear Alpesh,
Many thanks for your reply.
Since LDAP is not able to achieve my goal, can HR system do that?
I have very little information about the integration between HR system and CUP (AE). Can you shed me some light on where to find that?
Best Regards,
Benny Ren

CUP Future Integration with External Training System

Are there any plans to allow CUP to integrate with external training systems. We have a need for CUP to integrate with an external training system to obtain course completion information which would then be used in the approval process for requests associated with adding or updating roles. Thanks in advance.

I don't know of any specific enhancements for that requirement but I would raise this directly with SAP to check!
I'm sure you could use a work around by using qualification records to trigger the CUP webservices of a certain request type and generate a workflow path for that specific approval mechanism.
Cheers, Simon

ERM and RAR integration

Dear experts,
We would like to know if during risk analysis WebService call from ERM to RAR there is any access to backend (R/3) system, or everything is handled in Java side.
Kind regards.

Hi,
As far as I know, the risk analysis from ERM should be handled in Java side as all the necessary/required data exists in ERM and RAR.
Regards,
Alpesh

GRC AC 10 (RAR/CUP/ERM) configuration for EP system

Hello Gurus,
We are aware of configuring RAR/CUP/ERM in GRC AC 10 for ERP system(back-end)
Are there any documents /links to provide information on configuring the above components for EP system ??
Or rather specific which of the following configuration is possible for EP system ?? CUP /RAR/ ERM ??
Also going further , is there any way in which we can configure the same for BO system ??
I am not quite sure if there is any PLUG-In as such which is available for BO system or not .
But in my opinion there is no need to perform configuration for BOBJ system as the roles in them are imported from Backend system (ERP/BI etc) , hence if these roles are already taken care during ERP system cleanup and SOD analysis , there should be no need to configure seperately RAR/ERM/CUP.
Please provide your comments.
Regards,
Victor

Hello Prasad,
Thank You for your quick response .. the info was quite helpful.
Will you please put some light on aspects of integrating AC 10 with BO ??
Is there any connecter available for it?? Which scenarios are possible ??
Humbly Requesting your help.
Thanks in advance.
Regards,
Victor

Cannot find FF info in ERM, CUP and RAR (GRC5.3)

I can only find FF info on the ABAP system txn /VIRSA/VFAT.
But on the ERM, CUP and RAR (GRC5.3), I cannot find any info about FF.
Which menu path/tab should I go search?
Thanks!

Hi Crishty,
GRC AC contains four components RAR(CC),CUP(AE),ERM(RE) and SPM(FF).
These seperate component have four seperate URL, so you will not get FF in ERM,CUP & RAR.
Here are the URL to access these grc component,
URL for RAR(CC)-
http//<hostname>:<portnumber>/webdynpro/dispatcher/virsa/ccappcomp/ComplianceCalibrator
URL for CUP(AE)-
http://<hostname>:<portnumber>/AE
URL for ERM(RE)-
http://<hostname>:<portnumber>/RE
URL for SPM(FF)-
http://<hostname>:<port>/webdynpro/dispatcher/sap.com/grc~ffappcomp/Firefighter
Thanks,
Sudip

CUPS 8 Calender Integration to Exchange

I am trying to integrate CUPS 8.0.3.10000-4 with outlook calender (Exchange 2007)
I configured a presence gateway for Exchange Server (type outlook) and uploaded the certificate chain. From CUPS point of view everything is "green".
System troubleshooter is also "green" with a few restrictions:
Problems reported with:
     IPPM application username/password                            -> I do not use IPPM
     Verify that MeetingPlace is properly configured               -> not used at the moment
     Verify Third Party Client LDAP Connection Information     -> not sure, but I think we don´t neet it. It was working some times ago. Problem perhaps caused through new certificates for tomcat
In CUPC I can´t see any calender entries stored in outlook.
The log settings for the presence engine has been set to debug level, but nothing to see but
"12:08:30.992 |system.pe.mvc 1112026 WARNING package table entry missing for: calendar.winfo"
Has this to say anything?
This is the only information I can see.
No entry with the FQDN of the Exchange (OWA) server ore something like this
Has anybody any suggestions
Best regards
Manfred

Hello,
All of the errors showing up is not related to CUPS Exchange Integration.
Please follow the doc step by step
http://www.cisco.com/en/US/docs/voice_ip_comm/cups/8_0/english/integration_notes/IntegrationNoteOCS_CUP70_MOCCallControl.html
Summary -
1) Configure an AD account with email to have "View only Administrator" and "Receive-as" permission.
2) Make sure from Exchange Management Shell that the account is setup right (in the above link)
3) Configure CUPS outlook gateway if they are already green - it should be ok except for the followings
     - If the CN of the outlok cert (Self cert) or root CA Cert (in case cert is signed by 3rd party) needs to have CA bit set (Bug: CSCsq64034)
     - SAN (Subject Alternative Name) cert is not supported (bug: CSCti65997)
     - for Account Name on outlook gateway use "domain\userid" format
4) Restart the Presence Engine service and take presence engine log in detailed level using RTMT and look for "system.pe.pa.owa.backend" - it will show at what state it is stuck
Thanks

0 risks found in while approving role in workflow of CUP

Hi All,
I am using one stage work flow. I created one change request to add one role , it is created and while manager is approving the role, he ran the risk analysis, but it is showing zero risks. where as in RAR/CC for the same role we have 2 risks.
I configured all steps of integration of CUP , RAR .(i.e WSDL Updation).
Please suggest me , where i am going wrong.
Thanks,
Joseph

Have you checked whether there isn't a mitigation somewhere for the role assignment or the RAR check has some critical risks only checked?
Another possibility (just speculating here..) is that RAR can check for risks within a single role (which is where you found these 2) however the CUP workflow is checking for risks associated with the user's existing roles and the new one in the request. But I would class this as a functional deficiency and hope it is not the case.
Cheers,
Julius

SAP GRC - SAP IDM integration

Hello,
may I ask you how SAP GRC Access Control can be integrated with Identity Management?
I would like a description of the model and to understand if CUP, ERM, RAR are all mandatory components to do the integration (it's not clear to me if only CUP should be use to integrate IDM).
Thank you to all
Daniela

Hi Daniela,
there are two basic options of integrating Netweaver Identity Management and SAP BusinessOBjects Access Control:
- CUP can call IdM to provision roles to non-SAP systems through IdM
- IdM can call CUP to hand over a request (or parts of it) for SoD and critical transaction checks
As a third option, I have seen customers using both tools in parallel, provisioning users and master data through IdM and assigning SAP authorizations through CUP/RAR.
The best kind of integration for your scenario is something that depends on your requirements and your desired processes. Technically you can do a lot, but it makes sense to invest the effort to find out what the best option is in your exact case.
Kind regards,
Frank.

CUPS CUPC Desk Phone control & features

Hi,
We are doing the POC with CUCM , CUPS , OCS RCC integration. I want to clarify some of the features using Desk phone control.
CUCM - 7.1.2
CUPS -8.0.0 , CUPS 7.0
OCS R2
CUCM CUPS are integrated and features soft phone , desk phone , IM , IPPM , LDAP are working fine.
1) In desk phone mode , CUPC A is call with CUPC B ( soft phone or Desk Phone) . In that time CUPC C will able to the Phone status of CUPC A
such as Busy , Idle like the Presence status in the phone ?
2) In the OCS RCC i'm able to call from the MOC to the Phone , but for incoming call there is no pop up from the MOC ?
3) OCS FQDN should be resolved in the CUPS ? ( test.domain.com)
4) From the MOC is it able to see the User Phone status as mentioned in the 1st Point.
Thanks

1) DNS entry is really required in the CUPS towards the OCS server ( ex ocs.lab.com)
[Michael] Technically, it will work without DNS. Tweaking might required. Since you already have OCS entry in DNS, you may just point your CUPS to the DNS server. That'll make thing's easier.
2) When the incoming call to the RCC phone , OCS will pop up the Incoming call to the MOC.
[Michael]Yes.
3) How important MOC RCC plugin we have to install in the MOC? how its work with MOC ?
[Michael] MOC RCC plugin is only required when the Line URI in Active Directory cannot uniquely identify a phone device and a line. For example:
Scenario 1: shared-line across multiple devices
Line URI is "tel:1234;phone-context=dialstring". If there's only one phone with DN 1234, you don't need the plug-in. Otherwise, you may
a) Use the plug-in to choose the phone you want to control.
or
b) Change the Line URI to "tel:1234;phone-context=dialstring;device=SEPAABBCCDDEEFF" (then you don't need the plug-in)
Scenario 2: same DN in different partitions
Line URI is "tel:1234;phone-context=dialstring;device=SEPAABBCCDDEEFF". If there's only one line on phone SEPAABBCCDDEEFF with DN 1234, you don't need the plug-in. Otherwise, you may
a) Use the plug-in to choose the phone you want to control (even though there's only one device)
or
b) Change the Line URI to "tel:1234;phone-context=dialstring;device=SEPAABBCCDDEEFF;partition=partition1" (then you don't need the plug-in)
Michael

Outlook integration create duplicated contact

Hello All:
When I run the synchronization in outlook integration. It duplicate customer contacts after the first run. Now I am not sure if I should run it again as it may duplicated it over again. Is this a setting inside SBO or inside outlook?
Sincerely Yours

Dear,
For your issue kindly refer to note 911283 below:
Symptom
When do a synchronization in Outlook Integration, the duplicated items
will be created, even though it has been synchronized before.
Other terms
SAP Business One; Add-On; AddOn; B1; SBO; Outlook Integration; Outlook;
OI; Activity; Sync; synchronization
Reason and Prerequisites
This is program bug of SAP Business One Add-On Outlook Integration.
Solution
This problem is fixed in SAP Business One Add-On Outlook Integration
release version 6.70.2.20, also fixed in SAP Business One Add-On Outlook
Integration release version 6.80.00.15. Download and install the patch
of SAP Business One Add-On Outlook Integration from SAP Service Market
Place will fix the problem.
2005 SP00 PL15 & 2004 SP02 PL20 has fixed the issue.
Regards
Apple

CUP RAR Integration - Release 5.3

Similar Messages

Maybe you are looking for