CUP unable to provision FF id in ABAP system
Dear Experts,
I have integrated SPM in CUP for Superuser Access Provisioning. Here while testing as requester I am able to create a request by Superuser Access and selecting all necessary field like system, Manager Firefighter id and after submit request was created and send for approval.
Here as Manager i am able to see the request with details and after clicking on approve request was closed.
But in backend ABAP system selected Firefighter ID was not provisioning. As requester when i am login in backend system and executing transaction /VIRSA/VFAT I am unable to see any Firefighter ID was linked to me.
So anyone has clue why its not happening, as in CUP there was no any error while creating and approving request everything works very fine.
Thanks,
With Regards,
Soman
Soman,
Go to Configuration -> workflow -> autoprovisioning and make sure that ' Auto Provisioning - Provisioning Options' is selected to 'Auto-provision at end of request'. If this is selected then look at the logs. If this was not then change the value and go through the request submission/approval process again.
Regards,
Alpesh
Similar Messages
-
Provisioning of roles to ABAP system deletes role assignments in backend
Hi all,
following scenario:
user has role A in an ABAP system which is connected to IDM. Assignment of role A to the user is not in the identity store.
Now you assign role B via workflow to the user and IDM provisions this new assignment to the ABAP system.
What will happen is that the user will get role B but assignment of role A will be deleted.
This happens because in the job "SetABAPRole&ProfileForUser" the connector attribute "roles" will only consist the role assignments which are in the identity store. All assignments in the ABAP system which are not yet in the IDS will be overwritten.
This behaviour can be very critical. If you still allow role assignments directly in the backend system and you read these assignments e.g. once a day to the IDS - but in the meantime assignments have been done via workflow - you will lose data.
My customer wants to assign roles both directly in the system and also by workflow. Every night an ABAP update job runs which writes new assignments to the IDS.
Do you have any idea how I could solve this? Is there a way NOT to overwrite assignments with the ABAP connector field "roles"? I tried to use multivalue operator but this didn't do the trick.
I hope I was able to describe my problem properly and you have answers...
Best regards
Jörn KaplanNo, there is not a way to avoid that IdM replaces the role assignment in ABAP with the current assignments as know by IdM. IdM is the master!
This is not directly an issue of IdM: The standard BAPIs in ABAP (up to release 7.0) offer "replace all role assignments" but not "add role assignment" or "remove role role assignment".
However, there exist an exception: Role assignments in ABAP which are created indirectly by an HR-ORG assignment are not touched by IdM. (There role assignment are viewed in blue in transaction SU01.)
See http://help.sap.com/saphelp_nw70/helpdata/EN/50/e9683c5de8676fe10000000a114084/frameset.htm for details.
Kind regards
Frank Buchholz -
Unable to open any programs in ABAP editor
Hi folks i'm unable to open any programs in ABAP Editor.
When ever i try to open any program it goes to short dump.
Even when i try to open STO4 to view error log.
it shows following message
Short text
Runtime error, short dump could not be written.
What happened?
Error in the ABAP Application Program
The current ABAP program " " had to be terminated because it has
come across a statement that unfortunately cannot be executed.
Unfortunately, the system cannot carry out a detailed analysis of the
error, as the table SNAP (which gathers information at the time of
termination) does not contain a suitable short dump.
Information About Termination Point in XSLT Prog.
Termination occurred in the XSLT program " ".
The call took place using CALL TRANSFORMATION from the ABAP
program specified below.
In the source code, the termination point is in line " "
of the (Include) program " ".
Internal notes
The termination was triggered in function " "
of the SAP kernel, in line " " of the module " ".
The internal operation just processed is " ".
Internal mode was started at " ".hi,
check whether any exit has been implemented for se38 and because of some statements in that it may goto dump.
also try to open ur program from SE80.if u have access to se80 then u can do it from there itself.
reward points if hlpful. -
"Unable to provision your device' error when tryin...
Can someone please help! I 'upgraded' to v40 firmware for my Nokia 5800 and lost my contacts. I am trying to sync it with Ovi.com but when I try to SMS the settings the site (not the phone) gives and error 'unable to provision device'. I can't even find a way to enter sync settings manually. Please help!
Same problem here, except that I don't know if it was working before because it's the first time I try the service.
I DO get the SMS from OVI on my phone, but when I open it, it asks for a "Configuration settings PIN" which I don't have.
Immediately after I receive the SMS I get on the webpage the same error you guys are receiving.
Don't know what's wrong.
Any clues anybody?
Cheers,
Luis -
Up until this morning our two iMacs (one on 10.5, the other on 10.6) were able to print OK to our Magicolor 2300DL. Not any more. The printer keeps automatically going into pause on both iMacs. Looking in the console log shows 'CUPS unable to locate printer'. Both iMacs and 2300DL have been power-cycled. The printer can be browsed to quite happily which to my mind suggests that it is there on the network. I have removed the printer and re-added it. I have reset the printer system. Then re-added the 2300DL. The printer will happily print a test page from its own panel.
Digging around a little suggested that perhaps Bonjour was not locating the printer. So I ran Bonjour Browser and did not see any print services displayed. Thought I was onto a solution (although why both iMacs should fail seemed strange).
To double-check I fired up my G4 (running 10.5) and that prints quite happily to the 2300DL. So I ran Bonjour Browser and to my surprise got exactly the same listing as I got on my iMac.
So now I am really confused and not sure where to go next. I even power-cycled the router!In the absence of any suggestions, I have found a workaround and which I post here for the benefit of others. I was able to add the 2300DL ...using the HP JetDirect option. Seems to work OK
-
Unable to provision to an RO through OIM access policy
Hi All,
We have created a group membership and attached it to an access policy which does provisioning for a particular RO.
When we try to use this, the provisioning process gets stuck in "System Validation" state.
However, provisioning manually works perfectly fine.
Is the server looking for something while it tries to provision?
Thanks!Make sure all your required fields are being populated correctly. If you have any checkboxes, make sure they get a 1 or 0 default value. Check the auto save checkbox on your provisioning process definition.
-Kevin -
Unable to log in to portal after system copy
Good day
I have copied my production portal system to a test system. I am using an ECC Abap system as my user store. The portal start successfully and I am able to access the Visual administrator.
I am however unable to log on to the portal. The error I get is "User authentication error".
Below is an extract from the security log:
#1.5#0011259C05FB0054000002F500001B9800043F56F6157AED#1195542635224#/System/Security/Authentication#sap.com/irj#com.sap.engine.services.security.authentication.logincontext#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Error#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED
User: N/A
Authentication Stack: ticket
Login Module Flag Initialize Login Commit Abort Details
com.sap.security.core.server.jaas.EvaluateTicketLoginModule SUFFICIENT ok false false true
com.sap.security.core.server.jaas.CreateTicketLoginModule SUFFICIENT ok false false true
com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule REQUISITE ok true true true
com.sap.security.core.server.jaas.CreateTicketLoginModule REQUISITE ok true exception true null#
#1.5#0011259C05FB0054000002F700001B9800043F56F61580BC#1195542635240#/System/Security/Audit#sap.com/irj#com.sap.security.core.util.SecurityAudit#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Warning#1#com.sap.security.core.util.SecurityAudit#Plain###Guest | LOGIN.ERROR | null | | Login Method=[default], UserID=[oostw], IP Address=[172.27.2.137], Reason=[Access Denied.]#
Please can someone assist.
Thanks
WilhelmHello!
It looks like your system is configured for ticket authentication. As you did a system copy the SSO-ticket might not be working anymore. If this is the case you need fix the SSO or you need to re-configure your Portal (at least temporarily) to allow other authentication methods (like basic password authentication).
You can configure the order of the authentication methods in VisualAdmin and set the 'levels' (Required/Sufficient/etc.) there as well.
Hope this helps,
Jörg -
Unable to read software component version from System Landscape Directory "
I've worked in past creating/importing SWCV, but this is new system PI7.0 and stuck.
A) Is my understanding on resolution correct?
Should I go and apply notes 940309 and create client copy of existing client 001
OR
change role of client 001; SXMB_ADMIN -> 'Integration Engine Configuration' to 'Integration Server'
I have no problem in using client 001 as Integration server, all I want is import of SWCV to work. Thanks. Appreciate the help.
B) Here is what I have done and the error:
1) Followed weblog below and created product, software component, technical system, business sytem in SLD.
/people/srinivas.vanamala2/blog/2007/02/05/step-by-step-guide-xml-file-2-xml-file-scenario-part-i
2) When I import the SWC from integration repository getting error
(Unable to read software component version from System Landscape Directory "server:5<system number>00").
C) Pointers used from the forum to debug the issue, but still no luck
Below are the points checked from the forum and all steps are correct, but still have issues with the import
1) check the RFCs SAPSLDAPI, LCRSAPRFC, connection test pass as the program ID registered with Jco
2) T-code SLDCHECK no errors (followed http://help.sap.com/saphelp_nw04/helpdata/de/78/20244134a56532e10000000a1550b0/content.htm)
3) T-code SLDAPICUST got user PIAPPLUSER, pwd is correct (reset the pwd)
4) logged using PIAPPLUSER http://server:port/sld and it works
5) One of the weblog SLD Check Failed (LCR_LIST_BUSINESS_SYSTEMS function doesn't work) referred to apply notes 940309
Notes: 940309
You are installing 'SAP NetWeaver 2004s SR1 ABAP+Java' Usage Type 'NetWeaver Process Integration (PI)'.
You don't want to use the default client 001, but another client as Integration Server.applied portion (PIPostInstallProcess) of OSS notes 940309 and it resolved.
Note:
I still retained client 001 and didn't do client copy as mentioned in the notes. The wizard based CTC tool helped. Here are the details if someone has similar issue and want to know further details:
A NetWeaver Process Integration (PI) Installation (ABAP+Java) has two parts: Installation and configuration. The former is done by the Installer, the latter by the 'Central Template Configuration' (CTC) Tool.
http://help.sap.com/saphelp_nw04s/helpdata/en/14/39084136b5f423e10000000a155106/frameset.htm
1. Call the wizard-based configuration tool as described in Configuration Wizard.
2. Select the scenario PI and the task PIPostInstallProcess.
3. Choose Execute.
A list of the steps to be executed by the wizard is displayed.
4. Choose Install. -
Unable to read software component versions from System Landscape
Dear all,
I have an ECC system with ABAP and Java installed.
I already configured so that SLDCheck, RFC destination configuration run successfully.
PIAPPLUSER is not locked and can logon.
However, when I import software component version in Integration Builder, the system return error message "Unable to read software component versions from System Landscape Directory "Server:50000".
Please tell me how to correct this error.
GiangHi,
Check this
http://****************/Tips/XI/SWComponentError/Resolve.htm
"Unable to read software component versions from System Landscape Directory
Unable to read software component versions from System Landscape Directory
unable to import from SLD
Regards
Seshagiri -
HI,
WE have sucessfully installed Java Addin for ABAP system.
After sucessfully installation of central Instance for Java Add-in, we were unable to find Java instance in MMC.
During the installation we have installed central services instance (SCS) java Addin, DB instance and CI java Add-on.
Are there any post-installation steps to be followed.
Regards,
Magham.due to services problem it is not visible, check wether http://hostname:portnumber
is working or not
you can find the entry after restarting the server
Samrat -
Delete Role Assignments directly from an ABAP System
Hi folks!
I'm working on a synchronization job and I have a particular challenge, delete Roles assigned to a user in the ABAP System.
Our use case is this: IDM is regarded as the authoritative source and as such if the user has a privilege in IDM, it should be in the backend. Easy enough!
However if the privilege is not in IDM but is in the back-end, it needs to be removed. Is there a way to do this in IDM? From what I saw in the Framework, we are assuming that the role already exists in IDM.
I suppose the work around would be to assign and then remove the matching privilege in IDM, but I really don't like that at all, for a number of reasons.
I looked in the business suite and plain ABAP portions of the framework. I'll take a more detailed look and also check the RDS, but I get the feeling this will be a toughie.
Thanks for your help!
MattHello Matt,
so you want to remove local administrated role?
If the object really is to undo the local administration, I would do this:
Create a batch job, the passes would be a FromSAP, a ToGeneric and one/two ToSAP
At first a cleaning pass (the ToGeneric one) which fixes all incorrect assigned privs (re-add directly or remove, depends on what you want/need). The source tab query and destination tab script have to be written though (I guess that is the most time consuming part of the job during implementation)
The pending privs have to be considered in the provisioning script (I would prefer our own written script over the SAP delivered anytime)
Copy the Read ABAP pass for users. Remove everything but the logonuid and the role assignments (profile assignments only if needed, too). Maybe use a different table name like sap<repName>userAssignRecon. If the system is very large, this pass has to be optimized filters
Copy the role provisioning pass from the in-use plugin (SAP or adjusted one) and adjust it like this:
Source tab query: A query which selects all mskeys of users that have more assigned in the sap table as in the link view. Using the Identity Store so everything of the identity is selected
Destination tab: Remove the profiles as you haven't mentioned them. If needed I would do the same for profiles as for the roles in a second pass with the profileAssign table.
Best regards
Dominik -
SU01 Parameters across ABAP systems using IDM
Anyone have some ideas on how to handle SU01 Parameters across multiple ABAP systems ?
Our difficulty is that the parameters required in the ERP system do not exist in the SOLMAN system so I cant create a 'global parameter' list for a user in the MX_PARAMETER and let IDM send it out everywhere.
Parameter examples are ;
/RWD/LANG=EN
MOL= 13
thanksWe looked at creating a PARAM<system number> type field and then changing all the required provisioning tasks, but after a closer look, we decided that parameters on the main ERP/HCM system will be done with an ABAP program. So immediately after HRUSER process has created the SU01 record, the abap program inserts inserts the required 30 or so PIDs according to the HR area. Other reason for doing it this way is that once the PID's are assigned to the user, the user can then change some of them via their transaction screens. So we didn't want IDM changing or even tracking the PIDS after the initial creation.
All other systems had minimal use of parameters and these will be done manually.
Would be a great addition to the IDM application if it did politely handle differing PIDs in multiple ABAP systems ! -
Error while installing J2EE Add- In to the ABAP system
Error while installing J2EE Add-In to the ABAP system
We are installing J2EE Add-In to the ECC5 System in the new hardware.
When are getting Error while installing J2EE Add-In to the ABAP system.
Transaction Begin*****************************
ERROR 2005-08-10 14:58:28
CJSlibModule::writeLogEntry()
CJS-20011 J2EE engine configuration error. DIAGNOSIS: Error when
configuring J2EE Engine. See output of
logfile /usr/sap/QSS/install/batchconfig.log: 'My Library Path
is: /usr/j2se/jre/lib/sparcv9/server:/usr/j2se/jre/lib/sparcv9:/usr/j2se/jre/../lib/sparcv9:/tmp/sapinst_exe.13084.1123702275:/usr/lib::/usr/openwin/lib:/usr/sap/QSS/SYS/exe/run:/oracle/QSS/920_64/lib:/oracle/QSS/920_64/lib32:/usr/lib
ElementInfoTask has finished successfully on dispatcher
ConsoleLogsTask has finished successfully on dispatcher
ChangeManagerPropsTask has finished successfully. Manager:
LockingManager on dispatcher
ChangeManagerPropsTask has finished successfully. Manager:
ClusterManager on dispatcher
ElementInfoTask has finished successfully on server
ConsoleLogsTask has finished successfully on server
ChangeManagerPropsTask has finished successfully. Manager:
LockingManager on server
ChangeManagerPropsTask has finished successfully. Manager:
ClusterManager on server
ChangeServicePropsTask has finished successfully. Service: dbpool on
server
ChangePasswordsTask finished successfully.
Error occured while connecting to database (UploadFile). Msg: No such
algorithm: DESede
Transaction end***********************************
We tried twice clean installation, after removing j2ee dir, SCS and
resp profiles and droping PSAPQSSDB tablespace and SAPQSSDB user.
I have also confirmed the passwords in ABAP system/000 for SAPJSF, DDIC, J2EE_ADMIN, J2EE_GUEST.
We are getting the same error in both tries.
Kindly advice us to resolve the problem.
Thanks and Regards,
SrinivasAnanda,
you saved my day! I've been banging my head against the wall with this same problem during a J2EE add-in installation for SRM 4.0 on Windows, in preparation of an LAC 2.0 installation. I had tried deleting the schema first, but that didn't work. After I removed the sys\global\security folder as well, it worked perfectly.
Thank you. -
Error while installing the java add-on on abap system
Dear All,
We are trying to install java add-on with EP on present ABAP system, but getting struck up with error as below at creating java users (sapjsf) in central instance installation phase.
ENVIRONMENT:
ECC6.0
WIN 2003
KERNEL 136
SUPPORT PACK LEVEL AT 13
NETWEAVER 2004S SR1.
DB- ORACLE
error: ( usercheck.log)
java.lang.NoClassDefFoundError: com/sun/tools/javac/Main
Exception in thread "main" Reserved 1610612736 (0x60000000) bytes before loading DLLs.
Critical Error
Launching program failed
-> Internal program error (rc = -1)
error: (sapinst.log)
WARNING 2008-08-11 15:00:00
Execution of the command "C:\usr\sap\B60\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install\lib;C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install\sharedlib;C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install" -c sysnr=00 -c ashost=sapserver -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u SAPJSF -p XXXXXX -r SAP_BC_JSF_COMMUNICATION_RO -message_file UserCheck.message" finished with return code -1. Output:
java.lang.NoClassDefFoundError: com/sun/tools/javac/Main
Exception in thread "main" Reserved 1610612736 (0x60000000) bytes before loading DLLs.
Critical Error
Launching program failed
-> Internal program error (rc = -1)
INFO 2008-08-11 15:00:00
Removing file C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\dev_UserCheck.
ERROR 2008-08-11 15:00:00
CJS-30197 . For more details see output of logfile:
ERROR 2008-08-11 15:00:00
FCO-00011 The step createJSF with step key |NW_Addin_CI|ind|ind|ind|ind|0|0|NW_CI_Instance|ind|ind|ind|ind|8|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|2|0|createJSF was executed with status ERROR .
Please help us out at your earliest convenience.
Thanks and warm regards,Dear Samrat Dangeti ,
Thanks.
Inst version: 701.
JDK version: 1.4.2_13
Regards, -
Hello All,
There are 2 ABAP systems into consideration here.
A custom application is running on R/3 4.7 system.
This application also accesses data from another system - ECC 6.0
Issue:
Users get a login prompt to access ECC..which is to be removed...
Question:
How can I set a SSO connection between these two ABAP systems?
Awaiting Reply.
Thanks and Warm Regards,
RituHi Ritu,
First you need to ensure that your systems support SSL.
Use the procedure given here:
http://help.sap.com/saphelp_nw70/helpdata/en/65/6a563cef658a06e10000000a11405a/frameset.htm
Once SSL works, you can then setup SSO as per the link given in the previous post.
Maybe you are looking for
-
Multiple iCloud accounts on one computer
We would like to have two icloud accounts on our imac. One for music and other apple purchases, and one for calendars, addresses etc. How would we set that up, both on the imac and on our separate ipads and iphones so we can all access the same itun
-
Guys I need help with my ipod touch 2nd generation
Hi guys, My ipod touch is completely freezed! it show on the screen "Your ipod is stopped, Connect your ipod to iTunes" when I connect to iTunes it show this message "your ipod ... can not be connected to iTunes because it has a passcode, please ente
-
I upgraded to Mountain from Snow and find that there is now a problem adding iphoto to the cloud. I have iphoto '08,version 7.1.5. Tried to follow one poster's advice and upgrade to 9.1 but I need 9.0 first and I can't find that. suggestions? than
-
Photo Booth - Where To Store Your Photos?
Hi, Can someone please explain, are you supposed to store your Photo Booth pictures actually within the Application, or are you eventually supposed to import them into iPhoto or drag them into the Finder? Is there a benefit to keeping your Photo Boot
-
[SOLVED] Games won't load through Steam
I'm on 32bit and can't run any opengl games through steam recently, I don't know whether its after the latest nvidia, steam or xorg upgrades, I just can't pin it down. Running Day Of Defeat or Counter-Strike 1.6 I get: wine client error:42: write: Ba