Deploy user for automatic deployment on development system

Hi everybody,
I am not sure what user to configure in the "Runtime Systems" tab of my track configurations.
We use AS Javas of the Version 7.1 EHP1 as runtime systems. Thus we use the deploy controller for deploying. So far we just have used the personal user of whoever created the track as deploy user. Is this the recommended way? Or should we better use some technical user for automatic deployment? If yes, which permissions should this user have?
Thanks in advance for your help!
Tobias

Hi Satya
Thanks for the quick answer. Do you happen to know if a separate technical user for CMS deployment ist the "standard"/best practice?
Best regards,
Tobias

Similar Messages

Users for logging on to receiver systems

Hi,
The user name and the password that the IS needs for logging on to a receiver system to deliver a message are kept in the database of the Integration Directory and cached in the IS.
According to the documentation, the passwords are stored in the secure store of the directory server and in an obfuscated form in the persistent cache on the IS.
Anyone knows what mechanisms are used to make the secure store of the directory server secure?
And does any of you know in what form are the passwords stored in the IS cache? (I suppose that means what hashing algorithms are used?)
Thanks,
Greg

If you don't install the security libraries (during the WebAS install) your secure store passwords will be hashed (one-way)...
If you installed the securitiy libraries then you can encrypt the secure store (the security libraries are also require if you're going to use https)...
The best way to protect your secure store is to protect/secure the filesystem where it resides (/sapmnt/<SID>/global)

Initial roles for sap consultants in Development system .

HI all,
I am new in security, now I have to create one fi ,sd, mm,pp, abap users in my development server (ecc 6.0 in sql server). I need standard roles for there users.
Please give me security matrix.
Regards,
swathi-k

in tcode PFCG you can drop down the list of available roles as per your requirement and assign them to the users. you have to give the appropriate authorizations. In case you can find the role as per your requirement, then you have to create your own roles and assign them to the users.
follow for more details : http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Cheers,
-Sunil

Full production refresh to development systems and Charm?

Hi SDN Community,
Where I work we have a policy of refreshing the development systems (ECC, CRM, APO, BI, SRM) on an annual basis with full production system data, HR data is subsequently wiped clean from the development system.
For each of our systems we have a development system, a QA system and a production system.
The decision to do these full refreshes was taken to ensure that developers and configurers can do decent testing in the Dev environments - prior to transporting to our QA system - to ensure that we have a reasonably stable QA system. Prior to the refreshes - QA was considered too unstable by our business to be used as a good test platform - the full D refreshes solved this problem.
We have recently installed SAP Charm (Change request management) which is a solution manager based product that manages the transportation of objects in change requests - attached to maintenance cycles.
During our first development system refresh we discovered that all open Charm projects (maintenance cycles) were placed into an unuseable status due to the refresh. This means we had to rebuild all of the Charm projects after the refresh - which took a considerable amount of time + resources and delayed project work. We don't want to be in this situation again for our next refresh.
SAPs response to us has been that they have no other customer that does full Development system refreshes - and also has Charm. I wonder if this is accurate, I think what SAP are saying is that they don't have many Charm customers... Is refreshing Development so uncommon?
We are considering products like SAPs TDMS - and alternatives (eg gold client) - but most of these appear a little immature - for refreshing complex system landscapes - such as ours and keeping everything in synch after the refresh.
My questions to SDN -
What do you do - do you do full refreshes to your D systems?
If not - what are the arguments against refreshing D systems (is this considered bad practice)?
Are there any other Charm customers out there in a similar situation to us?
How do you manage the stability of your QA environments and stop the transport into QA systems of untested changes - if your D systems are not similar to you production system
(note we have some 300 active users in just our ECC development system)?
Any suggestions / recommendations as to how to best proceed would be greatly appreciated.
many thanks in advance,
Julian Phillips
Edited by: Julian Phillips on Nov 11, 2008 2:33 PM

Thanks Naushad for your reply,
I wonder if D refreshes are less common - more due to the additional hardware costs incurred (disk space needed to store full production data is usually pretty large) to do them - than due to avoiding disrupting development - probably a bit of both.
I did not mention this - but in our refresh we do reimport all transports that we open prior to the refresh - which used to solve our problems - in terms of restoring active changes - but with SAPs Charm system - this approach does not work as the Charm projects are left in an inconsistent status.
We are now leaning towards introducing a 4th set of systems into our landscape - so that we have the following platforms:
Development ---> Pre QA ---> QA ---> Production
This approach will allow us to keep both the Pre QA and QA systems refreshed every 6 months or so - and our new Dev system - we will refresh very infrequently (every 5 years perhaps) if at all. We will tie the Charm system to our new development - and this system will then not be impacted by refreshes. This approach means additional hardware cost - but as it happens we have a few spare boxes - so this maybe our best bet.
The core reason for our refresh is so that we will be able to preserve the stability of our QA test platform - which for us is the critical factor here. If QA has poorly tested work in it - we run a higher risk of disrupting other testing and also of this poorly tested work reaching production.
When we used to have a development system as you described and just the single QA box - we experienced frequent instability in our QA box - due to poorly tested working reaching it - and this delayed numerous projects.
Does anyone else have a 4 box setup like this? Anyone else encountered this on an SAP project anywhere? Pros / Cons of this approach?
//Julian
Edited by: Julian Phillips on Nov 12, 2008 8:08 AM
Edited by: Julian Phillips on Nov 12, 2008 8:18 AM

Scheduling specific time of day for automatic software updates

How can one schedule a specific time of day (i.e. between 11:01 pm to 5.59 am when I have unlimited download availability) for an iMac to search for automatic software updates? System preferences only offer frequency, but no time option. If it is possible to schedule a specific time, will invoking the feature override the sleep function, wake up the machine and perform the software update and then let the machine go back to "sleep?" Thank you for all your help.

to clarify barney's suggestion, the following terminal command will download all available updates and put them in your Downloads folder.
softwareupdate -d --all
so what you need to do is this.
1. turn off automatic software update in software update system preferences.
2. make a cron or a launch daemon to run the above terminal command periodically at the time of your choosing. to make a launch daemon I recommend using lingon http://tuppis.com/lingon/
The daemon will only run if the computer is not asleep at the scheduled time so you might want to set to to wake/start shortly before that. this is done in system preferences->energy saver->schedule.
to install the updates once they are downloaded double-click on the pkg files and follow the instructions.

TestStand Activated Deployed System reset to Evaluation Development System

We have a test system which has TestStand with an activated deployed license. The test system has not been in use for a while and as some new units are due in to be tested, it was powered-on. The original mouse on the system had gone missing, so a new one was fitted instead. Windows saw this as a hardware change.
When TestStand ran, it loaded the TestStand Evaluation Development system instead of the deployed system.
Looking at the License Manager, there does not seem to be any way of disabling the Evaluation, (until it expires in 30 days), and using the deployed system, (which it shows as activated).
Any suggestions ?

Thanks for that.
I have deactivated and reactivated the deployment license and that stops the Evaluation box displaying when I select the icon for the Operator Interface for my sequence.
However, have noticed that the Evaluation Full Development Teststand is still there if I select the Sequence Editor, (at least for the next 5 days).
This is not a big problem, but I am concerned that in the future if someone uses a different mouse/keyboard then this problem will reappear.
It sound like a TestStand bug, as it should at least give you the option of not enabling the Evaluation Development system if the hardware 'changes'.

OAS API for automatic deployment!!

Hi,
Is there any API from Oracle for automatic deployment, stopping, starting, restarting the server, creating Datasource, connection pool etc for Oracle Application Server. I mean I should be able to achieve all these without manual intervention. Everything should happen in an automated way with the help of code.
The following site lists out the API, but I could not find the solution for my (above) requirement.
http://download-uk.oracle.com/docs/cd/B31017_01/web.htm
Can anyone, if used/aware of such API, please let me know.
TIA,
Rgds,
Prashanth Babu.

Mike,
Thanks for the reply.
I basically found the ant methodology and also the J2EE Deployment API (JSR88) for my requirement.
But with ant scripts I ran into problems. I have posted my problem in OC4J forum.
Re: Could not create task or type of type: antlib:oracle:deploy
I found the corresponding API for the same in ant-oracle-classes.jar. Here too, I ran into problems, since, when I tried Java Code for creating the datasource/connectionpool, the program is completing without any runtime-error, but its not creating the datasource/connectionpool.
If anyone is aware of the API or used it or any pointers to examples of usage will be of great use. Please let me know.
As such, Iam not able to find out much abt the API even googling.
Any pointers/suggestions for the same would be very appreciated.
TIA.
Rgds,
Prashanth Babu.

How to deploy custom development

We use JDI to deploy webdynpro for ESS application. for that we create a track, check in ESS components in the track and set up run time systems. now we are going to do custom development, for example: create interactive forms, etc.. we would like to use the same procedure to deploy modifications, but we could not found any software components to check in for the track. we are wondering, what should we do for our customer development? how do we create track without any software components? If we don't use JDI, how do you get the modifications in to development environment after they are tested in NWDI? Do you allow developers to connect to sdm for development system driectly?
Thanks
Jane Zhou

Hi,
For that we should be creating a software component in SLD.
Define the required DC's for that.
After doing this we need to create track for this software component.
From then the way to develop will be same as modifying any ESS application the only change will be instead of saying create project in inactive DC's we say create application for the new Software component.
Regards,
Nagaraju Donikena.

Deploying SQL Developer in LAN environment

I downloaded SQL Developer today and would like to deploy it on the LAN. How do I ensure that the connections I implement remain standard and prompt each individual user for his unique sign in username/password if he executes from the network executable. As there is no setup I have run I assume no registry entries will be made to each individual computer.

Hi,
SQLDeveloper retains all user specific information in a directory called .sqldeveloper created off the user's home directory. This is typically on a user's local machine, or in some cases can be network attached per user.
There's no central repository of connections as such - Its all on a per-user basis.

Is FPGA module option absolutely needed to deploy a RIO system?

Is FPGA module option absolutely needed to deploy a RIO system? I do not believe that I need to customize any of my I/O or go beyond the vi's already available in LV development suite and Real-Time module option.

You don't need the LabVIEW FPGA Module to simply deploy an existing RIO configuration (bitfile). You can do that simply with LabVIEW, LabVIEW Real-Time, and the NI-RIO driver. You only need the FPGA module if you want to compile a new FPGA personality into a bitfile to do your IO. If you already have a bitfile that fits your needs, you don't need the FPGA module to deploy and run it.
For instance, the RIO driver probably installs a few simple examples that use interrupts and DMA to send data back to the host for various targets. It could be that one of these example bitfiles fits your needs if your requirements aren't too elaborate.
Just trying to clarify the issue here... And what I'm talking about has nothing to do with NIWeek or whatever everyone else is posting about.
Jarrod S.
National Instruments

Re-deploying application developed by PDK

Hi,
Our portal users are using the applicatoin developed by PDK.
However, we are planning to re-deploy the application developed by PDK.
Here is my questions.
1. Is it possible for portal users to use the current PDK developed applicatoin during re-deploying process?
For example, if the re-deployment takes 10 mins, can the portal user not use the application in that period?
anybody has same experience before?

Hello John,
it depends on the structure and content of your PDK project. If you are using RFServiceWrapper to register your class in CrtClassLoaderRegistry, then you also need to restart J2EE, in order to update previosly deployed class. In this case, your changes will take effect only after restart (users must stop using the app).
In general, re-deployment consists of two steps:
1 undeploy previous version.
2 deploy the new one.
It means that there is always an time period (relatively small) when your app is not available. If any of users try to access (send a request to) your app. , then he gets an error message (Could not found....).
But there are several options, how to forbid using the app durign the deploy (hide the access point - role; deploy app. with other name, create another iView and then just redirect your users, and so on...). Of course, only if it's not conflicting with your business processes.
mz

What is the user exit for automatic account determination in PO

Hi Experts
I ned to know what is the user exit for automatic account determination in PO
my client needs the document type to defines Account Assignment Category.
choosen a document type Account Assignment Category is defined automatically. you can't choose
a wrong Account Assignment Category from the drop down list.
thanks form you help.

If this is the case than why don't you use the Transaction variant
SHD0: http://www.mortenhjorthnielsen.dk/Security/transactionvariants.htm
If you have knowledge of Transaction variant then you can use SHD0 tcode and generate the transaction using default type and give that transaction to user instead of ME21N so they will not have the issue.
The exact solution for your problem is as follows
Go to Tcode SHD0 and enter the transaction variant
In T code field enter ME21N and then enter the ZXXXX or the name you want to keep in transaction variant field and hit create button
This will take you to ME21N transaction and here you just enter the data but make sure you enter the A/c which you want to default.
Once you finish system will save this one as a variant
Every time you hit or enter the pop up screen comes here you just hit enter and whichever data you want to default that you have to select in the Popup by checking the Box
W content and output only for your case the field XXXXXXXX should be selected for W content and output only
Make sure you have value 1 in contents field
If not then restart the variant again and on the ME21Nscreen reselect the invoice field
Later exit and save (save in the object which you can transport)
Then from SHD0 transaction select GOTO create variant transaction and here you careate the tcode and use that tcode for ME21N (e.g ZTRAN - For specifix sto)

The tool for testing developed system

We have already developed a system base on WebAS.Is there some test tool for the developed system such as J Unit in Java?Thanks.

If your intentions is to test user interfaces or scenarios eCatt is the best choice. If you want to ensure code quality ABAP Unit and Code Inspector are suited well.
http://help.sap.com/saphelp_nw04s/helpdata/en/10/6d1c370c468b7be10000009b38f936/frameset.htm
Best Regards
Klaus

For one Urgent Change during performing the Approval(chnging the status to 'To be Tested') system does not recognize any changes using the CTS WBS BOM in the development system. The transaction is therefore incorrect or the status was reset by the system.

For one Urgent Change while performing the one of the Approval before changing the status to 'To Be Tested'
We are getting below error.
The system does not recognize any changes using the CTS WBS BOM in the development system. The transaction is therefore incorrect or the status was reset by the system.
COuld anyone please help us to know, How it can be resolved?
We also have this below error.
System Response
If the PPF action is a condition check, the condition is initially considered as not met, and leads to another warning, an error message, or status reset, depending on the configuration.
If the PPF action is the execution of a task in the task list, and the exception is critical, there is another error message in the document.
Procedure
The condition cannot be met until the cause is removed. Analyze all messages in the transaction application log.
Procedure for System Administration
Analyze any other messages in the task list application log, and the entries for the object /TMWFLOW/CMSCV
Additional Information:
System cancel RFC destination SM_UK4CLNT005_TRUSTED, Call TR_READ_COMM:
No authorization to log on as a trusted system (Tr usted RC=0).
/TMWFLOW/TU_GET_REQUEST_REMOTE:E:/TMWFLOW/TRACK_N:107
For above error Table /TMWFLOW/REP_DATA_FLOWwas refreshed as well but still the same error.

If you are in Test System, you can use function module AA_AFABER_DELETE to totally delete the depreciation area (tcode SE37, specify chart of depreciation and depreciation area), After that recreate your depreciation area and run AFBN. But before you do that, have you created a retirement transaction type that limits the posting on your new depreciation area? If not create one.
Hope this helps.
Thanks!
Jhero

SAPinst Error--Phase 2--Creation of User for SAP System

Hi,
I am installing SOLMAN 7.0 on Red Hat Linux 5 with IBM Java SDK version 1.4.2_10
When I run the SAPinst it gives ERROR in the 2nd phase of Creating users for SAP system.
The SAPinst log file shows as below:-
WARNING[E] 2008-06-07 17:49:28.362
FSL-01002 Unable to create account user="orasmd". useradd: cannot create directory /oracle/SMD (return code 12)
WARNING[E] 2008-06-07 17:49:28.363
MUT-03025 Caught ESyException in Modulecall: ESAPinstException: error text undefined.
ERROR 2008-06-07 17:49:28.427
FCO-00011 The step createAccounts with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_Users_Create_Do|ind|ind|ind|ind|5|0|createAccounts was executed with status ERROR .
Please suggest and help me in resolving this error asap.
Regards,
Abhijeet K

Hi,
Thnx a lot for the suggestion Markus
I have created the directories required.
The SAP installation has started, but now I am getting the message as below during the ORACLE DB Installation phase,when I run the Oracle ./RUNINSTALLER in Bash Unix:-
[orasmd@SOLMAN SAP]$ ./RUNINSTALLER
oracle_stage is not set (OK)
oracle_base is not set (OK)
oracle_home is not set (OK)
oracle_sid is not set (OK)
oracle_home_name is not set (OK)
oracle_inst_group is not set (OK)
from_location is not set (OK)
tmp_netca_file is not set (OK)
tmp_dbca_file is not set (OK)
Working in /oracle/stage/102_64/database/SAP ...
The environment variable ORACLE_HOME is not set! abort ...
I have set the ORACLE_HOME env variable as below:-
ORACLE_HOME=/oracle/SMD/102_64
export ORACLE_HOME
But I get the same message again as above.
Do we need to set the ORACLE_HOME env variable in the BASH_PROFILE directly??? Coz I heard that if we set it with the Export command then the env is set only for the current instance and not permanently.
If so what is the exact entry I need to make in the BASH_PROFILE???
Rgds,
Abhijeet K

Deploy user for automatic deployment on development system

Similar Messages

Maybe you are looking for