Does LDAP on V12 require ABAP stack?

Hi all:
For xMII V12 we have installed Netweaver 7.00, both the ABAP and Java stacks. We currently do not access any data from any SAP system. However, we plan to exchange data with ECC systems in the future. Two questions arise in our implementation of security:
1) Must we have the ABAP stack to get/access data from ECC, or any other SAP system, or is the Java stack all thatu2019s needed?
2) Weu2019d like to use LDAP for user security mangement. Can we use LDAP to manage users in the Java stack directly, or does it have to go through the ABAP stack to do this?
Thanks.
Dave

Hi Dave,
I actually have an open item with SAP regarding this because if the XI remote adapter engine is installed, SAP will only support ABAP authentication for users and roles.
We have tested with 12.0 by setting mixed local UME and ABAP to avoid the overhead of authenticating with the ABAP stack for local calls to Java Web Services. I haven't tested LDAP yet.
What you'll probably find is that your user creation will be done in the chosen user store (either LDAP directory or local UME) and your xMII role assignment will be done in the local UME in both cases.
I hope this helps. We are having continuing discussions with SAP to try and support other authentication modes when a dual Java/ABAP stack is installed. Especially in a distributed scenario where the remote AE is not close to the ABAP system.
Cheers,
Nick

Similar Messages

LDAP Configuration for ECC 6.0 ( ABAP Stack only)

Hi,
Can any one guide me with the steps for the LDAP Configuration for ECC 6.0 ( Abap stack only).
Some of my observations are....
I can see the LDAP Support in the Installation master at the following path.
1. Additional Software Life cycle Tasks --> Application Server --> LDAP Support.
But the prerequisites for this task is given as "You must have extended the LDAP schema for the sap data types before.".
When i am goint thru service market place i came across the following note.
Note 888848 - Notes on schema enhancement with RSLDAPSCHEMAEXT.
Thanks,
Tanuj

Dear All,
We are trying to configure the LDAP using with active directory . In the
step of "Synchronization of SAP User Administration with LDAP
Directory"when executing the report"RSLDAPSYNC_USER" we are facing one
error.
Please find the trace file and error screenshot in the attachment.Please help us on
priority.
Please find the Trace log in the below:
RFC destination : LDAP_LDAPSE-01
Tracelevel      :      8,704
F5: Shutdown F6: Clear list F7: Dump status F8: Refresh list
[Wed Jun 26 11:15:38 2013]
Slot 0 (WIPROTECH): >>> ldap_initU(host="abg-mumabc-dc1.abgplanet.abg.com", port=389)
[Wed Jun 26 11:15:39 2013]
Slot 0 (WIPROTECH): <<< ldap_initU() == <NOT NULL> := connected
Slot 0 (WIPROTECH): >>> ldap_set_option(version=3)
Slot 0 (WIPROTECH): <<< ldap_set_option() == 0
Slot 0 (WIPROTECH): >>> ldap_simple_bind_sU(dn="poornataad", password: not initial)
[Wed Jun 26 11:15:40 2013]
Slot 0 (WIPROTECH): <<< ldap_simple_bind_sU() == 0 := success
[Wed Jun 26 11:15:43 2013]
>>>>Required attributes table
Line    0: "CREATETIMESTAMP" (length 15)
Line    1: "MODIFYTIMESTAMP" (length 15)
Line    2: "SAPUSERNAME" (length 11)
<<<<Required attributes table
Slot 0 (WIPROTECH): >>> ldap_search_sU(base="CN=poornataad,CN=Users,DN=abgplanet,DC=abg,DC=com", filter="(&(OBJECTCLASS=user)(SAPUSERNAME=*))", scope=2)
Slot 0 (WIPROTECH): <<< ldap_search_sU() == 91
>>> ldap_msgfree()
<<< ldap_msgfree()
Slot 0 (WIPROTECH): >>> ldap_unbind_s()
Slot 0 (WIPROTECH): <<< ldap_unbind_s() == 0
Please find the error screenshot in the below.
Regards,
Dilip Sampath.CH
+91-9619735957.

Does NW7.4 ABAP stack still not support usernametoken with digest password?

Hello, experts,
I got the message from here Username Token with digest password on AS ABAP that NW7.0 ABAP STACK can't support usernametoken with digest password.
Does NW7.4 ABAP stack still not support usernametoken with digest password?
or can I custom the method VERIFY_USERNAME_TOKEN in CL_WS_SECURITY_PROFILE to support usernametoken with digest password?
or does sap have any plan to support this security requirement?
Many thanks.
fangzj

I asked my experts about your question. On the client side we support this. We cannot support digest passwords on the server side. We save passwords in hashed format on the server side. To support digest passwords, the client would either need to send the password in clear text so that the digest can be calculated or the server would have to store the password in clear text, so that the digest password can be calculated. From a security standpoint these are questionable ideas. Either an eavesdropper is picking up the passwords from the traffic or the attacker who breaks the server suddenly has all the passwords in clear text.
You can modify the method VERIFY_USERNAME_TOKEN, but if an upgrade comes along that changes this package, you'll be prompted for a correction import. Then you will either have to skip the upgrade or lose your customization.
-Michael

BRF+ Upgrade from JAVA stack to ABAP stack. Tutorials Required.(Beginer)

Dear All,
We are Proceeding with and Upgrade on our JAVA based Stack to ABAP Stack of EHP6.
The new System extensivly uses BRF+ Techonolgy and SAP Workflows.
Could you please Provide certain Basic links to Start of with it? As of now its totally new CONCEPT to start with in coming time for us.
We have skill set avilable in ABAP developemnt,PI,Worklfows and other ABAP object but not so far in BRF+ concept.
If any Tutorails are avaialble then please share across.
PS: I have not been able to Procure " SAP Press Book Availability (BRFplus - Business Rule Management for ABAP Applications)"
Thanks a lot.
Regards
Vishal

Read the papers etc on the Business Rule Framework plus.
Especially take a look at the online training. But be careful with papers for NW 701. This is an old version and you may find stuff in there that is not relevant for you as you are on a much higher release.
There is also a paper that explains how BRFplus can be used in combination with SAP Business Workflow.
Why can't you get the BRFplus book? On the SAP Press page there is also an online version´

HA Solution with J2EE and ABAP Stack

In the Planning Guide is written that if DB2 data sharing is used, each application server connects to only one database server at any one time. There is a mechanism called sysplex failover that automatically redirects an application server to another database server in case of a failure. Sysplex failover is currently not available for a SAP J2EE system.
Lets assume that DB2 Member A fails. The ABAP Stack A is doing automatically a reconnect to DB2 Member B. The J2EE Stack A isn't able to do this. So what happens now with the new incoming http requests over the WebDispatcher/ICM? The J2EE Server on A is basically running still well, because only DB2 member A is down.
a) Does the MSG server realize that DB2 Member A is no longer available and informs therefore the WebDispatcher that incoming requests should be send to J2EE Server on machine B?
b) Doesn't the MSG server realize this situation and therefore the WebDispatcher will furthermore load balance the requests between J2EE server A and J2EE server B?
Thanks for your help and clarification?
Roger

Sorry, I haven't had time to answer your questions and unfortunately won't have in the forseeable future.
I'm using read only, so I do not know about RW, except that AD requires SSL and probably some settings on the AD server as well as the account you are connecting with.
BTW. The answer to the original question is that it is not possible to mix ssl and non-ssl connections to LDAP
Regards
Dagfinn
Message was edited by: Dagfinn Parnas

What are the pros and cons of installing java+abap stack for portal?

Hi all,
1.What are the pros and cons of installing java+abap stack for portal?
2.what effect it does on the ume options to be choosen??
3.for the purpose of integration of r3,bw and crm on portal and crm 4.0 60.2.3 business package which option of stack(java or abap or both)will be good option and which ume option while installation should be choosen?
regards
Rajendra

Hi Rajendra,
The NetWeaver Installation Master Guide offers some good scenarios on the pros and cons:
https://websmp201.sapag.de/~sapidb/011000358700005412792005E.pdf
In a nutshell:
ABAP+JAVA
Pros
- Decrease # of servers required to administer the portal
- Less costly
Cons
- Upgrades could be dependent on ABAP and Java release level
- Additional load on the server due to ABAP stack
- Limited scalability
JAVA and ABAP on separate server
Pros
- Improved performance
- Allows each system to be single-use purpose therefore downtime does not affect other components
- More scalable
Cons
- Adds complexity to landscape
- Additional costs
Regards,
Thomas Pham

XI with ABAP stack only ?

Looking at some very annoying problems with the XI Java Stack and applications (stability, memory consumption), following question comes to mind:
is it technically possible to run an XI system without the Java stack ? How much functionality do we have in there, can we do customers projects with that ?
In ABAP stack, we have the following functions:
- Business Process Engine
- Integration Engine
- HTTP Adapter
- IDoc Adapter
- ABAP-Mapping (XSL or handmade)
also, we have of course the functionality of using File/FTP,Mail in ABAP. This means the most important adapter types are available in ABAP (without needing the Java adapter engine).
Of course the Integration Builder is not available then. But do we really need it ?? Same applies for the SLD.
Are the pipeline objects (receiver determination, interface determination and so on) stored in the ABAP stack ? I assume that is the case. Does ABAP stack contain the XI message type objects ? Or is that stored in Java ?
Anyone tried that path ? Is it already failing in the installation because some core XI ABAP components require Java parts ? Or would it work ?
Of course the answer depends on "what do we define to be XI". For me it is the core integration engine with the pipeline architecture plus mapping and proxy extension points. Everything else (e.g. tools) needed can be built around it.
Customer benefits would be: focus on ABAP only (Java knowhow not needed), easier administration and more stability.
CSY

Hello Jaishankar,
> there is no transaction to replace Visual Admin (NWA from >PI7.1) functionality.
question: suppose we are not using the J2EE stack of XI, do we need the NWA ? Does NWA also contain important functions which control/configure the ABAP stack ?
>I would say Java and ABAP stacks are very tightly coupled >to each other and it would take ages to understand how >tightly it is coupled.
this would be quite bad design then. But you may be right. Current cross-calls from ABAP to Java I know:
- call Java-Mapping from ABAP pipeline. If we do not need Java mapping, this call is not needed. In ABAP, we have ABAP and XSLT mapping options
- other ? What else ? I am talking about runtime execution (pipeline), not designer tools
>For example XI is a client of SLD which runs on Java stack, >how do you think you can replace the functionality of SLD via
yes. But what does XI need from SLD ? Business systems, target transports, ok. It's a handful of objects types which can easily be maintained in the ABAP stack also. For customers which are using the SAP portal or other Java components (apart from XI), of course, that makes no sense. But for smaller customers which do not use portal: for what do they really need that SLD ? I have seen one customer recently who didnt know about the transport targets and so maintained the IR objects on the productive system manually. More an education issue, but it shows a bit that the SLD for some customers is overkill.
>improvised and will be done in the future versions. The long >term plan is to make XI a complete Java based tool. All the >developers tools will be accessed via NWDS in future"
yes, I heard that also, and it is very interesting in fact. We will see what happens
thanks for your input,
CSY

Unique ID in ABAP stack across all Envrionment.

In ABAP Stack is there any table which uniquely identifies one interface mapping across all environments. The requirement is to get a unique ID in ABAP stack (this needs to be hard-coded in an ABAP mapping) which is common in all environment.
There is a table SXMSPFADDRESS which is the master table for addresses in XI i.e. Party, Service, Interface and namespace, and has key address id that is used at many places in XI runtime. But the addressID is different in different environment and hence cant be used.

Hi,
maybe start with a description of the issue and we will try to help with some other idea ?
Regards,
Michal Krawczyk

SAP BW Bex 7.3 Queries not working with Enterprise Portal (EP) 7.3 ABAP stack only

SAP BW Bex 7.3 Queries not working with Enterprise Portal (EP) 7.3 ABAP Stack
Dear Portal Gurus,
we want to integrate SAP BW Bex Queries 7.3 into an Enterprise Portal 7.3 EP ABAP Stack only installation.
1) We have Done SSO between EP And BI System
2) System Object is Created
3) When we trying to create Iview of BEX 7.3 report, its executing that report on BI server, we don't have java stack on BI System
4) We have updated the required table in Bi system for executing the report on EP
5) RFC is OK, System Object Test is OK, Report is working independently from Business Explorer, but not working from EP
There no irj services available on BI system, as it is only ABAP stack.
Can anybody help us in achieving our requirement
Thanks in advance
Michael Wecker

Hi Michael,
To integrate portal with BI you need to perform BI Portal integration steps.
Refer to a document link below for guidance purpose.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b0a5216a-349c-2a10-9baf-9d4797349f6a?overridelayout=t…
Ensure that you have performed all these relevant steps.
Hope this helps.
Regards,
Deepak Kori

Calling a web service In Netweaver 7.0 abap stack through an external alias

Hello,
In CRM 2007 (Netweaver 7.0 abap stack SP 16), we have defined a web service from a module function using the wizard and configuring it with SOAMANAGER.
This web service works great when calling it with the "official" URL, something like :
http://host.domain:port/sap/bc/srt/rfc/sap/zwebservice/client/zoperation/zbinding
We would like to use a more simple URL. So with SICF, I have created an external alias /zwebservice which points to the "official" URL.
The problem is that it does not work. I get every time an HTTP 500 error code and an error Message
u201CThe configuration of the http server is missingu201D.
Do you think that it is possible to call a web service through an external alias ?
Thanks in advance for any ideas or solution !
Olivier

Seems that no one has tried it...
I close the question.

Installing Java add-in on ABAP Stack

Hello Gurus,
We have recently upgrade from SAP R/3 4.7 ext. 20 SR2 to ECC 6.0 SR3 on Solaris platform using Oracle 10g. We are on Non-unicode system and on Single Stack i.e. AS ABAP only.
Now as new requirement comes up in organization, we need to install additional Java Stack on upgraded system. Please help me in provide some details to proceed further.
1. Advantages of JAVA Stack (is there any performance issues after installing Java Stack?).
2. How to install Java Stack with ABAP stack in Cluster Environment.
Early response is highly appreciated.
Regards,
Kshitiz Goyal

> We have recently upgrade from SAP R/3 4.7 ext. 20 SR2 to ECC 6.0 SR3 on Solaris platform using Oracle 10g. We are on Non-unicode system and on Single Stack i.e. AS ABAP only.
>
> Now as new requirement comes up in organization, we need to install additional Java Stack on upgraded system. Please help me in provide some details to proceed further.
There are two issues here:
a) double stack instances are deprecated, they shouldn't be installed any more. Install the Java instance as a separate SID, at best on a separate machine (or on a separate Solaris zone on the same machine). See Note 855534 - Dual Stack and SAP Business Suite 7
b) Java stacks with non-Unicode backends are not supported (see Note 975768 - Deprecation of Java features with non-Unicode Backend)
You may be able to technically install the Java AddIn with "some special DVD" but because your backend is non-Unicode this configuration would be unsupported.
I highly suggest you first convert your system to Unicode before trying to connect them to a Java system.
Markus

System Copy from ABAP Stack to ABAP+Java Stack

Hi,
Is it possible to system copy (homogeneous or heterogeneous) from a system based on ABAP Stack to a system based on ABAP+Java Stack? Is it the normal system copy procedure or something aditional is required to do. Pl. advise. Thanks
regards
Edited by: Abdus Samad on Oct 24, 2008 8:13 AM

It depends on what you want to copy, a system copy will always wipe out the existing target. But if you want to only copy data, you might be able to do a client copy. You can start with this SAP note: [552711 - FAQ: Client copy|https://service.sap.com/sap/bc/bsp/spn/sapnotes/index2.htm?numm=552711]
Regards Michael

RFC call from XI ABAP stack to XI

Hi All,
I have a RFC in the XI ABAP stack. When I created an RFC connection (TCP/IP) connection on the XI ABAP stack through SM59, and tried test connection, it is not working. Am I doing something wrong here? If I am trying to call XI JAVA stack from XI ABAP stack do I need to use an RFC adapter or is there any other way of calling the XI JAVA stack?
Thanks,
Geetha
Edited by: Geetha on Feb 5, 2008 12:18 PM

XI ABAP Stack and JAVA Stack are connected using the JCO connections, if you want to call the RFC in the ABAP stack of XI using the RFC adapter which sits on the JAVA stack
1. whats the purpose of creating the RFC on the XI ABAP Stack, is it a business stack?
2. the created RFC destination in the XI ABAP stack should work if it is properly created...check the SAPHostname, gateway information? and also the registred program id.
3. use the same registred progrram iD in the RFC sender adapter and actiavte it then it will work.....

PI Pipeline Doubt : Pipeline Steps in ABAP stack and JAVA stack

Hello
Can anyone please assist me with which stages steps of the PI Pipeline are executed on the Java or the ABAP stack.
Receiver Determination
Interface Determination
Message Split
Message Mapping
Technical routing
Call Adapter
Also can anyone please provide links relating to the PI architecture diagram describing it from ABAP and Java Stack Perspective and not from the Components perspective i.e. Integration Repository and Directory.
Thanks.
Kiran

Hi
Tha ABAP stack consists of the Integration Server which in turn contains your Integration Engine and Business Process Engine.
The J2EE stack contains the Adapter Engine and your IR and ID run on the J2EE engine.
Most of XI pipelines happens in the ABAP stack.
All messsages picked by the Adapter Framework running on the J2EE engine are passed to the Integration Engine, which does the routing. The mapping program again gets executed on the Java stack and the rest of the pipeline servies are executed again on the ABAP stack and so on.
Message, Java & XSLT (under Imported Archives) mappings are executed at Java stack;
ABAP & XSLT (in ABAP stack) mappings are executed at ABAP stack.
PI Architecture look threads
Architecture
/message/5802842#5802842 [original link is broken]

ABAP STACK and JAVA STACK certificates

Hi Fiends,
I have requirement in which I want to use HTTP adapter to send message and apply security certificate. I got from sdn that if I wan to use http adapter with certificate than I have to install certificates in ABAP stack.
My problem is I had one scenario in which I am using BC adapter to send message with security certificate and for that I had applied certificates in java stack and its working properly.
My question is,
Is it possible to use Java Stack and ABAP STACK together..?
I mean is it possible to implement both of the above scenario in same xi system?

Hi Soni,
You cannot use the same certifcates wihch you installed in Java stack with abap stack. You need to install separealy on teh abap stack.
For HTTP communication you dont need to install certificates. You only need when you want to use HTTPS communication. So if you want to use HTTPS communication and want to use SOAP adapter then you can use ther certifcates which is already installed on java stack. But if you want to use HTTP adapter then you need to install in ABAP stack.
Please see this hlep on how to install on the java stack and the process behind it:
http://www.i-barile.it/SDN/EnablingSSL&ClientCertificatesOnTheSAPJ2EEEngine.pdf
Also check this help:
http://help.sap.com/saphelp_nw04/helpdata/de/14/ef2940cbf2195de10000000a1550b0/content.htm
on abap stack check seshus response:
HTTPS enabling
Regards,
---Satish

Does LDAP on V12 require ABAP stack?

Similar Messages

Maybe you are looking for