Error in Integration with Sucess Factors
Hello Guyz,
We are integrating HCM with SFSF via PI 7.31 for the Recruiting solution using the SAP provided integration content.(SFIHCM01, SFIHCM02)
Reference- SAP HCM and SuccessFactors BizX Integration Using SAP PI
We have done the testing successfully on UAT, on Production as well its running good. but for one scenario we are getting error for few of the message triggered from the SAP.
For the outbound interface the request messages is failed in receiver adapter with below error.
MP: exception caught with cause java.lang.NullPointerException: while trying to invoke the method javax.xml.namespace.QName.getNamespaceURI() of an object loaded from local variable 'faultcode'
There are some successful message for the same interface. Not quite sure if issue with data. For data related issue (mandatory fields) we are getting fault message response from SFSF but not in this case.
Did anyone came across such error?
Regards,
Sandip
With upgrade of systems multiple PI connection to single ECC system using user specific setting is no longer supported.
For multiple PI connections one should use Interface based settings.
Regards,
Umesh Chaudhari
Similar Messages
-
Get error while Integrating with Oracle's Enterprise User Security
Hi,
I am trying to create an Oracle Enterprise User integrating with OVD and MS Active Directory.
I am following all the steps in Integrating with Oracle's Enterprise User Security.
In the documentation section: "Configuring Oracle Virtual Directory for the Integration"
I have applied the steps successfully until:
Update and load the entries into the Local Store Adapters by performing the following steps:
I have successfully extended the Oracle Virtual Directory schema with the loadOVD.ldif
However I am getting errors in the next step: Update realmRoot.ldif to use your namespaces
The next step states the following:
Update realmRoot.ldif to use your namespaces, including the dn, dc, o, orclsubscriberfullname,
and memberurl attributes in the file. If you have a DN mapping between Active Directory and
Oracle Virtual Directory, use the DN that you see from Oracle Virtual Directory.
The realmRoot.ldif file is located in ORACLE_VIRTUAL_DIRECTORY_HOME/eus,
where ORACLE_VIRTUAL_DIRECTORY_HOME represents the location where Oracle Virtual Directory is installed.
The realmRoot.ldif file contains core entries in the directory namespace that Enterprise User Security queries. The realmRoot.ldif file also contains the dynamic group that contains the registered Enterprise User Security databases to allow secured access to sensitive Enterprise User Security related attributes, like the user's Enterprise User Security hashed password attribute.
Load your domain root information in the realmRoot.ldif file into Oracle Virtual Directory using the following command:
ldapmodify -h Oracle_Virtual_Directory_Host –p OVD_Port -D cn=admin -w Admin_Password -v -a –f realmRoot.ldif
When I run the ldapmodify command I get the following error:
add dc:
testldap
add objectclass:
top
domain
domainDNS
adding new entry DC=testldap,DC=local
ldap_add: Operations error
ldap_add: additional info: LDAP Error 1 : null
The actual realmRoot.ldif looks like this:
# Please uncomment the following one line if you are importing this
# LDIF file via OVD Manager or OVD Server's ldapmodify tool.
#version: 1
#dn: dc=com
#dc: com
#objectclass: domain
dn: DC=testldap,DC=local
changetype: add
dc: testldap
#o: subarashii
objectclass: top
objectclass: domain
objectclass: domainDNS
#objectclass: orclSubscriber
#orclsubscriberfullname: subarashii
#orclVersion: 90400
# If your domain structure has more layers than dc=subarashii,dc=com,
# for example, it's dc=us,dc=subarashii,dc=com, you will need to load
# the following ldif entry/entries too.
# Uncomment out the following, if required.
#dn: dc=us,dc=subarashii,dc=com
#orclversion: 90400
#orclsubscriberfullname: us
#objectclass: domain
#objectclass: top
#objectclass: orclSubscriber
#dc: us
# Adding EUSDBGroup entry
# Modify the memberurl attribute and replace it with your own domain name
#dn: cn=EUSDBGROUP,dc=subarashii,dc=com
#cn: EUSDBGROUP
#memberurl:ldap:///dc=subarashii,dc=com??sub?(&(objectclass=orclService)(objectclass=orclDBServer))
#objectclass:groupofuniquenames
#objectclass:groupofurls
#objectclass:topDid you ever get your questions answered about the realmRoot.ldif file? Did you manage to configure a successful integration of OVD with EUS? I am battling with trying to get Oracle Virtual Directory integrated with Enterprise User Security, but every step I take in Chapter 7 of the OVD manual fails in some way, and the instructions are often vague. I am not sure how to modify the realmRoot.ldif file. Is there any improved documentation on this? I have logged a Service Request, but not getting any help. Any resources or documentation you know of that provides better guidance would be much appreciated. I am way behind my schedule now and this is a very frustrating exercise.
Thanks. -
Error while integration with ILOG JRule
Hi,
While integrating with ILOG JRules, every time I am getting the "Introspection error:" error.
Please let me know any one have the solution on the same.
***** Could any one share me any document on integration OBPM with ILOG Rules engine.*
Kind Regards,
Ratna Prasad.Hi,
Just a guess here. Been a couple years since I've done anything with iLog.
Have they given you an iLog web service to hit? Is this where you're running into your introspection error?
They should have given you a Java Jar file that might have included the ruleset you need to hit. Did you include this as an External Resource first?
Hope this helps,
Dan -
Vmware horizon radius integration with two factor authentication
-1 down vote favorite
I have deployed vmware horizon view connection server (Evaluation/Trial version), i want to integrate it with two factor authentication server. But after configuring RADIUS parameters in admin portal of connection server, it’s not allowing me to save the settings. Please suggest.
I have attached the snap for your reference.The SMTP server supports what is referred to as third party authentication. To take advantage of this you would need to provide all of the authentication code, however -- there's no way to do part of the authentication and then pass control back to the messaging server for the rest. So you'd need to do both password checks, one of which is presumably done via LDAP auth, yourself.
As far as LDAP proxy and RADIUS, we use a standard LDAP simple bind. The ODSEE LDAP proxy is often used in OCMS deployments, so that is a known good solution. We don't directly support RADIUS; the aforementioned third party authentication could be used to tie into such a system.
- Jeff -
Error in Integration with PI system
Hi All,
With the help of below blog we had successfully created one PI connection with our SAP system.
http://scn.sap.com/people/sandro.garofano2/blog/2009/09/02/connect-sap-application-system-to-multiple-sap-pi-integration-server--variant-n-1Hi All,
the connection was working fine and every things looks to be ok untill we upgraded our system to EHP7.
Now we are getting the error as INTERFACE_REGISTRATION_ERROR.
Any idea why it would happen?
We have checked following
1) All the RFC's of type H and T are correct
2) Tcode SPROXY is cheched and all implementing class are standard and correct
After a lot of debussing I could find that the method GET_URL_OF_IS of class CL_XMS_PLSRV_IE_ADAPTER is missing in the implementing class LCL_UTIL, and I also observed that this is one of the important method for connecting to multiple PI systems.
Any idea if how to resolve this?
Regards,
Umesh ChaudhariWith upgrade of systems multiple PI connection to single ECC system using user specific setting is no longer supported.
For multiple PI connections one should use Interface based settings.
Regards,
Umesh Chaudhari -
Error while integrating with Kerberos and AD
Hi,
Implementing Kerberos as the Desktop Single Signon Solution
Environment : Peoplesoft
OS : Redhat Linux
webserver: Weblogic 10.3.4
appserver : tuxedo 10gr3
While doing this implementation I was able to complete it successfully with the JDK linux has provided(1.6.0_22). However the weblogic comes preconfigured with jrockit jdk version1.6.0_24-R28.1.3-4.0.1. When I start the weblogic with jrockit jdk as java_home I am getting the following error.
<Error> <HTTP> <BEA-101165> <Could not load user defined filter in web.xml: com.peoplesoft.pt.desktopsso.kerberos.KerberosSSOFilter.
java.lang.IllegalArgumentException: No Configuration was registered that can handle the configuration named krbServer
at com.bea.common.security.jdkutils.JAASConfiguration.getAppConfigurationEntry(JAASConfiguration.java:130)
at javax.security.auth.login.LoginContext.init(LoginContext.java:243)
at javax.security.auth.login.LoginContext.<init>(LoginContext.java:334)
at com.peoplesoft.pt.desktopsso.kerberos.KerberosSSOFilter.init(KerberosSSOFilter.java:142)
at weblogic.servlet.internal.FilterManager$FilterInitAction.run(FilterManager.java:332)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.FilterManager.loadFilter(FilterManager.java:98)
at weblogic.servlet.internal.FilterManager.preloadFilters(FilterManager.java:59)
at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1878)
at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:3154)
at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1508)
at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:485)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:427)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:201)
at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:249)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:427)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:28)
at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:637)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:205)
at weblogic.application.internal.EarDeployment.activate(EarDeployment.java:58)
at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:161)
at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:79)
at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:184)
at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:361)
at weblogic.management.deploy.internal.DeploymentAdapter$1.doActivate(DeploymentAdapter.java:52)
at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:200)
at weblogic.management.deploy.internal.AppTransition$2.transitionApp(AppTransition.java:31)
at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:240)
at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:170)
at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:124)
at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:181)
at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:97)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:207)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:176)
these are my runtime parameters
java -jrockit -XnoOpt -XXnoJITInline -Xms512m -Xmx512m -Dtoplink.xml.platform=oracle.toplink.platform.xml.jaxp.JAXPPlatform -Dcom.sun.xml.namespace.QName.useCompatibleSerialVersionUID=1.0 -Djava.security.krb5.conf=/etc/krb5.conf -Djava.security.auth.login.config=krbLogin.conf -Dsun.security.krb5.debug=true -Djavax.security.auth.useSubjectCredsOnly=false -Dweblogic.Chunksize=65536 -Djava.util.logging.config.file=/u01/app/psoft89/webserv/PREFRESH/piaconfig/properties/logging.properties -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Dweblogic.Name=PIA -Dps_vault=/u01/app/psoft89/webserv/PREFRESH/piaconfig/properties/psvault -Djavax.net.ssl.trustStore=/u01/app/psoft89/webserv/PREFRESH/piaconfig/keystore/pskey -Dweblogic.ProductionModeEnabled=true -Djava.security.policy=/u01/app/psoft89/weblogic/wlserver_10.3/server/lib/weblogic.policy -Dssl.debug=false -Dps_home=/u01/app/psoft89 weblogic.Server
The files krb5.conf and krbLogin.conf exists and have full access.
With the error above it seems that it is not able to pick the configuration file. But just by changing the JAVA_HOME to /usr/java/jdk1.6_022 it starts working.
I have raised this concern with Oracle almost a month before, but still haven't got any reply from them.
Please help.
Thanks and Regards
Anirudha SinghHi Faisal,
Thanks for your reply.
Yes I have given the complete path too.
This is the full command line of the weblogic server. I had modifed it to test if it is trying to pick it up from any default location.
java -jrockit -XnoOpt -XXnoJITInline -Xms512m -Xmx512m -Dtoplink.xml.platform=oracle.toplink.platform.xml.jaxp.JAXPPlatform -Dcom.sun.xml.namespace.QName.useCompatibleSerialVersionUID=1.0 -Djava.security.krb5.conf=/etc/krb5.conf -Djava.security.auth.login.config=/etc/krbLogin.conf -Dsun.security.krb5.debug=true -Djavax.security.auth.useSubjectCredsOnly=false -Dweblogic.security.enableNegotiate=true -Dweblogic.Chunksize=65536 -Djava.util.logging.config.file=/u01/app/psoft89/webserv/PREFRESH/piaconfig/properties/logging.properties -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Dweblogic.Name=PIA -Dps_vault=/u01/app/psoft89/webserv/PREFRESH/piaconfig/properties/psvault -Djavax.net.ssl.trustStore=/u01/app/psoft89/webserv/PREFRESH/piaconfig/keystore/pskey -Dweblogic.ProductionModeEnabled=true -Djava.security.policy=/u01/app/psoft89/weblogic/wlserver_10.3/server/lib/weblogic.policy -Dssl.debug=false -Dps_home=/u01/app/psoft89 weblogic.Server
The file is located in /etc folder and has 777 permissions.
Thanks and Regards
Anirudha Singh -
Error - netbeans integrating with j2me polish- file connection api
dear friends,
can anyone help why this error is coming, while i run my existing mobile project in j2me polish
J2ME Polish 2.0.7 (2008-11-24) (GPL License)
Warning: unable to access system property javax.xml.parsers.SAXParserFactory: java.lang.SecurityException:
Warning: unable to access system property javax.xml.parsers.DocumentBuilderFactory: java.lang.SecurityException:
java.lang.NullPointerException
at de.enough.polish.ant.PolishTask.initProject(PolishTask.java:959)
at de.enough.polish.ant.PolishTask.execute(PolishTask.java:376)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
at sun.reflect.GeneratedMethodAccessor196.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:105)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:357)
at org.apache.tools.ant.Target.performTasks(Target.java:385)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1329)
at org.apache.tools.ant.Project.executeTarget(Project.java:1298)
at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
at org.apache.tools.ant.Project.executeTargets(Project.java:1181)
at org.apache.tools.ant.module.bridge.impl.BridgeImpl.run(BridgeImpl.java:277)
at org.apache.tools.ant.module.run.TargetExecutor.run(TargetExecutor.java:481)
at org.netbeans.core.execution.RunClassThread.run(RunClassThread.java:151)
D:\ProjectHome\MoBilal\build.xml:87: Unable to execute J2ME Polish task: java.lang.NullPointerException
BUILD FAILED (total time: 5 seconds)thanks in advancethanks st3p3n for your valuable reply.
i faced the above said problem when i tried to integrate with netbeans 6.0.1.
but again i tried with netbeans 6.5 and there is no such an error.
Thanks,
Ramesh.P -
GM integration with CO - MIRO Error message (GMCUSTOM009)
Hi all experts,
Any time an invoice is posted through MIRO, we are getting an error "Full Integration with CO is mandatory. Check your entries." (Message number: GMCUSTOM009)
Our grants management module is active.
Does any one have any ideas as to why this error is popping up?
It appears as if one can change this error to a warning using the "Change message control for grants management" option, but what would the implications of that be?
Please advise.
Thanks.
A
Edited by: Ajay Vidya on Dec 31, 2009 5:40 PMAs explained in the message text; Grants Management (GM) is active for
the company code in question. Grants Management requires full
integration with Controlling (CO); this means that a G/L account or a
cost element must be supplied together with cost objects. The whole GM
updating process and the derivation of dimensions depend on this.
As mentioned in the procedure part of it:in your posting line, specify
either a G/L account or a cost element.
Alternatively, since this is a customizable message, you can change the
message control within GM. This would mean that you do not require
updating on grants or that your transaction simply does not take a cost
element or a GL account as a parameter.
As you may have found out already, this can be done via this
menu path in IMG: Public Sector>>Grant Management>>Grantee Management>>
Global Settings>>Change message control for Grants Management.
If after adjusting your settings you still get this error message during LIV parking (only when parking), please also make sure that you have note 1101466 in your system.
Kind regards
Mar -
Error while running SSRS 2012 report integrated with SharePoint 2013
Hi,
Our reporting services environment has SSRS 2012 integrated with SharePoint 2013. The SharePoint 2013 farm has 2 web front ends, 1 app server and a separate server for reporting services i.e SSRS 2012 .
We have created a https web application in SharePoint 2013 and all the SSRS 2012 reports are deployed into a "Report Library" residing in its root site collection.
The simple reports are running well. But there is a report where we have 3 multi-value parameters. On running this report in IE or Chrome, we get the error "Sys.WebForms.PageRequestManagerParserErrorException: The message received from the
server could not be parsed. Common causes for this error are when the response is modified by calls to Response.Write(), response filters, HttpModules, or server trace is enabled. Details: Error parsing near ' <!DOCTYPE html PUB'."
Some of the forums suggested to add the below entry in the web config of the SharePoint web app where the SSRS reports are deployed. We did that too, still the error is appearing. Please can anyone help .
<appSettings>
<add key="aspnet:MaxHttpCollectionKeys" value="100000" />
</appSettings>
ThanksHi Surendra,
I have tested on my local environment and the issue can be caused by the session time out ,the time out of the report precessing, database timeout,DataSet query execution timeout and so on.
I would like to confirm that the refresh you have mentioned is the page refresh or the report reloading?
Please reference to the setting below to don't limit the timeout values if you got the report reloading:
Point to a report in the library.
Click the down arrow, and select Manage processing options.
In Processing Time-out, select Do not time out report processing or
Limit report processing in seconds if you want to override that value with no time-out or different time-out values.
If you got the session timeout that refresh the page, please reference to the setting in below article:
http://msdn.microsoft.com/en-us/library/gg492284.aspx#bkmk_session_settings_section
Details information in the article below about the timeout setting for your reference:
Set Processing Options (Reporting Services in SharePoint Integrated Mode)
If you still have any problem, please feel free to ask.
Regards
Vicky Liu
If you have any feedback on our support, please click
here.
Vicky Liu
TechNet Community Support -
Getting Error while integrating Crystal reports with Java
Hi All,
I am getting below error while integrating crystal report with java
[java] os.arch = x86
[java] java.lang.NoSuchMethodError: com.crystaldecisions.Utilities.d.<init>
(Ljava/awt/Image;I)V
[java] at com.crystaldecisions.Utilities.af.try(Unknown Source)
[java] at com.crystaldecisions.Utilities.af.a(Unknown Source)
[java] at com.crystaldecisions.Utilities.af.<init>(Unknown Source)
[java] at com.businessobjects.crystalreports.viewer.applet.g.a(Unknown
Source)
[java] at com.crystaldecisions.ReportViewer.ReportViewer.start(Unknown
Source)
[java] at ReportViewerFrame.<init>(ReportViewerFrame.java:51)
[java] at JRCViewReport.launchApplication(JRCViewReport.java:29)
[java] at JRCViewReport$1.run(JRCViewReport.java:50)
[java] at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:
178)
[java] at java.awt.EventQueue.dispatchEvent(EventQueue.java:443)
[java] at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDi
spatchThread.java:190)
[java] at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDisp
atchThread.java:144)
[java] at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.j
ava:138)
[java] at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.j
ava:130)
[java] at java.awt.EventDispatchThread.run(EventDispatchThread.java:98)
Any help can be appreciated
KalyanHi All,
For got to mention i am using crystal reports XI release 2 with JDK1.4.
Kalyan -
Xi integration with third party error /incident management tools
Hello XI folks,
Has anybody experience with integration of XI monitoring and error management tools with external tools like HP-Openview, Tivoli or EARS, etc...?
Any feedback is appreciated.
Thanks,
R.Hey Roberto,
Could you integrate XI monitoring with any of the third parties you were asking?
Can you please share some learnings and give some tips?
thanks in advance,
LSP -
Define a Standalone Download Integrator with an Additional Where clause - SQL error
Hi,
I am trying to create a standalone integrator with an Additional Where clause. Followed the steps mentioned in the metalink note 360105.1. When I run the integrator, I get the following error message.
Please resolve the following error to continue.
SQL error: ORA-00936: missing expression occurred
processing stored SQL for Content 20007:GENERAL_441_CNT.
When I look at the log file, here is what I can see:
10/22/14 10:50 AM AJPRequestHandler-HTTPThreadGroup-15 TRACE BneHrSQLControl - SQL:SELECT FROM PER_PEOPLE_V where last_name=$PARAM$.last_name
10/22/14 10:50 AM AJPRequestHandler-HTTPThreadGroup-15 TRACE validateSQLStatement value of sqlStatement is: SELECT FROM PER_PEOPLE_V where last_name=:RSQLP1
10/22/14 10:50 AM AJPRequestHandler-HTTPThreadGroup-15 DETAIL BneHrSQLControl.validateSQLStatement() paramName: last_name
10/22/14 10:50 AM AJPRequestHandler-HTTPThreadGroup-15 DETAIL BneHrSQLControl.validateSQLStatement() error in SQL: java.sql.SQLSyntaxErrorException: ORA-00936: missing expression
So, clearly, the SQL statement that is getting built internally is wrong. Ideally, I would expect the statement to be something like this:
SELECT * FROM PER_PEOPLE_V where last_name=$PARAM$.last_name.
RDBMS : 11.2.0.3.0
Oracle Applications : 12.1.3
Any pointers towards the resolution of the issue would be of great help.
Thanks in Advance!
Lalitha.This is a duplicate post of your other question: create trigger automatic
DO NOT start duplicate threads for the same question.
Locking this thread -
Is ASA integration with ISE and RSA for 2 factor authentication a valid/tested design
Hi,
Customer currently uses ASA to directly integrate with RSA kind of solution to provide 2 factor authentication mechanism for VPN user access. We're considering to introduce ISE to this picture, and to offload posture analysis from ASA to ISE. And the flow we're thinking is to have ASA interface to ISE and ISE interface to RSA and AD backend infrastructure. And we still need the 2 factor authentication to work, i.e., customer gets a SMS code in addition to its login username and password. I'm wondering if ASA/ISE/RSA/AD integrated solution (and with 2 factor authentication to work) is a tested solution or Cisco validate design? Any potential issue may break the flow?
Thanks in advance for any input!
TinaHi,
I have an update for this quite broad question.
I have now came a bit further on the path.
Now the needed Radius Access Attribute are available in ISE after adding them in
"Policy Elements" -> "Dictionaris" -> "System" -> "Radius" -> "Cisco-VPN3000".
I added both the attribute 146 Tunnel-Group-Name which I realy need to achive what I want(select diffrent OTP-backends depending on Tunnel Group in ASA) and the other new attribute 150 Client-Type which could be intresting to look at as well.
Here the "Diagnostics Tools" -> "Generel tools" -> "TCP Dump" and Wireshare helped me understand how this worked.
With that I could really see the attributes in the radius access requests going in to the ASA.
Now looking at a request in "Radius Authentication details" I have
Other Attributes:
ConfigVersionId=29,Device Port=1025,DestinationPort=1812,RadiusPacketType=AccessRequest,Protocol=Radius,CVPN3000/ASA/PIX7.x-Tunnel-Group-Name=SMHI-TG-RA-ISESMS,CVPN3000/ASA/PIX7.x-Client-Type=,CPMSessionID=ac100865000006294FD60A7F,.....
Ok, the tunnel group name attribute seems to be understood correct, but Client-Type just say =, no value for that.
That is strange, I must have defined that wrong(?), but lets leave that for now, I do not really need it for the moment being.
So now when I have this Tunnel-Group-Name attribute available I want to use it in my Rule-Based Authentication Policy.
Problem now is that as soon as I in an expression add a criteria containing Cisco-VPN3000:CVPN3000/ASA/PIX7.x-Tunnel-Group-Name matches .* (just anything), then that row does not match any more. It still work matching against NAS-IP and other attributes.
What could it be I have missed?
Best regards
/Mattias -
Excel integration with Entry and Approval for SSM not working
Iu2019m having trouble getting excel integrated with E&A for being able to enter large number of historic data points into a cube-built model u2013 Iu2019ve gone through all the docs several times and there is no good concrete explanation on how to do this. I keep getting the following error message:
Error opening Excel Automation server can't create object. This can be caused by:
1. - The application is not installed on your machine
2. - The browser security does not support ActiveX scripts.
3. - Your were prompted to run ActiveX and you said No, if that is the cause close all browser instances and reopen.
However, I've done the following:
- Iu2019ve installed the excel add-in on both the server and my local machine, and Iu2019ve enabled the add-in part in Excel on my local machine.
- The browser security is definitely set to accept all active X scripts
- I am never prompted to run activeX when I select u201CHistorical Datau201D within entry/approval. I just get the above error message.
- Iu2019ve flushed cache and restarted listener several times.
What am I missing? I donu2019t see it in any of the docs.
Thanks!Robb,
Looking at what you've done, there doesn't seem to be an obvious answer. The best suggestion I can make is to fill out a support ticket on this. There must be other factors at work here that will require a deeper look.
Regards,
Bob -
FICO without integration with SD
Hi friends,
my company has 6 factories and 40 outlets,And they dont wnt to imliement SD module. which has integration with FICO, so
is it posible to impliiment FICO module succesfully without SD module,
apart from this PP module is also eliminated.isit posible to.
please let me know.
thank you in advance
Moderator: FI-CO is perfectly independent. Certain controls are better achieved with integration of other modules, e.g. SD, etc. You can read about it on help.sap.comHi vimal,
actually some of my sap consultant are trying to avoid this module.and with out SD module how can i see profit center balance sheet, p&l,
and apart from this FICO module can sucessful with out SD, and PP(as we have 6 manufacturing factories)40 outlets
please kindly give me stronge point to be discuss on it to convence my project manager.
thanks alot
waiting for your soonr reply
Maybe you are looking for
-
Applet Security help for a newbie
I have an applet that works as an IRC client, still needs a lot of work. I have the basics working, but before I continue fixing it up I need some help. I've searched all over the forums, and my lack of Java knowhow leaves me confused. I have no idea
-
Hi Group, Perhaps I am missing something, but when I save a composition to flash for a website the layer styles just disappear, leaving me with flat text and images. I fail to see the benefit of adding layer styles if they don't show. I am using CS4
-
Best Course for Data Warehousing
Hi, I am planning to join data warehousing course .I heard there is lot courses in data warehousing . Data warehousing with ETL tools or Data warehousing with Crystal Reports or Data warehousing with Business object or Data warehousing wi
-
How am i able to retrive my photos & notes after update the ios6?
Recently i have update the new ios 6, found my photos & notes disappear. How am i able to retrive them back?
-
Message: ORA-01013: user requested cancel of current operation
Hi, I have been working an issue involving an application that is receiving "Message: ORA-01013: user requested cancel of current operation" errors. These errors are seen in the Application servers which are 6, w2k3 Standard sp2. My problem is the us