Extended SOAP Scenario with Security

Hi All,
Could anyone send me the step by step procedure for "Extended SOAP Scenario with Security"?
Regards,
Sai.

Hello,
Please use the search option on SDN.
There are no step by step guides as such and you will have to combine multiple different activities to achieve this, including set up of Server SSL on XI and then set up of the SOAP adapter to use the certificates.
Refer to the guides on SDN for these.
Regards
Bhavesh

Similar Messages

File to File Scenario with Secure Connection. Pls help urgent

Hello All,
I tried a lot to get a link/blog that expalin full scenario
for File to File Scenario with Secure Connection
Kindly let me know if somebody have link/doc for it
that describe all the steps to do configuring this scenario.
What is difference in simple words between
FTPS and SFTP.
Pls help it is urgent as I require for Project work urgently.
Regards

hi rich
go through these links
FTPs connection failed - error ".. certificate rejected by ChainVerifier"
Re: What is SFTP, FTI channels
http://help.sap.com/saphelp_erp2005/helpdata/en/e3/94007075cae04f930cc4c034e411e1/frameset.htm
http://help.sap.com/saphelp_erp2005/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/frameset.htm
FTPS implementation question.
http://help.sap.com/saphelp_nw04s/helpdata/en/43/0e16bfd7b021aee10000000a1553f6/frameset.htm
Server certificate rejected by ChainVerifier:FTPS server(Points Guaranteed)
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
File adapter
thanks
Kunaal

SOAP Adapter with Security Levels - HTTP & HTTPS

We have a successfully working interface scenario where SAP XI is hosting a web service and the partner systems calling it using SOAP Adapter URL http://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel with Security Level HTTP on the SOAP Sender Communication channel.
Going forward, for other similar interfaces (SAP XI hosting Web Service and partner systems calling it), we would like to use HTTPS and/or certificates.
If we enable HTTPS on XI J2EE server as per the guide How to configure the [SAP J2EE Engine for using SSL - Notes - PDF|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4e1fc]....
can partner systems still use the URL http://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel or should they switch to https://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel?
can we continue to have the existing interface working using HTTP Security Level i.e. partners not having to send the certificate with each message?
If we use HTTPS security level, is it mandatory for the partner system need to send the certificate? Is it possible to have an HTTPS scenario w/o certificates?
What is the difference between Security Levels 'HTTPS Without Client Authentication' & 'HTTPS with Client Authentication'?
I appreciate your inputs on this.
thx in adv
praveen
PS: We are currently on SAP PI 7.0 SP17

Hi Praveen,
There is no need to change the interface and It is manditory for the partners to send certificates in order to validate each other. Use the https in url.
HTTPS With Client authentication:
The HTTPS client identifies itself with a certificate that is to be verified by the server. To validate the HTTPS clientu2019s certificate, the HTTPS server must have a corresponding CA certificate that validates this certificate. After validation of the clientu2019s certificate, the server maps the certificate to an actual system user executing the HTTP request.
and check this link.
http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
Regards,
Prasanna

Howto proces SOAP Header with security info

My incoming Soap messages contain security info in the soapenv:Header part.
However, I only need the contents of the Body element.
If I do NOT handle the Soap Message, then an Exception is thrown: something like: 'Do not know how to handle MustUnderstand'.
So something must be done with the Security info in the header, but I do not know how. Do I have to remove the header completely in the Soap handler, after checking the singning? If somebody can point me to some examples of Soap header processing for this case it would be helpful.
kind regs.
Harry

Hi Harry
The header in Soap Messages is optional. Is is used to carry security information, that is security on the level of the Soap message. So when the header of an incoming Soap message is 'handled', the header is of no use any longer and can (must) be discarded. Indeed discarded, because the rest of the handlers don't expect a header in the Soap message. They extract the 'contents' from the body of the Soap message, and deliver that to you backend system.
I will describe the header handling in the webservice: to get access to the Soap message in your code, you have to write a 'handler' Class. This Class should implement the Handler Interface or extend the abstract GenericHandler Class. To handle only the incoming Soap messages, the 'Requests', the method 'handleRequest' should be implemented. This handleRequest method has 1 parameter (mc) with type MessageContext. This parameter contains the original Soap message in Object format. You can access the original header information via:
SOAPMessageContext smc = (SOAPMessageContext)mc;
SOAPMessage message = smc.getMessage();
SOAPPart part = message.getSOAPPart();
SOAPEnvelope envelope = part.getEnvelope();
SOAPHeader header = envelope.getHeader();
With: Iterator iterator = header.getChildElements();
you can navigate through the header elements and do whatever you like. If you decide that security info in this header does not match the contents of the body for instance, you can issue an Exception and log it.
After processing the header you have to discard it with:
header.detachNode(); and let your handleRequest method return 'true'.
The rest of the webservice processing takes the contents from the body element, and delivers that to your application.
To let you webservice make use of your Handler, you have to name it in the web-services.xml as follows:
<webservices>
<handler-chains>
<handler-chain name="myChain">
<handler class-name="a.b.c.MyHandler" />
</handler-chain>
</handler-chains>
<web-service name="MyService">
<operations>
<operation ... handler-chain="myChain" .... />
</operations>
When the webservice 'MyService' gets a request, the handler 'MyHandler' is automatically invoked. you can have more handlers in a chain. Also you can declare more chains in your <webservices> section and refer to them from the <operation> elements.
Items of interest:
javax.xml.rpc.handler.soap.*
javax.xml.rpc.handler.*
javax.xml.namespace.*
javax.xml.soap.*
May be this of use for you :).

ASN in Extended Classic Scenario with SUS

Hi SRMer?
Is it possible to create an ASN in SUS with Extended Classic Scenario (ECS)?
OSS note 543544 mention that the scenario is limited for document types Purchase Order, Purchase Order Response and Change Order. Confirmations and invoices are not possible. There is no indication on ASNs.
Any help will be appreciated.
Regards.

Hi
Please go through these links ->
SUS-MM Confirmation without ASN
Re: Details on ASN
The specified item was not found.
SUS ASN - mandatory field
ASN Confirmation not created,
Clarifications on EBP-SUS and MM-SUS Scenario
Re: SUS-MM scenario with "POR (order ack.)" and ASN for free text
Creating custom field in ASN screen of SRM SUS
SUS Invoice
Regards
- Atul

Can we use the Extended Classic Scenario with MM-SUS

HI, expert :
    In extended classic scenario ,the PO created in SRM system ,and then replicated into the MM system .You can't change it in MM system .
    So, in this situation ,I want to know the MM-SUS can be suitable or not ?The PO can transfer from ECC to SUS ?
   If I use the decoupled scenario ,which one I can select ?MM-SUS or EBP -sus ?
   BR !
Alex!

Hi Alex,
as noted by Bill, in MM-SUS is the extended classic not possible at all.
By default it's also not supported in the SRM-SUS. Please see the note 543544. If you would like to activate this, you need to pay a consulting fee for SAP:
"Please note that the full scenario can be enabled by a consulting solution, compare OSS note 700350."
Regards,
Peter

Classic and extended classic scenario with one EBP

Hello Guys
If I have a one EBP and multiple ERP back ends. For one backend, I need to have classic and other to have extended classic scenario. How this can be fulfilled. Is it possible, if so please provide the configuration setup.
Thanks in advance.

Hello,
In BADI BBP_EXTLOCALPO_BADI method DETERMINE_EXTPO.
you can try this.
Structure Declaration
DATA: ls_item_data TYPE bbps_extpo_badi.
Moving item data to a structure
MOVE-CORRESPONDING item_data TO ls_item_data.
SELECT SINGLE LOGSYS FROM comm_product
                                 INTO lv_logsys
                                 WHERE PRODUCT_GUID = ls_item_data-PRODUCT .
If lv_logsys = 'XXXCLNT010' "backend system
      Cancelling the enhanced classical scenario
        bbp_extpo_gl-bbpexpo = space.
ELSE IF lv_logsys = 'YYYCLNT010' "backend system
      Cancelling the enhanced classical scenario
        bbp_extpo_gl-bbpexpo = ' X'.
ENDIF.
Regards,
Neelima

Synchronous File- Soap scenario with fault message

Hi!
I have a File to Soap synchronous scenario.
All is right when no exception is returned by the web service.
I want to use fault messages to catch thoses exceptions, so I have added fault message in message interfaces and in the mapping program in the interface mapping.
Now, when the web service return an exception like :
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
   <soap-env:Body>
      <soap-env:Fault>
         <faultcode>soap-env:Client</faultcode>
         <faultstring xml:lang="en">NOT_CREATED</faultstring>
         <detail>
            <n0:Z_WS_CREATE_WAGON.Exception xmlns:n0="urn:sap-com:document:sap:rfc:functions">
               <Name>NOT_CREATED</Name>
               <Text> does not have packaging material type and is therefore not a pack.mat.</Text>
               <Message>
                  <ID>HUSELECT</ID>
                  <Number>041</Number>
               </Message>
            </n0:Z_WS_CREATE_WAGON.Exception>
         </detail>
      </soap-env:Fault>
   </soap-env:Body>
</soap-env:Envelope>
I get the following error :
<SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">
   <SAP:Category>XIServer</SAP:Category>
   <SAP:Code area="MAPPING">NO_MAPPINGPROGRAM_FOUND</SAP:Code>
   <SAP:P1>http://www.arcelormittal.com/radis/rad IM_RAD_to_ZWsCreateWagon</SAP:P1>
   <SAP:P2 />
   <SAP:P3 />
   <SAP:P4 />
   <SAP:AdditionalText />
   <SAP:ApplicationFaultMessage namespace="" />
   <SAP:Stack>Interface mapping http://www.arcelormittal.com/radis/rad IM_RAD_to_ZWsCreateWagon does not exist in runtime cache</SAP:Stack>
   <SAP:Retry>N</SAP:Retry>
</SAP:Error>
My mapping program for fault message is well defined (I tested it with the exception message received from the web service).
I have also refresh caches, but without success...
Can anyone help me ?
Thanks in advance,
Laurence

Hey Laurence,
A File adapter is aysnchronous u cant use for synchrous because it cant acknwlodge the response it gets or itt sends.
regarding two asynchoronus
1. file to SOAP asychn.
2. triggger the second one if SOAP has exception then pass the error from SOAP to New File.
using BPM we have to use Transportion level acknowledgments
please reward points if it helps
Regards
Sreeram.G.Reddy

Proxy to SOAP scenario-With Attachment and Mapping

I have a scenario to be developed, it is a Proxy to SOAP sceanrio.
There are about 8 fields coming from Proxy.
Can we create an attachment from these fields.
Also we have to do a mapping of this attachment to a field in the target External Defination and also 2 fields of the 8 have to mapped to the other respective fields of the external defination.
All this has to be posted on a webservice through SOAP with
the 2 fields in payload and
the attachment in the attachemnt section of the message
Could this be achieved?

In ABAP proxy you create a message with the two fields which you need for main SOAP message.
The attachment is created exactly how it is requested from web service.
You create a String with the XML (including tags) and do a codepage conversion to UTF-8 (or whatever is requested)
Note: The payload is created in UTF-8 automatically, the attachment is treated as binary.
You can also use a Java mapping for creating the attachment, if you have good Java skills, but I recommend to use program code for one purpose only on one place.

Soap to soap scenario with multiple operations

hi experts,
I want to do a scenario in which I have sender RFC(asynchronous) and receiver SOAP(Synchronous) and response will come back to a file.
Can anyone please help me, how many communication channels are required and how to do configuration.
regards,
vineetha chowdary

> want to do a scenario in which I have sender RFC(asynchronous) and receiver SOAP(Synchronous) and response will come back to a >file.Can anyone please help me, how many communication channels are required and how to do configuration.
RFC (ASYNC) --->SOAP(SYNC) ---> FILE(ASYNC)
You can do this with bpm or without bpm.
Doing WITHOUT BPM is simple. Refer the following [link |http://wiki.sdn.sap.com/wiki/display/XI/File-RFC-File%28Without%20BPM%29?bc=true]for handling async sync pattern ...
Follow closely this link .. ONly difference is file (sender) and file receiver are async and RFC is sync. In your case RFC(sender) and FIle(receiver) async and SOAP is sync.

SOAP to SOAP Scenario with an Attachment

Hi,
We are using this scenario for transfering file from one location to another location with an attachment. From Web service client we are succefully sending an attachment to XI system. During mapping, we are facing problem while sending an attachment from inbound schema to outbound schema. Being XI is using XML for mapping and important thing is here that whether XML can handle attachments or not? If yes, then whats the way to handle attachment issue in XI 3.0?
Thanks and Regards,
Rohit Goyal

Hi Holger,
Thanks for your reply but wanted some more inputs on this. We have define two parameter as inbound and outbound schema as FileName and Filecontent. FileName contains the name of file and FileContent containes href link which points to an attachment. FileContent is of type base64Binary. Similarly FileName and FileContent are defined in outbound schema as well. href linf should pass from filecontent Inbound schema to Outbound schema. But that is not passing. In receiver side, we have web service running which takes these two inputs (FileName, and fileContent).
But as you r saying we don't require mapping? Can you let me know, then how we can pass input varaibles to the webservice.
Pls elaborate more on this.
With Regards,
rohit

RFC to SOAP scenario (with out XI/PI)

Dear Experts ,
Is it possible to push data from RFC to Webservice with out using XI/PI.
Regards,
Kartheek.

It is indeed possible, however without having used PI/Xi in the middle, once the mentioned scenario would be implemented, it would be difficult to keep the track of the messages that would flow across systems (i.e. message log, corresponding data etc.). So my suggestion would be to make use of the PI module as a middle ware.
Please check the URL that regards to your query.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0d0a250-ccd1-2c10-9e9f-b9d5cf259a6d?quicklink=index&overridelayout=true
Mutti

One SOAP-SOAP scenario with multiple interfaces

Hi,
I am developing a scenario SOAP-SOAP using PI 7.10 Sp6.
The wsdl has around 8 service interfaces and i am planning to create 8 Outbound and 8 Inbound interfaces for the same mesg type and create a scenario without MM or Operation mapping.
If I plan to use only one Sender CC and only one configuration scenario for this developement, how do I provide my end point in the following format?
http://<host>:<port>/XISOAPAdapter/MessageServlet?senderParty=&senderService=<SEND_BS>&interface=Interface_Out&receiverParty=&receiverService=<RECV_BS>&interfaceNamespace=http://test.com/xi/SAP/
Venkat.

Raj/Pavan,
I added other service interfaces to one service interface in operations.
But the request messages have not appeared because of which it is throwing an exception when I activate the message interface.
I do not have problems on the receiving side, One receiver CC should take care of the problem as we dont specify in the recvr SOAP action attribute.
I am worried about sender side only !
Thanks,
Venkat.
Just now I created a dummy DT, MT and SI and added this to existing even that request message did not show up in the SI.
Edited by: Venkat A on Jun 16, 2010 11:03 AM

Using time capsule to extend a network with security

I have a time capsule and my roommate and I use the same wireless network. I want to add my time capsule to the network we both share but want to be sure only I will be able to access data on my time capsule i.e. external hard drive, back ups etc. Is this possible?

The Time Capsule can only extend a network wirelessly if it connects to the wireless signal from another Apple router.
So, the first question here would be whether or not the existing wireless network there is being provided by another Apple router.
If yes, what model of router would this be?
If no, then the Time Capsule will need to connect to the existing wireless router using a permanent, wired Ethernet cable connection.
If you do it this way, you have the option to have the Time Capsule produce a separate wireless network, or you can turn off the wireless on the Time Capsule and use it only as a wired hard drive.
No matter how the Time Capsule is set up, you would want to set up a separate Disk Password for the Time Capsule, so only those users who had the password could access the Time Capsule hard drive.

PO output for Extended classic Scenario from the R/3 backend

Hi,
1) Does the PO output (ignoring the config maintained in SRM server 5.5 for the output) through R/3 backend is standard or it is mandatory to give local outputs from SRM only incase of Extended classic scenario?
Regards,
DV

Hi Anil,
We are working on extended classic scenario with SRM 5.0 & ECC6.0.
Please explain how we can take "PO output for Extended classic Scenario from the R/3 backend ".
Please send the related document to [email protected]
Thanks in advance
Ashutosh

Extended SOAP Scenario with Security

Similar Messages

Maybe you are looking for