External RFC logon not possible when auth/rfc_authority_check is set to 9
Hello,
we have to logon via RFC to an ECC6 system where auth/rfc_authority_check is set to "9" but SAP gives 'RFCAPI_RFC_SYS_EXCEPTION:RFC_ERROR_SYSTEM_FAILURE' error. If this parameter is set to "1" then logon is ok. I checked Saphelp and Sapnotes but the documentation for this parameter is a little bit unclear. I tried to change authorizations but without success. Does anyone have experience with this topic?
Many thanks in advance for your help!
Tamá
Hello Julius,
thanks for your answer and sorry for the long delay.
We have only one instance so I think load balancing cannot be a problem.
I'd to set authorizations for SRFC but it didn't help. I try to include it here:
Manually Authorization Check for RFC Access
Activity Execute
Name of RFC to be protected *
Type of RFC object to be prote Function group
And another version:
Manually Authorization Check for RFC Access
Activity Execute
+Name of RFC to be protected RFCPING, RFC_SYSTEM_INFO, SYSTEM_RESET_RFC_SERVER
Type of RFC object to be prote Function group
The shortdump created when I try to logon is confusing, because it says that password is incorrect but this is not true. And it says that RFC is sent with invalid user "SAPCPIC".
I do not really familiar with the RFC authorization concept maybe this caused the problem.
Many thanks in advance if you can help me!
Regards
Tamá
Similar Messages
-
Hi,
A geting this error
Active logon not possible
when i try to logon to SUS using EP.
Regards,
ManuHi,
I would try to check logs first. In transaction SMICM you can set up level of logging for ICF services. So set it up to the highest possible level (this one actually dumps whole content of HTTP request, so maybe that's not necessary) and try logon again. You should get a reasonable info and you can try to figure out why it fails.
Cheers -
Server0 getting down and logon not possible ( error in license check)
Hi Guys,
I rebooted my SAP server and after that server0 is in disabled mode, well both the boxes seems to be green but the server0 node in disable mode as if it is maintained by some parameter and I have changed it, which is not the case, also there is no log with dev_server0 since then. I have followed 723909 note and also copied the parameters of a running server but didn't get success. Also when I am trying to login through SAPGUI its giving me error " Logon not possible( error in license check)" while the license is already installed.
dev_w0 log says
M Wed Sep 01 14:42:14 2010
M *** ERROR => sap license, no valid license found [likeyapi_w.c 2260]
M *** ERROR => wlikey_check_webas: There is a permanent license key for "NetWeaver_ADA" in the system but it has never been checked successfully. In this situation a temporary license key mustn't be installed. [sliclikey.c 1314]
M *** ERROR => The temporary license key for NetWeaver_ADA could not be installed [likeyapi_w.c 2305]
SAP ECC 6.0 release 700
DB: MaxDB
OS: Win2k3 server
Please help.
Regards
Mridul GuptaLicense issue is resolved but server0 node is still in disable status while the instances shows green, I checked dev_jcontrol log and found :
[Thr 2168] [Node: server0] java home is set by profile parameter
Java Home: C:\j2sdk1.4.2_25-x64
[Thr 2168] JStartupICheckFrameworkPackage: can't find framework package E:\usr\sap\W6Q\DVEBMGS12\exe\jvmx.jar
JStartupIReadSection: read node properties [ID123322550]
-> node name : server0
-> node type : server
-> node execute : no
-> jlaunch parameters :
-> java path : C:\j2sdk1.4.2_25-x64
I think the node execute sud be yes, I just wanted to know how I can enable this.
Regards,
Mridul Gupta -
Logon not possible (error in license key)
dear sir
I had a temporary license which got expired yesterday. but i received the permanent license today
and i wanted to install it on the solution manager server, but when i 'am trying to log in ,it throws
an error at the bottom that " logon not possible (error in license key ) "
pl given a solution
thanks
johnLogon using SAP* in client 000.
Probably you need to maintain profile parameter login/no_automatic_user_sapstar = 0 and restart the system before you are able to logon with user SAP* -
LOGON NOT POSSIBLE. ERROR IN LICENSE CHECK -- NO HWid from message Server
We could logon to the EC6 system. I
Stopped the EC6 system and started
it . It started with License Key
Error. the License key was available
and was shown in SLICENSE transaction
but it was giving LOGON NOT POSSIBLE.
ERROR IN LICENSE CHECK.
SO I deleted the TEMP and the Original
License via command SAPLICENSE -DELETE
and then REINSTALLED THE LICENSE with
the details
SAP System: EC6
Inst. Number: 0020174764
Hardware Key: Z1686313186
System Number: 310590866
Expires On: 31.12.9999
Key:
RZKGNA79K9U4F7D7SGGOWU1V
The License was successfully installed
but Still the samer error .LOGON NOT
POSSIBLE. ERROR IN LICENSE CHECK
Somehow it is not getting the hardware
key.But when I run the command
saplince -get then it returns
saplicense: HARDWARE KEY = Z1686313186
DEV_W0 log says that
M ***LOG Q16=> ThGetMsHwId, DpMBufHwIdGet (HWID_PENDING) [thxxmbuf.c 509]
M *** ERROR => SlicKCheckLicense: did not get hwid from message server [slicch.c 306]
M *** ERROR => no hwid from msg-server received [likeyapi_w.c 2268]
Please HelpSergo
My sapmsEC6 has been assigned to 3601 port as my instanace number is 01 . So that is correct. the Thread which has given didn't help . Thanks for you inputs.
Yogesh -
SSO logon not possible; logon tickets not activated on the server
When I am on RWB
1) click "component monitoring" ->"display all"
2) click "CCMS"
I get a popup says:
"SSO logon not possible; logon tickets not activated on the server"
I find some threads about this on SDN but they are about
EP. My case is PI7.0SP08.
Please advise how to overcome this issue?
Thanks w/ points.
Message was edited by:
jennifer leehI,
do you have the follwoing in our SXMB_ADM if not add them.
SXMB_ADM->IntegrationEngine configuratin-> edit the speicifc configuratin then add the follwoing
Category:RUNTIME Parameters: logging Value:1
If its done. check this alos...whether your browser settings will accept the cookies or not. for SSO logon ticket method you need to have cookies accepted by our browser so check it. in internet page slect TOOLS ->internet options then ckeck for cookies settings.
How to Enable Single-Sign-On for XI 3.0 at:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/69d95112-0d01-0010-8297-fa31feea26e0
/people/alexander.bundschuh/blog/2007/01/16/principal-propagation-in-sap-xi
http://help.sap.com/saphelp_nw2004s/helpdata/en/5c/b7d53ae8ab9248e10000000a114084/content.htm
regards
manoj kumar -
Upgrade still running logon not possible
Dear Experts,
We've upgraded our erp server ecc 5.0 to ecc 6.0 ehp1 via option downtime minimized option, before downtime phase we ve taken an offline backup, after upgrade completed succesfully
Now we have used this offline db backup for system copy to a new test system because customer want to save ecc 5.0 system too,
When we try to logon system we are getting following error, we can logon system via sap* user ;
upgrade still running logon not possible
How can we reset this upgrade on this new test system,
Best RegardsDear Atakan,
Unlock the SAP-system at OS level with the following commands:
cd /<Upgrade-directory>/bin
..exe/tp unlocksys <SAPSID> pf=<transport profile>
..exe/tp unlock_eu <SAPSID> pf=<transport profile>
but if the copy system still is in the phase before downtime as this was when the backup was made, please following the upgrade guide section, resetting the prepare.
Regards,
Paul -
"Logon Not Possible (Error in License Check)" at DR Site
Hi,
I am doing DR ( Disaster Recovery ) Site. I used Tivoli Storage Manager ( TSM ) to take FS Backup & DB Backup.
On the DR site I restore the same backup successfully and the resultant is I am able to run my SAP server.
When I try to connect through SAP Logon. it gives me first screen.
Problem none of the user is permitted to enter except sap*. for other user following message come.
"Logon Not Possible (Error in License Check)".
i know how to apply new license but in requesting permanent license the SAPnet is not asking hardware key.
Best Regards,
Syed Saifuddin
Software Architect ( JEE 5 )
SAP BASIS AdministratorHi Syed,
Please check the SAP Note
Note 94998 - Requesting license keys and deleting systems.
Also check the sapms<sid> port.
Thanks,
Prabhat -
Preprocessing Roadmap Orinial system locked / logon not possible
Hi All,
I am currently working on the upgrade from CRM 2007 to CRM 7.0 with EHP1. I am runinng the synchronus upgrade and currently in the Preprocessing ROADMAP (Phase Name MAIN_SHDIMP/DIFFEXPADDI ).
Indeed, we have completed the SPDD / SPAU modification as well. And my question is, I am not able to login into the orignal system and its telling it as Upgrade is running logon not possible. (But this should happen only in the downtime roadmap - because I have done several ECC upgrade) . When preprocessing completed, we will obtrain downtime from the customer and we will start with the downtime roadmap.
But in CRM, I didn get any message or warning like that, I just gave confirmation for modifcation of SPAU / SPDD in the preprocessing roadmap. After few hours, I am not able to login into the originals system itself. Even I could see that there is no shadow system existing in the MMC as well. I am clueless here about the status and howcome it could happen like this ?
In short : My question is, downtime will start after giving confirmation in SPAU / SPDD?
Also I have unlocked / locked the shadow system earlier for some activity in the shadow system. Does that mean accidentally it locked my original system.
If anyone of your have any suggestion please do let me know
I have used the below command to unlock the shadow system...
tp unlocksys SCR pf=G:\SCR_UPGRADE\abap\bin\TPPARAM
SAPup.exe unlockshd SCR
tp locksys SCR pf=G:\SCR_UPGRADE\abap\bin\TPPARAM
SAPup.exe lockshd SCR
Regards
VijayHi,
However, I have unlocked the same to access the original system. But wondering is the behaviour of the tool itself to lock the original system in the preprocessing stage itself?
Used command for unlockign the orinal system
tp unlocksys SCR pf=G:\usr\sap\trans\bin\TP_DOMAIN_SCR.PFL
Regards
Vijay -
Error - Logon not possible; none of the active logon procedures is possible
Dear Gurus,
I'm trying to configure SSL with User mapping to SICF service: NWBC.
-SSL configured with STRUST transaction and I see that it is working via Internet Explorer
-SICF service NWBC was set to: "Required with Client Certificate (SSL)"
-User mapping was set like described in this article: https://help.sap.com/saphelp_nwmobile71/helpdata/en/17/1514e9b7eb4f74b0b49327b8f2a662/frameset.htm
But I get error:
Logon not possible; none of the active logon procedures is possible
Any idea ?
Please advise,
Dimitry HaritonovHi,
I would try to check logs first. In transaction SMICM you can set up level of logging for ICF services. So set it up to the highest possible level (this one actually dumps whole content of HTTP request, so maybe that's not necessary) and try logon again. You should get a reasonable info and you can try to figure out why it fails.
Cheers -
CRMD_SHORTCUT modification is not possible when customizing not allowed cli
CRMD_SHORTCUT modification is not possible when the client closed to
customizing.
How can we change the AUDIENCE TYPE and the AUDIENCE KEY of a saved
search when the client is a productive and no changes allowed settings
has been made?Hi, why don't you just make a navigation banner (bar) with the buttons they should be able to reach? Page group properties is where you decide the default navigation banner. So make a new banner for your users and set it as the default one.
Kristin -
my i4s wifi button is not working. when i opened the setting and then wifi the button is greyed out. then i opened general and then about. in the bar of wifi address it is written N/A. what does its mean. i have done all other things like setting >general<reset<reset network setting. but all in vain. tell me the solution
restore your phone as new through itunes. if the issue persists after a factory restore via itunes, it means you've got a hardware issue and the phone needs to be repaired
-
Trusted RFC and Remote logon not possible due to Nat'd IP addresses
Hi,
We are trying to connect our SolMan 4 to our cusotmers ECC 6 and BI7 systems, the systems are off site and the IP addresses for the customers systems are nat'd when they come in and go out from our Network.
The problem we get is that we cannot set up Trusted systems or Remote Logon to these systems due to issues with the Nating of the IP adresses. We can set up all standard RFC's after adding the the appropriate addresses into the hosts file and they work fine. But the trusted RFC does not set up properly and the BACK rfc from the satelite system does not get set up properly. What appears to happen is that when you try to start a remote session SAP goes to the satelite system and finds the Instance Name and the local IP address rather than the NAT'd IP address and try's to open a session from there. I found this by going into the trusted RFC in SM59 and then going to Extra's, System Information, Target System, this then tells me the Target System information, where it shows the System ID and IP address (which is the incorrect IP address).
Anyone know how we can get the system to try to have the correct IP adress in the target system information so that we can get Remote Logon's to work??
CheersHi Carl,
Based on your explanation about Nating,, how will the RFC determine to connect to Solmans internal IP after it has been directed to the IP for the Router connection.
I feel it is like configuring a jump of RFCs from one IP to another in a single chain.
Can this be done ?? I mean we have to specify an IP in the RFC connection right.. so how will the automatic jumping of IPs be done.
Sorry not answering the question but its very interesting and wanted to know.
Also went trough note # 148832, might help.
Regards,
Kaustubh.
Edited by: Kaustubh Krishna on Aug 13, 2009 12:17 PM -
Hello,
We are getting the following dump in production system -SAP ECC 6.0.
The wp s are getting terminated automatically as shown in dev_disp file.
Sun Aug 10 12:15:38 2014
DpHdlDeadWp: W2 (pid=25722) terminated automatically
Sun Aug 10 12:16:46 2014
DpHdlDeadWp: W34 (pid=8081) terminated automatically
Sun Aug 10 12:23:45 2014
DpHdlDeadWp: W28 (pid=25734) terminated automatically
The dev_ms shows the following :
[Thr 139866179913568] Thu Aug 7 00:25:35 2014
[Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C11 (161.134.204.144) after 300 secs received [msxxserv_mt. 4136]
[Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [161.134.204.144] [msxxserv_mt. 4140]
[Thr 139866179913568] Thu Aug 7 10:20:56 2014
[Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C22 (144.145.30.11) after 300 secs received [msxxserv_mt. 4136]
[Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [144.145.30.11] [msxxserv_mt. 4140]
[Thr 139866179913568] Fri Aug 8 09:35:00 2014
[Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C20 (139.24.138.145) after 300 secs received [msxxserv_mt. 4136]
[Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [139.24.138.145] [msxxserv_mt. 4140]
[Thr 139866179913568] Fri Aug 8 09:35:40 2014
[Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C12 (139.24.138.145) after 300 secs received [msxxserv_mt. 4136]
[Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [139.24.138.145] [msxxserv_mt. 4140]
Last log on August 8.
What could be the reason?There are no licenses expiring..
Thanks and regards,
uday.Hello,
The system is ECC 6.0
The dump details are as below :
Runtime Errors CALL_FUNCTION_REMOTE_ERROR
Date and Time 10.08.2014 14:40:10
Short Text
"Anmeldung nicht möglich (Fehler bei der Lizenzprüfung)"
What happened?
Error in the ABAP Application Program
The current ABAP program "/SIE/SAPLAD_Z0HBAPI_TRAVEL" had to be terminated
because it has
come across a statement that unfortunately cannot be executed.
The error occurred during an RFC call to another system.
In the target system, a short dump has been written as well.
More detailed information on the error cause can be found there.
What can you do?
Note down which actions and inputs caused the error.
To process the problem further, contact you SAP system
administrator.
Using Transaction ST22 for ABAP Dump Analysis, you can look
at and manage termination messages, and you can also
keep them for a long time.
Error analysis
An error occurred when executing a REMOTE FUNCTION CALL.
It was logged under the name "Anmeldung nicht möglich (Fehler "
on the called page.
How to correct the error
Please refer to the notes described in the
short dump.
System environment
SAP-Release 700
Application server...
Network address......
Operating system..... "Linux"
Release.............. "3.0.93-0.8-default"
Hardware type........ "x86_64"
Character length.... 8 Bits
Pointer length....... 64 Bits
Work process number.. 13
Shortdump setting.... "full"
Database server...
Database type..... "ORACLE"
Database name.....
Database user ID.. "SAPSR3"
Terminal................. "portal"
Char.set.... "de_DE.ISO-8859-1"
SAP kernel....... 720
created (date)... "Mar 8 2014 08:39:01"
create on........ "Linux GNU SLES-9 x86_64 cc4.1.2 "
Database version. "OCI_102, 11.2.0.4.0, V1, default"
Patch level. 600
Patch text.. " "
Database............. "ORACLE 10.1.0.*.*, ORACLE 10.2.0.*.*, ORACLE 11.2.*.*.*"
SAP database version. 720
Operating system..... "Linux 2.6, Linux 3"
Memory consumption
Roll.... 0
EM...... 2092720
Heap.... 0
Page.... 0
MM Used. 895296
MM Free. 1194848
and Transaction
Client.............. 101
User................ "CPIC_TILO"
Language Key........ "D"
Transaction......... " "
Transactions ID..... "53E7B3EC66796484E10000009DA38898"
Program............. "/SIE/SAPLAD_Z0HBAPI_TRAVEL"
Screen.............. "SAPMSSY1 3004"
Screen Line......... 2
Information on caller of Remote Function Call (RFC):
System.............. "########"
Database Release.... 720
Kernel Release...... 720
Connection Type..... "E" (2=R/2, 3=ABAP System, E=Ext., R=Reg. Ext.)
Call Type........... "synchronous and non-transactional (emode 0, imode 0)"
Inbound TID.........." "
Inbound Queue Name..." "
Outbound TID........." "
Outbound Queue Name.." "
Client.............. "###"
User................ "############"
Transaction......... " "
Call Program........." "
Function Module..... "/SIE/AD_Z0H_BAPI_TRIP_MENU_EP"
Call Destination....
Source Server.......
Source IP Address... "
Additional information on RFC logon:
Trusted Relationship " "
Logon Return Code... 0
Trusted Return Code. 0
Note: For releases < 4.0, information on the RFC caller are often
only partially available.
rmation on where terminated
Termination occurred in the ABAP program "/SIE/SAPLAD_Z0HBAPI_TRAVEL" - in
"/SIE/AD_Z0H_BAPI_TRIP_MENU_EP".
The main program was "SAPMSSY1 ".
In the source code you have the termination point in line 164
of the (Include) program "/SIE/LAD_Z0HBAPI_TRAVELU09".
I am from level 1 and as per my knowledge there is no change done on the system recently.
Please guide further.
Regards,
uday. -
Japanese Langauge Logon not possible
Hello Colleagues
I am working in 4.6 C IDES system.
By default the Language Japanese comes installed.
Even in default profile the parameter entries are maintained.
But still the logon in client 000 is not possible with the Japanese Language.
When we login by a different languge and post the Japanese characters for the
data entry the sytem is not able to identify the Japanese characters.
It reads the japanese Characters as question mark symbol.
I will highly appreciate your help and advise in the problem described above.
Thanks and Regards
Poojawhen i provide the suer ID and password in English and the logon language JA.
I get the error message as;
00:629 J
and whn i double click the red cross i get the error message as
00:127 J
Thanks and Regards
Pooja
Maybe you are looking for
-
How to hide the folder name in a KM Navigation Iview
Hi, Scenario, I am using a KM Navigation Iview with LinkListExplorer Layout set. The Folder Name appears at the top of the collection. Please can someone tell me how I can hide the folder name for the iview. i.e I do not want the folder name to appea
-
Hi guys, plz help me.plz tell me about MESSAGE-MAPPING,JAVA-MAPPING,ABAP-MAPING,XSLT-MAPPING. with warm regards. vikash
-
Can't open PDF links in Safari
Hi, only since a couple of days ago, I couldn't open PDF links in Safari. The page loads but nothing appears in the new window or tab. Thanks, Aaron
-
How can I make Safari open a new website when I click an URL on a site? It is annoying not to be able to go back to the original site.
-
Hi gyes M/s xyz is supplying the items from USA to the Local Dealer in India We want to place On the local dealer The items are imorted items which will be delivered on High Seas Sale basis.to the Local Vendor we Shall be paying all The Customs duty,