External RFC logon not possible when auth/rfc_authority_check is set to 9

Hello,
we have to logon via RFC to an ECC6 system where auth/rfc_authority_check is set to "9" but SAP gives 'RFCAPI_RFC_SYS_EXCEPTION:RFC_ERROR_SYSTEM_FAILURE' error. If this parameter is set to "1" then logon is ok. I checked Saphelp and Sapnotes but the documentation for this parameter is a little bit unclear. I tried to change authorizations but without success. Does anyone have experience with this topic?
Many thanks in advance for your help!
Tamá

Hello Julius,
thanks for your answer and sorry for the long delay.
We have only one instance so I think load balancing cannot be a problem.
I'd to set authorizations for SRFC but it didn't help. I try to include it here:
Manually   Authorization Check for RFC Access
Activity                       Execute
Name of RFC to be protected    *
Type of RFC object to be prote Function group
And another version:
Manually   Authorization Check for RFC Access
Activity                       Execute
        +Name of RFC to be protected    RFCPING, RFC_SYSTEM_INFO, SYSTEM_RESET_RFC_SERVER
Type of RFC object to be prote Function group
The shortdump created when I try to logon is confusing, because it says that password is incorrect but this is not true. And it says that RFC is sent with invalid user "SAPCPIC".
I do not really familiar with the RFC authorization concept maybe this caused the problem.
Many thanks in advance if you can help me!
Regards
Tamá

Similar Messages

  • Active logon not possible

    Hi,
    A geting this error
    Active logon not possible
    when i try to logon to SUS using EP.
    Regards,
    Manu

    Hi,
    I would try to check logs first. In transaction SMICM you can set up level of logging for ICF services. So set it up to the highest possible level (this one actually dumps whole content of HTTP request, so maybe that's not necessary) and try logon again. You should get a reasonable info and you can try to figure out why it fails.
    Cheers

  • Server0 getting down and logon not possible ( error in license check)

    Hi Guys,
    I rebooted my SAP server and after that server0 is in disabled mode, well both the boxes seems to be green but the server0 node in disable mode as if it is maintained by some parameter and I have changed it, which is not the case, also there is no log with dev_server0 since then. I have followed 723909 note and also copied the parameters of a running server but didn't get success. Also when I am trying to login through SAPGUI its giving me error " Logon not possible( error in license check)" while the license is already installed.
    dev_w0 log says
    M Wed Sep 01 14:42:14 2010
    M  *** ERROR => sap license, no valid license found [likeyapi_w.c 2260]
    M  *** ERROR => wlikey_check_webas: There is a permanent license key for "NetWeaver_ADA" in the system but it has never been checked successfully. In this situation a temporary license key mustn't be installed. [sliclikey.c  1314]
    M  *** ERROR => The temporary license key for NetWeaver_ADA could not be installed [likeyapi_w.c 2305]
    SAP ECC 6.0 release 700
    DB: MaxDB
    OS: Win2k3 server
    Please help.
    Regards
    Mridul Gupta

    License issue is resolved but server0 node is still in disable status while the instances shows green, I checked dev_jcontrol log and found :
    [Thr 2168] [Node: server0] java home is set by profile parameter
         Java Home: C:\j2sdk1.4.2_25-x64
    [Thr 2168] JStartupICheckFrameworkPackage: can't find framework package E:\usr\sap\W6Q\DVEBMGS12\exe\jvmx.jar
    JStartupIReadSection: read node properties [ID123322550]
    -> node name          : server0
    -> node type          : server
    -> node execute       : no
    -> jlaunch parameters :
    -> java path          : C:\j2sdk1.4.2_25-x64
    I think the node execute sud be yes, I just wanted to know how I can enable this.
    Regards,
    Mridul Gupta

  • Logon not possible (error in license key)

    dear sir
    I had a temporary license which got expired yesterday. but i received the permanent license today
    and i wanted to install it on the solution manager server, but when i 'am trying to log in ,it throws
    an error at the bottom that " logon not possible (error in license key ) "
    pl given a solution
    thanks
    john

    Logon using SAP* in client 000.
    Probably you need to maintain profile parameter login/no_automatic_user_sapstar = 0 and restart the system before you are able to logon with user SAP*

  • LOGON NOT POSSIBLE. ERROR IN LICENSE CHECK -- NO HWid from message Server

    We could logon to the EC6 system. I
    Stopped the EC6 system and started
    it . It started with License Key
    Error. the License key was available
    and was shown in SLICENSE transaction
    but it was giving LOGON NOT POSSIBLE.
    ERROR IN LICENSE CHECK.
    SO I deleted the TEMP and the Original
    License via command SAPLICENSE -DELETE
    and then REINSTALLED THE LICENSE with
    the details
    SAP System: EC6
    Inst. Number: 0020174764
    Hardware Key: Z1686313186
    System Number: 310590866
    Expires On: 31.12.9999
    Key:
    RZKGNA79K9U4F7D7SGGOWU1V
    The License was successfully installed
    but Still the samer error .LOGON NOT
    POSSIBLE. ERROR IN LICENSE CHECK
    Somehow it is not getting the hardware
    key.But when I run the command
    saplince -get then it returns
    saplicense: HARDWARE KEY = Z1686313186
    DEV_W0 log says that
    M  ***LOG Q16=> ThGetMsHwId, DpMBufHwIdGet (HWID_PENDING) [thxxmbuf.c   509]
    M  *** ERROR => SlicKCheckLicense: did not get hwid from message server [slicch.c     306]
    M  *** ERROR => no hwid from msg-server received [likeyapi_w.c 2268]
    Please Help

    Sergo
    My sapmsEC6 has been assigned to 3601 port as my instanace number is 01 . So that is correct. the Thread which has given didn't help . Thanks for you inputs.
    Yogesh

  • SSO logon not possible; logon tickets not activated on the server

    When I am on RWB
    1)  click "component monitoring" ->"display all"
    2) click "CCMS"
    I get a popup says:
    "SSO logon not possible; logon tickets not activated on the server"
    I find some threads about this on SDN but they are about
    EP. My case is PI7.0SP08.
    Please advise how to overcome this issue?
    Thanks w/ points.
    Message was edited by:
            jennifer lee

    hI,
    do you have the follwoing in our SXMB_ADM if not add them.
    SXMB_ADM->IntegrationEngine configuratin-> edit the speicifc configuratin then add the follwoing
    Category:RUNTIME Parameters: logging Value:1
    If its done. check this alos...whether your browser settings will accept the cookies or not. for SSO logon ticket method you need to have cookies accepted by our browser so check it. in internet page slect TOOLS ->internet options then ckeck for cookies settings.
    How to Enable Single-Sign-On for XI 3.0 at:
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/69d95112-0d01-0010-8297-fa31feea26e0
    /people/alexander.bundschuh/blog/2007/01/16/principal-propagation-in-sap-xi
    http://help.sap.com/saphelp_nw2004s/helpdata/en/5c/b7d53ae8ab9248e10000000a114084/content.htm
    regards
    manoj kumar

  • Upgrade still running logon not possible

    Dear Experts,
    We've upgraded our erp server ecc 5.0 to ecc 6.0 ehp1 via option downtime minimized option, before downtime phase we ve taken an offline backup, after upgrade completed succesfully
    Now we have used this offline db backup for system copy to a new test system because customer want to save ecc 5.0 system too,
    When we try to logon system we are getting following error, we can logon system via sap* user ;
    upgrade still running logon not possible
    How can we reset this upgrade on this new test system,
    Best Regards

    Dear Atakan,
    Unlock the SAP-system at OS level with the following commands:                                                                               
    cd /<Upgrade-directory>/bin                                            
       ..exe/tp unlocksys <SAPSID> pf=<transport profile>                     
       ..exe/tp unlock_eu <SAPSID> pf=<transport profile>                     
    but if the copy system still is in the phase before downtime as this was when the backup was made, please following the upgrade guide section, resetting the prepare.
    Regards,
    Paul

  • "Logon Not Possible (Error in License Check)" at DR Site

    Hi,
    I am doing DR ( Disaster Recovery ) Site. I used Tivoli Storage Manager ( TSM ) to take FS Backup & DB Backup.
    On the DR site I restore the same backup successfully and the resultant is I am able to run my SAP server.
    When I try to connect through SAP Logon. it gives me first screen.
    Problem none of the user is permitted to enter except sap*. for other user following message come.
    "Logon Not Possible (Error in License Check)".
    i know how to apply new license but in requesting permanent license the SAPnet is not asking hardware key.
    Best Regards,
    Syed Saifuddin
    Software Architect ( JEE 5 )
    SAP BASIS Administrator

    Hi Syed,
    Please check the SAP Note
    Note 94998 - Requesting license keys and deleting systems.
    Also check the sapms<sid> port.
    Thanks,
    Prabhat

  • Preprocessing Roadmap Orinial system locked / logon not possible

    Hi All,
    I am currently working on the upgrade from CRM 2007 to CRM 7.0 with EHP1. I am runinng the synchronus upgrade and currently in the Preprocessing ROADMAP (Phase Name MAIN_SHDIMP/DIFFEXPADDI ).
    Indeed, we have completed the SPDD / SPAU modification as well. And my question is, I am not able to login into the orignal system and its telling it as Upgrade is running logon not possible. (But this should happen only in the downtime roadmap - because I have done several ECC upgrade) . When preprocessing completed, we will obtrain downtime from the customer and we will start with the downtime roadmap.
    But in CRM, I didn get any message or warning like that, I just gave confirmation for modifcation of SPAU / SPDD in the preprocessing roadmap. After few hours, I am not able to login into the originals system itself. Even I could see that there is no shadow system existing in the MMC as well. I am clueless here about the status and howcome it could happen like this ?
    In short : My question is, downtime will start after giving confirmation in SPAU / SPDD?
    Also I have unlocked  / locked the shadow system earlier for some activity in the shadow system. Does that mean accidentally it locked my  original system.
    If anyone of your have any suggestion please do let me know
    I have used the below command to unlock the shadow system...
    tp unlocksys SCR pf=G:\SCR_UPGRADE\abap\bin\TPPARAM
    SAPup.exe unlockshd SCR
    tp locksys SCR pf=G:\SCR_UPGRADE\abap\bin\TPPARAM
    SAPup.exe lockshd SCR
    Regards
    Vijay

    Hi,
    However, I have unlocked the same to access the original system. But wondering is the behaviour of the tool itself to lock the original system in the preprocessing stage itself?
    Used command for unlockign the orinal system
    tp unlocksys SCR pf=G:\usr\sap\trans\bin\TP_DOMAIN_SCR.PFL
    Regards
    Vijay

  • Error - Logon not possible; none of the active logon procedures is possible

    Dear Gurus,
    I'm trying to configure SSL with User mapping to SICF service: NWBC.
    -SSL configured with STRUST transaction and I see that it is working via Internet Explorer
    -SICF service NWBC was set to: "Required with Client Certificate (SSL)"
    -User mapping was set like described in this article: https://help.sap.com/saphelp_nwmobile71/helpdata/en/17/1514e9b7eb4f74b0b49327b8f2a662/frameset.htm
    But I get error:
    Logon not possible; none of the active logon procedures is possible
    Any idea ?
    Please advise,
    Dimitry Haritonov

    Hi,
    I would try to check logs first. In transaction SMICM you can set up level of logging for ICF services. So set it up to the highest possible level (this one actually dumps whole content of HTTP request, so maybe that's not necessary) and try logon again. You should get a reasonable info and you can try to figure out why it fails.
    Cheers

  • CRMD_SHORTCUT modification is not possible when customizing not allowed cli

    CRMD_SHORTCUT modification is not possible when the client closed to
    customizing.
    How can we change the AUDIENCE TYPE and the AUDIENCE KEY of a saved
    search when the client is a productive and no changes allowed settings
    has been made?

    Hi, why don't you just make a navigation banner (bar) with the buttons they should be able to reach? Page group properties is where you decide the default navigation banner. So make a new banner for your users and set it as the default one.
    Kristin

  • My i4s wifi button is not working. when i opened the setting and then wifi the button is greyed out. then i opened general and then about. in the bar of wifi address it is written N/A. what does its mean. i have done all other things like setting general

    my i4s wifi button is not working. when i opened the setting and then wifi the button is greyed out. then i opened general and then about. in the bar of wifi address it is written N/A. what does its mean. i have done all other things like setting >general<reset<reset network setting. but all in vain. tell me the solution

    restore your phone as new through itunes. if the issue persists after a factory restore via itunes, it means you've got a hardware issue and the phone needs to be repaired

  • Trusted RFC and Remote logon not possible due to Nat'd IP addresses

    Hi,
    We are trying to connect our SolMan 4 to our cusotmers ECC 6 and BI7 systems, the systems are off site and the IP addresses for the customers systems are nat'd when they come in and go out from our Network.
    The problem we get is that we cannot set up Trusted systems or Remote Logon to these systems due to issues with the Nating of the IP adresses. We can set up all standard RFC's after adding the the appropriate addresses into the hosts file and they work fine. But the trusted RFC does not set up properly and the BACK rfc from the satelite system does not get set up properly. What appears to happen is that when you try to start a remote session SAP goes to the satelite system and finds the Instance Name and the local IP address rather than the NAT'd IP address and try's to open a session from there. I found this by going into the trusted RFC in SM59 and then going to Extra's, System Information, Target System, this then tells me the Target System information, where it shows the System ID and IP address (which is the incorrect IP address).
    Anyone know how we can get the system to try to have the correct IP adress in the target system information so that we can get Remote Logon's to work??
    Cheers

    Hi Carl,
    Based on your explanation about Nating,, how will the RFC determine to connect to Solmans internal IP after it has been directed to the IP for the Router connection.
    I feel it is like configuring a jump of RFCs from one IP to another in a single chain.
    Can this be done ?? I mean we have to specify an IP in the RFC connection right.. so how will the automatic jumping of IPs be done.
    Sorry not answering the question but its very interesting and wanted to know.
    Also went trough note # 148832, might help.
    Regards,
    Kaustubh.
    Edited by: Kaustubh Krishna on Aug 13, 2009 12:17 PM

  • CALL_FUNCTION_REMOTE_ERROR - Logon not possible (error in license check)

    Hello,
    We are getting the following dump in production system -SAP ECC 6.0.
    The wp s are getting terminated automatically as shown in dev_disp file.
    Sun Aug 10 12:15:38 2014
    DpHdlDeadWp: W2 (pid=25722) terminated automatically
    Sun Aug 10 12:16:46 2014
    DpHdlDeadWp: W34 (pid=8081) terminated automatically
    Sun Aug 10 12:23:45 2014
    DpHdlDeadWp: W28 (pid=25734) terminated automatically
    The dev_ms shows the following :
    [Thr 139866179913568] Thu Aug  7 00:25:35 2014
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C11 (161.134.204.144) after 300 secs received [msxxserv_mt. 4136]
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [161.134.204.144] [msxxserv_mt. 4140]
    [Thr 139866179913568] Thu Aug  7 10:20:56 2014
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C22 (144.145.30.11) after 300 secs received [msxxserv_mt. 4136]
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [144.145.30.11] [msxxserv_mt. 4140]
    [Thr 139866179913568] Fri Aug  8 09:35:00 2014
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C20 (139.24.138.145) after 300 secs received [msxxserv_mt. 4136]
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [139.24.138.145] [msxxserv_mt. 4140]
    [Thr 139866179913568] Fri Aug  8 09:35:40 2014
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: no response from client C12 (139.24.138.145) after 300 secs received [msxxserv_mt. 4136]
    [Thr 139866179913568] *** ERROR => MsSCheckConnections: disconnect now [139.24.138.145] [msxxserv_mt. 4140]
    Last log on August 8.
    What could be the reason?There are no licenses expiring..
    Thanks and regards,
    uday.

    Hello,
    The system is ECC 6.0
    The dump details are as below :
    Runtime Errors         CALL_FUNCTION_REMOTE_ERROR
    Date and Time          10.08.2014 14:40:10
    Short Text
         "Anmeldung nicht möglich (Fehler bei der Lizenzprüfung)"
    What happened?
         Error in the ABAP Application Program
         The current ABAP program "/SIE/SAPLAD_Z0HBAPI_TRAVEL" had to be terminated
          because it has
         come across a statement that unfortunately cannot be executed.
         The error occurred during an RFC call to another system.
         In the target system, a short dump has been written as well.
         More detailed information on the error cause can be found there.
    What can you do?
         Note down which actions and inputs caused the error.
         To process the problem further, contact you SAP system
         administrator.
         Using Transaction ST22 for ABAP Dump Analysis, you can look
         at and manage termination messages, and you can also
         keep them for a long time.
    Error analysis
         An error occurred when executing a REMOTE FUNCTION CALL.
         It was logged under the name "Anmeldung nicht möglich (Fehler "
         on the called page.
    How to correct the error
        Please refer to the notes described in the
        short dump.
    System environment
        SAP-Release 700
        Application server...
        Network address......
        Operating system..... "Linux"
        Release.............. "3.0.93-0.8-default"
        Hardware type........ "x86_64"
        Character length.... 8 Bits
        Pointer length....... 64 Bits
        Work process number.. 13
        Shortdump setting.... "full"
        Database server...
        Database type..... "ORACLE"
        Database name.....
        Database user ID.. "SAPSR3"
        Terminal................. "portal"
        Char.set.... "de_DE.ISO-8859-1"
        SAP kernel....... 720
        created (date)... "Mar 8 2014 08:39:01"
        create on........ "Linux GNU SLES-9 x86_64 cc4.1.2 "
        Database version. "OCI_102, 11.2.0.4.0, V1, default"
        Patch level. 600
        Patch text.. " "
        Database............. "ORACLE 10.1.0.*.*, ORACLE 10.2.0.*.*, ORACLE 11.2.*.*.*"
        SAP database version. 720
    Operating system..... "Linux 2.6, Linux 3"
    Memory consumption
    Roll.... 0
    EM...... 2092720
    Heap.... 0
    Page.... 0
    MM Used. 895296
    MM Free. 1194848
    and Transaction
    Client.............. 101
    User................ "CPIC_TILO"
    Language Key........ "D"
    Transaction......... " "
    Transactions ID..... "53E7B3EC66796484E10000009DA38898"
    Program............. "/SIE/SAPLAD_Z0HBAPI_TRAVEL"
    Screen.............. "SAPMSSY1 3004"
    Screen Line......... 2
    Information on caller of Remote Function Call (RFC):
    System.............. "########"
    Database Release.... 720
    Kernel Release...... 720
    Connection Type..... "E" (2=R/2, 3=ABAP System, E=Ext., R=Reg. Ext.)
    Call Type........... "synchronous and non-transactional (emode 0, imode 0)"
    Inbound TID.........." "
    Inbound Queue Name..." "
    Outbound TID........." "
    Outbound Queue Name.." "
    Client.............. "###"
    User................ "############"
    Transaction......... " "
    Call Program........." "
    Function Module..... "/SIE/AD_Z0H_BAPI_TRIP_MENU_EP"
    Call Destination....
    Source Server.......
    Source IP Address... "
    Additional information on RFC logon:
    Trusted Relationship " "
    Logon Return Code... 0
    Trusted Return Code. 0
    Note: For releases < 4.0, information on the RFC caller are often
    only partially available.
    rmation on where terminated
    Termination occurred in the ABAP program "/SIE/SAPLAD_Z0HBAPI_TRAVEL" - in
    "/SIE/AD_Z0H_BAPI_TRIP_MENU_EP".
    The main program was "SAPMSSY1 ".
    In the source code you have the termination point in line 164
    of the (Include) program "/SIE/LAD_Z0HBAPI_TRAVELU09".
    I am from level 1 and as per my knowledge there is no change done on the system recently.
    Please guide further.
    Regards,
    uday.

  • Japanese Langauge Logon not possible

    Hello Colleagues
    I am working in 4.6 C IDES system.
    By default the Language Japanese comes installed.
    Even in default profile the parameter entries are maintained.
    But still the logon in client 000 is not possible with the Japanese Language.
    When we login by a different languge and post the Japanese characters for the
    data entry the sytem is not able to identify the Japanese characters.
    It reads the japanese Characters as question mark symbol.
    I will highly appreciate your help and advise in the problem described above.
    Thanks and Regards
    Pooja

    when i provide the suer ID and password in English and the logon language JA.
    I get the error message as;
    00:629 J
    and whn i double click the red cross i get the error message as
    00:127 J
    Thanks and Regards
    Pooja

Maybe you are looking for

  • How to hide the folder name in a KM Navigation Iview

    Hi, Scenario, I am using a KM Navigation Iview with LinkListExplorer Layout set. The Folder Name appears at the top of the collection. Please can someone tell me how I can hide the folder name for the iview. i.e I do not want the folder name to appea

  • MAPPING

    Hi guys,   plz help me.plz tell me about MESSAGE-MAPPING,JAVA-MAPPING,ABAP-MAPING,XSLT-MAPPING. with warm regards. vikash

  • Can't open PDF links in Safari

    Hi, only since a couple of days ago, I couldn't open PDF links in Safari. The page loads but nothing appears in the new window or tab. Thanks, Aaron

  • Open in New Window

    How can I make Safari open a new website when I click an URL on a site? It is annoying not to be able to go back to the original site.

  • Import PO in INR

    Hi gyes M/s xyz is supplying the items from USA to the Local Dealer in India We want to place On the local dealer The items are imorted items which will be delivered on High Seas Sale basis.to the Local Vendor we Shall be paying all The Customs duty,