File System Repository problem

Hello guys,
I'm on:
J2EE Engine 6.40 PatchLevel 98256.313
Portal 6.0.14.0.0
KnowledgeManagementCollaboration 6.0.14.4.0 (NW04 SPS14 Patch 4)
running on a Windows machine.
I'm trying to set up a File System Repository to connect to a remote share on another Windows machine. I followed the documentation and also some hints here from SDN and still can't connect to the share.
In component monitor it says:
Startup Error: The localroot does not exist:
10.80.1.55\Test_portal
In a trace log I'm getting this:
#1.5#000BCD3F823F00260000000800000AB000040D879131A728#1140775814806#com.sapportals.wcm.service.fsmount.FSMountService#sap.com/irj#com.sapportals.wcm.service.fsmount.FSMountService#Guest#59####3a9c7e20a51d11da928e000bcd3f823f#Thread[ConfigurationEventDispatcher,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Error##Plain###Error mounting drive ,path
10.80.1.55
Test_portal#
#1.5#000BCD3F823F00260000000900000AB000040D879131ABAB#1140775814806#com.sapportals.wcm.service.fsmount.FSMountService#sap.com/irj#com.sapportals.wcm.service.fsmount.FSMountService#Guest#59####3a9c7e20a51d11da928e000bcd3f823f#Thread[ConfigurationEventDispatcher,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Warning##Plain###FSMountService Reconfiguration (New path) failed to mount network path
pr1141
Test_portal - com.sapportals.wcm.service.fsmount.RemoteAccessException: Network component not started:
10.80.1.55
Test_portal
     at com.sapportals.wcm.service.fsmount.FSMountService.mountDrive(FSMountService.java:90)
     at com.sapportals.wcm.service.fsmount.FSMountService.updateConfigurables(FSMountService.java:349)
     at com.sapportals.wcm.service.fsmount.FSMountService.reconfigure(FSMountService.java:287)
     at com.sapportals.wcm.crt.CrtThreadSafeComponentHandler.tryToReconfigure(CrtThreadSafeComponentHandler.java:297)
     at com.sapportals.wcm.crt.CrtThreadSafeComponentHandler.handleReconfigure(CrtThreadSafeComponentHandler.java:147)
     at com.sapportals.wcm.crt.CrtComponentManager.reconfigureComponent(CrtComponentManager.java:343)
     at com.sapportals.wcm.crt.CrtConfigurationEventListener.notifyComponentConfigChanged(CrtConfigurationEventListener.java:79)
     at com.sapportals.wcm.repository.runtime.CmConfigurationProvider.sendChangeEvent(CmConfigurationProvider.java:1288)
     at com.sapportals.wcm.repository.runtime.CmConfigurationProvider.sendChangeEventOrRestart(CmConfigurationProvider.java:1237)
     at com.sapportals.wcm.repository.runtime.CmConfigurationProvider.configEvent(CmConfigurationProvider.java:256)
     at com.sapportals.config.event.ConfigEventService.dispatchEvent(ConfigEventService.java:210)
     at com.sapportals.config.event.ConfigEventService.configEvent(ConfigEventService.java:98)
     at com.sapportals.config.event.ConfigEventDispatcher.callConfigListeners(ConfigEventDispatcher.java:299)
     at com.sapportals.config.event.ConfigEventDispatcher.flushEvents(ConfigEventDispatcher.java:248)
     at com.sapportals.config.event.ConfigEventDispatcher.run(ConfigEventDispatcher.java:105)
I had an idea that it could be because of the Serverlet Engine User, which is set up due to documentation, but is only a local user not a domain user. I don't know to which extent this user is important for FS Mount Service. I thought, that for connecting to a remote share, there is only important the user and password set up in Network Path settings in CM.
Changing the user on which is EP running is quite a difficult step due to our security policies and so on. So I would rather not experiment with this until I try all the other possibilities.
Could you, please, give me some advice?

Hi Jiri,
have you used double forward slashes in your network path? Please try: //10.80.1.55/Test_portal
You can also test from the portal machine that you can mount the drive via command shell:
"net use t:
10.80.1.55\Test_portal /user:DOMAIN\USER"
(make sure you specify the user with domain)
Hope this helps,
Robert

Similar Messages

Problem in create index on file system repository

I want to create an index on file system repository,but have some problem.
1) create a windows filesystem repository
2) I can found the repository entry in KM content
3) go into "index administration" and create index,but I can not found the entry when I pressed "add" button on datasources page

hello Karsten
thanks for your consideration.
After create a Windows file system Repository,I create the index as the fowllowing step.
1) go to the page System Administration=>Knowledge Managment=>Index Administration and click Create button for creating index, then a form appeared.
2) fill in the for specified value, then press Create Index button to create index
3) click on DataSource link, in the Datasource Tab, click the Add button, then I could see all of folders on the screen( such as documents,calendar,etc), but I can not found the Windows File system Entry that just I created.
I can not create a index for the Windows File System
what is the wrong with it?
thanks

Problems with the File System Repository & User Mapping!

Hi All
I am having a problem with a file system repository, and setting up user mapping for that repository.
I have done the following:
Created a File System Repository
Created a Network Path
Created a System (Including the alias)
Now when I go into User Administration and select my user the is no user mapped systems to select.
All this system is doing is connecering to a folder on our File System.
Any help would be great as this is really frustrating!
Thanks
Phil

I am using EP7 Stack 11 and unfortunately the only options I have are:
user
admin
admin,user
It is currently set to admin, user and does not seem to work!
Phil
Message was edited by:
Phil Wade

Problem of Network File System repository

Hi all:
I want to set up a File system repository on a remote server.
The steps are here:
1.Define a Network Path.
2.Set up a File system repository.
Things done when the file system and the portal server are in the same zone of address,like 10.XXX.5.XX and 10.XXX.5.XXX, but when reference to another file system, which IP is 10.XXX.10.XX, the repository can never start up!
The message in Component Monitoring is "The localroot does not exist:
10.XXX.10.XX"
How can I solve this problem?

Hi Rani,
1.I think I have done all the steps setting up a File system repository. And when the server and File system are in the same segment of IP address, the repository works.
Security Manager:AclSecurityManager
ACL Manager Cache: not set
Windows Landscape System: not set
2.when use servername as the path, the message on monitoring is still on IP address.
3.I can't see the folder
4. I can open the path from the server on exploer.

Problem with File System Repository after release change

Hello,
we have been changing the Portal release from EP 6.0 to SAP NetWeaver Portal 7.0 SP17. The OS of the host is Windows 2003 Server.
If I open the component monitor to watch the repostitories, the state of the file system repositories are red and a error message occurred:
Startup Error: getting mapped math - Logon failure: unknown user name or bad password
I checked the logon credentials....they are ok. Also I checked the access from the Portalhost to the Windows File System....it´s ok too.
In our previous portal release the FSR were ok!!
Is there a difference between the file system repository configuration in portal 6.0 and portal 7.0?
Thanks and regards
Tom

Hello Hussain,
I have checked the username and the password of the user who have full access on the Windows file system, but the same error occurred. In the Network Path we have configured a domain user for the file system access. Here is the configuration of the network path:
Name: Test
Description: Test
Networkpath:
Host\share
Password: ****
Re-enter Password: ****
User: domain\user
Here the configuration of the repository:
Name: Test
Description: Test
Prefix: /Test
Lookup Mode: caseless
Root Directory:
Host\share
Repository Services: Nothing
Property Search Manager: com.sapportals.wcm.repository.manager.generic.search.SimpleManagerSearchManager
Security Manager: AclSecurityManager
ACL Manager Cache: ca_cm_rep_acl
Windows Landscape System: Microsoft_Windows_KM
Read only: unchecked
Could it be that I need a user mapping for the access of the windows file system?
Perhaps the configuration of the Windows Landscape System is wrong?
regards
Tom

Access Denied when access to File System Repository

Hi,
Our SAP Portal install in Windows 2003, and access to a unix's file system that created from File System Repository of Portal. When I access it in KM content, SAP Portal return the following message:
System Error
An exception occurred during the program execution. Below you will find technical information pertaining to this exception that you might want to forward to your system administrator.
Exception Class: class com.sapportals.wcm.repository...
Exception Message: Access denied
If I double-click any file,
IE return 403: The requested operation is forbidden for this resource.
Please help me to fix this problem?
PS: The unix's file system mode is 777.
The permission of folder in Portal File System Repository is everyone full control.
Message was edited by: Jeff Lien
Message was edited by: Jeff Lien

Hi,
to my knowledege, this combination is not supported. You can integrated Windows-File-Shares in a Unix-Portal: http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm but not the other way round
Kind reagrds
karin

File System Repository - User Mapping not Working

Hi,
I tried to integrate a file system into KM. For doing so, I followed the guide located at [http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm|http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm].
The only problem is, tht the user mapping doesn't seem to work...
The portal is running on a UNIX system, whereas the file share to be integrated is running on a Windows 2003 Server.
Here are the single steps that I performed:
- Creation of a KM Windows System in the system landscape directory with the ID "MySystem". User Mapping is set to "User,Admin"
- Creation of a Windows System in the system landscpe of the KM with the ID "MySystem"
- Creation of a Network Path in KM with following settings:
jCIFS Protocol is activated; Network Path = "
My Server\My Share"; User = "My Windows Domain\My User" and the according password. The specified user has administration permissions on the server.
- Creation of a readonly File System Repository Manager with following settings:
Root-Directory = "
My Server\My Share", SecurityManager = W2kSecurityManager, ACL Manager Cache = ca_rsrc_acl, Windows Landscape System = "MySystem"
- Configuration of the W2KSecurityManager: I specified the DomainFile-setting as "/etc/companydomaincontrollers.txt"
and placed such a file in the KM with following setting: "My.Server.Domain=According IP Adress"
- In UME I carried out user mapping for index_service user and placed the above mentioned admin user into the user mapping.
Result: The indexing works fine, all fles are indexed. When I however try to carry out a user mapping for a "normal" portal user in the UME it doesn't work: The portal user has no access to the file system. (I used the same admin user for mapping... so it should work).
Any help is appreciated...
P.S. With portal super admin users I can however access the fle system repository, even without user mapping. But I think this is ok, because I read in one forum message that admin users have always access in general....

>
Frank Friedrich wrote:
> Hi Clemens,
>
> so the good think is that indexing is working and you can navigate with your admin portal user through the file system repository. In this case the most configuration settings must be correct.
>
> I am not quite sure regarding your System objects with the ID "MySystem". Do you have as well define an Alias Name for this System Object with the same name "MySystem" ? As well upper and lower letters are important.
>
> Because the reference is all the time the Alias name and not the ID or Name of your System object.
>
> Best regards
> Frank
Hi Frank,
thanks for your reply.
I have as well definied an Alias Name with exactly the same id. So this gives us following:
System landscape directory: KM Windows System with id="MySystem" and Alias="MySystem"
KM System Landscape: Windows System with id="MySystem"
In the created file system repository manager I also set "MySystem" for the Windows Landscape System parameter.
So I think that this should be correct (I also considered upper- and lowercase letters).
Maybe the probem lies in specifying the domain names? When I applied user mapping I always additionally specified the Windows domain name of the users, which is correct I think.
In the security manager configuration for the domain controllers (-> [http://help.sap.com/saphelp_nw04s/helpdata/en/a9/c54e9e09448d46b73d154e93d5e995/content.htm]) I however mapped the network domain of the file share server to the according IP adress. Maybe this is wrong?

Unable to create File System Repository using Network Path

Hi All,
I am trying to create a File System Repository.
I created a networkpath and windows system and used the same while creating File Repository according to the steps in help.
With out using Networkpath(i.e.,If I use IP address,I am able to create File System Repository).
But with the network path,it throws the following error as seen in Component Monitor.
Startup Error: The localroot does not exist: C:\usr\sap\IGTE\j2ee\j2ee_00\cluster\server\NWP_001
My network path is NWP_001

Did any one face this problem?
Any help please........
Rgds,
Santhosh

Hi,
I am getting the same error even if I replace(\) by slashes(/).
I tried on EP6SP12 as well as EP6SP2 and got the same error on both.
The repository is searching for a folder named with
n/w path on the portal server itself(i.e, it is searching in the following folder
C:\usr\sap\IGTE\j2ee\j2ee_00\cluster\server\NWP_001
My network path is NWP_001),instead of searching on the remote system.
Can any one help me in solving the problem
Thanks in Advance.
Rgds,
Santhosh

Adding custom properties to a File system Repository

Hi KM-Experts
I have integrated a local file server in the portal, and need to attach some custom properties to the files located on the server.
The documentation for a File System Repository displays that this task is not possible. Is there some kind of work around?
I can se that you can attach standard meta data like ratings etc.
Cheers
John

Hi Robert
Thanks a lot; I think that this will solve most of my problems.
Can I create a CM repository based on an existing fileserver, without deleting or changing any files?
What will happened when files are changed manually on the fileserver, will the repository crash or will a lot of dead links occur?
If you add some files directly on the file server, will they not be visible through the portal?
I was hoping that there was some kind of incremental update, which could run during the night. I know that its not the best solution, but I am interesting in the limits of this repository solution, because the employees access the fileservers directly during the portal implementation period.
Cheers
John

Custom property for file in File System Repository

Hi,
I have create a folder on KM using File system Repository access a network path, but facing a problems that the folder can't support custom property and can't classifiable.

hi
http://help.sap.com/saphelp_nw04/helpdata/en/69/d96b83a84611d5993600508b6b8b11/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/43/2e6868c6ce72408d982213e314fda1/content.htm.please don,t forget points
with regards
subrato kundu

File System Repository

Hi all,
I want to create the file system repository for my system .
Here is what i have done.
Created a directory on my local machine and shared it giving the folder full access.
Created a system in CM and system configuration (KM windows system) and I have done user Mapping
Created Network path and I have given my user name and pwd in that.
While creating the file system repository I have given Windows Landscape System as what I have given in CM and Security Manager as W2ksecurity Manager.
But it shows the following error in component Monitoring.
Startup error: The local root does not exist:
172.25.12.154\smilies
I have reffered the following link
[Integrating Documents from a Windows System into KM |http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm]
What is the problem? Whether I have missed anything ?
Thanks & Regards,
Hemalatha J

Hi Hema,
1. Does the User specified in Network Path have full access to specified folder?
2. Check the Host within URL Generator Service (Content Management -> Global Services -> URL Generator Service)
3. Check your KM-Windows System (User Mapping Type = admin,user?)
4. Did you define an Alias for you KM-Windows System? The Property Windows Landscape System within the FileSystem Repository must point to the Alias name of your KM-Windows System
Best regards,
Denis

File System Repository Error!!

Hello
i have created a File System Repository i.e.
Content Management --> Reposiroty Managers --> File System Repository
and given the
Prefix /ShareFile
Lookup mode caseless
Root Directory as d:/km
now when i check in the component monitoring it showing me error
component monitoring --> repository managers --> ShareFile
it gives error
Startup Error: The localroot does not exist: /oracle/j2ee/cluster/server0/D:\KM 
how do i rectify this error
useful answers will be rewarded
Regards
JM

Hello
i will just explain you the scenario i m working on
i want to configure the File System Repository
i go in the configuration path of File System Repository
there i give
Name ShareFile
Prefix /ShareFile
Root Directory D:\KM (which is a local file on my HDD)
i have created Network Path also
Name: NetworkPath
Network Path : D:\
and then when i go in the
System Administration → Monitoring → Knowledge Management → Component Monitor
it shows red light against the ShareFile
i feel this information will help to give me solution for my problem
useful answers will be rewarded
Regards
JM

Crawler Error when indexing file system repository

Hi all:
I am configuring an index of File system repository.
The version of my ep is EP 7.0 sp12, installed on HP-UX
My Trex is 7.0,installed on Win 2003
Some of the properties of my repository is:
Services:    properties,rating
Property serch Manager:    SimplePropertySearchManager
Security Manager:     AclSecurityManager
The states of repository is green.
When I create an index, the index can't index any of the files. Please help me to see the problem. Thank you!
Exception is like:
class com.sapportals.wcm.repository.InvalidNameException
Logon failure: account currently disabled.
com.sapportals.wcm.repository.InvalidNameException: Logon failure: account currently disabled.
        at com.sapportals.wcm.repository.ResourceException.fillInStackTrace(ResourceException.java:399)
        at java.lang.Throwable.(Throwable.java:195)
        at java.lang.Exception.(Exception.java:41)
        at com.sapportals.wcm.WcmException.(WcmException.java:59)
        at com.sapportals.wcm.util.content.ContentException.(ContentException.java:38)
        at com.sapportals.wcm.repository.ResourceException.(ResourceException.java:238)
        at com.sapportals.wcm.repository.InvalidNameException.(InvalidNameException.java:33)
        at com.sapportals.wcm.repository.util.file.FileUtils.checkFilePathTolerating(FileUtils.java:140)
        at com.sapportals.wcm.repository.util.file.FileUtils.checkFilePath(FileUtils.java:103)
        at com.sapportals.wcm.repository.manager.sfs.FSFile.(FSFile.java:89)
        at com.sapportals.wcm.repository.manager.sfs.FSFile.createInstance(FSFile.java:81)
        at com.sapportals.wcm.repository.manager.sfs.FSRepositoryManager.getResource(FSRepositoryManager.java:223)
        at com.sapportals.wcm.repository.RMAdapter.getResource(RMAdapter.java:227)
        at com.sapportals.wcm.repository.runtime.CmAdapter.findResource(CmAdapter.java:1349)
        at com.sapportals.wcm.repository.runtime.CmAdapter.findManagerAndResource(CmAdapter.java:1322)
        at com.sapportals.wcm.repository.runtime.CmAdapter.getResourceImpl(CmAdapter.java:979)
        at com.sapportals.wcm.repository.runtime.CmAdapter.getResource(CmAdapter.java:192)
        at com.sapportals.wcm.control.base.WcmResourceControl.createResource(WcmResourceControl.java:118)
        at com.sapportals.wcm.control.base.WcmResourceControl.getSafeResource(WcmResourceControl.java:68)
        at com.sapportals.wcm.control.navigation.ResourceDetailsHeaderControl.render(ResourceDetailsHeaderControl.java:160)
        at com.sapportals.wdf.layout.HorizontalLayout.renderControls(HorizontalLayout.java:42)
        at com.sapportals.wdf.stack.Pane.render(Pane.java:155)
        at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
        at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
        at com.sapportals.wcm.control.layout.HorizontalGroupLayout.renderPanes(HorizontalGroupLayout.java:49)
        at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
        at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
        at com.sapportals.wdf.WdfCompositeController.doInitialization(WdfCompositeController.java:282)
        at com.sapportals.wdf.WdfCompositeController.buildComposition(WdfCompositeController.java:660)
        at com.sapportals.htmlb.AbstractCompositeComponent.preRender(AbstractCompositeComponent.java:33)
        at com.sapportals.htmlb.Container.preRender(Container.java:120)
        at com.sapportals.htmlb.Container.preRender(Container.java:120)
        at com.sapportals.htmlb.Container.preRender(Container.java:120)
        at com.sapportals.portal.htmlb.PrtContext.render(PrtContext.java:406)
        at com.sapportals.htmlb.page.DynPage.doOutput(DynPage.java:237)
        at com.sapportals.wcm.portal.component.base.KMControllerDynPage.doOutput(KMControllerDynPage.java:130)
        at com.sapportals.htmlb.page.PageProcessor.handleRequest(PageProcessor.java:129)
        at com.sapportals.portal.htmlb.page.PageProcessorComponent.doContent(PageProcessorComponent.java:134)
        at com.sapportals.wcm.portal.component.base.ControllerComponent.doContent(ControllerComponent.java:77)
        at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
        at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
        at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
        at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
        at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
        at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
        at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
        at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
        at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
        at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
        at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
        at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
        at com.sapportals.wcm.portal.connection.KmConnection.handleRequest(KmConnection.java:52)
        at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

Hi Lou,
Please go though the following thread and check your configurations according to that. I think it will help you.
https://www.sdn.sap.com/irj/sdn/thread?threadID=403393&messageID=3429730#3429730
regards,
Chamkaur

Unable to see created File System Repository

Hi,
I have created a File System Repository following the link below:
http://help.sap.com/saphelp_nw04s/helpdata/en/e3/92322ab24e11d5993800508b6b8b11/frameset.htm
I am not able to do user mapping by going in personalize as I can found my windows System there.
Do I have to create a new system mwhere else.
BTW, I am mapping to a remote window system with the KM.
Please give useful suggestions.
Points given for problem solving answers.
Sumit

Hi,
Example configuration of a WINDOWS® file system repository manager given in the Help.sap.com.
Creating System:
http://help.sap.com/saphelp_nw04s/helpdata/en/e3/92322ab24e11d5993800508b6b8b11/frameset.htm
Specifying User Mapping:
http://help.sap.com/saphelp_nw04s/helpdata/en/e3/92322ab24e11d5993800508b6b8b11/frameset.htm
Senthil K.

Windows & File System Repository - security issues

Hello,
I got a strange behavior in EP 6 SP 2 using KM and Windows file systems. Here is the scenario:
- I created a Network Path and a File System Repository pointing to a Windows 2003 File System, following the portal help instructions. Both EP6 server and Windows 2003 server are in the same domain.
- according the KM Monitor, the repository is up and running
- the portal users can access their respectives folders in the file system after having their uids / passwords mapped in the user mapping option
- the portal is assuming the permissions (read & write & list folder & etc) from windows
So far it seemed to be everything ok - but after some tests we got the problem:
- user "A" has his uid/pwd mapped in portal, and read & write access to the file system "dept_folder". He can access the folder through a KM iview, with r/w privileges.
- user "B" has his uid/pwd mapped in portal, and ONLY read access to the file system "dept_folder". He can access the folder through an KM iview, with read privileges.
- and here comes the problem: if user "A" is logged, and user "B" replaces his uid by user "A" uid in the user mapping (only the uid, the password doesn't matter) he can access the file system "dept_folder" with the same privileges than user "A".
I looked in SDN, SAP Notes and SAP Portal Help trying to find an article related to this, no success so far. We have CM Patches 2 & 3 applied, and Patch 4 doesn't have any comment about this specific security problem.
Has someone already face this problem ? Or could be something wrong in my configuration ?
Rgds, and tks in advance
Fernando Cervantes

Hi David
The same occurred here, I think I know the reason. Let me just give you an overview of my configuration:
Network Path id          ccc-ccc1fs-drive_i
Description *           DRIVE I - CCC1FS Server
Network Path *
ccc1fs\Drive_I
Password           *********
Re-Enter Password      *********
User *           ccc\service
The user was provided by the Windows administrator and has full control for this folder.
File System Repository
Description                  File System drive_i CCC1FS Server
Prefix *                /ccc-ccc1fs-drive_i
Root Directory *           //ccc1fs/drive_i
Windows Landscape System      Windows
ACL Manager                Not set
Security Manager          W2KSecurityManager
The important here is the Security Manager configuration - it must be W2KSecurityManager, otherwise you will have the user permissions overrided by admin user permission. And you will need to configure a Windows system landscape too.
I hope this can help you...concerning the bosses, I got the same situation, I said the whole stuff would work fine
Rgds,
Fernando

File System Repository problem

Similar Messages

Maybe you are looking for