Firefighter - Message to Firefighter / Multiple Logon

Hello
We are in the process of setting up SAP GRC - FIREFIGHTER and have encountered the following issues...
1) Multiple users can logon using the same Firefighter ID at the same time? Is this correct - my understanding was that only one firefighter could use the Firefighter ID at once?
2) When a Firefighter is logged on - the field - FF ID Used by - remains blank - is this correct? my understanding was that this should show the firefighter who is using the logon.
3) When you click on the 'message to firefighter' icon - the message 'no firefighter is using the xxxxxx FirefightID' appears - even though a user is logged on with this ID.
I suspect all three issues are related....
For all the above:
- Do you know if this functionality has been removed from Firefighter application?
- Is there a setting or parameter that I need to set to enable the above features?
Thanks in advance
FYI - I have checked OSS notes and can't find anything relating to this.

Hello Michael,
I have experienced the same exact error. First of, you are correct in that only 1 person should be able to log in with a Firefighter ID at a time.
Our issue was due to two services using the same port number in the application server located in the etc/services file. SAP Note 947726 addresses this issue. It also provides details on how to test and confirm if you are having an issue with your etc/services file.
Regards,
Joe Klein

Similar Messages

Multiplie logon message *every* time I try to logon?

Hello,
I hope that someone can help me with this: before few weeks I had sudden failure in SAP and I was disconnected from the system and after that momment *every* time I logon I see this multiplie logon message:
http://img255.imageshack.us/img255/7163/04feb1310713pm.jpg
Why is this happening exactly and how can I solve it? I must note that *only* I use this licence and know the password and nobody else didn't for sure.
Many thanks in advance for prompt replies!
Cheers,
Sam

Hi Sam,
The old session is stuckup.You can either:
1. Goto SM04 and try to kill the session by either logging off user system wide else goto Session -> Select Session -> End session.
2. If this doesnt work , you can goto OS level and Kill the Process by kill -9 <pid> . Pls confrim with the administrators before doing this.
3.Else even if this doesnt work, you have to reboot the server. Pls be careful if it is a production system.
Pls try and let us know.
Regards,
Madhura.

Multiple Logon in Production

All,
I am trying to understand the actual risk of allowing users multiple logon in production systems. As of now I believe that should logon credentials be stolen then it's not possible to monitor illegal logons and also a possible data inconsistency.
Please throw some light, have tried searching with the logon profile parameters in the forum and online, but nothing concrete found.
Kind Regards,
AJS

Hi Avinash,
Production system should not allow multiple logon.
Please have a look at below for restrict multiple logins :-
[Restrict multiple logins for a single user in Portal |/message/6942923#6942923 [original link is broken];
[Limiting Number of Users Logged On |http://wiki.sdn.sap.com/wiki/display/EP/LimitingNumberofUsersLogged+On]
Hope it helps
Regards

Multiple Logon disable

Dear All ,
while multiple logon are performed.SAP pop-up a message with 3 options
1.terminate logon
2.continue with the logon
3.continue with the logon terminating other sessions.
Here we Want to disable the 2 option that is : continue with the logon.
Here we came to know : we can add the following parameterto the instance profile
logon/disable_multi_gui_login
Pl guide with the steps how to add this & where ( Tcode & procedure ) .
Regards

Hi,
Please go through the below SAPnote to get better clarity on it.....
Note 142724 - Prevention of multiple SAPGUI logons
PS: If this parameter is set to value 1, multiple SAPGUI logons (in the same client and with the same user) are blocked by the system. The parameter is effective during the SAPGUI logon. Logons to the system using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not influenced by the profile parameter. Furthermore, SAPGUI transaction calls (iViews) that are placed through the Workplace or the Enterprise Portal are not controlled with regard to multiple logons...
Regards,
PY

Does XI Adapter (ABAP Proxy) allows multiple LogOn Languages??

Hi ALL,
I have a doubt like whther we can give multiple logon languages in the XI Receiver Adapter ( ABAP Proxy ).
For example,
I am getting data in "English" - EN , "Russian" - RU , "Japanese" - JA etc. Can I give these all languages as "LogOn Language" while configuring the XI receiver adapter? If so how? else, is there any other option for this.
Thanks,
Anudeep.

hi,
I don't think it's possible to precise dynamically the logon lanaguage which has to be used in the receiver XI adapter (proxy).
[Help SAP on XI adapter|http://help.sap.com/saphelp_nw70/helpdata/EN/99/115281baba404890d2561617a78409/frameset.htm]
Maybe a solution could be in the mapping to have a rule which determines the receiver (EN, RU,JA) that should receive a message or another one, and then for each receiver to specific a unique CC. So in your case to define three CC (one for each langauge): EN + RU + JA.
Anyway I don't really understand the reason to manage that... The interest of logon language is when we want to write a text. But in SAP you can write a Japan text even if you are log-in in English by specifying the Language Code !
So maybe the solution of your problem, is to send to your proxy the text but also the ISO language code linked to this text, so to do what SAP does in IDoc and BAPI.
regards
Mickael

WebSapconsole multiple logon

Hi... How do we do to work in our RF devices with multiple logon with the same user ID??
We've already checked the option "Permit multiple logon" in SAPConsole Administrator, but the system just show us the message: "User XXX already logged on to client ###".
TIA.
A.

Have you already found a solution for this issue, because I have the same problem!
I think it isn't possible or it should be avoided! The following is a quote from SAP Note 380399: "According to the connection rules for RF transactions, a user must not be connected to the same system simultaneously from a few RF devices."
Thanks in advance!
SJ

A Kerberos Error Message was received: on logon session

Hi i am getting this error in event viewer in a client machine, from where powershell sccripts collecting data from our sharepoint servers
Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
Date:          9/16/2014 11:09:42 PM
Event ID:      3
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PortalHealthChe.XYZportal.com
Description:
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 20:9:42.0000 9/16/2014 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error: 0xc0000035 KLIN(0)
Client Realm:
Client Name:
Server Realm: XYZPORTAL.COM
Server Name: HTTP/XYZWFE01.XYZPORTAL.COM
Target Name: HTTP/[email protected]
Error Text:
File: 9
Line: f09
Error Data is in record data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
    <EventID Qualifiers="32768">3</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-09-16T20:09:42.000000000Z" />
    <EventRecordID>5466</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>PortalHealthChe.XYZportal.com</Computer>
    <Security />
</System>
<EventData>
    <Data Name="LogonSession">
    </Data>
    <Data Name="ClientTime">
    </Data>
    <Data Name="ServerTime">20:9:42.0000 9/16/2014 Z</Data>
    <Data Name="ErrorCode">0x7</Data>
    <Data Name="ErrorMessage"> KDC_ERR_S_PRINCIPAL_UNKNOWN</Data>
    <Data Name="ExtendedError">0xc0000035 KLIN(0)</Data>
    <Data Name="ClientRealm">
    </Data>
    <Data Name="ClientName">
    </Data>
    <Data Name="ServerRealm">XYZPORTAL.COM</Data>
    <Data Name="ServerName">HTTP/XYZWFE01.XYZPORTAL.COM</Data>
    <Data Name="TargetName">HTTP/[email protected]</Data>
    <Data Name="ErrorText">
    </Data>
    <Data Name="File">9</Data>
    <Data Name="Line">f09</Data>
    <Binary>3015A103020103A20E040C350000C00000000001000000</Binary>
</EventData>
</Event>
adil

Hi
i am getting this error in a client machine
Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
Date:          9/16/2014 11:09:42 PM
Event ID:      3
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PortalHealthChe.XYZportal.com
Description:
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 20:9:42.0000 9/16/2014 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error: 0xc0000035 KLIN(0)
Client Realm:
Client Name:
Server Realm: XYZPORTAL.COM
Server Name: HTTP/XYZWFE01.XYZPORTAL.COM
Target Name: HTTP/[email protected]
Error Text:
File: 9
Line: f09
Error Data is in record data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
    <EventID Qualifiers="32768">3</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-09-16T20:09:42.000000000Z" />
    <EventRecordID>5466</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>PortalHealthChe.XYZportal.com</Computer>
    <Security />
</System>
<EventData>
    <Data Name="LogonSession">
    </Data>
    <Data Name="ClientTime">
    </Data>
    <Data Name="ServerTime">20:9:42.0000 9/16/2014 Z</Data>
    <Data Name="ErrorCode">0x7</Data>
    <Data Name="ErrorMessage"> KDC_ERR_S_PRINCIPAL_UNKNOWN</Data>
    <Data Name="ExtendedError">0xc0000035 KLIN(0)</Data>
    <Data Name="ClientRealm">
    </Data>
    <Data Name="ClientName">
    </Data>
    <Data Name="ServerRealm">XYZPORTAL.COM</Data>
    <Data Name="ServerName">HTTP/XYZWFE01.XYZPORTAL.COM</Data>
    <Data Name="TargetName">HTTP/[email protected]</Data>
    <Data Name="ErrorText">
    </Data>
    <Data Name="File">9</Data>
    <Data Name="Line">f09</Data>
    <Binary>3015A103020103A20E040C350000C00000000001000000</Binary>
</EventData>
</Event>
adil

SAPGui for Windows Multiple Logon with Portal

Hi,
We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
I came across certain threads and also notes but none seem to provide a solution....
[Restrict multi logon to R/3 system from portal using single sign on. |Restrict multi logon to R/3 system from portal using sigle sign on.;
[SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it? |/thread/1623980 [original link is broken];
Note 142724 - Prevention of multiple SAPGUI logons
Thank you in advance.
Best regards,
Dharmi
Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

Lonny,
The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
Thanks,
Tim

Remote Desktop Gateway and WebAccess Deployment - Multiple Logon Prompts

I'm having a few issues with some multiple logon prompts using "Connect to a remote PC" via RD Web Access.
I am able to log onto the RDWeb without a problem.
Essentially once I make a connection to my end-device I first receive a logon prompt, I'm authenticated, then I'm asked again for another logon prompt. Any ideas how to resolve this?
My layout is simple:
1 VM in the DMZ that has the Remote Desktop Gateway and Remote Desktop Web Access roles installed. No connection broker, or session host.
With my deployment I have a wildcard certificate bound to the Remote Desktop Gateway and it is bound properly in IIS. Remote Desktop functionality through the RDGateway works just fine. However, the only nuisance is that I get prompted multiple times for
credentials when accessing the end-device regardless if my connection is from a domain-joined machine or a non-domain joined machine.
I've tried using Web Single Sign On via http://anandthearchitect.com/2014/01/20/rds-2012-r2single-sign-on-using-windows-authentication-for-rdweb-page/ and it still does not work.
Any ideas?
Thanks,
Dan

Hi Dan,
How many prompts are you seeing? Expected behavior for Connect to a remote PC would be this:
1. Log on to RDWeb
2. Select Connect to a remote PC tab
3. Enter server name in Connect to box, click Connect
4. Unknown publisher warning, click Connect
5. Credentials prompt, it should say These credentials will be used to connect to the following computers: 1. rdgw.domain.com (RD Gateway server) 2. remote.domain.com (remote computer)
6. After entering credentials and clicking OK it should log you in to the remote computer. This assumes that the destination is authenticated properly (usually via certificate) and the credentials are valid for both the RDG and the remote
computer. Normally in a domain environment the same credentials (domain\username) would be valid for the RDG and the remote server.
-TP

Switched from Samsung Note 2 to iphone 6. Faced Difficulties while sending message. [1]Multiple Selection of receipients is not available. Eg. If I click plus, it shows me all the contacts but i cannot select multiple contacts using checkbox

Phone : IPhone 6
OS : 8.1
Problem Statement : Multiple Selection of Recipients while drafting New Message in SMS.
Expected Solution : Checkbox should have been provided to select multiple contacts using one screen

Thanks for the reply.. I also tried that way.. I face couple of issues
1) I could not find an option of saving a Draft Message
2) After multiple recipients(I have selected 12 recipients) in "TO" section, if I type a word in "TO" such as "Pre", it shows me all the contacts containing "Pre" but I cannot select the last contact incase there are more than 20 contacts coz I am unable to scroll down till the end.. If I do so.. I cannot select coz screen scrolls up automatically..
Pls try ... If required I will insert video

Split an inbound xml message in to multiple o/b idocs

HI,
We have a requirement to split an XML message(Source) into multiple idocs with different order nos and respective item details. We are working on XI 3.0 and we have a restriction not to use the BPM. Could you please let me know whether its possible to do 1:n mapping in XI 3.0 and how can we do this ?
Thanks,
Hari

Then how you can do that in PI,we should know how many Target IDocs required,then we can import it in to PI.
if you want to genarate same IDoc multiple times then we can do this,like change IDoc occurace to 0 to Unbounded then import as a external def and use it in mapping,logic you have to write in mapping.
Regards,
Raj

Jms message filtering with multiple fields

Hi
Can anybody please tell me how to do message filtering with multiple fields. i using jdeveloper11.1.1.4.0 , soa11g suite and weblogic 10.3.
previously i used JMSType property for one field filtering.
and is it possible to invoke jms adapter with our own properties (adding property to jms).
thanks,
Sourbh

thanks atheek
i worked with the same and it helped me a lot i can share one more link that will help.
http://forums.oracle.com/forums/thread.jspa?messageID=9650255&#9650255
Regards,
Sourbh.

How to make "check for multiple logons" mandatory in webdynpro application.

Hi SDN members,
Im having a problem with an application developed in webdynpro abap.
We require that end-user only have a session per computer (ip address),
I already tried to achieve this by configuring the webdynpro application throguh SICF and going to Error Pages -> Logon Errors --> System Logon and mark the checkbox Check for multiple logons.
This configurations give only a warning when the user logs multiple times, and show a checkbox letting the user decide to end or not the previous sessions.
How to make end previuos sessions mandatory ??
Regards,
Franklin Cedillo

You would have to enforce this at the application level. You can get the IP address of the current client from the framework - IF_WD_APPLICATION method GET_REMOTE_ADDRESS.
You could write an entry with the IP address into a temporary table during WDDOINIT. You could clear the entry in the WDDOEXIT. Also during the WDDOINIT, check to see if there is already an entry for this IP address. If so, then fire an exit nagivation plug to a static MIME object or BSP page that explains why the user can only be logged in once.

Multiple logon screen doesnt appear and session end in 30mins

Hi all,
I have a problem with my login session.
Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
thanks.

Check these parameters
login/disable_multi_gui_login
Controls the deactivation of multiple dialog logons
Available as of SAP Basis 4.6
login/multi_login_users
List of excepted users, that is, the users that are permitted to log on to the system more than once.
Available as of SAP Basis 4.6
Find the full list of relevant parameters at:
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

Firefighter - Message to Firefighter / Multiple Logon

Similar Messages

Maybe you are looking for