Gateway host and gateway service query

Hi Friends,
      Happy new year all.
        Im working on <b>sap-siebel</b> integration,in rfc(sm59) destinations -TCP/IP connections ....
    I need to give Program and gateway options in sap system.plz let me know where can i find the gateway host and program for this integration.
           All inputs will get reward points.
Regards,
Lavanya.

Hi Lavanya,
If you are planning to use the TCP/IP destination on the SAP system in Register mode, then a siebel application has to register at the sap gateway using the <b>Program ID</b> given in the TCP/IP destination on the SAP system.
In the TCP/IP destination the gateway options should contain the gateway host of the sap system and the gateway service. usually the gateway host is the message server itself and the gateway service is "sapgwXX", where XX is the <system_number>.
Thanks,
Renjith.

Similar Messages

Gateway Host and Gateway Service

Hi,
   How do I find the gateway host and gateway service when I am creating a RFC Destination. I am new R3 so please be as detailed as possible

Hi, well i have a similar problem. I am trying to run the Template Installer after installing NetWeaver2004s.
During the PIPostInstallProcess i am receiving following error while trying to import Execute SWF_XI_BPM_AUTO_CUSTOMIZE:
Element 'SWF_XI_BPM_AUTO_CUSTOMIZE':Connect to SAP gateway failed
Connect_PM TYPE=A ASHOST=sapru02 SYSNR=00 GWHOST=sapru02 GWSERV=sapgw00 PCS=1
LOCATION    CPIC (TCP/IP) on local host with Unicode
ERROR       max no of 100 conversations exceeded
TIME        Mon May 14 14:54:27 2007
RELEASE     700
COMPONENT   CPIC (TCP/IP) with Unicode
VERSION     3
RC          466
MODULE      r3cpic_mt.c
LINE        10713
COUNTER     1
Element 'SAPDEMO.DX1.Backend.Unclassified':!AbapConfigurationWriter.FM_CALL!SWF_XI_BPM_AUTO_CUSTOMIZE!AbapConfigurationWriter.FAILED!
Well the Host and the Gateway is right, i checked in SMGW. So what might be my problem?!
thx in advance, Jens

Where ti find gateway host and gateway service of PO system?

Hi,
I am using a single-stack PO 7.4 system? I want to know how can I know the gateway host and gateway service of the system? basis team was not able to help so choosing this forum for this.
Regards,
Vikas

Hi Vikas,
you can find the default setting in below blogs or documents
Sending and receiving IDOCs using a single stack SAP PO system
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/5050119d-9c47-3110-eab0-d90ebd211e69?QuickLink=index&…
Configuration of inboundRA in the Java IDoc_AAE Adapter - Process Integration - SCN Wiki
Connect multiple SAP ECC clients from Java IDOC Sender Adapter by Resource Adapter Cloning
regards,
Harish

How to find the Values of SAP Gateway Server Host and Gateway Service Valu

Hi All,
I installed SAPR/3 4.7 EE on Windows. For configuring SLD and LDAP i am unable to give the SAP Gateway Server Host and Gateway Service values.
Can any one plz suggest me how to find these values.
Regds
Phanikumar

Hello, SAP Gateway Server Host and Gateway Service are used to set up rfc connectivity, that is the host name and the system number where your sld and ldap is responding, if you have no sld and no ldap , just simply uncheck that options while installing.
Have a nice week end, Luciano.

Multiple Gateway host and service in sld datasupplier

Hi ,
I need a solution to how to add multiple gatewayhost and gatewayservce in sld profile in EP.

Hi Sunny ,
My issue is also bit similar. Im trying trying to connect R3 and BI to EP.
R3, BI is having different gateway hosts and and services, but in EP ->sld->datasupplier we have option to give only one gateway host and service. so i can able to conect to only one backend system at a time(either r3 or bi).
My req is to connect both the servers at a time. idont have knowledge on standalone gateways. could you send me the related document and help me out to resolve my issue
Regards
Rajeev

Gateway hostname and gateway service name for XI

Hi,
Where can i find the Gateway hostname and gateway service name for XI Integration server. I need this info to input for creating RFC for SAPSLDAPI.
Thanks in advance. Sri

Sri,
You can find this info from t-code SMGW
Choose menu Goto->Parameters->Display and search for entries
gateway hostname and gateway service (usually sapgw00)
Reward if helpfull
Vijay Kothapalli

SAP.m JS/XML and Gateway service

Hello
I've been trying to consume a gateway service with the sap.m classes.
it turned out quite difficult for me as im new in this whole web thing, and most of the examples for sap.m are in XML.
i've tried to convert some of the examples in sap.common to sap.m but couldnt really figure it out.
my XML project returns the error:FlightsSet' refers to an entity set and not to a single entity
flightset is an entity in my gateway service.
my oninit function looks like this:
onInit: function() {
var oModel = new sap.ui.model.odata.ODataModel("proxy/http/serveradress:8000/sap/opu/odata/sap/ZS_ELI_FLIGHT_PROJECT_SRV", false, 'user', 'pass', null);
    this.getView().setModel(oModel);
the xml:
<mvc:View
controllerName="flightproject.TableView"
xmlns:l="sap.ui.layout"
xmlns:mvc="sap.ui.core.mvc"
xmlns="sap.m">
<Table id="idProductsTable"
    inset="false"
    items="{
      path: '/FlightsSet'
    }">
    <headerToolbar>
      <Toolbar>
        <Label text="Products"></Label>
      </Toolbar>
    </headerToolbar>
    <columns>
      <Column
        width="12em">
        <Label text="Flight company" />
      </Column>
      <Column
        minScreenWidth="Tablet"
        demandPopin="true">
        <Label text="Flight ID" />
      </Column>
    </columns>
    <items>
      <ColumnListItem>
        <cells>
          <ObjectIdentifier
            title="{Connid}"
            text="{Carrid}" />
          <Text
            text="{CITYFROM}" />
        </cells>
      </ColumnListItem>
    </items>
</Table>
</mvc:View>
am i doing something wrong? thanks

Hi Lavanya,
If you are planning to use the TCP/IP destination on the SAP system in Register mode, then a siebel application has to register at the sap gateway using the <b>Program ID</b> given in the TCP/IP destination on the SAP system.
In the TCP/IP destination the gateway options should contain the gateway host of the sap system and the gateway service. usually the gateway host is the message server itself and the gateway service is "sapgwXX", where XX is the <system_number>.
Thanks,
Renjith.

Oracle optimizer and heterogeneous services (Transparent Gateway for ODBC)

Hi everyone!
We have the following configuration:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production.
Oracle Database Gateway for ODBC 11.2.0.2.0 on the same machine as Oracle DB.
Non-Oracle DB installed on a different hardware accessed through Oracle Gateway for ODBC via dblink.
Now, we have to query the remote non-Oracle system and retrieve some data. For the sake of brevity let's suppose we have the following table in our non-Oracle DB:
create table test (
     ip_address varchar(15),
     start_time datetime,
     end_time datetime
And we run the following SQL query against the remote table on our Oracle DB:
SELECT start_time,end_time,ip_address
FROM remote_table@db_link
WHERE
end_time >= to_date('2011-10-11 00:00:00','rrrr-mm-dd hh24:mi:ss')
OR (
end_time IS NULL AND start_time >= to_date('2011-10-11 00:00:00','rrrr-mm-dd hh24:mi:ss')
AND start_time <= to_date('2011-10-12 00:00:00','rrrr-mm-dd hh24:mi:ss')
AND ip_address = '127.0.0.1';
But, having query monitoring on the remote DB enabled, we see that the actual query on the remote site looks like this:
SELECT "START_TIME","END_TIME","IP_ADDRESS"
FROM "REMOTE_TABLE"
WHERE "IP_ADDRESS"='127.0.0.1' AND "START_TIME"<=?
All references to END_TIME column are gone from WHERE clause for whatever reason.
However, Oracle execution plan shows us the following:
| Id | Operation | Name | Rows | Bytes | Cost (%CPU)| Time | Inst |IN-OUT|
| 0 | SELECT STATEMENT | | 1 | 27 | 200 (0)| 00:00:03 | | |
|* 1 | FILTER | | 1 | 27 | 200 (0)| 00:00:03 | | |
| 2 | REMOTE | REMOTE_TABLE | | | | | DB_LINK | R->S |
Predicate Information (identified by operation id):
1 - filter("END_TIME">=TO_DATE('2011-10-11 00:00:00','rrrr-mm-dd hh24:mi:ss') OR
"END_TIME" IS NULL AND "START_TIME">=TO_DATE('2011-10-11 00:00:00','rrrr-mm-dd hh24:mi:ss'))
Remote SQL Information (identified by operation id):
2 - SELECT "END_TIME","IP_ADDRESS","START_TIME" FROM "REMOTE_TABLE" WHERE
"IP_ADDRESS"='127.0.0.1' AND "START_TIME"<=:1 (accessing 'DB_LINK' )
This actually means that Oracle CBO decided that it will apply filter on END_TIME column after having retrieved the data from the remote site. We don't want this behaviour but have no idea how to affect execution plan in this case.
So, the question is: How can we force Oracle CBO to not change the initial query and pass it to the remote site "as is"? Is there any way we can achieve this goal?
Edited by: user12024904 on 28-Oct-2011 04:05

Hi,
Our Oracle DB and Gateway are running on the following system:
HP-UX B.11.31 U ia64
The following SQL code is executed in SQLPlus:
SELECT start_time,end_time,ip_address
FROM ip_acc_complete@gr_link
WHERE
END_TIME >= to_date('2010-10-21 00:00:00','rrrr-mm-dd hh24:mi:ss')
OR (
END_TIME is null AND START_TIME >= to_date('2010-10-21 00:00:00','rrrr-mm-dd hh24:mi:ss')
AND START_TIME <= to_date('2010-10-22 00:00:00','rrrr-mm-dd hh24:mi:ss')
AND IP_ADDRESS = '127.0.0.1';
Gateway debug trace shows the following:
Oracle Corporation --- TUESDAY NOV 01 2011 14:59:15.254
Heterogeneous Agent Release
11.2.0.2.0
Oracle Corporation --- TUESDAY NOV 01 2011 14:59:15.254
Version 11.2.0.2.0
HOSGIP for "HS_FDS_TRACE_LEVEL" returned "ON"
HOSGIP for "HS_FDS_SHAREABLE_NAME" returned "/usr/local/greenwich64/lib/libodbc.so.1"
HOSGIP for "HS_OPEN_CURSORS" returned "50"
HOSGIP for "HS_FDS_FETCH_ROWS" returned "100"
HOSGIP for "HS_LONG_PIECE_TRANSFER_SIZE" returned "65536"
HOSGIP for "HS_NLS_NUMERIC_CHARACTER" returned ".,"
HOSGIP for "HS_KEEP_REMOTE_COLUMN_SIZE" returned "OFF"
HOSGIP for "HS_FDS_DELAYED_OPEN" returned "TRUE"
HOSGIP for "HS_FDS_WORKAROUNDS" returned "0"
HOSGIP for "HS_FDS_MBCS_TO_GRAPHIC" returned "FALSE"
HOSGIP for "HS_FDS_GRAPHIC_TO_MBCS" returned "FALSE"
HOSGIP for "HS_FDS_RECOVERY_ACCOUNT" returned "RECOVER"
HOSGIP for "HS_FDS_TRANSACTION_LOG" returned "HS_TRANSACTION_LOG"
HOSGIP for "HS_FDS_TIMESTAMP_MAPPING" returned "DATE"
HOSGIP for "HS_FDS_DATE_MAPPING" returned "DATE"
HOSGIP for "HS_FDS_MAP_NCHAR" returned "TRUE"
HOSGIP for "HS_FDS_RESULTSET_SUPPORT" returned "FALSE"
HOSGIP for "HS_FDS_RSET_RETURN_ROWCOUNT" returned "FALSE"
HOSGIP for "HS_FDS_PROC_IS_FUNC" returned "FALSE"
HOSGIP for "HS_FDS_REPORT_REAL_AS_DOUBLE" returned "FALSE"
using query as default value for "HS_FDS_DEFAULT_OWNER"
HOSGIP for "HS_SQL_HANDLE_STMT_REUSE" returned "FALSE"
SQL text from hgopars, id=1, len=117 ...
00: 53454C45 43542022 454E445F 54494D45 [SELECT "END_TIME]
10: 222C2249 505F4144 44524553 53222C22 [","IP_ADDRESS","]
20: 53544152 545F5449 4D452220 46524F4D [START_TIME" FROM]
30: 20224950 5F414343 5F434F4D 504C4554 [ "IP_ACC_COMPLET]
40: 45222057 48455245 20224950 5F414444 [E" WHERE "IP_ADD]
50: 52455353 223D2731 32372E30 2E302E31 [RESS"='127.0.0.1]
60: 2720414E 44202253 54415254 5F54494D [' AND "START_TIM]
70: 45223C3D 3F [E"<=?]
Deferred open until first fetch.
Performing delayed open.
The non-Oracle DB is CopperEye Retrieval Server with its own custom ODBC driver.
CopperEye query log shows that the following query is received from Oracle Gateway:
01/11/2011 14:26:31 - NEW QUERY :
SELECT "END_TIME","IP_ADDRESS","START_TIME" FROM "IP_ACC_COMPLETE" WHERE "IP_ADDRESS"='127.0.0.1' AND "START_TIME"<=?
which complies with the information in Oracle Gateway trace file.
So, it seems that it's Oracle DB decision to split the original WHERE clause into two parts, delegate one part to the remote site, retrieve the data and then apply the remaining filter locally.

RDS and Gateway issues: Cannot get remoteapps to run without opening port 3389 on firewall

I am testing the setup of a small RDweb server to host QuickBooks for some remote sales users (4 users). For the most part, I have everything installed on one virtual server (using 2012r2 "Quick Start" session host deployment with the additional
Licensing and Gateway server roles added to the same server).
Everything works excellent with one exception. External clients cannot launch published apps without having port 3389 open on the firewall, even with the gateway role installed and the 'Deployment Properties' set to use the gateway. They can properly connect
to the RDweb site and view the published apps. The only way it works is open the firewall port (at which time I can disable the gateway or leave it configured and it works either way). Internally, everything works accordingly. I have followed the steps outlined
on many sites and have combed though the forum here to no avail.
Error received (summarized but is a well documented error):
remote desktop can't connect to the remote computer: 1- Your user account is not listed (it actually is) or 2- You might have specified the remote computer in NetBios format . . etc.
This is an existing SBS 2011 environment with additional virtual servers setup to host QuickBooks as outlined below:
Current setup:
Used Quick Start to install Remote Desktop Services in hosted sessions mode
Installed the additional roles for Licensing and Gateway server on same server
Configured wild card public certificates on all four services (Connection Broker(2), Web Access and Gateway)
Configured internal DNS to properly lookup our external FQDN of this server (ex. quickbooks.contoso.com points to quickbooks.contoso.local
One thing I noticed (just now) when I launch a published app and the firewall has port 3389 closed, a dialog box pops up directly after launching the app that warns about running a RemoteApp program and mentions the Remote Computer and the Gateway Server
as both the same (which it is); however, I would have assumed one would have listed the internal server's name while, instead, both are listed as the external FQDN. Either way, internal DNS should still allow it to properly route . . no? I don't know . . I'm
sure I am just missing something in a routing configurations somewhere. The gateway service is not properly looking up the RDweb service and then seeming not routing the encapsulated RDP session through HTTPS. . .. is my guess . .
I was reading about the "set published name" commandlet; however, I am not experiencing a certificate name mismatch; however, the certificate name does show up as *.contoso.com versus the actual name. I may just be grasping as straws now . . :)

Ok, while I was in the server and looking over the BPA scans: "The Remote Desktop Gateway (RD Gateway) server Secure Sockets Layer (SSL) certificate may not have a valid certificate subject name." This may be due to it showing up as *.companyname.com
versus quickbooks.companyname.com. Anyhow. .. on to the list of actions above:
Changed RD RAP from "Select Active Directory" group to "Allow any network resource" and tested with port 3389 closed on firewall:
Worked. Initially it did not as I had used a custom shortcut created from earlier; however, after logging into the RDweb site again, the application loaded fine now (after the RD RAP change)
No error message appeared; however, I did notice that for a split second, the word Error did appear in the browser's tab title, but only very shortly. The app launch does take a bit longer too now (about 10-15 seconds, up from about 4 seconds with the port
open). This, I could care less about so long as we are properly forwarding the traffic through the gateway.
As for log entries, I had spend quite a bit of time in there and only had minor issues with loading user profile setting taking too long and policy settings preventing the redirection of USB devices. Looking again, no issues still. Just a bunch of informational
entries where I would connect before (and disconnect) but only with the port on the firewall open; otherwise, there was not an entry corrolating to when I would receive an error before. Now though, I am connecting after the RD RAP change and logs are showing
connections even with the port closed. These are in "operational", the "admin" log only shows the update to the RD RAP configuration.
Yes, the LAN's DNS server does relay the lookup information for my public FQDN as the local LAN address. No need for a local host record.
I have now added a new rule in our firewall to allow and forward UDP port 3391 traffic to the internal server hosting remote services
Thank you very much for your assistance on this matter. The RD RAP rule was default built during the creation of this services. Why is the resource not cross-referencing AD security groups? I could have sworn I created a group for that . . .

NVGRE Gateway Security and Firewalls?

Hi,
I am setting up a Hyper-v NVGRE gateway on Windows Server 2012 R2. Now from what I have read the gateways have 3 NICs and one interface dedicated to public IP addresses, I haven't been able to find any information about how the gateways are secured.
Can they be protected behind hardware firewalls?
Are they already secured at the time of install out of the box?
Do we have to use and configure the windows firewall on the gateway for protection?
Any best practice out there, real like experience / examples or some documentation on this subject as I am struggling?
Many thanks in advance.
Microsoft Partner

Hi,
i have created some blogs on hyper-v.nu about nvgre gateway.
My recommendation:
Put the gateway Hyper-V host and GW VM's in a separate domain.
Connect the GW VM's directly to internet.
Enable the Windows Firewall. look after the Network Connection Profile as there are different rule sets for Private, Public and Domain rules. Make sure the external interface is marked as public profile. If you use the toolkit i created for GW deployment
its configured for you.
if your company policy doesn't allow to directly connect to the internet put firewall in front, but transparently, or create a public subnet behind that firewall so your GW VM's have public ip's.
Only use inspection on traffic (IDS), don't block it, if you really need to, create a common allow list for regular ports. Otherwise tenants need to open service requests at your helpdesk to open ports if they want to publish application via a NAT
rule.
since you put the hosts and GW VM's in a separate domain you managed to separate it from your management domain, what is in my sense the best practice.
Use 3th party NVGRE vendors like Boudewijn mentioned as BIG IP F5.
Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Ability to filter gateway logging and simulate "go lives"...

Dear gurus,
For those of you have attempted to maintain secinfo and reginfo files (and now any proxy and message servicer ACLs) the subject title should be enough said.
The local and internal contexts account for 99% of the starting and registering of external programs. These create a huge amount of racket in the logging and in the case of secinfo dont give you the USER-HOST unless you activate additional filters, which effectively doubles the trace logging file size.
I would like to create a "functionality wishlist" in the wikis for two new features, but first wanted to test the ideas here and see whether there is agreement:
1) gw/ignore_info parameter
A file which allows certain entries not to be logged, particularly the "local" and "internal" HOST and USER-HOST entries which are anyway contained by the authorization conceot for transactions such as STMS and SM69 and SM37 (as well as some function modules which respect the application concepts, such as SXPG FMs).
This would mean one can only log (and have to read...) exceptions which are truely started or registered remotely!
2) gw/simulate_info parameter
A file which can represent the secinfo and reginfo files to show what would have happened if the real files were active.
The problem is that one cannot realistically test and let alone transport the files from DEV to QAS to PROD. You have to take risks when going live in PROD as the partners and jobs and various other dependencies (call backs) only happen there. Customers are very scraed of such Go-Lives regardless of the support offered (I sometimes spend the night clicking on a refresh button...). The ability to simulate the affect of an active secinfo and reginfo would be very cool.
Any support? If I have a few "thumbs up" then I will create a wiki for it after some discussion about whether a better approach is possible.
For sure something needs to be done, as if client systems using outbound gateway registrations fail to accept critical business data which then creates inconsistencies (customers hate that, even the thought of it!) then there is most likely no second chance to secure the gateway or RFC in general again.
Aye or nay or better suggestion?
Cheers,
Julius

What irritates me most is assumption security = SoD.
I try my best to move those to the GRC forum without delays... You can however also control many non-application specific parts of a SAP system from ABAP transactions and these are controlled by ABAP authorizations. ABAP is very powerful... A few examples are SE14, SM69 and (revelant to this example) also SMGW to transfer the control to the application layer by forcing it (local context of the USER-HOST). So authorizations are also important and omni-present (execpt for the config tool on the Java Stack...
While I am ranting another one is when you define your roles you are done with security for next 5 years and there is no need for budget. Who cares about patch Tuesdays and many other things.
A classic example of such a "5 year works out of the box" example, is a SAP_ALL minus a few things type role (imported manual authorizations into the role from SAP_ALL). That is a snapshot of SAP_ALL and any new objects introduced (with proposals introduced hopefully as well in SU24) will be unknown to it when you apply Support Packs or upgrade or add custom checks. It is bound to fail sooner or later, even although you think it cannot go wrong. A proliferation of SAP_NEW is a nice example of the symptom.
Currently the new object S_RO_OSOA is causing all sorts of havoc in this area (woth keepng an eye out for that one if it has not confronted you yet!) ....
Cheers,
Julius

SAP FIORI and Gateway as standalone

Hi
I want to install Netweaver gateway and FIORI for paystub app.
I want to decide whether i should install these on the current ECC6 EHP6 box or install them on a separate box.
What are the pros and cons with both situations
Thanks
Tushar

Hi Tushar,
NW gateway is installed on top of NW ABAP as an add-on and the hardware resource required is less too. However, segregating from your backend ECC(embedded) system and installing in central HUB gives it flexibility and advantage in terms of being a standalone instance in your landscape. When installed on a separate host, NW gateway security comes into play. Have a look at the security guide to understand its needs.
Also, for pros and cons:
Refer; https://help.sap.com/saphelp_gateway20sp06/helpdata/en/88/889a8cbf6046378e274d6d9cd04e4d/content.htm?frameset=/en/62/91a…
Regards,
Divyanshu

2012 RDS + Gateway Certificate and and .local domains

Can someone verify this is the correct process to stop all certificate errors.
RDS 2012 R2 deployment that is the following.
1 server with broker web and gateway roles installed.
3 session hosts.
Domain is a .local
I want to stop all certificate errors. I have a certificate for the gateway/broker/web server gateway.xxx.com
I have had a look at the Change published FQDN for Server 2012 or 2012 R2 RDS Deployment script
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
Do i just need to run this script on the gateway/broker/web server and will this stop the mismatch errors fro the session hosts?
Thanks

Does SSO not work on less than this as I have some XP clients and 8.1 is not available for them.
Hi,
To support older clients you need to have the wildcard certificate set on the RDP-Tcp listener on all RDSH servers. To do this you must import the certificate and its private key into the Local Computer\Personal store on each RDSH server, and then
use WMI to set the certificate. The below command should be run on each RDSH in an elevated command prompt after you have imported the certificate and its private key:
wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="e2f034c171b92afc96b23b7f4da15728c1e461a9"
Substitute your certificate's thumbprint for the one shown above.
Please note that you will not get the best experience with clients that are not at least RDP 8.0 capable, many features will not be available, and you may run into certain issues. For XP you will want to install the RDP 7.0 client and make the registry
changes on each client to enable CredSSP.
Thanks.
-TP

Gateway in Oracle Web Service Manager

Hi,
Does anybody know a really usable document for gateways in Oracle Web Service Manager?
I tried to use the common Oracle's document to create a gateway and counfigure a tomcat-axis web service in it, but I could not manage it.
Supposing that I have a webservice on http://localhost:8088/axis/services/ExtService?wsdl
and I have a OWSM administrable on http://localhost:3115/ccore
what wuld be the steps to register my webservice into OWSM to be able to call my web service through OWSM?
thanx in advance,
Attila

Hi Eric,
thank you for your answer.
Now I managed to authenticate the user with WS-BASE against LDAP server (ApacheDS), but, with the authorization I can not move on.
The structure of my Ldap entries is the following:
-> system
-> groups
-> tomcatCallers
attributes: cn: tomcatCallers
objectClass: groupOfUniqueNames
objectClass: top
uniqueMember: 0.9.2342.19200300.100.1.1=owsmuser,
0.9.2342.19200300.100.1.1=admin,2.5.4.11=system
-> users
-> owsmuser
attributes: cn: OWSM user
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: top
sn: OWSM
uid: owsmuser
So, Authentication against owsmuser is OK, with parameters:
LDAP baseDN (*): ou=users,ou=system
Uid Attribute (*): uid
How should I configure the policy step Ldap Authorize?
I tried it with parameters:
LDAP baseDN (*): ou=system
ServiceRoles : tomcatCallers
Uid Attribute (*): uid
but it does not seem to work. I get the fault: 'Access Denied. User: owsmuser'
One more question :-) :
if I make a 2nd policy gateway with ID C0003002 and configure it in file
%OWSM_HOME%\j2ee\home\applications\gateway\gateway\WEB-INF\gateway-config-installer.properties
with propery gateway.component.id=C0003002 and restart the OWSM the gateway identified by C0003001 becomes unreachable.
How can I configure OWSM to eable all the gateways at the same time?
thanx in advance,
Attila
Edited by: user5329589 on Jul 1, 2010 5:04 AM

Can we have oracle database and gateway for SLQServer on same machine

Can we install oracle database and Gateway for sQLServer on same machine>?
If yes, How does the listener files in gateway home (EG: C:\product\11.2.0\NETWORK\ADMIN) and oracle home (EG: C:\app\Administrator\product\11.2.0\dbhome_1\NETWORK\ADMIN) look like?
Where will we give dg4msql details in tnsnames and listner files?

Here is the output of starting both the listeners. This is output when i appended listener1 settings in Oracle_home listener.ora file.
C:\Users\Administrator>lsnrctl start listener
LSNRCTL for 64-bit Windows: Version 11.2.0.2.0 - Production on 03-DIC-2012 04:46
:15
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Avvio di tnslsnr: attendere...
TNSLSNR for 64-bit Windows: Version 11.2.0.2.0 - Production
Il file dei parametri di sistema Þ C:\app\Administrator\product\11.2.0\dbhome_1\
network\admin\listener.ora
Messaggi di log registrati in C:\app\Administrator\diag\tnslsnr\WIN-77CAQGHJSA2\
listener\alert\log.xml
Ascolto su: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1521))
Connessione a (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=localhost)(PORT=1521
STATO del LISTENER
Alias listener
Versione TNSLSNR for 64-bit Windows: Version 11.2.0.2.0 - Produ
ction
Data di inizio 03-DIC-2012 04:46:20
Tempo di attivitÓ 0 giorni 0 ore 0 min. 5 sec.
Livello trace off
Sicurezza ON: Local OS Authentication
SNMP OFF
File di parametri listenerC:\app\Administrator\product\11.2.0\dbhome_1\network\a
dmin\listener.ora
File di log listener C:\app\Administrator\diag\tnslsnr\WIN-77CAQGHJSA2\list
ener\alert\log.xml
Summary table degli endpoint di ascolto...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1521)))
Summary table dei servizi...
Il servizio "test" ha 1 istanze.
L'istanza "test", stato UNKNOWN, ha 1 handler per questo servizio...
Il comando Þ stato eseguito
C:\Users\Administrator>lsnrctl start listener1
LSNRCTL for 64-bit Windows: Version 11.2.0.2.0 - Production on 03-DIC-2012 04:46
:23
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Avvio di tnslsnr: attendere...
TNSLSNR for 64-bit Windows: Version 11.2.0.2.0 - Production
Il file dei parametri di sistema Þ C:\app\Administrator\product\11.2.0\dbhome_1\
network\admin\listener.ora
Messaggi di log registrati in D:\product\11.2.0\tg_2\diag\tnslsnr\WIN-77CAQGHJSA
2\listener1\alert\log.xml
Ascolto su: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
Connessione a (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=localhost)(PORT=1522
STATO del LISTENER
Alias listener1
Versione TNSLSNR for 64-bit Windows: Version 11.2.0.2.0 - Produ
ction
Data di inizio 03-DIC-2012 04:46:29
Tempo di attivitÓ 0 giorni 0 ore 0 min. 5 sec.
Livello trace off
Sicurezza ON: Local OS Authentication
SNMP OFF
File di parametri listenerC:\app\Administrator\product\11.2.0\dbhome_1\network\a
dmin\listener.ora
File di log listener D:\product\11.2.0\tg_2\diag\tnslsnr\WIN-77CAQGHJSA2\li
stener1\alert\log.xml
Summary table degli endpoint di ascolto...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522)))
Summary table dei servizi...
Il servizio "dg4msql" ha 1 istanze.
L'istanza "dg4msql", stato UNKNOWN, ha 1 handler per questo servizio...
Il comando Þ stato eseguito
C:\Users\Administrator>sqlplus /nolog
SQL*Plus: Release 11.2.0.2.0 Production on Lun Dic 3 04:46:34 2012
Copyright (c) 1982, 2010, Oracle. All rights reserved.
SQL> conn system/Manager1@star
Connesso.
SQL> create public database link test2 connect to "sa" identified by "pwd"
using 'dg4msql';
Creato database link.
SQL> select count(*) from prefer@test2;
select count(*) from prefer@test2
ERRORE alla riga 1:
ORA-28545: errore diagnosticato da Net8 durante la connessione a un agente
Unable to retrieve text of NETWORK/NCR message 65535
ORA-02063: precedente 2 lines da TEST2
Output of tnsping from oracle_home
C:\Users\Administrator>tnsping dg4msql
TNS Ping Utility for 64-bit Windows: Version 11.2.0.2.0 - Production on 03-DIC-2
012 05:01:28
Copyright (c) 1997, 2010, Oracle. All rights reserved.
File di parametri utilizzati:
C:\app\Administrator\product\11.2.0\dbhome_1\network\admin\sqlnet.ora
╚ stato utilizzato l'adattatore TNSNAMES per risolvere l'alias
Tentativo di contattare (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1522)) (CONNECT_DATA = (SERVICE_NAME = dg4msql)) (HS=OK))
OK (0 msec)
tnsnames.ora file at D:\product\11.2.0\tg_2\NETWORK\ADMIN
dg4msql =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1522))
(CONNECT_DATA = (SERVICE_NAME = dg4msql))
(HS=OK)
C:\app\Administrator\product\11.2.0\dbhome_1\NETWORK\ADMIN
LISTENER_test=
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
dg4msql =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1522))
(CONNECT_DATA = (SERVICE_NAME = dg4msql))
(HS=OK)
test=
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = test)
)

Gateway host and gateway service query

Similar Messages

Maybe you are looking for