GRC RA&R User Connection to SAP

We have noticed in our SAP system in SM04 that we have a large number of RA&R RFC user logons active at any time. Some of them are more than a day old. We kill the sessions but they just gradually build up again.
It looks as if the logon from RA&R is not terminated properly each time and a new logon from the RA&R RFC user is created, thus resulting in multiple active logons in the SAP system.
Does anyone know what could be causing this or if there is a way to prevent this from happening?
Any help with this would be much appreciated!

You should consult with your basis folks about "keepalive" settings...
Cheers,
Julius

Similar Messages

BI 4.0 user connection to SAP HANA

Hi there,
Looking for some input here. We are approaching the integration of BI 4.0 to SAP HANA using Active Directory
authentication. Does anyone know if each buisness user has to be created in HANA as well as BI (which the security guide seems to suggest) or can a single communication user be used ? Thanks ! ! ! WEB intelligence will be used as the users
front end.

You can use a generic system user (e.g. BOBJUSER) but all actual BOBJ users will "inherit" the roles/privileges of this BOBJUSER created in the HANA database. You can do this when you create the JDBC connection between BOBJ and HANA.
It is analogous to BW/HANA where there's one user connecting the BW application to HANA DB but application level security is handles in BW and not in HANA.
So you would need to structure your user-specific security in BOBJ. Obviously HANA Analytic privileges can't be used either with one HANA id.

How to make Adobe acrobat feature to convert SAP Pages to PDF available for multiple users connected to the same server

We have installed Adobe Acrobat X Pro- English,Francais,Deutsch version 10.1.9 in our test environment and tried testing it for converting SAP pages into PDF with a few pilot users. In doing so we faced a challenge, where only one user at a time can use Adobe Acrobat PRO to convert SAP pages in to PDF.As long as the first user who is connected to Adobe Acrobat Pro via SAP isn’t logged off, other users connected to the same server are not being able to get the “Save As” dialog box to save the PDF in their preferred location.
This is a business requirement and we need an urgent solution for the same. Can anyone help us in telling us if this is possible and if yes the how to go about?

It's not something we deal with here, the LiveCycle products are a different world. Key points: Adobe LiveCycle is a range of products, some desktop, some server. LiveCycle PDF Generator is the one you should look at, it comes in 3 editions. License terms are by negotiation. Key management is via its Java API.

Can SAP GRC AC 5.3 connect without any problem with SAP R/3 4.7 Enterprise?

hello,
I went to the PAM in the SAP Marketplace to see if SAP GRC AC 5.3 could connect to SAP R/3 4.7 Enterprise but I can't see all the "Add-On Product Version for...", it's cut off.
Can SAP GRC AC 5.3 connect without any problem with SAP R/3 4.7 Enterprise?
If I can't is there any proof about it? I have to show it to a client.
Best Regards,
Pablo Mortera,

Pablo,
GRC AC 5.3 works perfectly fine with SAP's R/3 4.6c, mySAP ERP 4.7 and ECC systems. In fact we have two 4.7 Enterprise systems connected to GRC AC 5.3 system.
You can get the details of supported SAP ERP systems under prerequisite section of Info page of GRC AC 5.3 , it can be accessed on marketplace at -
Downloads-->Installations and Upgrades - Entry by Application Group > SAP Solutions for Governance, Risk, and Compliance>SAP GRC Access Control>SAP GRC ACCESS CONTROL>SAP GRC ACCESS CONTROL 5.3
Just ensure to have proper BASIS and ABAP support pack level as mentioned in prerequisites.
Regards,
Amol

What User authorization objects needed for connecting to SAP from xMII?

We eneter a SAP user and password for connecting to SAP from xMII to retrieve the metadata of the incoming IDocs.
When I specify a user with SAP_ALL user profiles, the IDocs are received properly in xMII. If I specify a user with privileges to run only certain transactions, IDocs are not received in xMII.
What user authorization objects are needed for this user to connect to SAP from xMII?
Thanks,
Sara

Sam,
I turned on the SAP System trace for this user and figured out the following auth. objects are required for receiving IDocs in xMII:
C_TCLA_BKA
S_RFC
S_CTS_ADMI
B_ALE_MAST
S_IDOCDEFT
The following auth. object is required for making JCO call to SAP from xMII:
C_AFRU_AWK
Thanks,
Sara

Users can connect to SAP B1 using one host

Dear Experts/Gurus,
I have a problem relate to installation of SBO 2005A Sp 01. We use 1 server to install SBO (Application+Database). The users connect to the server computer / host (CPU) using switch / router. There are 30 users, so it means there are no CPU used by all users. They directly connect to a host using the router. Could the users open the SBO GUI using that setting ? I appreciate your answers. TIA.
Rgds,

Hi Steve,
I'm not absolutely sure if I understand you right, but maybe the scenario of making SBO available via Citrix could be an option for you. Find out more under: <a href="http://www.citrix.com/English/partners/partnerFeature.asp?partnerID=14785&featureID=14805">Citrix and SBO</a>
Regards, Sandra

HTTPs connection from SAP WebAS

Hello,
I have to establish a connection from SAP WebAS to an iSaSiLk server via HTTPS.
The iSaSiLk authentication is based on client certificates.
I've created a SSL client PSE, generated the Certificate Request, imported the certificate response and the chain of certificates associated with no errors. When testing the connection we're getting the following error message:
SAP icm log:
[Thr 1087400256] ->> SapSSLSessionInit(&sssl_hdl=0x2aaaba679980, role=1 (CLIENT), auth_type=3 (USE_CLIENT_CERT))
[Thr 1087400256] <<- SapSSLSessionInit()==SAP_O_K
[Thr 1087400256]      in: args = "role=1 (CLIENT), auth_type=3 (USE_CLIENT_CERT)"
[Thr 1087400256]     out: sssl_hdl = 0x1a3310c0
[Thr 1087400256] ->> SapSSLSetNiHdl(sssl_hdl=0x1a3310c0, ni_hdl=22)
[Thr 1087400256] NiIBlockMode: set blockmode for hdl 22 TRUE
[Thr 1087400256] <<- SapSSLSetNiHdl(sssl_hdl=0x1a3310c0, ni_hdl=22)==SAP_O_K
[Thr 1087400256] ->> SapSSLSetSessionCredential(sssl_hdl=0x1a3310c0, &cred_name=0x1a49e4e0)
[Thr 1087400256]   SapISSLComposeFilename(): Filename = "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] <<- SapSSLSetSessionCredential(sssl_hdl=0x1a3310c0)==SAP_O_K
[Thr 1087400256]      in: cred_name = "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] ->> SapSSLSetTargetHostname(sssl_hdl=0x1a3310c0, &hostname=0x1a4a09e0)
[Thr 1087400256] <<- SapSSLSetTargetHostname(sssl_hdl=0x1a3310c0)==SAP_O_K
[Thr 1087400256]      in: hostname = "<remoteServer_to_be_accessed>"
[Thr 1087400256] ->> SapSSLSessionStart(sssl_hdl=0x1a3310c0)
[Thr 1087400256]   SapISSLUseSessionCache(): Creating NEW session (0 cached)
[Thr 1087400256] Tue Jan 13 10:10:22 2009
*[Thr 1087400256] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL*
[Thr 1087400256]    session uses PSE file "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] SecudeSSL_SessionStart: SSL_connect() failed
secude_error 536871693 (0x2000030d) = "none of the PSEs registered with hSsl can suffice the negotiated SSL cipher suite"
[Thr 1087400256] >>            Begin of Secude-SSL Errorstack            >>
[Thr 1087400256] ERROR in ssl3_get_certificate_request: (536871693/0x2000030d) none of the PSEs registered with hSsl can suffice
[Thr 1087400256] <<            End of Secude-SSL Errorstack
[Thr 1087400256]   SSL_get_state() returned 0x00002150 "SSLv3 read server certificate request A"
[Thr 1087400256]   No certificate request received from Server
[Thr 1087400256] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x1a3310c0)==SSSLERR_SSL_CONNECT
[Thr 1087400256] ->> SapSSLErrorName(rc=-57)
[Thr 1087400256] <<- SapSSLErrorName()==SSSLERR_SSL_CONNECT
[Thr 1087400256] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt
On the iSaSiLk server we're getting:
ssl_debug(2): Starting handshake (iSaSiLk 3.06)...
ssl_debug(2): Received v3 client_hello handshake message.
ssl_debug(2): Client requested SSL version 3.0, selecting version 3.0.
ssl_debug(2): Creating new session 11:5F:04:C9:0D:32:15:B9...
ssl_debug(2): CipherSuites supported by the client:
ssl_debug(2): SSL_RSA_WITH_RC4_128_SHA
ssl_debug(2): SSL_RSA_WITH_RC4_128_MD5
ssl_debug(2): SSL_RSA_WITH_3DES_EDE_CBC_SHA
ssl_debug(2): SSL_RSA_WITH_DES_CBC_SHA
ssl_debug(2): SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
ssl_debug(2): SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
ssl_debug(2): SSL_RSA_EXPORT_WITH_RC4_40_MD5
ssl_debug(2): CompressionMethods supported by the client:
ssl_debug(2): NULL
ssl_debug(2): Sending server_hello handshake message.
ssl_debug(2): Selecting CipherSuite: SSL_RSA_WITH_RC4_128_SHA
ssl_debug(2): Selecting CompressionMethod: NULL
ssl_debug(2): Sending certificate handshake message with server certificate...
ssl_debug(2): Sending certificate_request handshake message...
ssl_debug(2): Sending server_hello_done handshake message...
ssl_debug(2): IOException while handshaking: Connection closed by remote host.
ssl_debug(2): Sending alert: Alert Fatal: handshake failure
ssl_debug(2): Shutting down SSL layer...
ssl_debug(2): Closing transport...
From the iSaSiLk everything seems to be OK, but on the SAP WebAS the error "none of the PSEs registered with hSsl can suffice the negotiated SSL cipher suite" is really unclear, since the cipher chosen by the iSaSiLk is one of the ciphers sent by SAP WebAS...
Can anyone give me any suggestion?

Hello Olivier,
Thanks for your answer.
I've implemented note 800240 which facilitates the PSE analysis by implementing the report ZSSF_TEST_PSE. With this report I'm able to check all the PSE content, which are:
Filename            SAPSSLSPHTID.pse
PIN                 <no>
Signature           X
Encryption          X
Profile Parameter
DIR_INSTANCE                   /usr/sap/XID/DVEBMGS00                       /usr/sap/XID/D00
sec/dsakeylengthdefault                                                     1024
sec/libsapsecu                 /usr/sap/XID/SYS/exe/run/libsapcrypto.so
sec/rsakeylengthdefault                                                     1024
ssf/name                       SAPSECULIB
ssf/ssf_md_alg                                                              SHA1
ssf/ssf_symencr_alg                                                         DES-CBC
ssf/ssfapi_lib                 /usr/sap/XID/SYS/exe/run/libsapcrypto.so
ssf2/name
ssf2/ssf_md_alg                                                             SHA1
ssf2/ssf_symencr_alg                                                        DES-CBC
ssf2/ssfapi_lib
ssf3/name
ssf3/ssf_md_alg                                                             SHA1
ssf3/ssf_symencr_alg                                                        DES-CBC
ssf3/ssfapi_lib
Environment variables
USER                xidadm
SECUDIR             /usr/sap/XID/DVEBMGS00/sec
PSE
Validity            18.12.2008 19:47:04   18.12.2009 19:47:04
Algorithm           RSA (OID 1.2.840.113549.1.1.1)
Test signature
Signature OK
Verification OK
Test encryption
Encryption OK
Decryption OK
As you can see, the cipher algorithm used is RSA. Any suggestion... ?
An iSaSiLk server "is a Java programming language implementation of the SSLv2 (client-side), SSLv3, TLS 1.0 and TLS 1.1 protocols. It supports all defined cipher suites (except for Fortezza), including all AES and PSK cipher suites. iSaSiLk implements all standard TLS extensions, comes with an easy to use API and operates on top of the IAIK-JCE Javau2122 Cryptography Extension. iSaSiLk is highly configurable and will work with any alternative JCE implementation supported by a proper provider for supplying the required cryptographic algorithms".
Once again thanks for your answer.

Is this possible: SNC connection from SAP GUI to SAP Router, and ...

Hi,
I have (stupid perhaps) question.
Is this scenario possible:
SNC connection from SAP GUI to SAP Router, and non-SNC connection from SAP Router to SAP System.
I know how to set up scenario like this:
SAP System --- (non-SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP GUI.
Best regards,
Marek Majchrowski

Wolfgang,
To be sure myself and Marek understand, can you confirm the different scenarios supported:
Scenario 1:
SAP GUI --- (non SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP System
With this scenario, it would be possible for a user to logon using SAP GUI onto the SAP System, but without SAP GUI SNC.
Scenario 2:
SAP GUI --- (SNC conn) --- saprouter1 --- (non SNC conn) --- saprouter2 --- (SNC conn) --- SAP System
With this scenario it would be possible to logon to the SAP System using SAP GUI, and using SNC authentication.
Also, with this scenario the SAP GUI software and SAP System software would consider this to be similar to:
SAP GUI -- (SNC conn) -- SAP System
Scenario 3:
This is the scenario mentioned by Marek in his initial question:
SAP GUI -- (SNC conn) -- saprouter1 -- (non SNC conn) -- SAP System
With this scenario it will not be possible to logon to SAP System using SNC, and only possible if the SAP GUI is configured to not use SNC. In other words the SNC connection between SAP GUI and saprouter1 is available, but cannot be used.
Thanks,
Tim
Edited by: Tim Alsop on Feb 25, 2008 5:24 PM

How to check connection from SAP to reservation system?

Dear Experts,
May I know how to check whether the connection between SAP and the reservation system has been set up and ready to use?
Thanks.

Hi
You need to check the identification code issued to the enterprise by AMADEUS must be entered in the R/3 Customizing for Travel Planning under Master Data u2192 Control Parameters for Travel Planning u2192 Define sales offices and Define API access parameters.
External reservation system In the Travel Planning subcomponent Travel Management accesses an external reservation system connected to R/3 to carry out the queries on available travel services and to book the selected services. The reservation system currently available is the AMADEUS Global Travel Distribution system.
For more information, see Technical Prerequisites for Travel Planning--
Technical Prerequisites for Travel Planning
Before you can use Travel Planning fully, a number of internal R/3 and external prerequisites or settings must be fulfilled.
Connection to an External Reservation System
The online booking function in Travel Planning is based on the cooperation with external reservation systems that are used to communicate with the service providers. The R/3 user has access to the following functions via the connection to an external reservation system:
u2022 Availability query of travel services
u2022 Transfer of additional information about selected travel services
u2022 Price information
u2022 Processing of reservation by the respective provider
u2022 Synchronization of the data in SAP Travel Planning if external booking changes have been made
In the current release the external reservation system in use is AMADEUS Global Travel Distribution. AMADEUS is a subsidiary of Lufthansa, Air France, Continental Airlines and Iberia. The reservation system it provides is in worldwide use and 160,000 terminals in 37,000 travel agencies and ticket sales centers in over 130 countries are connected to it.
In order to carry out online booking via AMADEUS the following must have been carried out:
u2022 Your enterprise must have signed an agreement with AMADEUS for the use of the interface and be registered at AMADEUS with a user ID
u2022 A network connection to the AMADEUS computer center must have been opened
u2022 The identification code issued to the enterprise by AMADEUS must be entered in the R/3 Customizing for Travel Planning under Master Data u2192 Control Parameters for Travel Planning u2192 Define sales offices and Define API access parameters.
For questions about registration, contact the SAP & AMADEUS Competence Center:
SAP & AMADEUS Competence Center ACC 02 Neurottstrasse 16 69185 Walldorf Germany
Cheers
Mukta

BO 4.0 - Database error: Unable to connect to SAP BW Incomplete logon data

Hello Experts,
I have enabled a 'SSO to database' between SAP BW and Business objects by referencing to the documents related to below link.
[http://wiki.sdn.sap.com/wiki/display/BOBJ/HowtosetupSSOagainstSAPBWinSBOBI4.0forLDAPusers]
I have created a universe connection with option 'use single sign on when refreshing reports at view time' and have created a universe on top of my BEx query by log-in to the universe designer tools using my LDAP account.
Now when I run the report with either SAP account or LDAP - I am able to run a adhoc webi report on this universe and get data either through the webi rich client or via BO 4.0 Info-view/Launch Pad.
But the issue is that when other users are trying to run webi queries on this universe either through Info-view/launch pad or rich client by log-in via LDAP Authentication - they get the below error: I have given SAP_ALL to this user for time being and also have done the necessary configuration for 'simple user format' in CMC so these user has 1 account with 3 alias definitions: Enterprise, SAP, R/3.
Database error: Unable to connect to SAP BW server Incomplete logon data -
If the user logs on into the BO 4.0 Info-view/launch pad or webi rich client using his SAP authentication than he is able to run and retrieve data.
I also get a dump in the SAP BW system - I analyzed the dump in SAP BW using st22 tcode and it gives the error short text as - Incomplete logon data and run-time error - CALL_FUNCTION_SIGNON_INCOMPL
Desired outcome:
I want the users to log-in to webi rich client or BO 4.0 Launch pad/Info-view using their 'LDAP' authentication and run reports against the universe on SAP BW/BEx query without any errors or additional username/password requirements.
Can someone please tell me if I am missing any steps/configuration and guide me to achieve the above mentioned desired result ?
Any help in this matter would be greatly appreciated.
Thanks & regards,
CD.

Hi Simone,
Thank you for the reply.
Here are the things done by me.
1. Generated the keystore file and imported it in BI 4.0 CMC on SAP Authentication Option tab
    ([http://wiki.sdn.sap.com/wiki/display/BOBJ/GeneratekeystoreandcertificateforSAPBO+BI4.0])
    ([http://wiki.sdn.sap.com/wiki/display/BOBJ/SetupofSAPSSOServiceinSAPBOBI4.0+CMC])
2. Generate the certificate file cert.der and this cert is imported in SAP BW with STRUSTSSO2 transaction.
    ([http://wiki.sdn.sap.com/wiki/display/BOBJ/ImportSAPBOBI4.0certificateintoSAP+BW])
3. BW Roles/Users have been imported into CMC.
4. SAP Users and LDAP users are mapped/aliased with each other using the registry key method
    ([http://wiki.sdn.sap.com/wiki/display/BOBJ/HowtomapSAPusersandLDAPusersinSBOBI4.0+CMC])
I haven't explicitly configured STS (Security token service) as STS is a part of Adaptive processing server (APS) and I have verified that by going to servers in CMC and then to analysis services.
I have searched for SAP OSS notes related to my issue but couldn't find any note related to SAP BW SSO with Business objects 4.0. Most of the notes are relevant for BO XI 3.1 environments.
Thanks & regards,
CD.

BO 4.0: Database error:Unable to connect to SAP BW server Incomplete logon

Hello Experts,
I have enabled a 'SSO to database' between SAP BW and Business objects by referencing to the documents related to below link.
http://wiki.sdn.sap.com/wiki/display/BOBJ/HowtosetupSSOagainstSAPBWinSBOBI4.0forLDAPusers
I have created a universe connection with option 'use single sign on when refreshing reports at view time' and have created a universe on top of my BEx query by log-in to the universe designer tools using my LDAP account.
Now when I run the report with either SAP account or LDAP - I am able to run a adhoc webi report on this universe and get data either through the webi rich client or via BO 4.0 Info-view/Launch Pad.
But the issue is that when other users are trying to run webi queries on this universe either through Info-view/launch pad or rich client by log-in via LDAP Authentication - they get the below error: I have given SAP_ALL to this user for time being and also have done the necessary configuration for 'simple user format' in CMC so these user has 1 account with 3 alias definitions: Enterprise, SAP, R/3.
Database error: Unable to connect to SAP BW server Incomplete logon data -
If the user logs on into the BO 4.0 Info-view/launch pad or webi rich client using his SAP authentication than he is able to run and retrieve data.
I also get a dump in the SAP BW system - I analyzed the dump in SAP BW using st22 tcode and it gives the error short text as - Incomplete logon data and run-time error - CALL_FUNCTION_SIGNON_INCOMPL
Desired outcome:
I want the users to log-in to webi rich client or BO 4.0 Launch pad/Info-view using their 'LDAP' authentication and run reports against the universe on SAP BW/BEx query without any errors or additional username/password requirements.
Can someone please tell me if I am missing any steps/configuration and guide me to achieve the above mentioned desired result ?
Any help in this matter would be greatly appreciated.
Thanks & regards,
CD.

Whether your problem is solved?
We have the same problem in BO Mobile.
Two users from one BW-role, BO-groups; one user report is executed, another user - error incomplete logon data. In Web Intelligence both users reports succeeds.

Live Office Error when connecting to SAP BW data (Offline dashboard)

Hi experts,
we have built up an Live Office connection to SAP BW query data to create a dashboards, which can show the data also in offlne mode. We are using exactly the same procedure as recommanded by Ingo Hilgofort in [End-to-End Scenarios With Xcelsius 2008|http://www.sdn.sap.com/irj/boc/index?rid=/library/uuid/90ad73b1-506c-2b10-9e9b-9fde523f010a].
When trying to refresh the Live Office connection using the "Refresh" button in the dashboard we receive the error LO 26301: The current refresh option requires a report instance that does not exist.
The recommended action is: Change the refresh option of the object or use the CMC to schedule a new instance.
But creating an instance of the dashboard is not possible. What is meant by that? Is it necessary that we embed the Xcelsius flash into a PDF or a Crystal Report? What are our alternatives?
Best regards,
Sebastian

Sebastian Koeffer wrote:
Hi Gowda,
>
> an instance of the report did not solve our problems. Even if it does, this is not our preferred solution. Anyway we would like to prefer to use the direct universe connection (Create new universe query) instead of linking to a Webi or Crystal report.
>
> Best regards,
> Sebastian
Hi Gowda Timma Ramu,
i create an instance of report by USER1... and..... dashboard is pointed to latest instance.
when i refresh a dashboard (by clicking on refresh button) it requires login to infoview ... i login to infoview by USER 2 not by USER1.....
it showing an error
_The current refresh option requires a report instance that does not exist. (LO 26301)_
Note:-But data is changing in dashboard
any solution for solving this error.
Its urgent...
Thank You.

Authentication error when creating EPM Add-in connection with SAP BO Enterprise connection type

Hello, Experts,
I have a problem with creation of EPM Add-in connection when SAP BusinessObjects Enterprise connection type is selected.
An error message is "Error while communicating with the server. Framework message: Authorization failed."
Here are the steps that were implemented and how this issue was reproduced:
SAP BusinessObjects Planning and Consolidation 10.0 SP12 for Microsoft was installed and configured.
Integration between SAP BPC and SAP BusinessObjects BI 4.1 SP02 was implemented. SAP BO users can successfully connect to SAP BPC system.
EPM connector was successfully installed and deployed in SAP BusinessObjects BI server.
BPC ODBO 2.0 SP04 64BIT was installed in SAP BusinessObjects server.
EPM connection was successfully created in SAP BusinessObjects CMC.
EPM Add-in and BPC ODBO 2.0 SP04 32BIT was installed in another computer (let's call it CLIENT) which has MS Office 2007 32BIT installed.
From CLIENT computer we have launched Excel manually and successfully created BPC connection with Connection Type - Local.
Then we have logged into BI Launch Pad and launched New / EPM document (Excel). Excel has started.
In EPM Add-in we have pressed Logon.
In connection window selected SAP BusinessObjects Enterprise connection type.
An error "Error while communicating with the server. Framework message: Authorization failed." appears.
Before this error appears we are not getting any window where we could select EPM connection (created in CMC) nor the possibility to enter username or password.
Looking forward you valuable comments and suggestions.
Thank you in advance.
Donatas Budrys

Dear, Roberto,
Our user has Full Access to all BPC tasks and it is administrator in BI system.
Also we can successfully connect with the same user using Connection type "Local".
We had done some investigation and in the BPC SQL Server trace log we can catch the following message when an error occurs:
==============[System Error Tracing]==============
[System Name] : BPCXMLAService [Message Type] : ErrorMessage [Job Name] : ValidateUser [DateTime] : 04/23/2014 10:58:06 [UserId] : [Exception] DetailMsg : {System.Exception: Invalid user at SAP.BPC.Services.Webservice.XMLAService.XMLAService.ValidateUser()} ==============[System Error Tracing End ]==============
It is very interesting that after the EPM workbook is launched via BI Launch Pad till an error occurs we are NOT provided with possibility to enter any username and password. So the EPM add-in should use the same user which was logged into BI Launch Pad - in our case the user with administrative rights both in BI Launch Pad and BPC systems. Am I missing anything?
Looking forward your feedback.
Thank you in advance.
Best regards,
Donatas

URL Reporting connecting to SAP R/3

Hello,
We have Crystal Reports that connect to ABAP Function Modules in our R/3 4.7 system as the data source. To minimize the number of user prompts, we use URL Reporting to pass all the required parameters for the report. The one thing we have not been able to do is specify data connection information in the URL. We currently get around this by setting the data connection information (SAP server, system #, client #, etc.) in the Database Configuration for the report in the CMC. The downside to this is that the report is now limited to running against a single SAP client.
Is there a way to specify the SAP connection information (server, system #, client #, etc) in the URL Reporting string? I know it can be done for SQL data sources through the USER- and PASSWORD- commands on the URL, but is there a similar way to specify SAP connection information?
Our reporting environment is BOBJ Enteprise XI 3.1, reports are developed in Crystal Reports 2008.
Thanks,
Byron Clairoux

Hi,
that is not possible. the connection is part of the report.
Ingo

Connection to SAP R/3 46B through EP

Hi All
I installed following products but don't know how to connect SAP R/3 system through webdynpro.
EP : 6.0 SP10 (Only Java instance)
OS : Windows 2000
DB : Oracle 9i
R3 : Version 46B BASIS SUPPORT PACK 30
OS : Solaris 8
DB : Informix 7.31 fd2x9
Am new to NETWEAVER programming my desire is to connect
SAP and fetch data from SAP pl guide me.
Thanks in advance
Sanjay

...and for "classical" portal development (i.e. PAR files), first create a system object in system administration --> system configuration --> system landscape and set all configuration parameters for your R/3 system accordingly there.
Next decide on you you like to implement SSO to this system (user mapping or SAP logon tickets). For the latter one, some additional steps need to be performed on the R/3 side. Please check service.sap.com/securityguide for this or do a search on the SDM forums on "sap logon tickets". There also are various nice weblogs on this, e.g. Quick Guide for setting up SSO between EP and R/3
Now for the "data fetching" part. This will require doing an RFC call from EP to your R/3 system. For this, you usually utilize SPA Java Connector (JCo) through JCA. This archive https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/jca on ep6 building portal applications.zip
contains all neccessary information.
Hope this helps, if so please do not forget rewarding points.
Regards,
Dominik

GRC RA&R User Connection to SAP

Similar Messages

Maybe you are looking for