How to create RFC Destination without using SM59?

Hello all:
We are troubleshooting an issue.   An user created a RFC destination.   He claims that he did not use SM59.   We checked his access and do not have SM59 in his roles.
He configured VIRSA FireFighter.   During the configuration, he created RFC destination.   Document says use SM59 or contact BASIS Admin.     He claims that he used a config table and he don't remember the config table name.   RFC screen shows his ID as creator of the RFC.
We are trying to understand how an RFC can be created (outside of SM59) and plug the security hole in the environment.
Any insights would be appreciated.
--Anand

The FireFighter solution changes the RFC destination of the service user "on the fly" without S_TCODE checks for 'SM59'. But if I can remember correctly when looking into this, it does not create the RFC destination (in SM59) "on the fly".
> He claims that he used a config table and he don't remember the config table name.
Theoretically this is possible - a config table to define the name of the destination, and then create it if it does not exist yet (when used).
Otherwise, see SAP note 587410 and restrict (remove) his authority for the test environment (concentrate on S_DEVELOP, not S_TCODE - as you have also experienced).
Cheers,
Julius

Similar Messages

  • Enable Secure communication for RFC destinations by using sm59 transaction

    Dear friends,
    We would like to enable secure communications for RFC destinations by using the sm59 transaction in our systems.
    We need to do this manually, by changing  the internal communication settings in a way they can communicate securely.
    Any idea or advice on the way it can be done ?
    We need to take each RFC, manually check it and secure it.
    Thanks in advance,
    Jordan

    In SM59 open up a RFC destination and go to Logon & Security. There you can enable Trusted relashionship and activate status of secure protocol.
    And yes you have to do it manually for the desired RFC's

  • How to create a domain without using the root user in Sunone Server

    Hi,
    I am having one requirement to create a domain without using root user in sunone application server 8.1. Does any body know the solution?
    Message was edited by:
    SPBP

    Hi,
    If you are using file-based installation, you can install as non-root user and create domains as usual. You can use asadmin command available at <AS_INSTALL>/bin to do this.
    ex: ./asadmin create-domain domaindir /tmp/justfortest adminport 4850 --adminuser admin domain_nonroot_test
    Did you face any problem doing this in non-root. Unless you have write permissions in domaindir, you won't be facing any problem.
    Hope this clarifies your question.
    Thanks,
    -Balaji.

  • How to create a inputstream without using the file operation

    Hi friends
    In my application, I have to create a Streamsource object using the below constructor:
    public StreamSource(InputStream inputStream)
        Construct a StreamSource from a byte stream. Normally, a stream should be used rather than a reader, so the XML parser can resolve character encoding specified by the XML declaration.
        If this constructor is used to process a stylesheet, normally setSystemId should also be called, so that relative URI references can be resolved.
    Parameters:
        inputStream - A valid InputStream reference to an XML stream.*[http://java.sun.com/j2se/1.4.2/docs/api/javax/xml/transform/stream/StreamSource.html#StreamSource(java.io.InputStream) |http://java.sun.com/j2se/1.4.2/docs/api/javax/xml/transform/stream/StreamSource.html#StreamSource(java.io.InputStream) ]*
    But for creating the inputstream, i am creating a tempory file, ie I am using fileinputstream.
    import java.io.File;
    import java.io.FileInputStream;
    import java.io.StringReader;
    import javax.xml.transform.Source;
    import javax.xml.transform.Transformer;
    import javax.xml.transform.TransformerFactory;
    import javax.xml.transform.stream.StreamResult;
    import javax.xml.transform.stream.StreamSource;
    public class SourceConvertor
        private static Source convertStaxToStream(Source request)
    // here the argument to this method is StaxSource and the return type is StreamSource
            TransformerFactory factory = TransformerFactory.newInstance();
            Transformer transformer = null;
            File fp = null;
            FileInputStream fInp = null;
            try
                transformer = factory.newTransformer();
                fp = new File("tempFile.txt");
                transformer.transform(request, new StreamResult(fp));
                fInp = new FileInputStream(fp);
            } catch (Exception e)
                e.printStackTrace();
            return new StreamSource(fInp);
        public static void main(String args[])
            try
                String message ="<author><name>Rai</name><book>GodOfSmallThings</book></author>";
                Source original = new StreamSource(new StringReader(message));
                Source converted = convertStaxToStream(original);
                TransformerFactory factory = TransformerFactory.newInstance();
                Transformer transformer = factory.newTransformer();
                transformer.transform(converted, new StreamResult(System.out));
            catch (Exception e)
                // TODO Auto-generated catch block
                e.printStackTrace();
    This is not at all a good aproach because evey time it is creating a new file.
    So can anyone suggest a better aproach or idea or a simple code snippet so that i can create the inputstream without creating a temporary file.
    Thanks in advance:
    *[http://www.javamilestone.blogspot.com/  |http://www.javamilestone.blogspot.com/  ] *

    Err, a StreamSource is a Source. Check the Javadoc. You can pass it directly to the transform.

  • How to create RFC Destination Between ECC 6.0 and BI 7.0

    HI,
    My name is balu working in gucons,i was trying to create RFC between ECC 6.0 and BI 7.0,i have tried with the help of some documents but iam unable to do that,Iam very helpfull if you give a clear description regarding this problem.
    Thank you,
    Regards,
    BALU.

    Hi Balu
    the error screen is from your BI system? If yes, then why the source system is showing to be of type BI? For ECC it should be of type r/3.
    You can try to delete already created RFC from both your BI and ECC system and try to create source system connection from your BI end from RSA1>> Source System> right click..Create..
    Choose "Automatically Create SAP system" . Enter the required credential then click on "Replicate as well"
    If you do not want to delete any RFC for any reason please upload entries from RSBASIDOC, RSLOGSYST table.

  • How to create arched text without using envelope warp in Illustrator?

    I am using Illustrator cs3 on mac os X This is a video of my problem that I sent to a fellow designer but didn't get an answer I was happy with. Can anyone help?
    http://www.screencast.com/t/4RePFrecwr

    The Appearance Panel is your friend. You don't need to duplicate items, simply add a new stroke to the existing object via the Appearance panel.
    To edit the contents of an Envelope Distort simply choose Object > Envelope Distort > Edit Contents. The preview bounding box will look odd, but you'll be able to select the text and apply any color to it.
    You could also expand the object using Object > Expand And ONLY check the "Object" box. This will result in outlines of the text where you can apply colors as well without the envelope getting in the way. But of course, it's no longer live text.

  • How to create a line without using execute action method.

    Hi All,
    I want to create a line whose weight and co-ordinate are given to me. I am using ActionDescriptor and execute action method to do this.
    Here is my code:
        var idcontentLayer = stringIDToTypeID( "contentLayer" );
        var idStrt = charIDToTypeID( "Strt" );
        var idHrzn = charIDToTypeID( "Hrzn" );
        var idPxl = charIDToTypeID( "#Pxl" );
        var idVrtc = charIDToTypeID( "Vrtc" );
        var idPnt = charIDToTypeID( "Pnt " );
        var actRef = new ActionReference();
        actRef.putClass( idcontentLayer );
        var layerDesc = new ActionDescriptor();
        layerDesc.putReference( charIDToTypeID( "null" ), actRef );
        var lineDesc = new ActionDescriptor();
        lineDesc.putClass( charIDToTypeID( "Type" ), stringIDToTypeID( "solidColorLayer" ) );
        var propertyDesc = new ActionDescriptor();
        var strtPointDesc = new ActionDescriptor();
        strtPointDesc.putUnitDouble( idHrzn, idPxl,  startX);                         //startX, startY, endX, endY are given..
        strtPointDesc.putUnitDouble( idVrtc, idPxl, startY);
        var endPointDesc = new ActionDescriptor();
        endPointDesc.putUnitDouble( idHrzn, idPxl, endX );
        endPointDesc.putUnitDouble( idVrtc, idPxl, endY );
        propertyDesc.putObject(  charIDToTypeID( "Strt" ), idPnt, strtPointDesc );
        propertyDesc.putObject( charIDToTypeID( "End " ), idPnt, endPointDesc);
        propertyDesc.putUnitDouble( charIDToTypeID( "Wdth" ), idPxl, weight );               // weight is given.
        lineDesc.putObject( charIDToTypeID( "Shp " ), charIDToTypeID( "Ln  " ), propertyDesc );
        layerDesc.putObject( charIDToTypeID( "Usng" ), idcontentLayer, lineDesc );
        executeAction( charIDToTypeID( "Mk  " ), layerDesc, DialogModes.NO );
    Is there any other way to do the above (using photoshop scripting method)?
    Thanks,
    AI

    You can only create normal and text layers using the Object Model. For other layer types you have to use Action Manager.

  • How to create window key without using the trillium option

    Hi,
    I am having some problems when trying to create using the window key generator module in ODI data quality.
    I created a business data parser for cleansing my records. This had to pass thru 4 routines, the transformer, parser, window key generator and the matcher routines. The transformer and parser routines have run properly but they window key generator is asking me to specify the window key.( I created the rules for the window key. Like last 3 consonants of last name and 5 digits of some ID). But this is not getting accepted when i am running it and pops an error message.
    I also do not have the trillium module integrated with ODI as of now.
    Can anyone help me with this problem or anyone has faced the same situation and have tried a work around for it.
    Please let me know.
    Thanks,
    Chapanna

    Hi,
    If you are using file-based installation, you can install as non-root user and create domains as usual. You can use asadmin command available at <AS_INSTALL>/bin to do this.
    ex: ./asadmin create-domain domaindir /tmp/justfortest adminport 4850 --adminuser admin domain_nonroot_test
    Did you face any problem doing this in non-root. Unless you have write permissions in domaindir, you won't be facing any problem.
    Hope this clarifies your question.
    Thanks,
    -Balaji.

  • How do you create an array without using a shell on the FP?

    I want to be able to read the status of front panel controls (value, control box selection, etc.) and save it to a file, as a "configuration" file -- then be able to load it and have all the controls set to the same states as were saved in the file. I was thinking an array would be a way to do this, as I have done that in VB. (Saving it as a text file, then reading lines back into the array when the file is read and point the control(s) values/states to the corresponding array element.
    So how do I create an array of X dimensions without using a shell on the front panel? Or can someone suggest a better way to accomplish what I am after? (Datalogging doesn't allow for saving the status by a filename, so I
    do not want to go that route.)

    Thanks so much m3nth! This definitely looks like what I was wanting... just not really knowing how to get there.
    I'm not sure I follow all the icons. Is that an array (top left with 0 constant) in the top example? And if so, that gets back to part of my original question of how to create an array without using a shell on the FP. Do I follow your diagram correctly?
    If I seem a tad green... well I am.
    I hope you understand the LabVIEW environment and icons are still very new to me.
    Also, I had a response from an NI app. engineer about this problem. He sent me a couple of VI's that he threw together approaching this by using Keys. (I still think you are pointing to the best solution.) I assume he wouldn't mind m
    e posting his reply and the VI's for the sake of a good, thorough, Roundtable discussion. So here are his comments with VI's attached:
    "I was implementing this exact functionality this morning for an application I'm working on. I only have five controls I want to save, but they are all of different data types. I simply wrote a key for each control, and read back that key on initialization. I simply passed in property node values to the save VI at the end, and passed the values out to property nodes at
    the beginning. I've attached my initialize and save VI's for you to view. If you have so many controls that this would not be feasible, you may want to look into clustering the controls and saving the cluster as a datalog file.
    Attachments:
    Initialize_Settings.vi ‏55 KB
    Save_Settings.vi ‏52 KB

  • How to create an account without a credit card

    Does anyone know how to create an account without using a credit card?

    Yes.  Follow the instructions in this Apple support document.
    Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card
    B-rock

  • How to create own interface without .cpp file?

    how to create own interface without using .cpp file ? To access the method inside the interface .
    e.g.  ILayoutTarget.
      Should not be SDKFileHelper.h because they are using SDKFileHelper.cpp file

    Rathan,
    PLz chk the below link (PDF file)
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a22024f79?quicklink=index&overridelayout=true
    Mutti

  • HT2589 how can i create apple id without using credit card details ?

    how can i create apple id without using credit card details ?

    @Limnos - that doesn't work anymore. There is no NONE option. I've been at it for hours trying to set up my daughter's account. I've tried creating and verifying an appleID on the web, on her touch...everything. Every single time you get to the stupid Touch, it wants to walk you through the verification of the account and it demands payment (even for their suggested apple Remote method listed in the KB).

  • RFC - XI - WEBSERVICES scenario - Where to create RFC Destination

    Hi  Experts
    For my RFC - XI - WEBSERVICES scenario, I have to create one TCP/IP RFC destination on R/3 system with the following details
    RFC Destination Name    : XXXX
    Connection Type            : T (TCP/IP)
    Activation Type              : u201CRegistered Server Programu201D
    Program ID                      : YYYY
    Gateway Host                : R/3 Details ..??
    Gateway Service           : R/3 Details ..??
    My Function Module (Remote-Enabled) - u201CZZZZu201D is defined in R/3 System.
    This Function Module should be communicated with the target system i.e. NW XI system 
    As per the Note from SAP Help: To be able to communicate using RFC, you need to define the target systems as RFC destinations in the sending system(R/3)
    Target system u2013 XI Server
    Sending system u2013 R/3 System
    Are my details provided are good enough as per my explanation? Please guide me in this regard.
    QUESTION : Where exactly do I need to create the RFC Destination(SM59)? on R/3 side or on XI side?

    Refer the following link-
    http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3414700)ID1636235450DB01012070359836134304End?blog=/pub/wlg/1438
    what are the inputs should be given to Gateway Host and Gateway Service while creating RFC Destination??
    Open transaction SMGW on the R/3 system and choose
    Goto -> Parameters -> Display. Beneath Attributes there will be the
    entries 'gateway hostname' and 'gateway service'.#

  • Getting problem when creating RFC Destination on XI system

    hi,
    I m trying to create RFC Destination on XI system using sm59 tcode. In technical setting tab at  Target Host field, i gave SAP  ECC server IP address. and in Logon Tab I gave Login parameters for SAP ECC server  (Client 400, User : 05 & Password for user 05). Current user and Unencrypted Password fields are unchecked. also Logon Scree is also unchecked in Security Option.
    Problem is, when i click on Remote logon tab, It shows me Logon screen with client 000, User : 04 (which is XI system's user name) and Password. so it doesn't take given login setting for ECC system and if i tried this thing more than 3 times, ECC server block my pwd.
    Please suggest me the required solution
    Thanks & Regards
    Ritesh

    Hi ritesh
    First check if the user exists in ths system. Check the password especially. Because the password space (Number of characters)in SM59 screen is more than password character in SU01 screen.Check the password.
    Secondly, Check if you have given the proper client in the destination box of SM59.
    Check for the unicode test also.
    If possible change the user type as service user.
    When everything is perfect am sure the rfc connection should be fine...

  • Error in Creating RFC Destination

    Hi,
    I am Going for RFC to File Scenario.
    For Sender RFC it < I am trying to create RFC Destination in SAP r/3
    I have Given
    RFC Dest  : XI_CONNID
    Conn type : Tcp/IP
    Activation Type : Register Server Program
    Program ID  :sap
    gateway host : sap-server( Sap server)
    gateway service : sapgw00.
    I saved and I tested but it is showing errors.
    Error : Error in Opening RFC Connection
        Whe i Click on this error message it i showing
         Error  Program sap not registered.
    Points will be awarded.
    regards,
    Jayasimha

    Dear Jaya,
    create a RFC SENDER communication channel first and then activate the channel.
    now go to sm59 there use the same program-id as u did at RFC SENDER COMMUNICATION CHANNEL.
    note:program-id is registered by XI at R/3 level with details related to it's profile(XI profile).
    step 1) create RFC COMMUNICATION CHANNEL with program-id as "any name" at XI first .
    2)create TCP/IP connection with registered program-id created by XI at first step
    so when you execute steps 2 then 1 you will get error ,coz by that time program-id is not yet registere by XI in R/3 domain.
    after executing step 1 i.e creating porgram id at R/3 through XI.
    got to ST22 at R/3 and check whether any dump is found against "XI creating porgram-id at R/3 level".
    we failed at creating PROGRAM-ID itself at R/3 level because of missing authorizations against my R/3 user id,which we will be using at XI RFC channel.
    generally problem will be at PROGRAM-ID creation itself,so just go to ST22 and check any authorizations missing for your userid which is being used at RFC channel configuring at XI.
    Thanks & Regards,
    Rama Krishna

Maybe you are looking for

  • How do I select a spy menu from inside an AP div?

    Hi, I'm new to dreamweaver (2nd day) and am having trouble manageing to select my menu so I can assign links to it in the properties section. I can click on the AP div, which I put it in, and I can click inside each menu button and I can click to hig

  • How do i compress an image in PS elements 12

    I have a 6000 x 4000 pixel jpg image.  The file size is way too large, around 10 megabytes.  I cant figure out how to convert this to a 3000 x 2000 pixel image using PS elements 12.  Please help.  Thanks in advance.

  • Problems with my new Zen Sl

    I have a zen sleek and am using Rhapsody to Go. I managed to load all of my music, including ripped cds, purchased tracks, and Rhapsody to Go subscription tracks without any problems. I've since?downloaded some more subscription tracks and attempted

  • Bug in association editor

    If you create a many to many association and then try to edit it by double-clicking on it, it is not possible to get into the Association Properties - you just a a message "select the Entity Attributes that define the Association, the click Add".

  • Can i make a messgae driven bean participate in a transaction

    i was wondering if there is i can make a message driven's call bean participate in the transaciton of the caller.... what i mean to say is that when i send a message(s) to the bean and the caller is a session bean as well which has a transaction of i