How to obtain verify.pse in Portal 7.3

In Portal 7.0, I can Download the verify.pse file from the SAP Enterprise Portal at System
Administration o System Configuration o Keystore Administration.
But anyone could tell me how to do this in Portal 7.3?
Thanks very much.

Thanks.
But I need pse.
error msg:
trc file: "SSO22KerbMap_SSO.log", trc level: 2, release: "720"
[Thr 9232] Wed Sep 07 09:50:34 2011
[Thr 9232] DlLoadLib success: LoadLibrary("sapsecu.dll"), hdl 0, addr 0000000010000000
[Thr 9232]     using "C:\Windows\system32\sapsecu.dll"
[Thr 9232] Wed Sep 07 09:52:22 2011
[Thr 9232] Ticket is AjExMDAgABRwb3J0YWw6QWRtaW5pc3...
[Thr 9232] *** ERROR => SsfVerify failed (see note 1055856). [ssoxxsgn.c   144]
[Thr 9232] SsfVerify returned 7 :: SSF_API_UNKNOWN_PAB :: Priv.Addr.Book (PSE file) not found.
[Thr 9232] SsfVerify returned null for SignerList.
[Thr 9232] *** ERROR => Validate ticket failed with rc = 458772 [ssoxxext.c   1932]

Similar Messages

Obtain server name in portal service

Hi all,
I've a portal service which must know the server name (https://xxx.yyy.com). In an AbstractPortalComponent I have no problem to get the name through the IPortalComponentRequest. But how to obtain it in a portal service which doesn't have such an object?
best regards,
Markus

thanks, serlank, but that doesn't work in my environment (Tomcat 5.5.12).
The method event.getServletContext().getServletContextName() returns the Name of the web application which i can configure as <display-name> in web.xml. As i have the same web.xml for all my contexts, i can't set different names.

Verify.pse in SAP Netweaver 7.4

Hi,
We have been refered to get verify.pse file from Keystore manager in Netweaver Administration tool in SAP Netweaver Portal 7.4
We are aware that we dont use verify.pse and verify.der files anymore while configuring SSO between SAP and Non-SAP systems.
We would like to ask is there any possible way to get verify.pse file SAP Netweaver Portal 7.4 as we need this for Lotus Notes 8.5
Have refered below SAP Help page Keystore Administration - Configuring the Portal for Initial Use - SAP Library but not sure how to obtain .pse file from here. All we get is .crt or .cert certificate files while exporting.
Appreciate if someone can help on this.
Thanks,
TSB

Hi Tsb,
The reason for this change is that transferring pse files is not supported and any more and you ideally need to use SAPSSOEXT:
Single Sign-On to Non-SAP Systems and Applications - User Authentication and Single Sign-On - SAP Library
Also, make sure that you are on the latest SAPSSOEXT as mentioned in
note 1929803. SAPSSOEXT contains example coding, as well as example data
- please first verify your solution with the sample data provided with
SAPSSOEXT.
Let me know how you get along with this; else I will help you download the pse file.
Thank you!
Kind Regards,
Hemanth
SAP AGS

Verify.pse in CE

Hi Expert,
In NW 7.0, we can download verify.pse for non-SAP SSO. However, in CE 7.2, how can we download it? I tried /nwa/key-storage, but it can only generate .crt file not pse file. Does crt file equals to pse file?
Thanks in advanced.

Hi Tom,
You can check System Administration >> System Configuration >> Keystore Administration >> Download verfy.der file OR Download verfy.pse file option available
Please check it
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d026514a-285b-2b10-0c89-e2ae4b0a6b44?quicklink=index&overridelayout=true
Hope it helps,
Regards,
Arun

EvalLogonTicket() with verify.der instead of verify.pse

Hi Experts,
From the sample code of SAPSSOEXT, we use verify.pse from the producer portal to parse the SAP logon ticket. However, from NW CE, we can only generate verify.der. How can we use .der file in SAPSSOEXT library? I am trying to do SSO between NW CE and Weblogic.
Thanks in Advanced.

Hello Bert,
the verify.der contains a X.509 standard certificate which can be used to verify the SAPLogonTickets by the Backend systems in a way which is defined by the related standards.
This certificate and the corresponding private key are generated during the installation of your portal and are stored in a so called TicketKeystore.
You can find it using the Visual Administrator in the Key Storage Service. Here is the documentation:
http://help.sap.com/saphelp_nw04/helpdata/en/e9/a1dd44d2c83c43afb5ec8a4292f3e0/content.htm
In the Key Storage Service you can replace the current certificate and private key with your own one which you can generate using tools which support the X.509 and related standards. Or you can create a new one.
You could also request a certificate from an official trust center if you need this extra security.
So you have plenty of possibilities...
As always you have to check which is the best in your environment. If you create a new certificate of course you will have to reinstall it on every backend system which should trust the SAPLogon ticket from your portal.
On the other side, you should be carefull in creating certificates which have a very long validity (life time). Because the SAPLogonTicket mechanism relies on the public key crypthografie. The longer the lifetime of a certificate the more time there is for an attacker to eventually find the corresponding private key and thus break the security of the SAPLogonTicket. Which means he could logon to your backend system with any user id he wants...
So, it really depends on your scenario and environment.
But I hope I could give you some hints and help about the verify.der
Best regards,
Stefan Brauneis

How to Obtain a Distribution Provisioning Profile from Apple

hi everybody!
I'm searching in the apple.com site where I can register me to obtain a distribution provisioning profile, can anybody help me?
thx!

Hi Angelo, and welcome to the Dev Forum!
A provisioning profile is one of the documents you can obtain at the Developer Program Portal once you're a member of the program. Normally you would first register as an iPhone Developer at the iPhone Dev Center to access the free developer tools and the extensive iPhone Reference Library.
The home page of the iPhone Dev Center includes a link to information about the iPhone Developer Program. Once you decide on the type of membership you require (e.g.: Standard Program $99; Enterprise Program $299), you can proceed to the online application form.
Once you are accepted into the program (the waiting time may vary from less than one day to several weeks), you will obtain access to the Program Portal which provides detailed instructions on how to obtain, install and use the various documents including the provisioning profiles. Note that an iPhone developer does not normally obtain a Distribution Provisioning Profile until completing and thoroughly testing an iPhone app using one or more Device Provisioning Profiles. A Distribution Certificate and Profile is only used when building the version of your app which will be submitted for review and placed in the iTunes Store if accepted.
Hope that helps!
\- Ray

How to obtain an object localized name?

Hi everybody,
I have a portlet that searches for folders and documents in the KD using IDocumentFolderManager and IDocumentManager objects. The problem is that when I use obj.getName(), I always get the object default name, It doesn't respect the user localization.
This is part of the code:
IDocumentQuery documentQuery = docMan.createQuery(folderID);
documentQuery.setShowUnapproved(false);
documentQuery.setSortProperty(ObjectProperty.Name);
IObjectQuery childDocs = documentQuery.execute();
for (int j = 0; j < childDocs.getRowCount(); j++){
IObjectQueryRow document = childDocs.getRow(j);
System.out.println(document.getName());
Does anyone know how to obtain the localized name?
Thanks!
Claudia

Ok, I give up. I tried this:
<%@page import="com.plumtree.remote.portlet.*" %>
<%@page import="com.plumtree.remote.prc.*" %>
<%@page import="java.util.Locale" %>
<%
     response.setLocale(Locale.FRENCH);
     IDocumentFolderManager folderMan = PortletContextFactory.createPortletContext(request, response)
          .getRemotePortalSession().getDocumentFolderManager();
     IObjectQuery subfoldersQuery = folderMan.getSubFolders(1);
     for (int i = 0; i < subfoldersQuery.getRowCount(); ++i) {
          out.write(subfoldersQuery.getRow(i).getName() + "<br/>");
%>
I got the primary name for the folder, not the French name. I tried setting my portal user's locale to French/France and that didn't help either. I even tried setting the portlet's primary language to French. None of that helped one bit.
Then I saw this post from 2005:
http://forums.bea.com/bea/thread.jspa?messageID=500018945&tstart=0
Basically, I think this is just broken or not implemented. I would contact support and file an SR. Unless I'm missing something, it looks like the PRC is not locale-aware. And that's a bug, AFAIK.
Chris Bucchere | bdg | [email protected] | http://www.thebdgway.com

After brrestore: Couldn't open verify PSE file /oracle/ sid /LASVerify.pse

After a brrestore on same server and <SID> each time that we run cleanup logs from DB13 we see:
BR0801I BRCONNECT 7.00 (32)
BR1301W Error message from likeywlib: likey_init: Couldn't open verify PSE file ("/oracle/<sid>/LASVerify.pse") for writing, errno = 13 (Permission denied).
BR1302W Initialization of license key library likeywlib failed, return code 1
BR1304W Checking SAP license failed at location BrLicCheck-104
BR0602W No valid SAP license found - please contact SAP
BR0805I Start of BRCONNECT processing: cdzkodpr.cln 2008-12-06 22.46.27
BR0484I BRCONNECT log file: /oracle/<sid>/sapcheck/cdzkodpr.cln
It is on a Linux SuSE X64 - Oracle 10.2.0.4 box
Regards.
Ganimede Dignan.

> After a brrestore on same server and <SID> each time that we run cleanup logs from DB13 we see:
>
> BR0801I BRCONNECT 7.00 (32)
> BR1301W Error message from likeywlib: likey_init: Couldn't open verify PSE file ("/oracle/<sid>/LASVerify.pse") for writing, errno = 13 (Permission denied).
you <SID>adm user has no permissions to write this file.
Markus

How do I verify an RDS session is getting a virtual IP?

I followed the MS walkthru here
(http://technet.microsoft.com/en-us/library/ee308290(WS.10).aspx)
to set up a lab to test RDS virtual IP's.
I have a DC, Web Access Server (don't think I need this), Connection Broker, DHCP Server, 2 RDS Servers, 5 WinXP Clients, 5 Win7 Clients.
DC=10.0.0.1, RDS1=10.0.0.2, RDS2=10.0.0.3, Connection Broker=10.0.0.5, Web Access=10.0.0.6, DHCP=10.0.0.10 (DHCP pool=10.0.0.100-10.0.0.200), Clients=10.0.0.20-29
I have IP Virtualization turned on through group policy per session.
I have my 2 RDS servers joined to a farm called labfarm through group policy.
I have DNS Round Robin set up via DNS on the DC.
When I connect my clients to the RDS Servers, I run ipconfig on the clients, and they all only show the static IP of the RDS Server. I was under the impression that with IP virtualization
turned on, each client would show 2 IP's.....1 for the host, and one would be the virtual IP.
Also, when I look in the DHCP server, I do not see any leases.
I am correct in the above statement? If not, how do I verify that my clients are all getting virtual IP's?

I couldn't wait....I just removed vmware tools and reinstalled without the driver mentioned in that article and it works great now. Thanks alot.
I have another question though. When I connect Client1 to RDS1 and run ipconfig, I see the static IP of the RDS server, and 1 extra IP....which I expected. Leaving Client1 connected, I connect Client2 to the same RDS1 server and run ipconfig.
I then see the static IP and 2 ip addresses. leaving both Client 1 & 2 connected, I connect Client3 to the same RDS1 server and run ipconfig. I still only see the same 2 ip address. I connected up to 5 clients to the same RDS server,
and all I see are the same 2 virtual ip's on every session.
I thought each session was to be assigned it's own IP address. Why are there only 2 being handed out? and why am I seeing multiple IP addresses per session? I was expecting to see on each session, the RDS server IP, and 1 other unique IP address....not
multiple addresses, and surely not only 2 address.
The pool I have set up in dhcp is from .100 to .200, so there are plenty of addresses to go around. Is there a setting somewhere to limit the number of virtual IP's? Is there a way to make it unlimited? If I use this in production, I'll need up to 50 sessions
per host to have their own IP....is this possible?

How to obtain date of creation if image is obtained using getImage()

When Image is obtained using getImage() method , how to
obtain date of creation or another header value if image is
obtained using getImage method.

Actually, some formats do indeed have creation or modification dates built in. e.g. http://www.w3.org/TR/PNG-Chunks.html#C.tIME. (Of course since most programs save a new copy of the file every time, the two dates are the same.) However, just because formats have this data doesn't mean it's reliable or even present. Your best bet is to pass creation dates in an Applet param tag for applets (assuming you were referring to Applet.getImage()) or to parse out a filename from a classloader URL and use a File object to check (assuming you were instead referring to Toolkit.getImage(URL)). That's the best answer I have without knowing more about what you are trying to accomplish.

How to schedule a job in portal ?

Hi,
How can we schedule job in portal just like we have in SAP ?
thanks,
B

Hi Mayank,
Thank you for the response.
I followed your points and in schedular task wizard, I selected Eclipse project instead of Generation directory. Here I gave a simple webdynpro project. (with the intention of writing my code in it) But I face foll problems.
When I deployed this webdynpro project, I am not able to see it in the portal scheduler tasks. how should I locate it ?
I should select Generation directory or Eclipse project ? if generation directory, which directory should I give ?
Where should I write the code ?
thanks,
B

How to obtain the license for the mentioned products.

Hi All,
Please help me in below licensing issues.
1) Our functional team got the below error while accessing "Job Scheduling Workbench".
Error: The Workbench is inaccessible because Oracle Manufacturing Scheduling has not been licensed. Please work with your Account Manger to purchase the license.
2) Another error message while accessing the navigation Flow Manufacturing --> Product Sync --> Flow Routings
Error: APP-BOM 20972: You cannot access this form
Cause: You do not have a license for Oracle Flow Manufacturing.
Action: Obtain a license for Oracle Flow Manufacturing.
Please guide me how to obtain the license for the above products.
Environment: eBS R12.1.3 on Linux 5.8
Regards,
Siva

Thanks for providing the document. I follow the document and get back to you for any issues.
Regards,
Siva.

How can i verify my email on my apple id by downloading apps on my iPad mini ?

I have problem downloading apps on my iPad using apple id. But the problem is my verification e mail. but how can i verify my email ? is that so ? Are there any alternates downloading apps instead of apple id?

No alternatives, check your spam, junk, trash folders and rescue email account for the verification email.

I'm trying to verify my apple id but when i log into icloud to get the email it says 'the apple id has not been verifed.' So how do i verify my account if it wont let me log into to icloud mail?

I'm trying to verify my apple id but when i log into icloud to get the email it says 'the apple id has not been verifed.' So how do i verify my account if it wont let me log into to icloud mail? stressing me out please help me

You have to respond to the verification email that Apple should have sent to you by clicking the Verify Now link. Make sure you check the email address you used to set up your iCloud account. This would not normally be an @icloud.com email address. Also make sure you check the spam/junk folder as well as the inbox. If it isn't there, go to https://appleid.apple.com, click Manage your Apple ID, sign in, click on Name, ID and Email addresses on the left, then to the right click Resend under your Primary Email Address to resend the verification email.

I'm trying to log onto app store, but I keep getting a message that my device or computer is unable to be verify. How do I verify it. However, when I use itunes, I have no problems in logging onto my account with the same apple ID

I'm trying to log onto app store, but I keep getting a message the my device or computer is unable to be verified. How do I verify it when the app store will not allow me to log onto the account even when I use my Apple ID, which works with no problem on itunes. What is up and how do I correct it now!

Check your mac's Serial Number.
Some people have problems with missing serial numbers on their Macs and that's the message you get when this happens.
Click on the Apple at the top left of the screen, open "About this Mac" and click on "More Info". You should see a list with information about your Macbook Air. Check that on the Serial Number field you have your Mac's Serial. If you have "SystemSerial#" written instead then that's your problem.
You can re-enter your serial number if you have a USB CD drive, it's not very straightforward but I can walk you through it if you need it.
Cheers

How to obtain verify.pse in Portal 7.3

Similar Messages

Maybe you are looking for