How to trace communication users in system & build a role

Hi all
I have a requirement in my compnay to create a role for communication users currently assigned to SAP_ALL
we have 20 communication id's & turning on trace is not feasible option due to the impact on system performance.
Plz let me know what is the approach i need to have inorder to find neccessary tcodes & objects into my role.
thank you in advance.
Best Regards
NaveenMurthy_

What I meant is that good "housekeeping" and securing of these sensitive RFC connections is hard to do properly if you are "far away" from them.
Go figure why SAP delivers many of their connection wizards with SAP_ALL... they don't know either what the customer will be using and which data will be transfered and when you might need to temporarily debug the connection or when someone will try to use an existing connection for a new application without thinking about developing a new role to go with it, or which checks an SP might introduce which then pop up as a problem in a remote program or system, etc.
Really, it is not an easy thing to do properly (both technically and procedurally) and the further you are away from it, the more hassle it will be.
No inflamatory hype intended toward any specific type or location of "offshoring".
Cheers,
Julius

Similar Messages

How to trace a user System or I.P address

Hi Experts,
Had to ask how to trace a User's System or I.p address whom has performed changes over a BEX Query.
I have a situation where a user has done some changes in report it displays in last changed by user name:-****and last change date but i would like to trace the system from which these changes have been applied over a the bex Query.
Thanks in advance
Aman

Hi Aman,
Please have a quick look at the note 368048 which explains why the terminal ids are blank in some cases and gives the solutions where applicable.
If you want to see the current workstation with IP Addresses you can have a look at table USR41 which contains this information but this is not contained within the security audit log.
539404     FAQ: Answers to questions about the Security Audit
39418      Logging user actions
As for your query, about viewing user's IP, you might need to get user's Terminal ID from STAT/AL08 and manually use tracert in MS-DOS command to see particular user's IP. EG:tracert myl5005500.
Tracing route to <hostname>[10.10.10.10]
over a maximum of 30 hops:
1    <1 ms    <1 ms    <1 ms <FQDN> [10.10.10.10]
Trace complete.
Note : I personally tested from logging in via query designer but my connections were not displayed in USR41. Once I connect to backend system my terminal IP could be traced.
Regards,
Naveen.

How to trace other user's session?

Dear Experts,
I would like to trace other user's session, I am on Oracle 10g R2 (10.2.0.4) on a Windows box. I did search on google and found tons of articles explaining about tracing techniques. But unfortunately, trace file is not getting generated in my case. Below are the steps I am following:
SQL> conn /as sysdba
Connected.
SQL>
SQL> select sid, serial# from v$session where username = 'TEST';
       SID    SERIAL#
        38         17
SQL> show parameter user_d
NAME                                 TYPE        VALUE
user_dump_dest                       string      C:\DB10G\UDUMP
SQL> show parameter timed_s
NAME                                 TYPE        VALUE
timed_statistics                     boolean     TRUE
SQL>Connect a new SQL*Plus session as TEST and then
SQL> show user
USER is "SYS"
SQL>
SQL> select sid, serial# from v$session where username = 'TEST';
       SID    SERIAL#
        19      24465
        38         17
SQL> exec dbms_system.set_ev(38,17, 10046, 12, '');
PL/SQL procedure successfully completed.
SQL> exec dbms_system.set_ev(38,17, 10046, 0, '');
PL/SQL procedure successfully completed.
SQL> grant execute on dbms_system to test;
Grant succeeded.
SQL> exec dbms_system.set_ev(38,17, 10046, 12, '');
PL/SQL procedure successfully completed.in the new session (TEST):
SQL> select * from tab;
TNAME                          TABTYPE CLUSTERID
T                              TABLE
T3                             TABLE
T1                             TABLE
T2                             TABLE
MYEMP                          TABLE
SQL>Yet, no trace file is generated in "C:\db10g\udump" folder.
C:\db10g\udump>dir
Volume in drive C is SYSTEM
Volume Serial Number is AC21-0462
Directory of C:\db10g\udump
12/15/2008 12:36 PM    <DIR>          .
12/15/2008 12:36 PM    <DIR>          ..
               0 File(s)              0 bytes
               2 Dir(s)   9,891,508,224 bytes free
C:\db10g\udump>Your help/advice in this regard will be very helpful.
Regards

You must be using shared server.
You can verify this by referring to the SERVER column of v$session.
In shared server several servers will execute your code, so that's why you don't find a trace file.
The method described in this article should work in your case also:
http://technology.amis.nl/blog/1794/how-to-trace-a-java-application-through-a-connection-pool-using-dbms_monitor-6
Hth
Sybrand Bakker
Senior Oracle DBA

How to trace which user shutdown oracle database in unix OS?

our organization is having 10 DBA with sysdba priviladge. We are using UNIX operating system. At morning say for example if some one (SYSDBA user) shutdown the oracle database how other sysdba user trace the user who shutdown the database? the information i need is terminal from where oracle got shutdown and the username? Please help...

Hello,
You are right Sybrand, SYSDBA connections are always audited.
My answer was about enabling auditing to any connections, which may give informations about who access to the Database in general. And, this is true, it was not the scope of the OP question.
However, so as to enlarge audit of SYS/SYSDBA/SYSOPER operations, setting the parameter audit_sys_operations=TRUE may be interesting:
http://download.oracle.com/docs/cd/E11882_01/network.112/e16543/auditing.htm#DBSEG0611
To the OP:
Where the audit tracefile get genareted for sys user?You may execute this:
show parameter audit_file_destThank again Sybrand for correcting me.
Best regards,
Jean-Valentin

How to trace an user access

Even if I've got no DBA permission (for example I don't see the v$session table), have I got any way to trace the users accessing the DB? How can I do? I was told about trace but can someone tell me more? I'd like to know the user accessing the DB and the operation that he's launching. Is it possible?
Thanks!

Anything is possible if you have the correct privileges. But then you probably don't have those privileges, and probably for a reason, as you probably also don't have the DBA role for a reason.
If you are to enable trace in a different session, you would need execute access on an Oracle provided package, which differs by version, and of course you assume Oracle never changes, and there is only one version out there: yours.
For a DBA it would be the easiest to grant you the select_catalog_role and the execute_catalog_role.
But then again one would ask why you think you should spy on him, and why you don't cooperate with him and/or try to convince him.
Sybrand Bakker
Senior Oracle DBA

How to trace a USER in oracle?

Hi Sir,
I have a rquirement that I need to Trace a session created through the Application. The only data I have is that I know the application will connect to a Database schema and nothing else. How is it possilbe that I can create a trace file for it.
Also is it possilble, that i can trace complete user. how to find all the trace as it create number of process inturn number of trace, how do I find it and combine. I read the documentation but can't understand it clearly?
Any help will be great.

sanora600 wrote:
Aman, thanks for replying. This is the problem, they have not implemented dbms_application_info.
That is the reason I want to know how to trace user(all session of a schema) and combine all the session generated trace(something like trcsess) and then generate tkprof. I am on Oracle 10g.Well, first off, users connect to databases, they don't connect to schemas. And as a follow on, users have sessions, schemas don't.
That said, you might investigate a logon trigger that initiates a 1046 trace. Something like this:
-- create a logon trigger for capturing extended trace data
-- NOTE: must be run as SYS
-- NOTE: Be sure to change both occurances of the target username
-- ('user = xxx' and 'TRACEFILE_IDENTIFIER=') to the
-- correct value for the session you want to trace.
create or replace trigger logon_trigger
after logon on database
begin
if (user = 'SCOTT' ) then
execute immediate 'ALTER SESSION SET TRACEFILE_IDENTIFIER=''SCOTT_APP''';
execute immediate 'alter session set timed_statistics=true';
execute immediate 'ALTER SESSION SET EVENTS ''10046 TRACE NAME CONTEXT FOREVER, LEVEL 12''';
end if;
exception
when others then
null;
end;
end;
Of course, you can play around with the 'if' condition, and delete or disable the trigger when it is no longer needed. The resulting trace file can be run through tkprof.
Edited by: EdStevens on Dec 19, 2008 9:03 AM

How to trace connect user ?

Hi,
How can I trace all user connection in a file ?
I would like to know who connected (user oracle) and when.
Thanks for your help,
gnom92.

You can see the figure how many connection made since the db starts up quering v$sysstat;
select name,value from v$sysstat where name like '%logon%';
NAME VALUE
logons cumulative 132671
logons current 175
Generally, Oracle doesn't keep this information. You have to enable audit to keep this info.

How to trace a user session?

Hi DBA,
OS: Linux 5
DB Ver: 10.2.0.1
can any one tell me how to trace a session of user in oracle 10g?
Regards,
BK

user12942781 wrote:
Hi DBA,
OS: Linux 5
DB Ver: 10.2.0.1
can any one tell me how to trace a session of user in oracle 10g?
http://download.oracle.com/docs/cd/B19306_01/server.102/b14211/sqltrace.htm#CHDDGCCB
HTH
Aman....

How to trace idoc in receiving system

Hi
We are sending an idoc from solution manager to an SAP system. I have the idoc number in the solution manger.
Using this, how can we trace this idoc in the receiving system?
Many Thanks
Sridhar

hi!
Define the logical system names in both the systems.
Logical system names :SAP001
SAP002
SAP001 FOR 001 CLIENT
SAP002 FOR 002 CLIENT
These two logical system definitions should be present in both the systems.
Assign the logical systems to the client. (in both the systems)
Assign SAP001 to 001 CLIENT
Assign SAP002 to 002 CLIENT
you can See these in transaction SALE.
After this define the rfc DESTINATION IN sm59. (in both the systems)
In 001 client create the RFC destination name SAP002
In the tab log on security, give the user name and password and client of the 002 client and save it.
Similarly do the reverse in the 002 Client.
In 001 client create the port.(Transaction WE21)
Specify the RFC destination name as SAP002.
Now you can define the ports, (both the systems)
Create the partner profile for partner(ie gve logical system name of partner) , so give as SAP002.
partner profile in both the systems.
Now create the distribution model in BD64 and goto edit>model view>distribute.
The same model view will be visible n distributed to the partner system also..which in this case is sap002.
U may trigger the idoc from we19 and chk its status in we05.
try if it helps n kindly reward points.

How to trace a user who entered/dropped a table in a shared DataBase

Hai, I have a doubt plz help me
when working in a shared DataBase environment, different users will create or drop
tables from the DataBase. Is it possible to trace who has created/altered a particular table in the DB. If yes plz tell me the procedure.
Thanks in advance.
SrihariKrishna

Maybe this link provides some help?
http://asktom.oracle.com/pls/ask/f?p=4950:8:5395923770553724381::NO::F4950_P8_DISPLAYID,F4950_P8_CRITERIA:6399608034075
C.

How to add multiple users to a role in ECC 6.0

How to add multiple users (say 1000) to a role in ECC 6.0?

Hi
You can actually add multiple users to a role using transaction SU01. From SU01, use the menu Environment->Mass Changes.
Here you can manually add the users, select them by address or authorisation data. Once you have your user list, you can then add or remove roles and/or profiles.
Secondly , You can use SU10 to do mass changes to multiple users including role assignments per logical systems
Also check the following link:
http://www.sap-img.com/bc021.htm
I hope this should do it
regards
Chen

Communication User Locked..

Hi All,
Can you plz provide the information for this problem.
How does a communication user gets locked & what could be the root cause for that problem?
Thanks & Regards
Srinivas K

Hi Srinivas,
Reasons for this:
1) Somebody has changed the password of the communication id
2) An RFC defined to refer that client has an incorrect password in SM59 for that Comm. id.
>
Srinivas K wrote:
> a) If the password for the communication user has been expired, then do we need to reset it by using SU01?
>
Passwords for Communication users do not expire. Yes, SU01 is the way by which you change passwords, even for communication users. As mentioned earlier, its a bad idea changing the password of a Comm. user, as all other RFC's referencing to that client will have to be updated with the correct credentials.
> b)"Communication users details not changed in all RFC communication configuration"---> I couldnt understand this, so could u plz provide some more information regarding this.
>
> Can we get information in ST05, with related to this problem?
Debug the issue more. Look at the change documents of the Comm. user. See if anyone has changed the password. If not, then there might be a possiblity that some RFC referencing to that client has the incorrect details. ST05 is not what you are looking for. Look at SM20N (AIS) for the details.
Do not change Comm. users to Service type! Comm. users normally have broad authorization, making it a service id is a heavy risk as SAP GUI access will be opened up!
You might want to post/move this to the security forum
Thank you
Abhishek

How to trace other email from bookmark

how to trace other user email from bookmark

Yes, you can pick which account, right on the email you want to send.
The From: field lists the available accounts. Click and select.

How to trace the changes made by other user in portal

Hi All,
Actually i have a requirement like, some body has done some changes in Development server how to trace those chnages in portals or Visual Admin (who is the user and what are all the objects that got changed) .
Actually our development system , Quality and Production systems are working fine till yesterday but when we logon to the dev, qua, prd systems today there are some changes and some of the things are not working client was asking us whether we have done some canges if not who has done the changes.
Is there any place where all these changes can be recorded (likes who is the user and changes ....) or traced like log files or any thing else
Can any one help me out in this regard.
Thanks & Regards,
Ramesh.

Hi ,
As you told some changes identified. so navigate to corresponnding portal obejcts and find modified and last changed by similar properties in the property editor object.
portal activity reports gives how many users visted specific pcd object but not who visited. You can use pcd filter to compare properties.
Regards,
Koti Reddy

How to Trace the single Query Hits for single User

Hi BW Experts,
I have one doubt.
How do we know that How many times one User executed only one Report from last 2 months??
How do we trace it in BW System
Please tell me.
Thanks in advance
Regards
Anjali

Hi Anil,
Thanks for the reply.
I checked in RSDDSTAT Table. But I could not understand from that Table.
How many times 'X' User is executed 'Y' Report (This is single Query/Report only) from last 2 months?
Regards,
Anjali

How to trace communication users in system & build a role

Similar Messages

Maybe you are looking for