Https with Kerberos..Please guide

Hello All,
We have implemented Kerberos on EP7 SP9
It is currently working on http protocol
Question:
How do I implement SSL using Kerberos?
Please guide.
Awaiting Reply.
Thanks and Warm Regards,
Ritu

Hi Andi,
Thanks for Reply...
we are using portal with ADS LDAP for user authentication.
and we want to use SSO for Portal logon with NT logon credentials without logon screen and probably this notes will help me. Let me go through this. This is really big notes.
Regards
Ali

Similar Messages

I have an iMac with mountain lion 10.8.3 with boot camp 5.0.2 .i installed windows 7 -64 bit with boot camp but the boot camp didn't install drivers for windows please guide me for trouble shooting .

i have an iMac with mountain lion 10.8.3 with boot camp 5.0.2 .i installed windows 7 -64 bit with boot camp but the boot camp didn't install drivers for windows please guide me for trouble shooting .

Kappy wrote:
Boot Camp doesn't install the drivers. You have the drivers on a separate USB device if you followed directions. Once in Windows connect the USB drive with the driver software. It should startup automatically and install the drivers.
You don't even need to do that. As downloading the drivers from within Boot Camp Assistant can be unreliable, it is better to get the package directly from here:
http://support.apple.com/kb/DL1638
Copy the .zip file to a USB flash drive or burn it to a DVD in OS X. Install Windows as normal, insert the flash drive/DVD in Windows, copy the .zip file to the hard drive, extract it, then run the setup executable.

Can anyone please guide me how to create a table like employe table with 10

Hi,
can anyone please guide me how to create a table like employe table with 10colums.
after that we need to update the colums with personal details......like name1,name2,address,city,zip...etc.
using the RFC we need to update the personal details coulums (either select query or Insert command)
if you have any program logic similar to this requirement please share with me...that would br greatly helpfull to me...
thanks in advance
srinivas

Hi....
We are having one table and now i am going to update that table's fields...
for that in RFC function module we need to enter the fields in importing parameters (which are mandtory in table)
and in source code just write like following....
( try to under stand that it contains some previous used table nad field and stucture and work area and function module names)
FUNCTION ZL2C_UPDATE_MYCUSTOMER.
""Local Interface:
*" IMPORTING
*"     VALUE(USR_ID) TYPE USRID
*"     VALUE(LOGO_ID) TYPE KUNNR
DATA ls_mycust TYPE zl2cmy_customer.
DATA: name1 TYPE name1_gp.
DATA: sharpoint_url TYPE url.
ls_mycust-usr_id        = usr_id.
ls_mycust-logo_id       = logo_id.
SELECT SINGLE name1 FROM kna1 INTO name1 WHERE kunnr = logo_id.
    ls_mycust-name1       = name1.
    SELECT SINGLE sharpoint_url FROM zl2c_CUSDASHBRD INTO sharpoint_url WHERE logo_id = logo_id.
      ls_mycust-sharpoint_url = sharpoint_url.
      INSERT into zl2cmy_customer values ls_mycust.
      COMMIT WORK.
    ENDFUNCTION.

PLease guide me to use vendor sub range with functionality

Dear All,
PLease guide me to use vendor sub range with functionality
thx

Hi,
The basic concept of Vendor Sub Range is to use different Purchasing Data as well as Partner Functions for a particular range of products supplied by individual your vendor.
In SPRO you can activate Vendor Sub-range in following path
SPRO->Logistic General->Business Partner->Vendors->Control->Define Account Group & Field Selection
In this screen Select your Vendor account group and double click, sys will take to new screen and here you select check box of Vendor sub-range relevant in data retention level-poaching tab and save.
Now create following master data:
Lets say youre purchasing two pumps from your Vendor (V), HDPE and SS manufactured by different company (HDPE and SS ) & they have different purchasing data like payment terms, delivery term etc
1. Create two materials HDPE and SS
2. Create Vendor (V)
3. Create Info record (ME11) M1 & M2 with vendor (V) and here in each material maintain vendor sub range
4. Now create PO (ME21), all related data you will get in PO w.r.t. material and save.
Regards,
Biju K

Dear Friends...... I have an ipad 2 32gb with wifi and 3g enabled sim..... i bought it second hand .... and now if am going to download any games it is showing me an email id and asking for its password... please guide me how can i change this setting

Dear Friends...... I have an ipad 2 32gb with wifi and 3g enabled sim..... i bought it second hand .... and now if am going to download any games it is showing me an email id and asking for its password... please guide me how can i change this setting to my email id and password

Tap on the id in Settings > Store and log out of it and then login with your id. Any content already on the iPad will be tied to the previous owner's id and it can't be copied or transferred to your id - so it's probably best to do restore the iPad back to factory defaults and start as from new with it : Settings > General > Reset > Erase All Contents And Settings

Hey there! well i from india and i m facing problem connecting my debit card to the itune store ,as the very option is not there, can someone guide me how to get it connected , i have a mastercard debit card with me .please help me

hey there! well i from india and i m facing problem connecting my debit card to the itune store ,as the very option is not there, can someone guide me how to get it connected , i have a mastercard debit card with me .please help me

if you are signed in to iTunes with your AppleID, click on the AppleID > view account > payment information > enter in your information

Please guide the path in Service Market Place to find CR2008 latest Service Pack and CR2013 latest Service pack with Visual Studio integration

Please guide the path in Service Market Place to find CR2008 latest Service Pack and CR2013 latest Service pack with Visual Studio integration for CR2013; I have S userID and log in; but could not locate the place to download

Hi,
I believe you are right!, The support portal is Showing Crystal Report for VS not the other one;
Our S User ID is out dated might be; It was created when CR 2008 was purchased. But we bought CR2011 license recently as mentioned below.
Below is the product purchased by our organization
CR 2011 INTL UPGR WIN NUL LICENSE - 1 to 2 Licenses, mix and match.
Does this version have maintenance rights?
I tried registering at Service MarketPlace hoping to get new S-User ID; Am i right path to get the new S- USerID ?
During registering it asked for "Customer or Installation Number (1) *" ; Where can i get this info or number; Kindly suggest

HT1695 Sir, I have facing Problem in my Device Iphone 5 in Vodafone 2G plan. I have discuss issue with Vodafone Care. All settings from the Vodafone Side are perfect. Still Issues arise in this Device. Please guide me for resolve the issue.

I am from Gujarat. I have Purchased Iphone 5. I have network of Vodafone Limited.
I am facing problem of Network connection in Whats app, safari and other applications for the access. I had post query in service provider network and all setting from there side are perfect. Please guide me in such error.

Please guide me in such error.
What error?
If you want help then you need to provide details as to what's wrong.
What troubleshooting steps have you done?

OAM 11g BP02 with Kerberos is not working on AIX

Hi,
We are trying to configure OAM 11g with Kerberos on AIX with no success..
Resource is protected according to OAM documentation guide but the oam logs shows the following:
[2012-08-28T00:03:22.305-05:00] [oam_server1] [TRACE] [] [oracle.oam.engine.authn] [tid: [ACTIVE].ExecuteThread:
'2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 0000J_fbCuS9h^k5kzWByZ1GF532
00000G,0] [APP: oam_server] [SRC_METHOD: log] [SRC_CLASS: oracle.security.am.engines.common.adapters.OAMLoggerImp
l] Authentication Failed.[[
javax.security.auth.login.LoginException: Bad JAAS configuration: bad URL /home/oracle/oam.keytab
Error java.net.MalformedURLException: no protocol: /home/oracle/oam.keytab
at com.ibm.security.jgss.i18n.I18NException.throwLoginException(I18NException.java:5)
at com.ibm.security.auth.module.Krb5LoginModule.j(Krb5LoginModule.java:537)
at com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.java:146)
at com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:274)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
we are using OAM 11g BP 02.
oam-config.xml is configured as follow:
<Setting Name="KerberosModules" Type="htf:map">
<Setting Name="6DBSE52C" Type="htf:map">
<Setting Name="keytabfile" Type="xsd:string">/home/oracle/oam.keytab</Setting>
<Setting Name="krbconfigfile" Type="xsd:string">/etc/krb5/krb5.conf</Setting>
<Setting Name="name" Type="xsd:string">Kerberos</Setting>
<Setting Name="principal" Type="xsd:string">HTTP/myssoserver@mydomain</Setting>
</Setting>
</Setting>
Please let me know how to get this resolved. Thanks in advance.
Regards.

David,
Your Principal name should be the SSO LB URL.(ie :sso.mycomany.com)
ktpass -princ HTTP/sso.mycomany.com@DOMAIN -pass XXXXXXX mapuser DOMAIN\user -out oam.keytab.
Also make sure sso.mycomany.com has a reverse DNS configured correctly.
you can check using dig command
ping sso.mycomany.com
What ever the ip-address
dig -x <IP-ADDRESS>
Check in the reverse DNS section there should be 1 record.
;; ANSWER SECTION:
1.1.1.1.in-addr.arpa. 3600 IN PTR sso.mycomany.com.
Let me know if you have more questions.
Thanks
Saurabh

Desktop Integration in Peoplesoft with Kerberos

Hi Gurus,
We are doing the desktop integration in peopletools 8.52 crm9.1 with oracle delivered kereberos functionality.everything we have cnfigured as per the document. its working fne when i put this url
http://example.com/psp/ps/?cmd=default.but if i put this URL http://example.com/psp/ps/?cmd=login it is redirecting to signon.html page which is asking for credentials.
so can you please guide me to solve this issue , because our production url is http://example.com/psp/ps/?cmd=login so we are not planning to change the prod url
Thanks
Velu

That is working as designed. To bypass the login, you should start users at the URL: http://example.com/psp/ps/?cmd=start . You need a way to get to the login screen if kerberos fails to work properly. If you really want to prevent users from ever getting to the login page, you could change your webprofile to point to a customized version of the delivered signon page. This customized version could do a HTTP-EQUIV='Refresh' that points to the kerberos signon page.

My itunes keeps crashing every time i open it with my windows 7. im active military and dont have time to be messing with this. please help

my itunes keeps crashing every time i open it with my windows 7. im active military and dont have time to be messing with this. please help

Hello there, Staver13.
The following Knowledge Base article provides some assistance in troubleshooting your issue:
Can't connect to the iTunes Store
http://support.apple.com/kb/TS1368
Particularly:
Troubleshoot issues on an iPhone, iPad, or iPod touch
If you haven't been able to connect to the iTunes Store:
Make sure your date, time, and time zone are correct in Settings > General > Date & Time.
Note: Time Zone may list another city in your time zone.
Make sure that your iOS software is up to date by tapping Settings > General > Software Update (iOS 5 or later) or connecting your iOS device to iTunes and clicking Check for Update on your device's Summary page.
Check and verify that you're in range of a Wi-Fi router or base station. If you're on a device with cellular service, make sure that cellular data is turned on from Settings > General > Cellular.
Note: If connected to cellular data, larger items may not download. You may need to connect to Wi-Fi to download apps, videos, and podcasts.
Make sure that you have an active Internet connection. You can check the user guide for your device for help with connecting to the Internet.
Make sure that other devices (portable computers, for example) are able to connect to the Wi-Fi network and access the Internet.
Try resetting (turning off and then on again) your Wi-Fi router.
If the issue persists, try troubleshooting your Wi-Fi networks and connections.
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

HTTPS with Client Authentication in SOAP sender Adapter

Hi All,
In SOAP Sender communication channel. When I generate WSDL with HTTP Security Level = HTTP: it works when third party tries to send data to XIwebservice.
But when I tried with HTTPS with Client Authentication option its giving error
InfoPath either cannot connect to the data source, the service has timed out, or the server has an invalid certificate.
Please guide how to use HTTPS with Client Authentication option, and what all configuration need to apply in XI & in third party to use this.
Regards

Rohan,
With spy you can trace the entire route, since you are using client authentication using certificate, it would be a better option to verify with the certificate.
You also have the option of using a username/pwd combo though that is not advocated as it lowers security levels and is permeable to passive sniffing.
So the answer to your question is yes, after importing the certificate with sender and third party reciever a test would reveal the complete scenario along with any issues that you could encounter..
Regards
Ravi Raman

Problem in SSO..Please guide

Hello All,
Am trying to establish a SSO connection between EP7 SR2 Sneak Preview Portal and ECC5.0 using Logon Tickets.
Using this link for the same - http://help.sap.com/saphelp_nw2004s/helpdata/en/1c/22afe3b26011d5993800508b6b8b11/frameset.htm
Have downloaded the verify.der certificate and added into R/3 using the STRUSTSSO2 T-code and have added to ACL too.
Problem:
I need to maintain table TWPSSO2ACL using sm30 which am not able to.
When I enter the table name and press enter, then either I hit Display or Maintain, I get an error saying "<b>View/table TWPSSO2ACL can only be displayed and maintained with restrictions</b>".
Am not into R/3...please guide me....
Get the above error even when I select "No Restrictions or Enter condition" from the Restrict Data Range section.
Awaiting Reply.
Thanks and Warm Regards,
Ritu

But then the Connector test is failing. It gives an error as "Connection failed. Make sure user mapping is set correctly and all connection properties are correct"
What needs to be done here?
On the other hand, all this works fine using User-Mapping, the Connector test + the SAP Transaction iView.
Pleae guide.
Awaiting Reply.
Thanks and Warm Regards,
Ritu

New to SAP Netweaver...Please guide....

Hi all
I have recently joined this network.
So, not sure wether this is right place to post such a question.
I am a fresher in IT field. My level of knowledge is limited to core java and JSP, servlets.
Now I am a member of project team which is working on SAP Netweaver. By now, I have just been able to understand that this has to do something with java. To be more specific I have to work on SAP netweaver Developer studio.....
I wish to pave a good foundation basic knowledge on this entire technology.
I just seek guidance on how to approach for this field.
I am having very basic knowledge about SAP that it is an ERP and have various integrated functional modules. But nothin more than that.
So, do i need to learn SAP before moving towards Netweaver. If so, then to what extent should I learn SAP and how.
I came to know about a book SAP Netweaver for dummies. As its name suggest , i thought it would be better option to start. But not sure.
Please guide me.
Thanx.

Hi Saurabh,
SAP NetWeaver provides an open integration and application platform and permits the integration of the Enterprise Services Architecture. You can unify business processes across technological boundaries, integrate applications for your employees as needed, and access and edit simple information easily and in a structured manner.
It has many features and components. go thru the following link it would be helpful.
http://help.sap.com/saphelp_nw04/helpdata/en/start.htm
It helps you to decide the area which you want to choose.
hope this helps
reward points if helpful.
regards,
mrudula

Please Guide

Hi,
In J2SE, while using SSL, we create key-stores and trust-stores using keytool. Now, if I want to use HTTPS to transfer a msg to a Server that is implemented in C, how do I go about... Here I have my client implemented in Java? Will trust-store exist for Server implemented in C? Do trust-store and key-store exist in all platforms or they are Java-specific? If they exist, will keytool still be useful in exporting the trust-store to the destination? If they exist, is there some specific location they are located in?
I know that my questions might be dumb, but I have just started with socket-programming. Please guide if you have any suggestions.
Thanks a lot.
Regards,
Jay

Hi,
In J2SE, while using SSL, we create key-stores and trust-stores using keytool. Now, if I want to use HTTPS to transfer a msg to a Server that is implemented in C, how do I go about... Here I have my client implemented in Java? Will trust-store exist for Server implemented in C? Do trust-store and key-store exist in all platforms or they are Java-specific? If they exist, will keytool still be useful in exporting the trust-store to the destination? If they exist, is there some specific location they are located in?
I know that my questions might be dumb, but I have just started with socket-programming. Please guide if you have any suggestions.
Thanks a lot.
Regards,
Jay

Https with Kerberos..Please guide

Similar Messages

Maybe you are looking for