Importing SAP Roles in CMC

HI
when I importing SAP Roles in CMC there is an error, following is the error information:
CMALLC:rc=27>Connect from SAP
gateway to RFC server failed Connect_PM GWHOST=192.168.1.66,
GWSERV=sapgw00,SYSNR=00
Location SAP-Gateway on host saptest/sapgw00
Error   timeout during allocate
Time   Tue Feb 22 15:25:58 2011
Release 720
Component SAP-Gateway
Version 2
RC      242
Module gwr3cpic.c
Line     1911
Detail    no connect of TP sapdp00 from host 192.168.1.66 after 20 sec
Counter 2
Thanks

HI,
are you using the details for an application server or for a message server ?
Ingo

Similar Messages

Org.apache.jasper.JasperException; JCO error when Importing SAP Roles in C

Hello experts,
I have installed BOXI 3.1 SP3, Integration kit SP2, BW/BI 7.0 and ECC 6.0 on Windows 2008/64bit.
My goal is to import the roles into CMS from SAP BW/BI but getting the follwoing errors:
JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC'
JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc
C:\Windows\SysWOW64\sapjcorfc.dll: Can't load AMD 64-bit .dll on a IA 32-bit platform.
java.library.path [C:\Windows\SysWOW64\;D:\Business Objects\BusinessObjects Enterprise 12.0\win32_x86\]
org.apache.jasper.JasperException
I followed the note 1292144 - JCO error when Importing SAP Roles in CMC,but unfortunately without success.
I installed SAP JCo Release 2.1.9 (64bit)
Best regards
Lutz
Edited by: Lutz Heinrich on Aug 12, 2010 4:17 PM

Install the 32bit version of the Java connector. BOBJ is 32bit so even on 64bit Windows you need the 32bit version of the Java Connector.
Regards,
Stratos

Erro when importing SAP roles into BO Edge XI 3.1

Hello,
I'm currently setting up the SAP Best Practices on a BO Edge XI 3.1 system (32 bit) and trying to link up with an SAP ECC 6 EHP 4 system (64-bit).
When getting to the authorisation step I go to the CMC > Authentication > SAP > Role IMport.
There I receive following error:
JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC' JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc. Found version "2.1.9 (2010-01-28)" but required version "2.1.8 (2006-12-11)".
After closing and re-entering the same tab I receive following message: org.apache.jasper.JasperException
I have not even the possibility to enter the roles manually. The system doesn't allow me.
There is no specific SNC security set up for my SAP system.
I have been able to connect to the logical system of SAP because when I updated on the tab: "Entitlement Systems" it proposed my logical system name that I created in SAP.
As I found on another SAP forum the version 2.1.9 should also be the good version.
Can someone help me out with this one (does anyone has still the older SAP Java connector version 2.1.8)?
thanks in advance
Thierry

Hello,
That's what i did but didn't help.
I finally managed to find the problem. I had also to install a file named librfc32.dll in the same directory. When installing the necessary files apparently the version of this file librfc32.dll was not the correct one because it didn't match with the version that is installed together with the Sap gui (I presume). So by re-installing the former version of this file librfc32.dll it finally worked.
thanks anyway

OWN_LOGICAL_SYSTEM_NOT_DEFINED error while Importing Role in CMC

Hi all,
I'm currently experiencing the following issue while importing SAP Roles in CMC. The error OWN_LOGICAL_SYSTEM_NOT_DEFINED appears and roles are not available every time I go to the Import Role tab within the Authentication section of CMC.
As per Integration Kit installation and configuration guide I have created a crystal user (CRYSTALUSR) and the role with the recommended authorization objects was also created and assigned to the above user. Off course, this is the user provided in Entitlement System section.
Could you please guide in what to check to find the root cause of this issue?
Thanks and regards

-

Error while creating roles in CMC

Hi experts
I installed sap integraiton kit in my system.Though i have installed in my system i am unable to acces my infoview , so copied some files for java connector --sapjco.jar should be copied to the shared library folder of the application server
\Program Files\Business Objects\Tomcat55\shared\lib) and the file sapjcorfc.dll to %windir%\system32).
Now started logging into infoview it is showing some errors like no roles. so i entered into CMC and went to authentications--> then sap >entitlement system and created logical system name.-> to options and enabled sap authentications and updated.
Now the problem coming up is with the roles of sap.
When i am entering into role import tab it is showing some error like this * com/sap/mw/jco/JCO$Function *.
So what is the thing I need to solve this, please do help me out..
Thank you

Hi,
Please check below SAP notes..
1292144 - JCO error when Importing SAP Roles in CMC
1274700 - SAP Role Import error: com/sap/mw/jco/JCO$Function
Thanks,
Amit

Error while configuring SAP authentication in CMC

Hi,
I am trying to set up SAP authentication in CMC to a SAPBI system to which I am able to connect successfully in Designer and Voyager. I have the SAP Integration KIT also installed.
As a first step I created Entitlement and then filled up the options tab ( Have checked the option Automatically Import Users).
But when I click on Role Import Tab, I get the following error.
com/sap/mw/jco/JCO$Function
Is it because I need to install SAP JCo? Please suggest.
If I need install SAP JCo is it freely available? Which version has to be installed?
Any suggestions will surely help.
Thanks in advance,
Suma

Same issue here.
Business Objects Enterprise 3.0 is installed on a dedicated machine. I have followed the documented installation procedure, step by step, but I am still facing two issues:
#1. SAP Authentication does not work. When trying to log into InfoView using SAP Authentication, I get the following error:
Account information not recognized:
CSecSAPR3Binding::XRFCCnxBroker::BorrowConnection() failed. See following log entries for details.
Failed while trying to log on to SAP system.
The following RFC error was returned: [Group, Key, Message]:
[103, "RFC_ERROR_LOGON_FAILURE", "Name or password is incorrect (repeat logon)"].
The entitlement system has therefore been disabled in memory.
This may be because the SAP system is unavailable or because the credentials are invalid.
The entitlement system has to be re-enabled before it can be used again.
#2. BOE is unable to import the SAP roles (from CMC SAP Authentication configuration). The application throws the following error:
An error has occurred:
com/sap/mw/jco/JCO$Function
I am using JCo v 2.1.8. sapjco.jar was extracted to C:\Program Files\Business Objects\Tomcat55\common\lib and sapjcorfc.dll was extracted to C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86. librfc32.dll was installed in a prior step by the SAP Front End, and the file exists in C:\Windows\system32.
Any other ideas?
Edited by: Eric Axelrod on Feb 3, 2009 11:24 PM

What SAP roles can be imported?

Hello all
I installed SAP integration kit, JCO 2.1.9 is installed. In CMC I'm able to go to management -> authorization -> SAP and entered appropriate settings for our authorization system (SysID, client, application server, system number, user, password, ...). In the tab "role import" I see some roles... but not all the ones I would have expected.
Can anyone tell me what makes a SAP role being visible / selectable for import? Does a SAP role in SAP system (transaction PFCG) need some special tweaking in order to make it available in CMC? Unfortunately I couldn't find any useful information on this.
Thanks a lot
Renaud

Hi,
roles which do contain assigned users.
Ingo

Import SAP BW roles to SAP BO withour prefix

Hello,
we are re-using our SAP BW authorizations roles for folder authorizations in SAP BO.
Therefore we import roles from SAP BW source system and add these roles to different BO-Groups. Folder authorizations are maintained for these BO Groups.
Import of roles works - but all imported roles / Groups start with a prefix "<SYS-ID>~<CLNT>@"
So if we promote groups/authorizations to qa and prod system we have to add BW roles in each system.
E.g.
 DEV-System:
 DEV~001@BW_ROLE --> added to BO Group "BW"
 Promotion to QA-System:
 BO Group contains Role DEV~001@BW_ROLE and QA~002@BW_ROLE has to be added.
How to avoid this?
There is a similar issue with user which has been resolved by maintaing registry setting.
HKLM\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Enterprise\Auth Plugins\secSAPR3\SimpleUsernameFormat
Thanks and best regards,
Christian
P.S. we are using BI 4.1

Hello Ingo,
A small clarification w.r.to security maintenance in BO w.r.to SAP report execution...
If I have roles created/maintained in SAP to restrict the access in terms of what data is available for an end user, and if these roles have been imported into BO and have been assigned to different groups as per the user grouping roles in SAP.
And later, if additional access in terms of data has been assigned to the SAP role....does the group on BO has to be changed as the data access provided is only on SAP side.
As my understanding is the groups on the BO side are only to dictate what level of access does the user have for BO tools in terms of changing/creating/deleting BO reports and not what kind of data is accessed in SAP.
Can you please confirm the same.
Thanks
Dharma.

No logical sytem found in the drop down under SAP authentication in CMC

Hi Swapna,
This is quite simple. Click on New and enter the following information:
System e.g TS6
Client e.g. 800
Application Server e.g. yourservername
System number e.g. 00
Username e.g. Crystal
Password e.g Password
and Language e.g. EN
Press Update and and go to the Role Import tab. Import your role and don't forget the set the checkbox Enable SAP Authentication under the Options tab when using sap authentication.

Hello,
We are trying to integrate existing BO environment in our company with existing BW installation.
BO Environment - 3.1
BW/ECC Environment - (BW - BI 7.0 SP20, ECC 6.0)
So got the pre-requisites completed and the transports imported into both BW and ECC environments. Upon these steps we went ahead and installed the integration kit for 3.1 system.
There were no error messages, after we completed the installation went into infoview and in the authentication drop down checked to see if I can get "SAP" in there....which it did. So, I am assuming there were no issues till this point which we might have missed out.
Upon this, when I went into SAP authentication in CMC and double clicked on SAP and in the next screen clicked on "NEW" and added in the application server, system number, id and password and updated it...this automatically updated the logical system.
But when I go into the role import, it gives me the following error message....
Exception in JSP: /jsp/auth/sapsec_import_role.jsp:22:19:20: <%21:string context.........lot of other message
The only thing is we have not assigned the CRYSTAL_ENTITLEMENT role to it as we are at this point only trying to see if we can log into webi...
Can you please help me out on this.
Thanks
Dharma.

User does not appear in group created from SAP role

Hello --
I have a user that has logged into InfoView successfully with SAP authentication and is showing in the CMC under the "User List." When I view the list of users in the group that was created from the SAP role he was a part of, he is not there. When I go to the user account and view "Member of," the group IS shown in the list.
Any idea? Any way I can "refresh" the group or anything like that?
Thanks
Casey

Thanks for the replies.
We are on XI 3.1 FP1.8 and we do have a CMS cluster. Server reboots this weekend seem to have resolved the problem. I am curious why this question was asked, though:
"Did you reassign the user to another SAP role after the user has already logged at least once in the InfoView?"
Is this something that could have caused the problem or is it a possible workaround if we run into the issue again?
Thanks again...
Casey

Is it possible to export and import the roles and users tables?

Hi,
is there any possibility to export and import the role and user definitions?
We have a SAP MDM repository with a lot of roles and users and also with a lot of changes.
And now I'm searching for a fast and efficient way of managing the roles and users.
Thanks and Regards, Melanie

Hi Melanie,
There is no export/import functionality for roles and users. The only way to manage these in an automated way would be to write a program that uses the Java or ABAP APIs. Both APIs expose functionality to create, update and delete roles and users.
Hope this helps,
Richard

BO authorization model with sap roles / access tot folders, functionalities

Hi Specialists,
As authorization cunsultant in BI, I have little knowledge of the security setup in Business Objects.
I have to setup an authorization model were the authorizations are assigned via sap roles in the backend BI system. These roles are imported in BO were they can serv as 'user groups' and access to folders, functionalities.
Can anyone provide me a overview, guide, training document... on how the authorizations are managed in BO and best practice when they are linked to sap backend roles.
The goal will be to user the sap BI backend roles and user them to grant users in BO specific access to specific folders. Eg; User A can access folders 1 as "refresher only", User B is able to publish reports in folder 2, User C has only view access in folder 2...
Any help would be great!
Thanks very much in advance.
rgrds
Kristof

Hello,
this is the best approach you mentioned here.
I prefer to create roles serverd as functionalities in the Backend. For Example you have a "View" role, a "Refresh" role and so on.
On the other hand i saw some setups where there is only on role in the Backend with all the BO Users. Then you have to create you functional groups in BO and have to assign the Users there to the Groups.
Check the Adminguide of BO XI 3.1 for more Informations.
Regards
-Seb.

Synchronize SAP Roles with IDM Roles

Hi, i have a question concerning SAP integration in IDM.
Is it possible to import the Roles from SAP (named Activity groups) in IDM? And how does the "synchronize identity system roles with resource roles" function work?
Thanks in advance!
gojo

The job synchronizes FND Users with the Workflow directory service (plus any other systems you specify). PER is a special case, and will only be synchronized with the Workflow directory service if they are associated with a user - otherwise the records are not included. If they have corresponding HZ_PARTY records, then these may be synchronized, but should not really be used for notifications, since there is no login mechanism for the users to view the notification sent to a party record.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://thoughts.workflowfaq.com ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Error in Mass role import in Role Expert

Hi,
While configuring role expert, in mass role import ,I am able to import the bulk download file but its import is getting failed and error is "File is in invalid format"
If I alter the downloaded file, another error is generated saying "Cannot write to Upload Directory
ursula\sap_temp\ROLEIMPORT or Directory does not exist.
Please help me out!
Regards,
Anubha

Hi Michael,
I am not able to import the SAP roles properly.
I downloaded the roles from backend properly. But while importing them I am getting a list of backend roles and against each of them following message Error in processing role infomation. Role not imported.
What could be the possible mistake? I have set Upload Directory = ursula\sap_temp.
One more problem, while creating a new role I am able to reach successfully till the risk analysis phase. After that, as soon as I click on approval , i am getting message Error in creating request.
I suppose the control should go to Access Enforcer from here.I have already set AC Workflow URL for role approval in Configuration -> miscellaneous.
Thanks in advance!
Anubha

MII 14.0 SP4 :Migration error while importing SAP BM Templates

Hi Experts,
I am facing some migration errors while importing SAP Batch Manufacturing Templates into MII 14.0 SP4.
There are almost 23 transactions which are not getting imported and the error message for all of them is-
"Unable to migrate transaction Unable to import file
<Name of the Transaction>"
Any first hand experiences will be really helpful for me to proceed further.
Regards,
Muddassar Khan

Hi All,
Got the solution. The STARTUP.BAT file is been placed in the installation directory(usr/sap) and then it works fine. Also I have installed the patches and all working fine.
Any way thanks for the answer christian libich.
Regards
G.Partheeban

Importing SAP Roles in CMC

Similar Messages

Maybe you are looking for