Is Hana Cloud Portal blocking outgoing ports ?

Hi
We developed a demo servlet that is doing a simple Select from an on premiss remote machine. We access the remote machine on port 3000.
The demo servlet is working fine on our test Env.
We transferred it to the Portal Cloud and discovered that from some reason -- probably security - We are not able to access port 3000 on the remote machine.
Is there anything we can do ? or are we forced to only use ports 8080
Thank you
Eyal

Hi Nikhil,
Roles defined in the web.xml of an application are called predefined roles. These roles are mapping the authorizations at the application level (not related to the portal).
You can get more information on application related roles here: SAP HANA Cloud Platform
Regards,
Ifat.

Similar Messages

  • Setting Session Timeout for HANA Cloud Portal

    Hi all,
    is there any way for setting the session timeout period on HANA cloud Portal?
    If not, what is the predefined session timeout?
    Thank you in advance.
    Silvia Grabmann

    Hi Silvia,
    Session timeout is 20 minutes and cannot be changed. In fact it is configured at the platform level.
    Regards,
    Ifat.

  • SAP HANA Cloud Portal : Configuration of HCP with Cloud For Customer

    Hi Experts,
    In our organization we have C4C system we have requirement to configuration with SAP HANA cloud Portal.
    1) What are the steps require in Cloud For Customer?
    2) What are the steps require to access the HANA Cloud Portal and Configure it?
    3) How to integrate Cloud For Customer with HCP?
    4) How to create Websites and Add the Widget for Tickets and Service request created from cloud for customer?
    Any Documentation for this Cloud For Customer and HANA Cloud Portal Configuration please share with me.
    Many Thanks,
    Mithun

    hi,
    Please find below the avilable public information about Support site edition -
    Support Site Overview : http://scn.sap.com/docs/DOC-50078
    Support Site (blog post)http://scn.sap.com/community/hana-cloud-portal/blog/2013/12/12/deliver-exceptional-customer-service-with-cloud-based-support-portal
    CAC Admin guide -  (search for configuring portal) - http://help.sap.com/saphelp_sapcloudforcustomer/en/PDF/EN-2.pdf
    Cloud Portal configuration guide - SAP Mobile Documents
    Soon we will put all public guides in a central location.
    Thanks,
    Inbal

  • SSL error when connecting in SAP HANA Cloud Portal tutorial

    Hi,
    I'm going through the tutorial for SAP HANA Cloud Portal - SAP HANA Cloud Portal Developers Tutorial
    Unfortuanatelly I have problems with deploying public destinations (page 9).
    When I try to deploy the destination for the CRM back from the command console using neo command with relevant parameters and entering my password I get the following error:
    ERROR; SSL error when connecting to https://configapi.hanatrial.onedemand.com/configuraiton/api/rest; server certificate might be invalid or untrusted.
    Logfiles.
    Session log
    2014-08-18 15:53:59,579 DEBUG [main] org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager$1: Get connection: HttpRoute[{s}->https://configapi.hanatrial.onedemand.com], timeout = 0 2014-08-18 15:53:59,581 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: [HttpRoute[{s}->https://configapi.hanatrial.onedemand.com]] total kept alive: 0, total issued: 0, total allocated: 0 out of 20 2014-08-18 15:53:59,581 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: No free connections [HttpRoute[{s}->https://configapi.hanatrial.onedemand.com]][null] 2014-08-18 15:53:59,581 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: Available capacity: 2 out of 2 [HttpRoute[{s}->https://configapi.hanatrial.onedemand.com]][null] 2014-08-18 15:53:59,582 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: Creating new connection [HttpRoute[{s}->https://configapi.hanatrial.onedemand.com]] 2014-08-18 15:53:59,729 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnectionOperator: Connecting to configapi.hanatrial.onedemand.com/216.128.6.149:443 2014-08-18 15:54:00,035 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection: Connection closed 2014-08-18 15:54:00,035 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection: Connection shut down 2014-08-18 15:54:00,036 DEBUG [main] org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager: Released connection is not reusable. 2014-08-18 15:54:00,036 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: Releasing connection [HttpRoute[{s}->https://configapi.hanatrial.onedemand.com]][null] 2014-08-18 15:54:00,037 DEBUG [main] org.apache.http.impl.conn.tsccm.ConnPoolByRoute: Notifying no-one, there are no waiting threads
    Console log
    2014-08-18 15:53:56,080 INFO  [main] com.sap.jpaas.infrastructure.console.CommandManager: Starting execution of command [get-destination] 2014-08-18 15:53:56,086 INFO  [main] com.sap.jpaas.infrastructure.console.CommandManager: Command [get-destination] init() finished for [1] ms 2014-08-18 15:54:00,038 INFO  [main] com.sap.jpaas.infrastructure.console.CommandManager: Command [get-destination] cleanup() finished for [0] ms 2014-08-18 15:54:00,046 FATAL [main] com.sap.jpaas.infrastructure.console.ConsoleClient: (!) ERROR; SSL error when connecting to https://configapi.hanatrial.onedemand.com/configuration/api/rest; server certificate might be invalid or untrusted com.sap.jpaas.infrastructure.console.exception.ValidationException at com.sap.jpaas.infrastructure.console.command.RemoteCommand.getHttpClient(RemoteCommand.java:97) at com.sap.jpaas.infrastructure.console.command.UnsecuredRemoteCommand.getHttpClient(UnsecuredRemoteCommand.java:57) at com.sap.core.connectivity.config.cmd.ConfigurationConsoleCommand.createHttpClient(ConfigurationConsoleCommand.java:254) at com.sap.core.connectivity.config.cmd.GetAction.download(GetAction.java:79) at com.sap.core.connectivity.config.cmd.GetAction.run(GetAction.java:52) at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:295) at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:260) at com.sap.jpaas.infrastructure.console.ConsoleClient.run(ConsoleClient.java:235) at com.sap.jpaas.infrastructure.console.ConsoleClient.main(ConsoleClient.java:85) Caused by: com.sap.core.utils.infrastructure.validation.HostValidationException: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated at com.sap.core.utils.infrastructure.validation.LandscapeHostValidator.getHttpClient(LandscapeHostValidator.java:304) at com.sap.jpaas.infrastructure.console.command.RemoteCommand.getHttpClient(RemoteCommand.java:95) ... 8 more Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:397) at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128) at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:390) at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:148) at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:149) at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:121) at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:561) at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415) at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:820) at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:776) at com.sap.core.utils.infrastructure.validation.LandscapeHostValidator.getHttpClient(LandscapeHostValidator.java:284) ... 9 more
    BR
    Beata

    Hi Beata,
    The CRM scenario is working again. We had to re install the Connector and deploy a new proxy app.
    Therefore you would need to download the code from the GitHub repository again. The changes you need to do on your side:
    1. Redeploy the new crm__public destination file - the updated destination now points to the new location of the proxy application
    2. Update the code of the registration form scripts (form.js and form.spec.xml).
    Regards,
    Ido

  • SAP HANA Cloud Portal : Make Widget For Java Application and Display in HANA Portal

    Hi Experts,
    I have created one Java Application using eclipse luno.
    I have successfully deploy on my hanatrial version and able to see the Started Application under the Java Application.
    Can anyone have idea how to use this application in HANA portal and display/ run  this Java Application in SAP HANA Cloud Portal Website.
    I want to know is it possible or not ? and yes then how its possible ?
    What are the steps require to make Widget for this java apps and publish on portal.
    Many Thanks,
    Mithun 

    Hi Mithun,
    yes it's possible and relatively easy - follow Chapter 7 of the guide -
    ESPM WebShop Extension
    Regards
      Kenny

  • How to import Hana exported package into Hana cloud portal?

    Hi All,
    Am new to hana cloud portal, But I have followed open sap courses,
    We have developed hana project in hana server using eclipse.
    Now this project we want to move into hana cloud portal,
    I have exported the project and views into delivery unit and schema exported separately.
    We have account in the cockpit(https://account.hana.ondemand.com)
    In this i want to import the project, Please provide me the steps to follow.
    Is there any possibility without adding system in the eclipse, I want to import the project in the cockpit itself.
    Thanks,
    Preethi

    Hi Preethi,
    The right place to post your question would be SAP HANA Cloud Platform Developer Center.
    Regards,
    Ifat.

  • Blocking outgoing ports on airport extreme

    I have a current generation (mid-2014) Airport Extreme as the wireless router for a network at a small guest house/holiday home. Our broadband internet service is provided by satellite and we have therefore a usage limit as well as a restrictive FUP/Traffic management policy.
    What I'd like to be able to do is block certain ports/ip addresses from outgoing traffic. That is, I want people not to be able to use the network for really intensive stuff, things like streaming video (e.g. hulu plus, BBC iPlayer, netflix, that kind of thing), background p2p, and torrents, as it'll eat up all our broadband usage and bring our overall speed to a crawl. I see that there Airport Extreme doesn't have that kind of ability built-in to the software like some other routers do, but am I right in surmising that there might be an option of configuring it so that outgoing traffic to certain IPs be port-forwarded to a non-existent device on the network (for example)?
    If so, can someone just help me with that process. Or if there's another process that I can use to block certain kinds of traffic.
    Many thanks!

    It is simply not possible.. the AE is the wrong device in this setup.
    I would strongly recommend a cheap router with 3rd party firmware.. eg... TP-Link WDR3600 with gargoyle firmware.. just google for the info as I have had it deleted by mods here in the past.
    It will allow you to set daily quotas on usage. You can let people do whatever they like.. but they can only use a set amount per day or week or whatever time period you set. This firmware is unique in providing this ability in a domestic router.. for free.

  • SAP HANA Coud Portal is showing "HTTP Status 401 - Unauthorized"

    Hi ,
      After clicking SAP HANA Cloud Portal From Cloud Cockpit its showing "HTTP Status 401-Unauthorized". Previously it was working fine for me and i have created and tested some widget also.But now i am getting this error.Please help me on that.
    Thanks And Regards
    Syed Shadan Quaiser

    Hi Mahendran ,
    Thanks for the details.
    The host is hanatrial.ondemand.com
    I checked your account configurations on Cloud Portal and it looks correct.
    Did you change your trust settings on your account cockpit?
    Please go to: https://account.hanatrial.ondemand.com/cockpit >> Trust and make sure that the settings there are default ones.
    Thanks, Amit

  • Cloud Portal in sub accounts of HCP?

    Hello,
    we face an issue with the HANA Cloud Portal. We have a partner account where the portal is available. But due to test and development we also need the portal in several sub-accounts where we deploy our application.
    I couldn't find any self-service to enable the Portal service in the sub-accounts. Trying to subscribe the sub-accounts to the same applications (e. g. portal:nwc) that our main account is subscribed to doesn't work.
    I opened an incident with support a while ago and support assigned the portal to one of our sub-accounts quickly. But now I haven't heard from them several weeks and I urgently need the portal on three more sub-accounts.
    What are my options now?
    Thanks.
    Christian.

    Hi Christian,
    Sub-accounts do not get the self-service provisioning to Cloud Portal by default.
    Which accounts are required to be provisioned to Cloud Portal and on which HCP landscape?
    Thanks, Amit

  • Outgoing port scan to find blocked (by ISP)/open ports

    Hi,
    How can I do a port scan (network ports, where web pages/applications use port number 80 for example)? I would like to find out if my ISP are blocking ports -- get some hard data/facts. I've tried using an online port scanner (one that operates from a web page/server) and according to it, all my ports are blocked -- but I now realise that's incoming (to me) where I didn't initialise the communication. So I suppose to find out what I want I need to initialise the communication -- outgoing (from me) communication. How can I do this? Any software / utilities available anywhere? I tried the "port scan" in Network Utility but this never reported anything. Maybe that will do what I want but I didn't have it set up properly possibly?
    Any suggestions / ideas much apprecaited.
    Cheers,
    John.

    Hi,
    I'm not sure what you're asking.
    What I'm asking about is in connection with the action that some ISP's take described as "traffic shaping". I know they are filtering/blocking because all P2P applications stop working for a period of time each day while email and web pages continue to work fine for example. I'm thinking of complaining to varous organisations because I have it in writing from the ISP they don't do this. They do, but I just want a bit more factual data first, before spending time and money making official complaints.
    ISP's rarely block outbound packets
    Well there's traffic shaping of some sort happening. I've found out that all incoming initialted outside packets are blocked but things still work fine so I assumed it must be outgoing which are being blocked.
    If you can't make an outbound connection, it's usually the return (ACK) packet that gets blocked.
    Right, I see. In that case another cooperating machine is needed to find out what I'm after I suppose.
    However, most firewalls have a rule that allows packets through that are part of existing connections. That allows you to browse the internet no matter what source port your browser uses.
    This isn't about a protection, it's about an ISP stopping/filtering certain uses (ports) via their connections because they don't like it -- too much band width use probably.
    By far the best packet sniffer is Wireshark (formally Ethereal) for display of the capture.
    From what's said above, a packet sniffer isn't going to be enough right? There needs to be two machines, me sending to another on various ports and it replying on the same port and both machines keeping a log of what's been sent and received, then a comparison made to see what made it and what didn't --- I guess. I wonder if there is such a service, piece of software, whatever, out there?
     Is your computer behind a router in your home? Of course that would include Airport. If so, that is more likely the culprit than your ISP.
    Yes an AirPort base station. Say "that is more likely the culprit than your ISP" again after visiting http://www.reviewcentre.com/review210703.html and searching the text for "traffic shaping" a few times! I'm pretty sure I've got the base station set up fine. And I think it's more likely my ISP (the one reviewed at that link) is the culpret. P2P software stops working, well it varies, but it reliably stops during "peak hours". It's the ISP for sure.
    I don't know any ISP that blocks all ports.
    Well, for incoming, according to the http://www.websecurity.mobi/network-security-audit/178-no-open-ports-my-machine- obviously-rediculous.html (which is me expressing surprise about all incoming ports being blocked) my ISP does. Apparently there is quite a difference between incoming and outgoing. Stops people using their machine as any kind of server (according to that link). One thing I do notice is that doing:
    sudo tcpdump -v -x -s 128
    on the command line while I'm not doing anything on the internet results in nothing -- complete silence as it were. On the dial up connection I've just left doing that command there was stuff coming in all the time -- who knows what, but the complete silence on my new broadband connection would back up the idea that all incoming ports are blocked. I could be wrong of course.
    "nmap" is probably the best portscanner available but as you discovered, OS X has one builtin that you can access through the Network Utility.
    Oh right I didn't know they were the same thing. I found that the port scan in NU didn't do anything. I left it for hours. There was an IP address which I left as it had filled it in itself. Maybe I should have changed that? How can I get the right address, or does it usually fill it in correctly itself?
    What actually does a port scanner like that one do? Send something out? To what? And how does it know if it got there?
    It seems to me to get what I need there needs to be first a suitable piece of software, second another computer running the software ready for my computer to talk to and to communicate multiple times and see what happens. My point is it's not just a piece of software that's needed it's also another cooperating computer elsewhere that needed? Otherwise what's the testing software going to talk to to see if the channel is working?
    I'll look into the Port Scan in NU again, see if I can get some actual results from it this time. On a broadband connection I left it for about, I don't know, 3 hours maybe, got nothing.
    Cheers,
    John

  • Configuring SAP HANA Cloud Connector with trial account

    The free developer license includes the use of cloud connector. (message from SAP)
    When I try to set up the Initial configuration of the SAP HANA Cloud Connector as described in the SAP How-To Guide (Version 1.0, March 2013 and Technical Documentation SAP HANA Cloud, Document Version: 1.6.0 - 2013-06-18 ) I get the the message
    "Connection to https://connectivityconfig.hanatrial.ondemand.com:443 refused"
    Configuration Data of Cloud Connector Connector
    Landscape Host:        hanatrial.ondemand.com
    Account Name:         s<user>trial
    User Name:               s<user>
    Password:                 ...
    Do I have to observe further settings?

    Hi Markus,
    I'm getting same error Connect_failed  . I check with my network & basis guys There are no firewall blocking ports . Is this problem with hantrail account or what could it be? Please guide .
    Thanks,
    Vidya

  • Lumira Server on SAP HANA Cloud Platform?

    Hi,
    Can we run Lumira Server on SAP HANA Cloud Platform (not SAP HANA)?
    Reason:
    Unless there is a way to publish Lumira Story via Lumira Cloud to BI LaunchPad, otherwise I am only interested in the Lumira Desktop version at the moment. As we want to continue to pursue to have one central portal for all BI contents using BI LaunchPad.
    Question:
    In summary, is it possible to apply SAP Lumira Server on SAP HANA Cloud Platform?
    See screenshots below for the ideal scenarios.

    Hi Ken,
    Great question.
    Yes, absolutely you can.
    As an example: I work with some customers who have small Hana estates "on-premise" (say, for Fraud on Hana, or BW HANA sidecar); as such they may not have the available infrastructure to decouple a sandbox Hana to evaluate new Hana Analytics innovations (like Lumira Server)
    In such situations I recommend this page http://hcp.sap.com/platform.html  to evaluate our Hana Cloud platform options.
    If you scroll half-way down, you'll see a nice graphic under the heading "Choose the Service That's Best for You". (the 3 stacked pillars)
    Depending on your own licensing particulars, you may already have a runtime license for Lumira Server (through your BI bundle), and you may already have HDB (database) licenses available in your enterprise, so potentially you need only the 'infrastructure service' (leftmost chart).
    Then, I've seen this integrated into productive on-premise systems, typically (but optionally) via a "leased line" (between customer & provider (SAP)) , and a VPN tunnel in between to make the secure bridge.
    It's a really neat way to get on the Hana journey: quick to deploy, flexible, and well priced.
    Regards,
    H

  • HANA Cloud WebIDE username and password

    Hi Guys,
    When I tried to launch HANA Web IDE for Cloud from "HANA Instances" section in the cloud portal. it asked for username and password.
    I tried to enter the cloud account username and SCN password but it didn't worked and said invalid login.
    I had used the same credentials for connecting Eclipse to HANA cloud trial instance and it worked but didnt worked for WebIDE on cloud.
    Please help. Thanks!
    Regards.

    Hi, Thanks for the link. I dont get any option in the HANA cloud trial on :
    https://account.hanatrial.ondemand.com/cockpit#/
    for creating user under "Development Tools" section under "HANA Instances".
    What can be the issue ? Is there any other way to create user ?

  • I want to block incoming ports WRT54G!

    Hi!, I want to block some ports for aplications from incoming data , im enabling the router "Wrt54g" firewall and disable Upnp. Ok im going to grc.com "Shieldsup test" are stealch! All apps ( nod32, firefox, messenger msn) can open ports! Why the applications turn on the ports? , Do they appear "stealch" but not closed? From outgoing ports im using comodo firewall on vista. Thanks! and sorry my english!

    on the router's web ui , click on the "access restrictions" tab and block the ports you want ...

  • COMCAST Changed Outgoing Port #?

    Does anyone know Comcast outgoing Port Number for Versamail?  It was 25 then 465 now neither work.
    Receiving email is still ok with Port 995.
    Had to make outgoing Port change on home computer's Outlook last year but it still works on 465 now.
    No useful info at Comcast.
    Thanks.
    Post relates to: Treo 680 (Unlocked GSM)

    Hello and welcome to the Palm Forums.
    Try Outgoing Port 25 (still works for me)
    Check Use Secure Connection
    Check Use Authentication
    If you are getting any kind of authentication errors, you might also try logging into Comcast's email web portal, changing your password there, then using the new password.  This happened to me a few months ago, when Comcast migrated to new mail servers and also apparently upgraded the security without telling anyone.  My old password didn't have the new minimum number of characters and the new servers were rejecting it from my wireless logins, even though it worked at home while connected to the network.
    Good luck.
    smkranz
    I am a volunteer, and not an HP employee.
    Palm OS ∙ webOS ∙ Android

Maybe you are looking for