Is it possible to authenticate the SAP GUI user against LDAP ( no SSO )

Hi
I was under the impression that you can user LDAP to authenticate your SAP GUI user . ( so users do not have to maintain and remember multiple passwords )..
However - note #603208  claims that this is not possible.
This is quite an old note , is this still true ?
note #793191 ( FAQ ) says :
9. Can I synchronize user passwords?
Response: No.
The password cannot be synchronized. For more information, see Note 603208.
and note #603208 says :
A comparison of the production password with a directory is not possible.
The following reasons are responsible for this:
The password is not stored in the plain text or in in "enciphered" form, neither in SAP Web Application Server nor in the directory, rather is is stored as a "hash value" that is calculated from the password that is entered. The function used for this is especially designed so that the password CANNOT be reconstructed from the hash value.
For technical reasons, the user master synchronization cannot therefore extract the plain text of the password and send this to another system.
The user's password has a size that is known only to the user. Even the system administrator and database administrator cannot obtain any information about the password.
A comparison in plain text form would violate this basic rule. For this reason, the use of a hash value is a generally applied standard.
Often the adjustment of passwords in several systems is equated with the term "Single Sign-On".
However, this term must only be applied if the user logs on once and this logon information is transferred within the system infrastructure.
The SAP Web Application Server supports real Single Sign-Ons (note 138498).

Please do not duplicate post!
See the other thread...

Similar Messages

  • Is this possible: SNC connection from SAP GUI to SAP Router, and ...

    Hi,
    I have (stupid perhaps) question.
    Is this scenario possible:
    SNC connection from SAP GUI to SAP Router, and non-SNC connection from SAP Router to SAP System.
    I know how to set up scenario like this:
    SAP System --- (non-SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP GUI.
    Best regards,
    Marek Majchrowski

    Wolfgang,
    To be sure myself and Marek understand, can you confirm the different scenarios supported:
    Scenario 1:
    SAP GUI --- (non SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP System
    With this scenario, it would be possible for a user to logon using SAP GUI onto the SAP System, but without SAP GUI SNC.
    Scenario 2:
    SAP GUI --- (SNC conn) --- saprouter1 --- (non SNC conn) --- saprouter2 --- (SNC conn) --- SAP System
    With this scenario it would be possible to logon to the SAP System using SAP GUI, and using SNC authentication.
    Also, with this scenario the SAP GUI software and SAP System software would consider this to be similar to:
    SAP GUI -- (SNC conn) -- SAP System
    Scenario 3:
    This is the scenario mentioned by Marek in his initial question:
    SAP GUI -- (SNC conn) -- saprouter1 -- (non SNC conn) -- SAP System
    With this scenario it will not be possible to logon to SAP System using SNC, and only possible if the SAP GUI is configured to not use SNC. In other words the SNC connection between SAP GUI and saprouter1 is available, but cannot be used.
    Thanks,
    Tim
    Edited by: Tim Alsop on Feb 25, 2008 5:24 PM

  • Stop and start the system via the SAP GUI

    ........ although I don't know the answer!
    We have SAP running on an iSeries/DB2 format.
    And we of course have stopped and started our SAP systems many times before via an iSeries screen.
    One thing we have never had to do, is stop and start the system via the SAP GUI.
    Is this possible? If so, how is it done?
    Surprisingly difficult to find a solution online.
    Edited by: Juan Reyes on Aug 10, 2010 11:10 AM

    Paui,
    You can also do a soft shutdown, which waits till the active users/sessions are logged out (Draing out the sesstions) and no more new users are allowed to login during that time.
    Goto SM51, select the instace/server you want to stop then menu --> Goto --> Server Name --> Administration --> Shut Down Server (soft).
    Here you can also select a hard shutdown if the situation demands by following the same menu path.
    Even though your question is answered but I still wanted to update you the options to select.
    -Mahesh

  • Call SAP GUI txn from WD4A running in the SAP GUI

    I'm somewhat new to Web Dynpro and I'm trying to evaluate the use of WD4A as our main custom screen/txn platform.  I have written a simple application.  I created a transaction code that calls WDYID and launches my WD4A application in the SAP GUI. 
    Our company does a lot of "CALL TRANSACTION" in our normal dynpro development and I need to prove out that it is possible to do the same in WD4A.  I've used the following code to try and call a transaction:
      CALL METHOD lo_window_manager->create_external_window
        EXPORTING
          url           =
    'http://<host>:<port>/sap/bc/gui/sap/its/webgui?sap-client=<client>&~TRANSACTION=VA03'
         title          = 'Display Orderl'
    *    MODAL          = ABAP_FALSE
    *    HAS_MENUBAR    = ABAP_TRUE
    *    IS_RESIZABLE   = ABAP_TRUE
    *    HAS_SCROLLBARS = ABAP_TRUE
    *    HAS_STATUSBAR  = ABAP_TRUE
    *    HAS_TOOLBAR    = ABAP_TRUE
    *    HAS_LOCATION   = ABAP_TRUE
        RECEIVING
          window         = lo_wd_window.
    The problem with this is that when called from the SAP GUI, it launches a browser.  I would like for it to go directly to the WebGUI version of VA03. 
    Is this possible?

    Hi Adam,
    you should be able to suspend to an ITS call.
    - however you might fall foul of a bug - fixed in note 1255292 (Special characters not permitted for suspend/redirect)
    Not sure if this is what is causing the issue...
    Can you not pass parameters to the transaction using the CL_WDR_SAPGUI_INTEGRATION2->FIRE method?
    this is what is called by the FIRE_START_TRANSACTION method, but allows for additional parameters.(I've never used it myself so I'm not sure that it would work, but would be interesting to find out - could you let us know?)
    Cheers,
    Chris

  • Using the SAP GUI from the NW2004s SneakPreview Download

    Hello,
    does anyone else have major problems with the SAPGUI from the NW2004 SneakPreview download page?
    Im getting a runtime error when logging on:
    Runtime Errors         MESSAGE_TYPE_X                                                                 
    Date and Time          24.12.2005 00:34:11                                                                               
    Short text                                                                               
    The current application triggered a termination with a short dump.                                                                               
    What happened?                                                                               
    The current application program detected a situation which really                                
         should not occur. Therefore, a termination with a short dump was                                 
         triggered on purpose by the key word MESSAGE (type X).                                                                               
    Error analysis                                                                               
    Short text of error message:                                                                     
         Control Framework : Error processing control                                                     
         Technical information about the message:                                                         
         Message classe...... "CNDP"                                                                      
         Number.............. 006                                                                               
    Variable 1.......... " "                                                                               
    Variable 2.......... " "                                                                               
    Variable 3.......... " "                                                                               
    Variable 4.......... " "                                                                               
    Trigger Location of Runtime Error                                                                    
         Program                                 CL_GUI_CFW====================CP                         
         Include                                 CL_GUI_CFW====================CM002                      
         Row                                     23                                                       
         Module type                             (METHOD)                                                 
         Module Name                             FLUSH                                                                               

    Hello Rich,
    the sap gui from the NW2004s SneakPreview page is on patchlevel 8. The problem is when i use the latest sap gui from the service marketplace (full install!) i cant event call the gui. Getting a error when doubleclicking on the SAP Gui icon.
    'The procedure entry point 'RfcResetTraceDir' could not be located in the dynamic link library 'LIBRFC32.dll' .'
    So actually since i installed the NW2004s on my local notebook the only sap gui "working" (at least i can call it) is the one from the NW2004s Sneakpreview page but im getting this error mentioned here on all systems! not only on the NW2004s system
    regards,
    Markus

  • What are the latest updates in the SAP GUI patches?

    Hi All,
    Can anyone let me know what are the major updates in the SAP GUI 730.
    Any note that says this..The release note with each patch is too grainy and i cannot consolidate what are the major updates.
    We are currently on patch level 1 and SAP GUI have patch 8 released?
    Can someone kindly assist in identifying the major updates in SAP GUI 730?
    Thanks,
    Deep Desai

    Hi,
    You can see in the info section what are the new notes added in that patch.
    Please see the below screenshot for your reference.
    Regards
    Sudhir Sadhu

  • Interacrive forms within the SAP GUI

    Hello
    I want to work with interactive forms within the SAP GUI, with ABAP.
    I've managed to display a generated PDF in an ABAP screen, with CL_GUI_HTML_VIEWER, using the method LOAD_DATA. The problem now is getting the filled data out of the form. Is there any standard way of doing it? (getting the data without saving the file)
    I've thought of some ways, such as getting the filled file somehow as a binary file, or handling the document's Submit button, but I haven't managed to get any of them to work.
    Is there any way to make it work, or use the different PDF classes to do it..
    Thanks

    Hello
    I want to work with interactive forms within the SAP GUI, with ABAP.
    I've managed to display a generated PDF in an ABAP screen, with CL_GUI_HTML_VIEWER, using the method LOAD_DATA. The problem now is getting the filled data out of the form. Is there any standard way of doing it? (getting the data without saving the file)
    I've thought of some ways, such as getting the filled file somehow as a binary file, or handling the document's Submit button, but I haven't managed to get any of them to work.
    Is there any way to make it work, or use the different PDF classes to do it..
    Thanks

  • Error when calling the SAP GUI

    Hello everybody,
    i have installed the NW2004s SneakPreview on my Notebook. Since then i cant call the sap gui anymore (installed the latest version from SAP Service Marketplace).
    Im getting the error:
    'The procedure entry point 'RfcResetTraceDir' could not be located in the dynamic link library 'LIBRFC32.dll' .'

    Please try coping the LIBRFC32.DLL file from....
    C:\usr\sap\NSP\DVEBMGS00\exe
    to
    C:\WINDOWS\system32
    Regards,
    Rich Heilman

  • Problem download the SAP GUI 6.40

    Hi
    I need to download the SAP GUI 6.40  andI have navigated through:
    service.sap.com -> software download -> SAP installations and upgrades -> Entry by application group -> SAP frontend components -> SAP GUI for windows.
    I can see follwoing four option, May i know which one i need to download and what each option mean ??
    File Type  Download Obj             Title Info File                                   File Size [kb]   Last Changed
      ZIP    50078731_2      NW 2004s SR1 Presentation - SAP Content Server 6.40  Info          65159      29.03.2006
      ZIP    50078731_4      NW 2004s SR1 Presentation - 6.40 Compilation 5 Present. 1/3  Info 624528      29.03.2006
      ZIP    50078731_5      NW 2004s SR1 Presentation - 6.40 Compilation 5 Present. 2/3  Info 178936      29.03.2006
      ZIP    50078731_6      NW 2004s SR1 Presentation - 6.40 Compilation 5 Present. 3/3  Info 1229676     29.03.2006
    I appreciate it.

    Hello,
    I guess you will install it in windows so download this one:
    NW 2004s SR1 Presentation - 6.40 Compilation 5 Present. 1/3
    The other packages are documentation and installers for non-windows systems.
    Regards,
    Jorge Diogo

  • Couldn't change a previous Logo upload in the SAP GUI.

    Hi,
    I couldn't change a previous Logo upload in the SAP GUI.
    How about?
    Best regards

    For uploading a SAP LOGO follow informatio contained in this link:
    http://www.sap-img.com/basis/changing-the-sapgui-logo-on-the-right-hand-side.htm
    1) Try deleting tha actual LOGO from trx SMW0 table and Check the file name of the new LOGO and call it with another file name different from previous and Import the new file.
    2) Check also the file name trx SM30 table SSM_CUST that must be the new file name.
    Best regards

  • Is it possible to get the active directory user name of the person

    Is it possible to get the active directory user name of the person who is logged onto a windows computer, when they are using your coldfusion site, the same way asp pages can do that?

    SECOND TRY TO POST THIS REPLY
    You have to turn on "Windows Integrated Security" and turn off anonymous login in the IIS web server, once that condition is met the cgi.AUTH_USER variable will be popluated with the domain/username of the user logged into the cient computer.
    If the user is using a windows browser on a windows client computer this will be done silently in the background.  Otherwise they will normally be presented with a login dialog box by the browser.

  • Is it possible to move the SAP database to a dedicated host

    is it possible to migrate one SAP system that has the CI and DB on the same host to a system that has CI and DB on different hosts?

    Hello Tiberiu,
    yes you will need to change profile parameters , especially your STARTUP profile in the /usr/sap/<SID>/SYS/profile directory.
    It would have a name like : START_DVEBMGSXX_<hostname>
    You can move your CI too, moving CI would require you to re-install the CI and point it to the new DB.
    Check relevant guides as mentioned by others above.
    Regards,
    Siddhesh

  • How to open Crystal Report from the SAP GUI ?

    Hi experts,
        We have developed some reports for our ECC 6.0 system by using Crystal Report 2008 and SAP integration kit , these reports are published to BO edge 3.1 server.  To view the report, our user have to open IE and login Infoview first.
       For convenience, we want to open Crystal report from SAPGUI directly without login BOE, How can we do it? 
    Thanks.

    Hi
    please take a look here
    Crystal Reports
    Regards,
    STratos

  • The load process runs in the SAP GUI and the GUI will timeout if someone do

    Hi
    Our main issue: for loading DRW/BKT/Characteristics/Doc Files, I have already tested processing the Idocs in Background mode. All the Idocs failed because the background process on the SAP application server cannot access the doc files. (it has to use saphttp.exe on the client)
    help me  to solve thi sproblem
    regards,
    jagadish

    https://jdic.dev.java.net/
    The JDesktop Integration Components (JDIC) project aims to make Java� technology-based applications ("Java applications") first-class citizens of current desktop platforms without sacrificing platform independence.
    This demo application demonstrates functionality in the JDIC APIs org.jdesktop.jdic.tray package.
    It creates a tray icon on the desktop (in the System Tray Area for Windows platforms, or in the Notification Area for Unix platforms), with a caption (text), an animated icon, and an associated Swing menu containing icons. It also has a tooltip displayed when the mouse hovers over the tray icon.

  • Limit the sap b1 user usage to specific machine

    Dear everyone,
    We are using SAP Business One 2005B.
    We have an requirement of limiting sap b1 user usage to specific machine.
    How is this possible?
    Any help will be appreciated.
    Thanks
    Ravi

    Do you mean to limit or reduce theavailable hardware and software in the specific machine ? I could not udnerstand yet but if you need fast solution, you could download sizing guide contains the explanation about the sioftware and hardware requirement for installation of SBO. Download it from http://www.service.sap.com/smb --> click documentation resource center.
    if the limitation related to user usage, you could use authorisation setting in the module administration. It is possible to that.
    let me know if need more clear.
    Rgds,

Maybe you are looking for