Issue with plumtree JSR container 1.1

Hi,
We have deployed the plumtree JSP container 1.1 on BEA weblogic application server 8.1 sp4 we have facing issue with the portlets and when trying to integrate the documentum JSR 168 portlets the portlets response is not coming within the portlet context. its opening as full page and not within the portlet.
Please let us know in case you have seen any similar issue.

Hi
No Problem. Thanks for the fix. Will wait for the patch to be available. Put in a workaround for the moment, but patch will definitely be great.
With Regards

Similar Messages

  • Issue with Opportunity schema contained in Opportunity.wsdl and Integration

    There is Opportunity XML schema object defined for Siebel web-service with URI “urn:/crmondemand/xml/opportunity” in opportunity.wsdl and opportunity.xsd contained in integrationevent.zip. Please find attached the schema files.
    If you check the diff, the opportunity schema is different, which is actually a conflict from Siebel side since it is the same object identified by URI “urn:/crmondemand/xml/opportunity”. Can we get some information about the discrepancy from Siebel OD team?
    Following compiler error comes for the BPEL process, where both Opportunity wsdl and integration event being used:
    Error:
    [Error ORABPEL-10903]: failed to read wsdl
    [Description]: in "bpel.xml", Global Type declaration/definition of name '{urn:/crmondemand/xml/opportunity}Opportunity' are duplicated at the following locations:
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.wsdl [line#: 89]
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.xsd [line#: 12]
    There are at least two of them looking different:
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.wsdl [difference starting at line#:635]
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.xsd [difference starting at line#:558]
    Global Type declaration/definition of name '{urn:/crmondemand/xml/opportunity}Team' are duplicated at the following locations:
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.wsdl [line#: 2602]
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.xsd [line#: 2524]
    There are at least two of them looking different:
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.wsdl [difference starting at line#:2602]
    file:/C:/Bhavnesh/Work/SiebelPoll/SourceCode/SiebelPoll/JDSU_SiebelToODSOpportunityTransfer/bpel/opportunity.xsd [difference starting at line#:2524]
    [Potential fix]: If your site has a proxy server, then you may need to configure your BPEL Server, designer and browser with your proxy server configuration settings (see tech note on http://otn.oracle.com/bpel for instructions).
    Following is the difference between two schema:
    New line in opportunity.wsdl
    <xsd:element name="ListOfOpportunityContactRole" maxOccurs="1" minOccurs="0" type="xsdLocal1:ListOfOpportunityContactRole"></xsd:element>
    Difference between the sequence of elements in both schema:
    <xsd:complexType name="Team"><xsd:sequence><xsd:element name="OpportunityAccessId" maxOccurs="1" minOccurs="0" type="xsdLocal1:string30"></xsd:element>
    <xsd:element name="OpportunityTeamId" maxOccurs="1" minOccurs="0" type="xsd:string"></xsd:element>
    Thanks and regards,
    Bhavnesh Patel.
    Edited by: bhavnesh_p on Oct 9, 2008 1:24 PM

    Hello Bhavnesh,
    we just got into the same issue with the differing Opportunity-XSD/WSDL you have mentioned in your posting.
    Following is the difference between two schema:
    New line in opportunity.wsdl
    <xsd:element name="ListOfOpportunityContactRole" maxOccurs="1" minOccurs="0" type="xsdLocal1:ListOfOpportunityContactRole"></xsd:element>
    Difference between the sequence of elements in both schema:
    <xsd:complexType name="Team"><xsd:sequence><xsd:element name="OpportunityAccessId" maxOccurs="1" minOccurs="0" type="xsdLocal1:string30"></xsd:element>
    <xsd:element name="OpportunityTeamId" maxOccurs="1" minOccurs="0" type="xsd:string"></xsd:element>Did you get any update on this problem?
    Thanks in adavance & Best regards..
    Andre

  • Issues with Excel files containing graphics

    I have a large excel 2013 spreadsheet containing several 3D graphs.  It is 79 pages long.  I am using Adobe Acrobat 9 on windows 7.
    When attempting to convert to PDF, once Acrobat reaches page 23 it stops working.  Pages 23-79 come out blank.
    When I look at the page preview, I can see all pages just fine.  I also have not manually inserted any page breaks within my excel document.  I've read somewhere that manual page breaks may cause Acrobat to act buggy.
    I've also attempted to converting on other computers:
    Windows 7
    Acrobat XI
    Windows 8
    Acrobat 8
    All combination of versions and systems are procuding the same result.  Possibly a memory time-out issue?  All of my computers have at least 4 gigs od RAM and 3 GHz processors.  One is 32-bit, the other two are 64-bit
    I've used the method of choosing the Adobe PDF Printer, printing within Excel and Printing Directly from Adobe Acrobat Distiller... all attempts have failed.

    >Ever since I upgraded my OS to Mavericks
    Adobe/Jive have a BAD title for the SEARCH THIS FORUM function
    Go to http://forums.adobe.com/community/premiere and, in the area just under Ask a Question, type in
    maverick
    or
    mavericks
    You may now read previous discussions on this subject... be sure to click the See More Results at the bottom of the initial, short list if the initial list does not answer your question

  • Strange issue with rights of account, used by SSIS (Foreach Loop Container does not return file names without Admin rights on server)

    Hello everyone.
    Faced very strange issue with account, which is used to run SSIS package.
    The specific package uses Foreach Loop Container to retrieve file names within the specified folder, and put them into Import file task.
    The package is set up to run under specific service account. This service account is given all permissions (Full control) to the folder where source files reside.
    So the issue is: SSIS package fails to execute this task (Foreach Loop Container and then Import), and shows that no files are found in the directory (although files ARE there).
    Once we're adding the service account into local Administrators group on the SQL Server, it works! Removing - does not work again. We cannot leave the service account as SQL server's admin as it's prohibited by our IT policies, and is just a bad practice.
    Any ideas, please? 
    MCP

    Here's the real log output:
    Date 16.04.2014 12:47:09
    Log Job History (RU-BW: Update)
    Step ID 1
    Server Server
    Job Name RU-BW: Update
    Step Name bw_import_cust_master_data
    Duration 00:00:02
    Sql Severity 0
    Sql Message ID 0
    Operator Emailed
    Operator Net sent
    Operator Paged
    Retries Attempted 0
    Message
    Executed as user: service_account Microsoft (R) SQL Server Execute Package Utility  Version 10.50.4286.0 for 64-bit  Copyright (C) Microsoft Corporation 2010. All rights reserved.    Started:  12:47:09  Error: 2014-04-16 12:47:11.45
        Code: 0xC0202070     Source: bw_import_cust_master_data Connection manager "Input"     Description: The file name property is not valid. The file name is a device or contains invalid characters.  End Error  Error:
    2014-04-16 12:47:11.47     Code: 0xC0202070     Source: bw_import_cust_master_data Connection manager "Input"     Description: The file name property is not valid. The file name is a device or contains invalid characters.  End
    Error  Error: 2014-04-16 12:47:11.48     Code: 0xC0202070     Source: bw_import_cust_master_data Connection manager "Input"     Description: The file name property is not valid. The file name is a device or contains invalid
    characters.  End Error  Error: 2014-04-16 12:47:11.48     Code: 0xC020207E     Source: Import file Flat File Source [1]     Description: The file name is not valid. The file name is a device or contains invalid characters.
     End Error  Error: 2014-04-16 12:47:11.48     Code: 0xC004701A     Source: Import file SSIS.Pipeline     Description: component "Flat File Source" (1) failed the pre-execute phase and returned error code 0xC020207E.
     End Error  DTExec: The package execution returned DTSER_FAILURE (1).  Started:  12:47:09  Finished: 12:47:11  Elapsed:  2.324 seconds.  The package execution failed.  The step failed.
    MCP

  • Oracle text - issue with contains query

    Hello,
    Need urgent help.
    Following code in my procedure is giving me error.
    TYPE c_1 is ref cursor;
    result_cursor c1;
    i_text2 := 'NEW%';
    open result_cursor for
    'select /*+ INDEX_SS_DESC(e cad_addr_idx2 )*/
    from cad_address
    where
    contains(text, {:i_text2}, 1) > 0
    and rec_type in (1,2,3,4)
    order by occur_count desc'
    using
    i_text2;
    ORA-00936: missing expression
    ORA-06512: at "AV_OWNER.MY_PROC", line 43
    ORA-06512: at line 6
    Oracle version is 11.2.0.3.0.
    Thanks,

    check your table is 'text indexed' on this 'Text' column.To knoow more about 'text index' go to
    http://docs.oracle.com/cd/B19306_01/text.102/b14217/ind.htm
    Also refer to the below thread where someone had faced issues with CONTAINS clause.
    ORA-20000: Oracle Text error: DRG-10599: column is not indexed

  • Issue with part delivery of orders containing payment card lines

    We have a problem with part deliveries of orders containing payment card authorizations.
    Our customers can buy items in our webshop paying with credit cards. The webshop is connected to our payment service provider who authorizes the complete amount of each order. The order data including authorization data is transferred from the webshop to our SAP ERP (ECC 5.0), where order documents are created, delivered and billed.
    For example, an order was created with 3 items:
    A for 5 u20AC
    B for 10 u20AC
    C for 20 u20AC
    For now, we create 3 payment card authorization lines according to those items.
    Line 1 5 u20AC
    Line 2 10 u20AC
    Line 3 20 u20AC
    Item C is temporarily not available, item A and B can be delivered and billed. The system now takes authorization line 3 (as 5 u20AC + 10 u20AC = 15 u20AC < 20 u20AC) for the first billing. The authorized amount of this line is completely consumed.
    When item C becomes available and is delivered and billed, the creation of the FI-document fails because there isn't enough authorization amount left.
    The creation of 3 payment card authorization lines is not mandatory for our business, creating one line for the complete amount would be as fine. But how can we avoid the complete comsumption of the authorization line then? Or do you have any other suggestions / best practices how to deal with part deliveries of orders containing payment card authorizations?
    Regards.
    Hilka Kaminski-Nieswandt
    Sabrina Förster

    Hello fridaynights, 
    It would be worrisome to receive an email notification that we were unable to authorize your payment method, especially if the payment method appears to be fine on your end. 
    Generally speaking, when items ship separately from one order, we will authorize the full amount of the order when the order is placed. Authorizations may expire after a few business days, but as items ship individually, your card would be authorized and charged for the individual shipments. 
    Using the email address you registered with the forum, I was able to locate your order with the canceled amiibos. It would appear that we were unsuccessful in authorizing funds on the card on multiple occasions, and so the remaining amiibos were canceled. I apologize for any trouble or displeasure that this cancelation may cause you. I would encourage you to keep an eye on these amiibos on BestBuy.com for changes in their availability. 
    As it seems there was an issue with your My Best Buy MasterCard, I would encourage you to contact Citibank, the issuer of your My Best Buy MasterCard account, at 1-888-574-1301 for further inquiries into this authorization issue. 
    If you should need further assistance, please let me know. 
    Regards, 
    Tasha|Social Media Specialist | Best Buy® Corporate
     Private Message

  • Is anyone else having issues with their mail , where the reply from the person you just contacted contains very old emails from a different contact ?

    Is anyone else having issues with their mail , where the reply from the person you just contacted contains very old emails from a different contact ?

    I mean that I sent an email to a contact of mine yesterday. His reply contained a stream of very old emails I had received in 2009 from a totally different contact all together !! The reply email was in my inbox as being from the original person I sent the email to. This is starting to happen more regularly now , so is a problem !

  • Java Webconsole ELResolvers for JSR not registered with the JSP container

    Trying to rebuild a LDAP server running Directory Server 6.1. Just installed Solaris 10 u9 on a SunFire V240. Loaded most recent recommended patch set dated 2011.02.02. Proceeded to load Directory Server V6.0 from native packages using JAVA ES Installer. After Directory Server installation and initialization the Java Webconsole is running but brings up a blank page login page. Note: Did not test the Webconsole prior to Directory Server installation. The errors in the /var/log/webconsole/console/console_debug_log file state:
    Feb 8, 2011 10:32:32 AM com.sun.faces.lifecycle.ELResolverInitPhaseListener populateFacesELResolverForJsp
    INFO: JSF1027: [console] The ELResolvers for JSF were not registered with the JSP container.
    Feb 8, 2011 10:32:34 AM com.sun.faces.lifecycle.Phase doPhase
    SEVERE: JSF1054: (Phase ID: RENDER_RESPONSE 6, View ID: /jsp/login/BeginLogin.jsp) Exception thrown during phase execution: javax.faces.event.PhaseEvent[source=com.sun.faces.lifecycle.LifecycleImpl@13c3b45]
    The JAVA version is: 1.6.0_22
    The cacao version is 2.2.4.1
    Kernel Patch is Generic_144488-06
    Anyone have an idea what is causing this problem for the JAVA webconsole and how to fix it?

    hi,
    it is tomcat-6.0.20, JSF-RI 2.0.2 (Mojarra)
    a whole bunch of libs and jquery4jsf (though really buggy in this manner, because all components could you rewrite for JSF2-components, etc.)
    Unfortunately it is somehow a config error, because i haven't got it earlier, since i changed PhaseListener and Authentification with JAAS (sample from Ed Burns:
    http://weblogs.java.net/blog/2006/03/07/repost-using-jaas-jsf, but with JDBC-based authentification)
    cheers,
    Istvan

  • Send Issues with Outlook for Mac (2011 / V15) and Exchange 2013 SP1

    Hi all,
    we have a strange issue with only with Outlook for Mac Users (version 2011 and the newest Outlook Version (V15) from Office 365) connected to our Exchange Server 2013 SP1. Some emails which we send out to the exactly same recipient are not sent through our
    Exchange Server. 
    We have sent 8 emails with subject "test1, test2, test3...". Only test 3-6 was arriving to the recipient. The other emails are in the "sent" folder but it was not sent out through the Exchange.
    What we can see with "Get-MessageTrackingLog" is, that the Recipients and MessageSubject are empty for these emails:
    Timestamp Sender Recipients MessageSubject
    25.02.2015 16:48:52 [email protected].. {}
    25.02.2015 17:04:43 [email protected].. {}
    25.02.2015 17:08:25 [email protected].. {[email protected]} test 3
    25.02.2015 17:08:56 [email protected].. {[email protected]} test 4
    25.02.2015 17:09:38 [email protected].. {[email protected]} test 5
    25.02.2015 17:09:38 [email protected].. {[email protected]} test 6
    25.02.2015 17:13:45 [email protected].. {}
    25.02.2015 17:13:55 [email protected].. {}
    We can still reproduce the issue on different Mac computers.
    Thanks for any help in advance!
    Thanks and best regards
    Reto

    Here is the mailheader form the successfully sent email:
    Date: Wed, 25 Feb 2015 17:08:25 +0100
    Subject: test 3
    From: sender <[email protected]>
    To: "'[email protected]'" <[email protected]>
    This mailheader is from an email which was not sent out:
    User-Agent: Microsoft-MacOutlook/15.6.0.150113
    Date: Wed, 25 Feb 2015 16:48:52 +0100
    Subject: test 1
    From: sender <[email protected]>
    To: [email protected] <[email protected]>
    Interesting: Only the not received messages contains User-Agent string and have some quotation marks missing in the To field.

  • Multiple Issues with Adobe Creative Cloud app.

    I'm having multiple issues with the Adobe Creative Cloud app.
    1. Neither Photoshop CC nor Prelude CC get past the 47% mark when installing. They constantly give me "Installation Failed" messages. When I click on "Learn More", I'm told that:
    "Installation Failed
    Errors during Installation.(7)
    More Information"
    So naturally, I click on More Information to get the following thrown at me (none of which I understand):
    Exit Code: 7 Please see specific errors below for troubleshooting. For example,  ERROR:   -------------------------------------- Summary --------------------------------------  - 0 fatal error(s), 2 error(s)    ERROR: 12/01/13 13:16:06:425 | [INFO] |  | OOBE | DE |  |  |  | 6076 | ---------- CustomHook_Helperx64 ---- Start ----------  12/01/13 13:16:06:426 | [ERROR] |  | OOBE | DE |  |  |  | 6076 | Cannot load function name 'CSInstallerCustomHookProc' from library C:\Program Files (x86)\Common Files\Adobe\Installers\uninstall\{5F816B76-62F3-41C9-B651-27F49F25F50B}.data. Error 0    ERROR: System check returned with error : -4  -------------------------------------------------------------------------------------
    2. I installed Lightroom 5, then uninstalled it. When I went back to re-install it, the Adobe Creative Cloud app wouldn't let me. It states that my Lightroom 5 is "Up to date" and is in my "Your Apps" section, not in the "Find New Apps" section. I've double checked my Programs and Features in Control Panel, and it's not there. I cleaned my registry, and it's still there. I deleted the "opm.db" file in my OOBE folder, and restarted CC - still nothing.
    I've got to say, guys. I'm not very happy with the amount of time I've spent just trying to install programs on my PC. While the plan is for this to be intuitive at some point, it's not very functional at the moment. Any help you can provide me would be amazing - if you can provide it sooner than later, I'd be over the moon.
    Thanks.

    I fixed it. I fixed it on my own. My journey took over a week (forty hours of back and forths, trial and error, and service!!) and included multiple calls, multiple online chats, unanswered forum posts, Twitter conversations with the Adobe Customer Service team, remote access sessions with Adobe technical teams, and finally this series of emails. In the end, I had to figure it out myself. I'm not happy - not with the time it took, and not with the level service I received based on the urgency that I made clear.
    For anyone else that had this issue (or similar), here is what I did to fix it. This may seem excessive, but that's because I didn't know what else to do. Some of these steps may be redundant, or not required... but I wouldn't know because once I saw that it was working, I just kept going.
    Anyway, here is the solution I came upon (I'm running Windows 7 64-bit):
    1) I uninstalled every single Adobe product (including Flash Player, Acrobat Player, Air, and Digital Editions).
    2) I ran the Cleaner Tool (which is not very good) and came across errors in trying to delete certain folders.
    3) I restarted my computer in Safe Mode, and logged into Windows 7 under my Administrator account.
    4) I manually went into every folder that contained the words "Adobe" and deleted everything. This includes my Program Data folder, my Program Files folders (both x86 and 64-bit), my AppData folders, my Roaming folders, my Temp folders - ANYTHING and EVERYTHING that contained any trace of Adobe, I deleted.
    5) I ran Microsoft Disk Cleanup and Piriform CCleaner to clean my registry and temp files.
    6) I restarted my computer using the normal boot process and logged into Windows as Administrator.
    7) I downloaded the Adobe Creative Cloud installer.
    8) I restarted my computer again, and logged into Windows as Administrator.
    9) I ran the Creative Cloud installer, and installed Premiere Pro.
    10) I restarted my computer again, and logged into Windows as Administrator.
    11) I ran the Creative Cloud installer, and installed Photoshop.
    12) I restarted my computer again, and logged into Windows as Administrator.
    13, 14, 15...) I ran the Creative Cloud installer and installed whatever programs I needed, then I IMMEDIATELY restarted my computer before installing anything else.
    Hope this helps. Good luck!

  • Issue with instant ringback when using sip trunk to SP

    Hi all,
    We use CUCM 8.0.2.
    We have a SIP trunk to a SP connected via one of our Cisco 2911 routers configured as a CUBE.
    Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M3, RELEASE SOFTWARE (fc2)
    c2900-universalk9-mz.SPA.150-1.M3.bin
    Cisco CISCO2911/K9 (revision 1.0)
    Technology Package License Information for Module:'c2900'
    Technology Technology-package
                      Current       Type
    ipbase        ipbasek9      Permanent
    security      securityk9    Permanent
    uc              uck9            Permanent
    data           None            None
    We also have several ISDN lines that run out via various Cisco routers configured as H323 gateways.
    We use 7945 and CIPC for our phones.
    We're having an issue with calls going via the SIP trunk where we hear ringing instantly after dialling - but before the actual device at the other end starts ringing (considerable difference).
    Using the SIP trunk: If I make a call to my mobile phone - I hear ringing instantly - about 3 rings before my mobile phone actually starts ringing - undesireable.
    Using H323 gateway: If I make a call to my mobile phone - I hear silence for a bit - then ringing when the mobile starts ringing - desired.
    Using SIP trunk: If I make a call to a landline that is ready - it rings instantly for at least 1 ring - before the actual phone I'm calling starts ringing - undesireable.
    Using H323 gateway: There is a momentary pause before hearing ringing on my phone and the phone I dialled - desired.
    Using SIP trunk: If I make a call to a landline that is off-hook (with no call-waiting/etc.) - it rings once and then returns the busy signal (the worst issue) - undesireable.
    Using H323 gateway: There is a momentary pause before hearing busy signal - desired.
    Phone to phone internally (same network): Operates as expected (instantly rings locally and on the phone I'm calling). Between phones that utilise the SIP trunk and phones that utilise the H323 gateways within the same network - communication is instant and as expected.
    Any ideas why this happens and how to stop it?
    I want it to not ring until the situation is known and that it can provide the appropriate feedback (ringing/busy/etc.).
    Some possibly relevant config (note that there is a known bug with this IOS that meant I had to declare the codec in each dial-peer as the voice class would not work):
    voice service voip
    address-hiding
    mode border-element
    allow-connections sip to sip
    sip
      bind control source-interface GigabitEthernet0/0
      bind media source-interface GigabitEthernet0/0
      header-passing error-passthru
      early-offer forced
      midcall-signaling passthru
    interface GigabitEthernet0/0
    ip address x.x.x.x 255.255.255.252
    ip access-group acl.SIP-IN in
    no ip redirects
    no ip unreachables
    ip verify unicast reverse-path
    ip virtual-reassembly
    duplex full
    speed 100
    no cdp enable
    gateway
    timer receive-rtp 1200
    sip-ua
    connection-reuse
    gatekeeper
    shutdown
    dial-peer voice 1 voip
    description *** INBOUND CALLS FROM CARRIER ***
    translation-profile incoming SIPTRUNK-INCOMING
    session protocol sipv2
    incoming called-number #blah blah#
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 61 voip
    description **** WA, SA AND NT NUMBERS ****
    destination-pattern 0[8]........
    session protocol sipv2
    session target ipv4:<MY SP's SIP SERVER>
    incoming called-number 0[8]........
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 81 voip
    description **** MOBILE NUMBERS ****
    destination-pattern 0[4]........
    session protocol sipv2
    session target ipv4:<MY SP's SIP SERVER>
    incoming called-number 0[4]........
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 500 voip
    description *** INBOUND SIP TRUNK TO CUCM PUB ***
    translation-profile outgoing SIPTRUNK-CALLING-ADD-0
    preference 1
    destination-pattern 5[12]..
    session protocol sipv2
    session target ipv4:<OUR CUCM PUBLISHER IP>
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    Any help or a point in the right direction would be greatly appreciated.
    Cheers,
    Brett

    I ended up resolving this issue as follows:
    In CUCM, under Device > Device Settings > SIP Profile.
    I modifed the profile relevant to my SIP trunk, under the "Trunk Specific Configuration", I set "SIP Rel1XX Options" from "Disabled" to "Send PRACK if 1xx Contains SDP".
    Now, I get the expected delay before hearing ringback.
    Solved!

  • Issue with parallel operation of SAP NW SSO 2.0 and SNC Client Encryption (Logon Groups)

    Hi!
    One of our customers is using the SNC Client Encryption solution to ensure encryption using SNC (based on Kerberos Technology) for their SAP GUI Dialog connections. They have lots of SAP backends DEV, QAS, PRD all with the SNC Client Encryption SNC Lib installed. The profile parameter snc/identity/as contains the following value: p:CN=SAP/<ServiceAccount>@<DOMAIN>.
    Example: p:CN=SAP/[email protected]
    The customer is using one AD Service Account "SNCServiceUser" with one registered SPN "SAP/SNCServiceUser" for all systems (yes, this is not recommended... but the case).
    Important: All users use group entries in the SAP Logon (saplogin.ini). Means, for SAP logon the SNC name can not be manually configured on the SAP Front End. With group logons, the application server's SNC name is dynamically requested by the message server each time a SAP GUI connection is started. The SNC Name is greyed out in this case as dynamically obtained from the applications servers profile parameter snc/identity/as.
    Now our customer implements SAP NetWeaver Single Sign-On 2.0 within his landscape. Based on the Secure Login Server 2.0 (SP3) he likes to use X.509 based authentication to his AS ABAP backends using SAP GUI SNC while others still use SNC Client Encryption.
    Replacing the SNC Library on the AS ABAP
    The Secure Login Library 2.0 (SP3) has been installed on one of the ABAP systems and the SNC Client Encryption SNC Library (which is based on SSO 1.0) is no longer used, thus we changed the parameter snc/gssapi_lib to point to the new SNC library. We removed the old PSE.ZIP containing the keytab and created the new SAPSNCSKERB.PSE incl. the keytab and proper credentials. To ensure parallel operation, we kept the snc/identity/as value as is =  p:CN=SAP/[email protected].
    After restarting the system with initialized Secure Login Library 2.0, still the SNC client encryption works fine for existing users.
    The problem
    We created on the Secure Login Server an SNC certificate for the AS ABAP which has the following X.509 Distinguised Name Fomat: CN=SAP/[email protected] This is to avoid having to change the snc/identity/as to an "real" X.509 DN which would lead to non-working SNC Client Encryption for all the other users using SAP GUI and logon groups.
    As soon as we install the PSE via STRUST on the system the SNC Client Encryption solution stops working with error „Server refuses kerberos key exchange“.
    As part of an pilot implementation we have installed Secure Login Client 2.0 (SP3) on some test PCs. The test PC with SLC is able to perform Single Sign-On with SNC based on X.509 (incl. Encryption) to the ABAP system.
    Seems the SAP System now only tries to do X.509 based authentication thus key exchange fails. The problem is, we cannot change the snc/identity/as value because of the logon groups. If we were able to do so, we would in any case set the server identity to X.509 DN and in addition create the SAPSNCSKERB.PSE incl. keytab. This should work, as confirmed by SAP see this post.  
    Any ideas how to solve this and have both solutions in parallel?
    Appreciate any help.
    Regards,
    Carsten

    Hi all,
    we was able to fix the issue. It was an issue with the customers cluster configuration and the  $SECUDIR variable. This tricky issue leads to non working or sporadic working SNC Client Encryption...
    This was how the configuration looks before:
    Environment variable $SECUDIR is defined:
    "/ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec“
    sapgenpse seclogin -l -v
    running seclogin with USER="<SID>adm"
    Credentials for username '<SID>adm':
    0 (LPS:OFF):
             (LPS:OFF): /ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCSKERB.pse
    1 (LPS:OFF):
             (LPS:OFF): /usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCS.pse
    After changing the $SECUDIR to "/usr/sap/<SID>/DVEBMGSxx/sec“ and re-creating the credentials, it worked like a charm.
    As a result of this we can confirm, this configuration and SNC Client Encryption works with CommonCryptoLib in parallel to the SSO configuration.
    And Valerie was right with 2. SLC starting from V. 1.0 SP2 PL3 was able to convert the CN= part of the SNC Name into an SPN, was my mistake. In addition SNC Client Encryption starting from Version 1 SP1 PL1 does this also.. just to make this clear
    Thread closed hope this helps someone
    Carsten

  • Connection Issues with BT infinity + HH3

    I have had BT infinity installed for a couple of months now and I have got some issues with the connection that I am getting.
    Now the Internet connection speed is not a issue getting about 35mb wired and 26mb over Wi-Fi and is pretty stable.
    But when using my iPad 2 and watching a youtube video even at the lowest quality (using the App or Website) sometimes the video will often stop loading at a point and will not load the rest of the video so the video will just stop. This does not happen on my laptop.
    This also affects the BBC iPlayer App, where I cannot even get a programme to even start playing. This all worked fine with BT Option 3.
    It also effects Apps like Twitter were loading new tweets in the timeline can sometimes take forever for just a bit of text.
    My Xbox 360 also will not connect to the WiFi at "N" only at "G". Even though I have one of the new style Xbox 360's that has Wireless N. Also i find the Download speeds realy slow. Took nearly 30 Miniutes to download a 1.3 GB file compared to about 6-8 on my laptop. 
    The one computer that i connected to the HH3 via a Ethernet cable has the most issues where it can take many minutes to load up the simpliest webpage like eBay. This problem does not happen all of the time but useally a couple of time per week. And what seems to happen is you click on a link and nothing happens then everthing loads.
    Has anybody got any of these issues as this laptop seems to be fine but the iPad will not also load the content, and the computer that shouyld be the fastest seems to sometimes be the speed of a dial-up Modem.
    Apart from getting rid of the HH3 and getting someting like a Apple Airport Extreme are there any other soloution to why this happens. This is not what i thought BT Intinty would be like.

    It could be a dodgy router but check the following first
    1) All connections are set to use DHCP(automatic)  rather than fixed IP addresses and that the IP list on the Hub does not contain duplicate entries.
    2) As the wired connection is running slowly it is unlikely to be a wireless conflict but use Inssider 2 to ensure you are not using a crowded channel the HH3 is supposed to do this automatically but seems flaky
    You could try getting a new Hub sent to you but unless you feel rich or have Apple shares there are cheaper cable routers than the Apple ones around  & any router that offers PPOE will work. Plenty of reviews on the web and you can buy them from £20 up.

  • Issues with using the output redirection character with newer NXOS versions?

    Has anyone seen any issues with using the output redirection character with newer NXOS versions?
    Am receiving "Error 0x40870004 while copying."
    Simply copying a file from bootflash to tftp is ok.
    This occurs for both 3CDaemon and Tftpd32 softwares.
    Have tried it on multiple switches - same issue.
    Any known bugs?
    thanks!
    The following is an example of bad (NXOS4.1.1b) and good (SANOS3.2.1a)
    MDS2# sho ver | inc system
      system:    version 4.1(1b)
      system image file is:    bootflash:///m9200-s2ek9-mz.4.1.1b.bin
      system compile time:     10/7/2008 13:00:00 [10/11/2008 09:52:55]
    MDS2# sh int br > tftp://10.73.54.194
    Trying to connect to tftp server......
    Connection to server Established. Copying Started.....
    TFTP put operation failed:Access violation
    Error 0x40870004 while copying tftp://10.73.54.194/
    MDS2# copy bootflash:cpu_logfile tftp://10.73.54.194
    Trying to connect to tftp server......
    Connection to server Established. Copying Started.....
    |
    TFTP put operation was successful
    MDS2#
    ck-ci9216-001# sho ver | inc system
      system:    version 3.2(1a)
      system image file is:    bootflash:/m9200-ek9-mz.3.2.1a.bin
      system compile time:     9/25/2007 18:00:00 [10/06/2007 06:46:51]
    ck-ci9216-001# sh int br > tftp://10.73.54.194
    Trying to connect to tftp server......
    |
    TFTP put operation was successful

    Please check with new version of TFTPD 32 server. The error may be due to older version of TFPT server, the new version available solved this error. Files are getting uploaded with no issues.
    1. Download tftpd32b.zip from:
    http://tftpd32.jounin.net/tftpd32_download.html
    2. Copy the tftpd32b.zip file into an empty directory and extract it.
    3. Copy the file you want to transver into the directory containing tftpd32.exe.
    4. Run tftpd32.exe from that directory. The "Base Directory" field should show the path to the directory containing the file you want to transfer.
    At this point, the tftpserver is ready to begin serving files. As devices request files, the main tftpd32 window will log the requests.
    Best Regards...

  • Performance issues with query input variable selection in ODS

    Hi everyone
    We've upgraded from BW 3.0B to NW04s BI using SP12.
    There is a problem encountered with input variable selection. This happens regardless of using BEx (new or old 3.x) or using RSRT. When using the F4 search help (or "Select from list" in BEx context) to list possible values, this takes forever for large ODS (containing millions of records).
    Using ST01 and SM50 to trace the code in the same query, we see a difference here:
    <u>NW04s BI SQL command</u>
    SELECT                                                                               
    "P0000"."COMP_CODE" AS "0000000032" ,"T0000"."TXTMD" AS "0000000032_TXTMD"                             
    FROM                                                                               
    ( "/BI0/PCOMP_CODE" "P0000" ) LEFT OUTER JOIN "/BI0/TCOMP_CODE" "T0000" ON  "P0000"."COMP_CODE" = "T0000
      "."COMP_CODE"                                                                               
    WHERE                                                                               
    "P0000"."OBJVERS" = 'A' AND "P0000"."COMP_CODE" IN ( SELECT "O"."COMP_CODE" AS "KEY" FROM              
      "/BI0/APY_PP_C100" "O" )                                                                               
    ORDER BY                                                                               
    "P0000"."COMP_CODE" ASC#                                                                               
    <u>BW 3.0B SQL command:</u>
    SELECT ROWNUM < 500 ....
    In 3.0B, rownum is limited to 500 and this results in a speedy, though limited query. In the new NW04s BI, this renders the selection screen unusable as ABAP dumps for timing out will occur first due to the large data volume searched using sequential read.
    It will not be feasible to create indexes for every single query selection parameter (issues with oerformance when loading, space required etc.). Is there a reason why SAP seems have fallen back on a less effective code for this?
    I have tried to change the number of selected rows to <500 in BEx settings but one must reach a responsive screen in order to get to that setting and it is not always possible or saved for the next run.
    Anyone with similar experience or can provide help on this?

    here is a reason why the F4 help on ODS was faster in BW 3.x.
    In BW 3.x the ODS did not support the read mode "Only values in
    InfoProvider". So If I compare the different SQL statements I propose
    to change the F4 mode in the InfoProvider specific properties to
    "About master data". This is the fastest F4 mode.
    As an alternative you can define indexes on your ODS to speed up F4.
    So would need a non-unique index on InfoObject 0COMP_CODE in your ODS
    Check below for insights
    https://forums.sdn.sap.com/click.jspa?searchID=6224682&messageID=2841493
    Hope it Helps
    Chetan
    @CP..

Maybe you are looking for

  • 2013 word crashes when "save as" .Word freezes "not responding after a few minutes.

    2013 word crashes  when using the "save as" command. It does save the document but crashes. After working for 3 minutes or so on a document the programme will stop running with the screen frozen. Have to use the windows task manager to close. Any ide

  • Error while restarting sessions in Odi

    Hi when i try to restart a session using a particular agent am getting following errors . Please kindly help to sort it out oracle.odi.runtime.agent.invocation.InvocationException: HTTP/1.1 500 Internal Server Error      at oracle.odi.runtime.agent.i

  • Trying to open CS5 in InDesign CS4

    I am working with another graphic designer and she saved her InDesign CS5 file as a InDesign CS4. When I tried to open it in my Academic version of InDesign CS4 version 6.0 I received the following error screen - Any suggestions - How do I update plu

  • ITunes 5.0.1.4

    Ever since i update to this latest version of iTunes, my iTunes can't recongnise my ipod shuffle even though win can. It displayed: "The software required for communicating with the ipod is not installed correctly. Please reinstall itunes to install

  • List into Query

    This should be simple, but I can't wrap my head around it. A user inputs their zip code into a page. A list of nearby zip codes is returned from the database, separated by commas. No problem, that part's done. I want to take that list of zip codes an