J2ee_admin

Hi ,
In ECC DEV(Ehp3) system having Dual Stack . now i am upgrading it into EHP4 , abap phase has been completed ,
now it asking j2ee_pwd and SDM pwd in java phase , now don't know pwd for j2ee_admin , is there any way to reset PWD for J2EE_admin , please give me some suggestions . (i tried in ABAP stack in 001 iam help less in this client not able to login with my user and SAP* and DDIC) can any suggestion please.
Thanks In advance

check the "ume.r3.connection.master.client" parameter value in config tool. if it is 001 you have to reset the password in 001. and also you need to change the password in secure storage area in configtool. follow the below steps to change the password in secure store area.
1.Start the Config Tool
2.Select the secure store node
3.Select the admin/password/<SID> entry
4. Enter the administrator user's new password in the "Value" field and choose "Add".
5. Choose "File" --> "Apply" to save the data.
i am not sure whether j2ee engine restart is needed or not.

Similar Messages

Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only

After installation fo ECC6,When I am trying to connect to visual admin,I am getting given below error.
I am also not able to login to NWA
Application cannot be started.
Details:
com.sap.engine.services.deploy.container.ExceptionInfo: Naming error.
System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
#1.5#C000C0A8016400010000000001A6B16F0004A600094A9828#1308418992937#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-13,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Cannot authenticate the user.#
#1.5#C000C0A8016400020000000001A6B16F0004A6000C292AF0#1308419041078#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-24,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
#1.5#C000C0A8016400030000000001A6B16F0004A6001D1853B8#1308419325187#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-35,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
#1.5#C000C0A8016400000000000001CA1A680004A6008F78FF48#1308421244125#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-2,5,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
#1.5#C000C0A8016400010000000001CA1A680004A600919BB068#1308421279953#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-13,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Cannot authenticate the user.#
#1.5#C000C0A8016400020000000001CA1A680004A6009220F598#1308421288687#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-24,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
#1.5#C000C0A8016400030000000001CA1A680004A60097A70598#1308421381359#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-35,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Cannot authenticate the user.#
#1.5#C000C0A8016400040000000001CA1A680004A6009867E880#1308421394000#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-46,6,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Cannot authenticate the user.#
#1.5#C000C0A8016400000000000001402EEB0004A600E643EE28#1308422700265#/System/Server/VisualAdministrationTool##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-2,5,main]##0#0#Error#1#/System/Server/VisualAdministrationTool#Plain###Error while trying to login to ecc6: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX#
Any help would be highly appreciated.
Thanks
Sukrut

Hello,
If you have a installation of dual stack(ABAP + JAVA) system.. check in SU01 transaction if SAP_J2EE_ADMIN role is assigned to the J2EE_ADMIN user. If not, please assign it.
For only JAVA stack systems, default administrator user is Administrator.
thanks
ashish

Read-only mode. Object is currently locked by user: J2EE_ADMIN. hw 2 unlock

Hi friends,
<b>i am not able to edit my object in EP</b> , it says
Read-only mode. Object is currently locked by user: J2EE_ADMIN.
how do i unlock it ?
i am on 04s SP9

Hi Rohit,
Navigate to
system_admin -> Monitoring->
Portal->object_locking->
There you can view your locked pcd object.Just check it and Unlock.
That should solve your problem.
Hope this helps
Regards
Vineeth

J2EE_ADMIN has no Port Role in ABAP+JAVA stacks system

I installed 2004s BI IDES SR2 with ABAP+JAVA on Win 2003 + Oracle, default client 800.
I find the J2EE runs fine, I can log into SDM, configtools. And I can launch
http://host:50000/index and http://host:50000/irj/portal, which mean the portal is up.
But with http:host:50000/index.html, I can't goto http://host:50000/useradmin, nor http://host:50000/nwa
The error message is:
Application cannot be started.
Details: com.sap.engine.services.deploy.container.ExceptionInfo: Naming error.
with http://host:50000/irj/portal, both j2ee_admin and sap* can log in, but without any portal role. Thus
only logoff link available, and I can't do anything else.
I read through all the related post and can't figure out a way to assign the portal role to j2ee_admin or create additional portal user, anyone can help my situation.
I also can not log into Visual Admin with j2ee_admin, connect error:
Error while connecting
com.sap.engine.services.jmx.exception.JmxSecurityException: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX
(which I checked sap_j2ee_admin role is green on su01 role tab with correct valid period.)
what should I do?
Thanks

Thanks for prompt reply, Debasis.
Could you please elaborate the steps I need to take? Thanks.
eg. how do I "Assign a user a role that has the permission for the UME action JMX.JmxManageAll"
I don't have any portal tools working properly yet, I don't have useradmin, and I don't have nwa. I don't even have visual admin. Everything I do in ABAP, pfcg, su01, seems have no effect to those portal functionalities.
The fact that I enable emergency sap* from configtool also doesn't make useradmin / nwa work...
Any idea? Thank you.

J2EE_ADMIN not working in Java Side

Hi All,
The J2ee_admin Id is not working on the Java side, but is working on the ABAP Side. I changed the password of SAPJSF, is it bcoz of that? If yes, pls suggest what can be done.
Regards,
Divya

Hi Divya,
You can Activate the Emergency User (find the directions at http://help.sap.com/saphelp_nw04/helpdata/en/3a/4a0640d7b28f5ce10000000a155106/content.htm ).
The you can login using the SAP* account. After which you can go in to the User Administrator and update the j2ee_admin account password. Then logout, disable the Emerengy User (SAP*), and login using the j2ee_admin account.
hope this would resolve your issue. If still it persists, do revert.
Regards,
P. Kumaravel.
Ps: Award points for heelpful answers.

Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN

Dear All,
I am new to sap...
I tried installing SAP NETWEAVER 7.X SR3
While installing i got a error at phase 33 0f 50.
The error message is CJS-30196 Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN.
I am here copying the error log below..
Can some one guide me how to solve this.
I am using Oracle DB and Java j2sdkfb-1_4_2_24-rev-b06-windows-amd64.
Mine is a AMD processor.
Line:-----
Line:-----
SAPINST log file
Line:-----
Line:-----
INFO 2011-12-28 14:26:35.453
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\x.
INFO 2011-12-28 14:26:35.453
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\x.
INFO 2011-12-28 14:26:40.750
Creating file C:\Program Files\sapinst_instdir\x.
INFO 2011-12-28 14:26:40.750
Removing file C:\Program Files\sapinst_instdir\x.
INFO 2011-12-28 14:26:43.031
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.99.xml'.
INFO 2011-12-28 14:26:45.625
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.100.xml'.
WARNING 2011-12-28 14:26:57.656
Unable to get information about path
LABEL.ASC\ using GetVolumeInformation. Operating system error message: The filename, directory name, or volume label syntax is incorrect.
INFO 2011-12-28 14:27:02.875
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/inifile.34.xml'.
INFO 2011-12-28 14:27:03.156
Execute step
Component W2K_ServicePack_Check|ind|ind|ind|ind
Preprocess of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_First_Steps|ind|ind|ind|ind|1|0|W2K_ServicePack_Check|ind|ind|ind|ind|2|0
INFO 2011-12-28 14:27:14.531
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/keydb.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/keydb.34.xml'.
INFO 2011-12-28 14:27:15.125
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.101.xml'.
INFO 2011-12-28 14:27:15.500
Execute step createJ2EEAdmin of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0
INFO[E] 2011-12-28 14:27:16.281
FSL-02077 File system export (share) saploc does not exist.
INFO 2011-12-28 14:27:16.656
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.message.
INFO 2011-12-28 14:27:16.687
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.jlaunch.
INFO 2011-12-28 14:27:16.687
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.jlaunch.
INFO 2011-12-28 14:27:16.718
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.log.
INFO 2011-12-28 14:27:16.828
Working directory changed to C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS.
INFO 2011-12-28 14:27:16.828
Output of F:\usr\sap\D04\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\lib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\sharedlib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install" -c sysnr=00 -c ashost=VIJAYA04 -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u J2EE_ADMIN -p XXXXXX -r SAP_J2EE_ADMIN -message_file UserCheck.message is written to the logfile C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/UserCheck.log.
WARNING 2011-12-28 14:27:47.625
Execution of the command "F:\usr\sap\D04\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\lib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\sharedlib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install" -c sysnr=00 -c ashost=VIJAYA04 -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u J2EE_ADMIN -p XXXXXX -r SAP_J2EE_ADMIN -message_file UserCheck.message" finished with return code 3. Output:
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
SAPINST Log:-
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
INFO 2011-12-28 14:27:47.625
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\dev_UserCheck.
ERROR 2011-12-28 14:27:47.640
CJS-30196 Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
ERROR 2011-12-28 14:27:47.734
FCO-00011 The step createJ2EEAdmin with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJ2EEAdmin was executed with status ERROR ( Last error reported by the step :Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN).
Line:-----
Line:-----
USER CHECK LOG
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
Thanks & Regards,
Vijay...

Dear All,
As the installation is not completed i could not login SAP.
I tried to create user at OS level and assign SAP_J2EE_ADMIN.
Doing so i am getting an popup saying an object SAP_J2EE_ADMIN cannot be created.
I am still in the installation phase.
Below is the User Check Log..
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
Thanks & Regards,
Vijay..

Pcuigp.xssfpm.java.FPMRuntimeException: User J2EE_ADMIN does not exist

Hi colleagues,
We are getting the following error in Personal Information of ESS(Employee Self Service)
com.sap.pcuigp.xssfpm.java.FPMRuntimeException: User J2EE_ADMIN does not exist in this period
     at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:112)
     at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:122)
     at com.sap.pcuigp.xssutils.pernr.FcEmployeeServices.initPernr(FcEmployeeServices.java:267)
     at com.sap.pcuigp.xssutils.pernr.FcEmployeeServices.onInit(FcEmployeeServices.java:222)
     at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServices.onInit(InternalFcEmployeeServices.java:249)
     at com.sap.pcuigp.xssutils.pernr.FcEmployeeServicesInterface.onInit(FcEmployeeServicesInterface.java:135)
     at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServicesInterface.onInit(InternalFcEmployeeServicesInterface.java:183)
     at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServicesInterface$External.onInit(InternalFcEmployeeServicesInterface.java:243)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.attachComponentToUsage(FPMComponent.java:922)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.attachComponentToUsage(FPMComponent.java:891)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPMProxy.attachComponentToUsage(FPMComponent.java:1084)
     at com.sap.xss.hr.per.us.address.overview.VcPerAddressUSOverview.onInit(VcPerAddressUSOverview.java:302)
     at com.sap.xss.hr.per.us.address.overview.wdp.InternalVcPerAddressUSOverview.onInit(InternalVcPerAddressUSOverview.java:287)
     at com.sap.xss.hr.per.us.address.overview.VcPerAddressUSOverviewInterface.onInit(VcPerAddressUSOverviewInterface.java:187)
     at com.sap.xss.hr.per.us.address.overview.wdp.InternalVcPerAddressUSOverviewInterface.onInit(InternalVcPerAddressUSOverviewInterface.java:152)
     at com.sap.xss.hr.per.us.address.overview.wdp.InternalVcPerAddressUSOverviewInterface$External.onInit(InternalVcPerAddressUSOverviewInterface.java:236)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent.doProcessEvent(FPMComponent.java:564)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent.doEventLoop(FPMComponent.java:438)
     at com.sap.pcuigp.xssfpm.wd.FPMComponent.wdDoInit(FPMComponent.java:196)
     at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdDoInit(InternalFPMComponent.java:110)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
     at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:430)
System configuration is EP7, Oracle database.
Could you please assist me to resolve this issue.
Thanks & regards,
Pavan.

Hi,
you have to map the EP user to an employee at the backend for the ESS services to work.
Go to transaction HRUSER and check whether an employee is connected to this USER_ID.
If it is not there, go to transaction pa30,select an employee and create a new record for the infotype 105 ( subtype 0001) with the USER_ID.
Check the start DATE and the END date of the same PERNR of infotype 105 subtype 0001
This will solve the issue.

Solution Manager 7.1 upgrade,j2ee_admin is locked

Hello ,
I am in the middle of solution manager 7.1 upgrade and running into execution phase now. but my j2ee_admin password is locked.
I want to unlock and reset the password but this is what happening .:
1. I try to login with old j2ee_admin password but it is not correct.
2. I re-check with updating same to configtool but no luck
3.I have enabled emergency SAP* ID and can login to Visual Admin so
4. when I try to access UserAdmin so that I can unlock j2ee_admin it gives me error as Application error occurred
during request processing
Is there any way to reset /Unlock j2ee_admin even though NWA/ user admin is not available.
Please help me so that I can move ahead with upgrade
Thanks,
Supriya

Hi Supriya,
Hope you are doing good.
What is the status of the upgrade; is the UME still ABAP ? If so just login to the backend ABAP server/client and unlock j2ee_admin.
Else login to visual admin and there is a security provider in the services where you can unlock the user.
Hope this helps.
Kind Regards,
Hemanth
SAP AGS

Forgot Password for J2EE_Admin An error occurred in the persistence. The or

I need your help!!
I forgot password for j2ee_admin and need to enter the Visual Administrator
I do not like change, achieved with the user enter SAP* to UME but will not let me change it.
When I try to change the key, I get the following error
An error occurred in the persistence. The original and possible not translatet message was: "Attribute "lockreason" on namespace "com.sap.security.core.usermanagement" of principal "UACC.R3_DATASOURCE.J2EE_ADMIN" is not modifiable.". Contact your system administrator.
somebody can help me!!
thanks
Edited by: Manuel Sandoval on Jul 9, 2008 10:20 PM

Hi,
if am not wrong, J2EE_ADMIN user only when you have ABAP+J2EE instance where your JAVA UME is mapped to ABAP UME.
Login to ABAP instance, go to SU01 and reset J2EE_ADMIN password.
regards
Anand.M

J2ee_admin is used as the user when RFCs are run on the web dynpro appln.

I have created a web dynpro application which has some RFCs on the model.
View is an adobe form which send the data to the RFC and upon submit executes the RFC to create an item in SAP (xRPM).
When the RFC is run, user is taken as J2EE_ADMIN even when authentication is enabled on the application and
a different user is used.
Is it due to the adobe form or the web dynpro application?
Is there anyway we can change this default and capture the user logged in accordingly.
Versions used:
NWDS 7.0
SAP NW 2004s SP 15
Adobe Live cycle designer 7.0
Thank you,
Vasu

Hi Subramanya,
Please check the user Id, what your given for JCO connection (MODELDATA & METADATA).
Regards
Ponnusamy

How can I find ( or reset ) the password of user "j2ee_admin" ?

Hi everyone;
We have a plan to apply EHP1 on Solution Manager 7, and now trying to confirm Java stack version of our system.
But, we lost the password of user "j2ee_admin" to login the system information thru web browser.
Does anyone help us to find, or reset the target password ?

Hi,
That depends on the UME.
If its ABAP based UME. Please reset it using Transaction SU01.and update the same in Config tool->secure store.
Thanks,
Jagan

UWL : User J2EE_ADMIN has no RFC authorization for function group SYST

Dear All,
When I am trying to register the system in universal Worklist Administration, It gives the following error,
System <>: Fri Jul 11 18:58:11 IST 2008
(Connector) :com.sap.netweaver.bc.uwl.connect.ConnectorExc eption:Fri Jul 11 18:58:11 IST 2008
(Connector) :com.sap.mw.jco.JCO$Exception:User J2EE_ADMIN has no RFC authorization for function group SYST.
I have tried by giving the role SAP_ALL to J2EE_ADMIN , then also i am getting the same error. Can anybody through some light on this....
Helpful tips will be rewarded...
Sanoj

Sanoj,
check these threads
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5489621
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5267551
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5636365
reward points if helpful

J2EE_Admin Unable to Add iView Permissions (Connecting BEx and Portal)

Hi guys,
I'm trying to set up a connection between BEx Web and Portal in a Netweaver 2004s environment.
Following notes 917950, I have made the configuration using Template Installer and RSPOR_SETUP.
Perhaps unsurprisingly, there are some issues.
Diagnostics & Support Desktop Tool (note 937697) shows 6 red lights:
1. BI iView Permissions
2. BI Mastersystem
3. BI Portal System Permissions
4. URLs Prefixes Customized on Both J2EE and ABAP Side
5. User Mapping of User DDIC
6. WebAS ABAP Certificate and Login Modules Configuration
Here, let's just look at
1. BI iView permissions.
<b>Error: </b>
The BI Report-Report Interface iView does not have the necessary permissions for being called directly.
My question is
Why can't the J2EE_Admin user do the following fix (Note 983683)?
1) In the portal, follow the path
"Content Administration -> Portal Content"
"Portal Content -> Content Provided by SAP -> Platform Add Ons ->
"Business Intelligence -> iViews -> BEx Launcher (transactions for RRI)"
(pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/iViews/com.sap.ip.bi.rritransaction).
2) From the context menu for this entry, choose "Open" -> "Permissions".
3) "Search" for the "User Group" (Caution: not the "role") "Everyone" and add this to the list of assigned authorizations.
Set the value "None" in the selection field of the "Administrator" column and set the indicator "User". Save your changes.
The "ADD" button is not clickable!! Is it because the J2EE_ADMIN user is not authorized to add permissions?
I hope the experts here can provide some light into the situation. Points will be awarded for helpful answers. Thank you!!
Regards,
SJ

2. BI Mastersystem
it depends on the type of error, see the hint given by the disgnostics tool, if it is sothing to do with BW system alias, so you have to connect to your portal and in system configuration->systemlandscape-> right click on SAP_BW then choose system alias and add the one proposed earlier in the diagnostics tool
3. BI Portal System Permissions
add group everyone on you SAP_BW system on systemlandscape
4. URLs Prefixes Customized on Both J2EE and ABAP Side
the one declared in the portal should be the same as the one in RSPOR_T_PORTAL table. you can modify this table to include the domain name of your URL
5. User Mapping of User DDIC
open your java admin consol (http://server....:5sid00 and then click on user administration, choose ddic the in the mapping tabulation click on modify the enter j2ee_admin as a user for the mapping, it should solve this point, don't forget to save.
6. WebAS ABAP Certificate and Login Modules Configuration
for this one you have to give the error text so i can help.
if it helps give points.
Regards.
Lakhdar Mourad

Impact of J2EE_ADMIN / Administrator user getting locked

Hi,
What is the impact of J2EE_ADMIN / Administrator user getting locked in abap / java engines? Will it effect startup of java server processes or java applications? What are the other implications?
Thanks,
Abdul

Hi Abdul,
if the J2EE_ADMIN or Administrator user is locked then
1. you cannot login to Visual Admin unless you define some other user with same authorization.
2. any Jco-RFC using this user won't work.
3. if you don't have any other user, you will have to activate SAP* user to unlock this user.
Thanks,
Sandeep

XI Installation Error - J2EE_ADMIN Password Mismatch

Hello all,
I am doing an XI 3.0 SR1 64 bit installation on SUSE Linux/Oracle. I have successfully installed the SAP WebAS 640 Unicode ABAP + J2EE system. The J2EE was installed against client 300, which was a USCV
system copy from client 000. All prequisites as described in SAP XI 3.0 SR1 Installation Guide - Doc Version 1 December 15 were followed.
The J2EE engine worked BEFORE starting the XI Installation. However, the XI installation crashed in phase 11 of 17 while trying to start the J2EE engine. It looked like the reason for the crash was becasue the number of the opened files at the time the engine was starting was too high and this caused ZipExceptions when trying to open the jar files for the services and libraries of the J2EE Engine. The error from the log was: 'ERROR:java.io.IOException: Too many open files'
It looked to be some sort of ulimit issue, which we corrected this. We updated the ulimit settings and tried re-running the XI installation from the beginning.
Now, at the start of the XI installation, when it prompts us for the J2EE_ADMIN password it says that we are entering the incorrect password. Yet, when I login to the ABAP stack to verify the J2EE_ADMIN password it is correct there. I know I am entering the correct password. Why is there a mismatch? Does SAP temporarily change the password when doing the XI installation? What can we do to reset the password?
Thanks for any help!
]eff Dubois

We just installed three XI systems on Linux/Oracle with SP 16.
The main thing to note is which client your J2EE engine reads the users/roles from. Did you try checking for the j2ee_admin user in both client 000 and 300?
Also, there are setting for the J2EE engine that show you which client it's reading the user/role information from.
Regards,
Jay Malla
Licensed To Code
Here is some information from OSS:
We received this info from SAP OSS.
I think you may have selected the incorrect user persistence during installation.
Please check the value of the property :-
ume.persistence.data_source_configuration
from the J2EE Visual Administrator
--> Cluster --> server0 --> services --> UME Provider
The value should be :-
dataSourceConfiguration_r3_roles_db.xml
Please refer to the attached note :-
#718383 NW04: Supported UME Data Sources and Change Options
and page 15 of the XI 3.0 SR1 Installation Guide, i.e.,
"During the install of the J2EE Engine you should choose the XI specificinstallation option for the J2EE Engine in UME User Group management (Use SAPGUI Transaction PFCG) "
If you did not select this option then unfortunately you will have to reinstall the system. Changing the value now will not resolve the issue as user roles have already been generated and mapped incorrectly
Please see the attached screenshot of the correct UME option to select during installation.
If you did select the correct option during installation and you have encountered this problem then please provide remote access to the Integration Server and J2EE Engine Visual Administrator as per the attached note :-
#769478 remote connections to XI systems
The problem that we're now facing is that our J2EE engine does not start. So we're chasing another SAP OSS note
-SAP Note Number: 810434
NW'04: J2EE does not start after switching UME persistence
We just restarted the system - the dispatcher starts:
503 Service Unavailable
6.40
Dispatcher running but no server connected!
SAP Note Number: 810434
NW'04: J2EE does not start after switching UME persistence
Version: 1, Note Language: EN, Released on: 01/19/2005
Symptom
After having changed the user persistence (datasource configuration file) to ABAP, the J2EE does not start.
Reason and Prerequisites
You have installed NW'04 SP3 with dataSourceConfiguration_database_only. You have switched to dataSourceConfiguration_r3.xml or dataSourceConfiguration_r3_rw.xml. After the change, the J2EE does not start. In the default trace, you get the following error messages:
Core service security failed. J2EE Engine cannot be started.
Caused by: com.sap.security.api.UMException: USER_AUTH_FAILED: Logonid "Guest" is not unique!
Solution
In the connected ABAP System, a user with logon id GUEST exists. Delete (or rename) the user GUEST on the ABAP System, and restart the J2EE.
SAP recommends to user the configuration file dataSourceConfiguration_r3_rw.xml for ABAP user store in the scenario described under Reason and Prerequisites.
In case you have installed >= SR1, you have already chosen the ABAP user repository during the installation. Thus, this error cannot appear. See note 718383 for the possible installation options

J2ee_admin keeps getting locked

Hi,
I changed the j2ee_admin password in both the secure storage of Java AS and in ABAP. Our SLD connection also seemed to use the j2ee_admin user in tx SLDAPICUST which I also changed but still it gets locked each time! SAPJSF user reports the locked j2ee_admin account in the syslog after awhile when unlocking it.
Where else could j2ee_admin be possibly being used where I still need to change the password ? ..or any other log files on Java AS that could tell me of errors or give me more info ?
Thanks!
Regards,
Nelis
Sorry, not sure if this is the right place to post this question.

Hello Neil,
When you log into R/3 and go to transaction SU01 does the j2ee_admin user show up "locked"? In addition to changing the password did you remember to unlock the user. Also, you might try changing the user type from dialog to system in su01. If you have a security policy that requires the password to be changed at first logon or after a period of time, this could cause the logon failures. Changing the user type to system or communication type will avoid the forced password changes for j2ee_admin.
If the issue continues to occur you should check the ./cluster/server#/log/defaultTrace.#.trc for exceptions regarding the j2ee_admin user. Another useful log is the ./cluster/server#/log/system/security.#.log which will show details more specific to the security provider.
Regards,
Nathan

J2ee_admin

Similar Messages

Maybe you are looking for