Java user locking

Hi gurus,
Our SLD user is constantly being locked out. We have checked SLD config on all SLD clients and they are all testing successfully yet our slddsuser still gets locked every few minutes. The security log on the SLD server shows that our user is indeed locked but we cannot find any information about which server caused the lock. We have a NW7 portal with the latest support packs and our UME is LDAP (read-only access).
Can anybody recommend any troubleshooting tips or other log files which may be useful in diagnosing our problem?
Here is the entry from the security log file:
Guest | USERACCOUNT.MODIFY | UACC.CORP_LDAP.cn=slddsuser,ou=xxx,dc=xxx,dc=xxx,dc=xx,dc=xx | | SET_ATTRIBUTE: islocked=[true], SET_ATTRIBUTE: lockreason=[1]
Any help would be much appreciated.
TIA
L Tripp
Junior Basis Admin

Leila,
Run wireshark trace on your SLD server and find out what IP locks down SLDDSUSER based on the timestamp. Network packets dont lie.
Another thing you can do is to increase trace output for SLD logs in Visual Admin to get more info on what client is connecting to SLD to lock the user.
When you check SLD clients, do you check all SLD connections: HTTP, CIM, etc? It is enough for one of them to have incorrect pwd to lock your SLD user.
You can disable password locks in UME to prevent your SLD from being locked up:
https://forums.sdn.sap.com/click.jspa?searchID=20187458&messageID=6446792
http://help.sap.com/saphelp_nw04s/helpdata/en/b5/16c43bdd3da244a1d3372a77b5f83f/frameset.htm
Regards,
Slava
Edited by: Slava Plyushchikov on Dec 21, 2008 4:14 AM

Similar Messages

J2EE_GUEST user locked in PX7

Hi SDNers,
Our Scenario is Idoc-->SOAP Adapter.
The files were picked up from the sender side and delivered successfully to the receiver side. But we are getting errors in Acknowledgement.
When looked into the trace files, we found that the error was due to J2EE_GUEST user locked. This is the user that is being used at the receiver end.
SECURITY LOG
1.5#00112508C2A8006D0000279B000F309A0004622CF5320E36#1233845138624#/System/Security/Usermanagement##com.sap.security.core.persistence#J2EE_GUEST#0####a770ea00f39311dda9e400112508c2a8#SAPEngine_Application_Thread[impl:3]_23##0#0#Warning#1#com.sap.security.core.persistence#Java#Search in the backend resulted in an exception. The search result returned to the application might be incomplete. Reason: .##Search in the backend resulted in an exception. The search result returned to the application might be incomplete. Reason: .#1#User is locked. Please notify the person responsible#
But we have not locked the user manually.
How the user got locked?
Is there any other possibilities to lock an user other than using SU01?

Hi All,
Thnx for your inputs.But the user is unlocked already.Could anyone please tell me where to get the details as in who has locked it and when?
We have tried searching the same in SU01,SM04,SUIM,STAD and didn't get any info...
Would appriciate your valuable inputs on this
Thnx in advance...

User locked every two minutes

Hello,
my user is locked within two minutes after unlocking it.
Its Netweaver PI System.
What can I do, to find out what program my user locks?
If already checked following:
- all connections in SM59
- JAVA Default Trace
- Exchange profile
Please advice
Regards Christian

It is in the FAQ at the top of the page, in the main security page --> wikis -> best practices --> how to secure and analyze RFC connections.
Or via the [search|https://wiki.sdn.sap.com/wiki/dosearchsite.action?queryString=cardinalityANDRFC&where=conf_all&type=&lastModified=&contributor=&contributorUsername=] ...
Some (standard) scenarios do not by default support this cardinality requirement.
Cheers,
Julius

PIRWBUSER user locked daily

Hi All,
daily i found this user PIRWBUSER is locked
i unlocked it manual but it is not a solution, i want to know why it is daily locked.
i checked tcode sm37 no scheduale jobs under this user.
i checked the exchangeProfile for the value of com.sap.aii.rwb.serviceuser.pwd and i put the actual value for the password of that user
but the problem still i found this user locked
so could you please help?
Thanks
Sherif

Hi,
Check the passwords everywhere n follow the steps.
First of all, compile a list of the names of the relevant users.
If you also want to change the user for the sending business systems (PIRWBUSER or a copy of this user) you have to be aware that you will have to change the password in all sending systems/adapters.
The passwords must be changed at the following places:
1. Transaction SU01 in the R/3 system
              Here, you must change the passwords on the R/3 ABAP side.
2. Exchange Profile - Server Settings
              Call the PI exchange profile using:
              http://<xi-host>:<j2ee-port> /dir/start/index.jsp
              --> Administration --> Exchange Profile
              Press the 'Connection' button and adjust the password accordingly for the user used here.
              Important: If the system issues the error message 'Password logon no longer possible - too many failed attempts', check in transaction SU01 whether the user used under 'Connection' has already been locked, and unlock that user if necessary.
3. Exchange Profile
              You must now change the passwords in all parameters of the exchange profile to make them available for the PI Java applications.
              To do this, start the exchange profile as described in section 2, and adjust the changed passwords in all parameters.
4. SLDAPICUST
              If a PI* user is set in transaction SLDAPICUST adjust the password for this user.
5. SM59 Destination INTEGRATION_DIRECTORY_HMI
              In transaction SM59, adjust the password of the user used in HTTP destination to an ABAP system INTEGRATION_DIRECTORY_HMI.
6. SM59 Destination SAPXIPP*
              In transaction SM59, adjust the passwords of the users used in the ABAP connections SAPXIPP*.
7. SLD Data Supplier in the J2EE
              Log on to the SAP NetWeaver Administrator (http://<server>:<port>/nwa). Under "Configuration Management --> Infrastructure --> Destinations", check the user in destinations SLD_Client and SLD_DataSupplier. Only if a PI* user is set here change the password for the relevant user.
8. PMI store destination in the J2EE
              Log on to the SAP NetWeaver Administrator (http://<server>:<port>/nwa). Under "Configuration Management --> Infrastructure --> Destinations", change the relevant user password in HTTP destination pmistore.
9. RFC destinations in J2EE
              Log on to the SAP NetWeaver Administrator (http://<server>:<port>/nwa). Under "Configuration Management --> Infrastructure --> JCo RFC Provider" change the password in the RFC destinations AII_RUNTIME, LCRSAPRFC and SAPSLDAPI* if a PI* user is set there. Choose 'Save' to transfer the changes.
              Important: If user SAPJSF is used here, do not change the password of this user, because it is also used in several J2EE applications. In this case, create a copy of user SAPJSF in transaction SU01 and use this copy in the JCo RFC Provider.
10. SM59 connections for end-to-end monitoring
              In transaction SM59, adjust the user password in all connections that start with PMI*. You have to adjust the connections both under 'ABAP Connections' and 'HTTP Connections to External Server'.
              In addition, adjust the passwords in the systems where the destinations are pointing to, if this is not the PI itself.
11. SM59 connections for GRMG monitoring
              In SM59, change the user password in all connections that start with XI_GRMG*. You have to adjust the connections under 'HTTP Connections to ABAP Systems' and under 'HTTP Connections to External Server'.
              In addition, adjust the passwords in the systems where the destinations are pointing to, if this is not the PI itself.
12. Now restart the J2EE Engine.
13. Connections from sending business systems
              In all sending systems, you must check whether you are using one of the service users to log on to the PI system, and change the passwords if necessary (PIAPPLUSER).
              For this purpose, check the relevant SM59 destinations and logon data in the sending adapters.
              If the sending system is a system with a release version < 7.00, note that you need to set the password in the XI system in accordance with the instructions in Note 807895 so that it is downward compatible. Alternatively, you can create a copy of the relevant service user for this special connection, assign the downward-compatible password to this user, and use this user for the connection.
Then check in transaction SU01 whether any users were locked during the changes as a result of failed logon attempts, and unlock these users if necessary.
Note:
Check all these things for user PIRWBUSER. It may be possible that some of the steps will not fit for you. i recommend to follow the same password everywhere.
regards
Aashish Sinha
PS : reward points if helpful

The problem is this: In the phase "Create Java Users"

Hello,
I am installing Solution Manager 4.0 Release 2 (with Red Hat Enterprise Linux Server release 5.1 and Oracle 10 and my java version is: j2sdk1.4.2_14) The problem is this: In the phase "Create Java Users" I get the next error
WARNING 2009-02-13 14:53:22
Execution of the command "/usr/sap/PTS/DVEBMGS00/exe/jlaunch UserCheck.jlaunch com.sap.security.tools.UserCheck /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/lib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/sharedlib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install -c sysnr=00 -c ashost=sap-vpmn -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u SAPJSF -p XXXXXX -r SAP_BC_JSF_COMMUNICATION_RO -message_file UserCheck.message" finished with return code 2. Output:
java.lang.ClassNotFoundException: com.sap.security.tools.UserCheck
at com.sap.engine.offline.FileClassLoader.findClass(FileClassLoader.java:691)
at com.sap.engine.offline.FileClassLoader.loadClass(FileClassLoader.java:600)
at com.sap.engine.offline.FileClassLoader.loadClass(FileClassLoader.java:578)
at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:79)
INFO 2009-02-13 14:53:22
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.
INFO 2009-02-13 14:53:22
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.clone.
ERROR 2009-02-13 14:53:22
CJS-30196
ERROR 2009-02-13 14:53:22
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJSF was executed with status ERROR .
Thanks & Regards

Hi,
This problem normally arises with the wrong combination of JDK and OS and for the Linux machines, its better to use IBM Java instead of SUN java
I remember that I have solved this type of problem by using lower version of IBMJava2-AMD64-142-SDK-1.4.2-10.0.x86_64.rpm which is SR10. You can download this version from
http://www.ibm.com/developerworks/java/jdk/linux/download.html
go to download _12 and then just change the sr12 to sr10 in the header url....
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJSF was executed with status ERROR .
with the higher versions of java for 64bit systems create serious stack over flow problems.....
what I suggest you is to start reinstallating SolMan after installing IBM java sr10 version...
Regards,
Naveen.

Error in phase creating java users during installation!!

Hi,
We are getting error at step "Creating java Users" while installing NW 2004s SR1 non unicode dual stack on HP Ux Pa Risc 64 bit with database Oracle 10g.
Erro logs of file /tmp/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/sapinst_dev.log are as:
==================================================================================================
ERROR      2011-07-21 13:20:37
           CJSlibModule::writeError_impl()
CJS-30197 . For more details see output of logfile:
TRACE      [iaxxejsbas.hpp:460]
           EJS_Base::dispatchFunctionCall()
JS Callback has thrown unknown exception. Rethrowing.
ERROR      2011-07-21 13:20:37 [iaxxgenimp.cpp:736]
           showDialog()
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|2|0|createJSF was executed with status ERROR .
=================================================================================================
Also please note that we have already 1 instance (dual stack) on same host and that is running fine.
Could someone please assist us in proceeding further.
Regards
Joy Garg

Hi,
Issue gets resolved by extracting manualy from JAVA_DVD_DIR/J2EE_OSINDEP/J2EEINSTALL.SAR to SAPINST install directory using SAPCAR. The path of this install directory is:/tmp/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/install as:
> pwd
/tmp/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/install
> SAPCAR -xvf /SW/NW_2004s_SR1Java_based_SW_Comp/J2EE_OSINDEP/J2EE-INST/J2EEINSTALL.SAR
Once we have extracted the J2EEINSTALL.SAR relaunch SAPINST again and the installation continue.
Regards
Joy garg
Once you will have extracted the J2EEINSTALL.SAR please launch SAPINST again and the installation will continue.

LOCKS checking user locked and SQL that he is executing

Hello all,
I have this script that inserts into a table the user causing the lock and the users waiting for the lock to be released.
What I would like to add into this the script is the SQL string that the user causing the lock and the users waiting for the the lock to be released are executing.
Can you help me on this?
Script that I have now:
insert into dba.sessions_bloq
select sysdate "Data", w.sid "SID E", s1.username "User E", s1.osuser "OS User E", s1.machine "Maquina E", s1.program "Programa E", s1.logon_time "Logon E",
s.ksusenum "SID B", s2.username "User B", s2.osuser "OS User B", s2.machine "Maquina B", s2.program "Programa B", s2.logon_time "Logon B"
,decode(r.ksqrsidt,
''MR'', ''Media Recovery'',
''RT'', ''Redo Thread'',
''UN'', ''User Name'',
''TX'', ''Transaction'',
''TM'', ''DML'',
''UL'', ''PL/SQL User Lock'',
''DX'', ''Distributed Xaction'',
''CF'', ''Control File'',
''IS'', ''Instance State'',
''FS'', ''File Set'',
''IR'', ''Instance Recovery'',
''ST'', ''Disk Space Transaction'',
''TS'', ''Temp Segment'',
''IV'', ''Library Cache Invalidation'',
''LS'', ''Log Start or Switch'',
''RW'', ''Row Wait'',
''SQ'', ''Sequence Number'',
''TE'', ''Extend Table'',
''TT'', ''Temp Table'',
r.ksqrsidt) "Tipo Lock"
from gv$session_wait w, x$ksqrs r, gv$_lock l, x$ksuse s, gv$session s1, gv$session s2
where w.wait_Time = 0
and w.event = ''enqueue''
and r.ksqrsid1 = w.p2
and r.ksqrsid2 = w.p3
and r.ksqrsidt = chr(bitand(p1,-16777216)/16777215)||
chr(bitand(p1,16711680)/65535)
and l.block = 1
and l.saddr = s.addr
and l.raddr = r.addr
and s.inst_id = userenv(''Instance'')
and w.sid = s1.sid
and w.inst_id = s1.inst_id
and s.ksusenum = s2.sid
and s.inst_id = s2.inst_id;
Thanks in advance

You can link to:
gv$sql
gv$sqltext_with_newlines
but, if doing this in a trigger, also look at these:
http://www.psoug.org/reference/system_events.html

Error while creating java users in installation

Hi all,
I am installing EP SR2 on Linux 4 but while installing when it reaches at "Java users Creation" it is giving me a
error in that. I have tried all permutation combination but I am not able to get through. I have tried with all
the java version also like j2sdk1_4_12,j2sdk1_4_16 & j2sdk1_4_17. But it gets stuck their. kindly help me.
I have gone through all the threads in this forum but I have not found any fruitful solution.
Kindly help me & thanx in advance.
Regards
Lalit

Can you post error ? And Part of log where you can see this error.
P.S. try to read whis links:
Create Java User in Solution Manager Installation error
Create Java User in Solution Manager Installation
Try to check j2sdk1_4_11. regards.
Regards.

Using a Velocity Template in Java User Exit Custom Handler

I would have thought it would be possible to use a Velocity template in combination with a custom handler in a Java user exit, but I can't seem to figure out how to do it, and I'm not finding an example of doing this anywhere in the GoldenGate docs.
For example, I can create a Velocity template and use it to output transactions in the desired format to a file by using a propeties file that looks something like this:
gg.handlerlist=myhandler
gg.handler.myhandler.mode=tx
gg.handler.myhandler.format=./dirprm/my_template.vm
gg.handler.myhandler.type=file
gg.handler.myhandler.file=my_output.txt
What I'm hoping to do is to have a custom handler, and some how be able to get to the Velocity formatted transaction data in the "transactionCommit(DsEvent, DsTransaction)" method of my custom extension of AbstractHandler by having a properties file that looks like this (same as the above, except for the type, and no file property ... eg:
gg.handlerlist=myhandler
gg.handler.myhandler.mode=tx
gg.handler.myhandler.format=./dirprm/my_template.vm
gg.handler.myhandler.type=my.custom.GGHandler
I've verified that I have a valid DsEvent and a DsTransaction with the desired information in by custom handler's transactionCommit method ... and I can even pull out the required data and re-format it there to the desired format so that it looks just like the format that my Velocity template outputs when I'm outputting to a file (as shown in the first properties file). But shouldn't I somehow be able to access the Velocity transformation for my DsTransaction in my custom handler?
Thanks for any assistance / info provided.

I would have thought it would be possible to use a Velocity template in combination with a custom handler in a Java user exit, but I can't seem to figure out how to do it, and I'm not finding an example of doing this anywhere in the GoldenGate docs.
For example, I can create a Velocity template and use it to output transactions in the desired format to a file by using a propeties file that looks something like this:
gg.handlerlist=myhandler
gg.handler.myhandler.mode=tx
gg.handler.myhandler.format=./dirprm/my_template.vm
gg.handler.myhandler.type=file
gg.handler.myhandler.file=my_output.txt
What I'm hoping to do is to have a custom handler, and some how be able to get to the Velocity formatted transaction data in the "transactionCommit(DsEvent, DsTransaction)" method of my custom extension of AbstractHandler by having a properties file that looks like this (same as the above, except for the type, and no file property ... eg:
gg.handlerlist=myhandler
gg.handler.myhandler.mode=tx
gg.handler.myhandler.format=./dirprm/my_template.vm
gg.handler.myhandler.type=my.custom.GGHandler
I've verified that I have a valid DsEvent and a DsTransaction with the desired information in by custom handler's transactionCommit method ... and I can even pull out the required data and re-format it there to the desired format so that it looks just like the format that my Velocity template outputs when I'm outputting to a file (as shown in the first properties file). But shouldn't I somehow be able to access the Velocity transformation for my DsTransaction in my custom handler?
Thanks for any assistance / info provided.

SAPInst ECC6.0 - Error during phase "Create Java Users"

Hello,
I am currently installing ECC6.0 IDES with windows server 2003 & MaxDB.
I am getting an error during the "Create Java Users" phase. The initial error stated that the user SAPJSF already existed. During retry a different error came up - that the user SAPJSF has no password.
Can anyone advise what I can do here to resolve this problem?
Regards,
Nicholas Wilson

Hello Again,
Just to provide some further information, this is the log which I received when the SAPInst first errored:
Jan 12, 2007 10:12:31... Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Jan 12, 2007 10:12:32... Info: Connected to backend system Z01 client 001 as user DDIC
Jan 12, 2007 10:12:32... Info: Called for user SAPJSF
Jan 12, 2007 10:12:39... Info: Formal password check successful
Jan 12, 2007 10:12:39... Info: Will create user SAPJSF
Jan 12, 2007 10:16:54... Warning: Error during creation of user SAPJSF. Will remove user again to ensure clean exit state
Jan 12, 2007 10:17:03... Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$DetailException: User SAPJSF already exists
Diagnosis
You have tried to create an existing user using the copy function.
Procedure
Please edit the existing user or first delete the user and then use the
copy function. Or choose another user name, for example, by appending
part of the first name.
[System: Z01(001), Message: 01 224]
     at com.sap.security.tools.UserCheck.handleBapiRet2Table(UserCheck.java:1252)
     at com.sap.security.tools.UserCheck.createUser(UserCheck.java:1795)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:289)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Jan 12, 2007 10:17:07... Info: Leaving with return code -2
Reserved 1610612736 (0x60000000) bytes before loading DLLs.
According to the log, the system believed the user SAPJSF to have already been created.
When I carried out a retry, I receive the following log:
Jan 12, 2007 10:23:45... Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Jan 12, 2007 10:23:45... Info: Connected to backend system Z01 client 001 as user DDIC
Jan 12, 2007 10:23:45... Info: Called for user SAPJSF
Jan 12, 2007 10:23:45... Info: User SAPJSF exists
Jan 12, 2007 10:23:45... Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$UserLogonException: User account SAPJSF has no password (USER_HAS_NO_PASSWORD)
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:833)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Jan 12, 2007 10:23:45... Info: Leaving with return code 2
Reserved 1610612736 (0x60000000) bytes before loading DLLs.
In this log, it accepts that the user SAPJSF is already created, but errors because the user does not have a password.
Any suggestions greatly appreciated.
Regards,
Nicholas.

Netweaver 2004S Installation stops in phase 'Create Java Users'.

Hi,
We have an error in the installation of Netweaver 2004s on an Solaris X64 10 (64 bit). We have j2sdk1.4.2_13 (32 bit installed)
In phase 'Create Java Users' , we receive the following error in dev_UserCheck.clone :
'*** ERROR => DlLoadLib: dlopen()= ld.so.1: jlaunch:
fatal: /usr/j2se/jre/lib/i386/server/libjvm.so: wrong ELF class:
ELFCLASS32 -> DLENOACCESS (0,Error 0) [dlux_mt.c 314]
[Thr 4] *** ERROR => Can't load VM shared library (libjvm.so) (rc=-2)
[jhvmxx_mt.c 1576]'
I think this is an java error.
We can't find a download for the 64 supplementation package for solaris
X64. Is this supported?
Kind regards,
Serge Schelles

Hi Serge,
I'm no Solaris expert, but if I'm not mistaken, JRE and JDK versions for the X64 platform are only available as of version 1.5. It's worth a try, you can run them both at the same time on the same server. Just point your JAVA_HOME to the 1.5 directory after installation and start SAPinst again.
Good luck!
Henk.

Error in creating Java Users during Solution Manager installation

Hi gurus,
First time trying to install SAP.
Red Hat Linux 4
Oracle
jdk 1.4.2_11
While installing the Solution Manager, it errored when it was creating Java Users, SAPJSF, J2EE_ADMIN and J2EE_GUEST.
The error description read "jco$exception: rfc_error_system_failure: invalid request".
I want to create these users manually and continue with the rest of process.
I searched lots of entries, notes, etc., but somehow, my "old" pair of eyes (and brains, too) failed to come up with something I could understand.
So, gurus, please help, help, help!!
There are no GUI version of anything installed, no Virtual Admin, no nothing like that. I have to rely on good old unix (Linux) command to do (add users) this.
Can you please, please post the instructions (step-by-step)? Please have a pity on me since this is my very first time dealing with SAP.
Thanks and regards.

Creating users manually is not the intension of the SAP Installation tool. There are other solutions available
A good starting point is to check if SELinux is enabled or disabled. I've seen lots of broken installations on Red Hat because SELinux does not allow the installer to create users. Check if in /etc/selinux/config the setting
SELINUX=disabled
is set.
I see, that you are using JDK 1.4.2_11. Is this the Sun JDK? In case you are on x86_64 you have to use the IBM JDK instead. You can download it from <a href="https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=lxdk&S_PKG=amd64142sr7&S_TACT=105AGX05&S_CMP=JDK&lang=en_US&cp=UTF-">here</a> .
Also a new SAPINST may help. The current Installation Master CD can you download here:
http.//service.sap.com/swdc
-> Download
-> Installations and Upgrades
-> Entry by Application Group
-> SAP Technology Components
-> SAP SOLUTION MANAGER
-> SAP SOLUTION MANAGER 3.2/4.0
-> Installation and Upgrade
-> LINUX
-> ORACLE
51032006 SAP Solution M. 4.0 SR1 Inst. Master **
Best Regards,
Hannes Kuehnemund

Error in Solution Manager 4.0 Installation u0096 Step 32 Create JAVE users

Hi All,
I am installing Solution Manager 4.0 on WIN server 2003 & Oracle10g. The installation has been successful so far but at Step 32 (Create JAVA users) the installation errors and the error log is as follows:
ERROR 2016-09-10 06:39:28
CJS-30197 . For more details see output of logfile:
ERROR 2016-09-10 06:39:28
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|2|0|createJSF was executed with status ERROR .
Critical Error
Launching program failed
-> Invalid JDK (rc = -17)
Entries in the log file (UserCheck.log)
Critical Error
Launching program failed
-> Invalid JDK (rc = -17)
The Java version Im using is - j2re1.4.2_12 windows.
Any guidance will be appreciated
Thanks
Frank

Dear all
use j2re1.4.2_16 windows.
case1-if sapjsf user not craeted login to 001 clint with sap* delete
case2- if sapjsf user not craete a sapjsf user createand then delete
agin proceed
i am trouble this problem within week
but at last complte of the installation
thanks
regards
venkat

SAML AS JAVA user mapping. Can table VUSREXTID On AS ABAP be leveraged?

The documentation on the SAML AS java user mapping refers to Mapping SAML Principals to SAP J2EE Engine User IDs - User Authentication and Single Sign-On - SAP Library custom development. In my case the users are managed on the AS ABAP system. Can I leverage the ABAP mapping mechanism using VUSREXTID, similar to the user mapping on the ABAP AS Mapping SAML Principals to AS ABAP User IDs - User Authentication and Single Sign-On - SAP Library without building my own java program?

We have developed a login module which is working with Kerberos auth, not x.509 auth, but still solves a very similar problem to the problem you are describing. As you know, when SNC is used to logon to ABAP stack, the SNC name of the user is mapped onto a SAP user via entries in the USRACL table. Our mapping login module takes the authenticated user principal name from the shared state and uses this to lookup the entry in USRACL table on ABAP stack, and from this it will know which SAP user to use, and can update shared state with this info so that CreateTicketLoginModule will created an SSO2 ticekt for the mapped SAP user id.
This means that mapping of users externally authetnicated identity onto SAP user/client can be managed in one place, e.g in ABAP stack using USRACL table entires and su01 t-code etc.
I know it is not exactly what you wanted, since you are looking to use x.509 certifiates instead of Kerberos authentication, but I thought it was worth sharing so that you know the concept has already been implemeneted many times. Many of our customers use this login module when they have our product, for the same reasons that you have stated.
Thanks,
Tim

Java user-defined function for mapping a complex structure

All,
Hope one of you can help me with this. I have a structure with over 15 fields and would like to concatenate all the fields into one target field and while I do this, I need to ensure that each field is padded with blanks as defined the data type. Can one of tell me if this is possible with a java user-defined function and if so, what type of logic is needed.
Input_MT
Field_1 string len=10 "need"
Field_2 string len=6 "java"
Field_3 string len=7 "help"
Field_4 string len=8 "asap"
etc,
Output_MT
DataOut string "need java help asap "
(for some reason the exact spaces in between the words disappear in my Preview message)
I have several fields in the input mt and therefore I find graphical mapping using concatenate and my own user defined function padWithSpace too messy.
Thank you for you help.

Hi,
If your final req is to write all these fields next each other in a file, you can configure this in receiver file adapter by specifying the fixed length for each field.
If you want the padded string as your MM o/p, you can create a simple user defined funtion with 15 fields as input and 15 constants for their lengths, and find out the length of the each string and pad it with required no of spaces.
int max_len = 10;
int actual_len;
actual_len = a.lengh();
for(int i=0; i < (max_len-actual_len; i++)
a = a.append(" ");
return a;
praveen

Java user locking

Similar Messages

Maybe you are looking for