JAXB on SAP Web AS 6.40 SP14

We're porting a Java app to SAP WAS 6.40. Our Java app uses the Sun JAXB libs for REST-style web service calls.
Question: What is the best practice for making this work?
1. Include the JAXB jars in the EJB module projects as external jar? We did this and it deploys just fine.
2. Deploy the JAXB libs as a library on the J2EE server.
3. Use an SAP delivered equivalent to the JAXB libs (if this exists).
4. Is there any document describing when the SAP J2EE engine will support JAXB (or rather JDK 1.5)?
Thanks!

Hi,
I guess, as I never tried myself, you should do that in the security section of TA: sm59 for these destinations.
Good luck,
Holger

Similar Messages

SAP Web Dispatcher Configuration guide for Windows

Hi,
I am searching for SAP Web Dispatcher Configuration guide for Windows. It is WAS 6.4, SP14 and JAVA. If any one knows this mean please guide.
Thanks.

Hi Mahesh,
check out the help pages here:
http://help.sap.com/saphelp_nw04/helpdata/en/f5/51c7d170bc4a98b1b5a0339213af57/frameset.htm
Regards,
Pascal

HTTPs connection from SAP WebAS

Hello,
I have to establish a connection from SAP WebAS to an iSaSiLk server via HTTPS.
The iSaSiLk authentication is based on client certificates.
I've created a SSL client PSE, generated the Certificate Request, imported the certificate response and the chain of certificates associated with no errors. When testing the connection we're getting the following error message:
SAP icm log:
[Thr 1087400256] ->> SapSSLSessionInit(&sssl_hdl=0x2aaaba679980, role=1 (CLIENT), auth_type=3 (USE_CLIENT_CERT))
[Thr 1087400256] <<- SapSSLSessionInit()==SAP_O_K
[Thr 1087400256]      in: args = "role=1 (CLIENT), auth_type=3 (USE_CLIENT_CERT)"
[Thr 1087400256]     out: sssl_hdl = 0x1a3310c0
[Thr 1087400256] ->> SapSSLSetNiHdl(sssl_hdl=0x1a3310c0, ni_hdl=22)
[Thr 1087400256] NiIBlockMode: set blockmode for hdl 22 TRUE
[Thr 1087400256] <<- SapSSLSetNiHdl(sssl_hdl=0x1a3310c0, ni_hdl=22)==SAP_O_K
[Thr 1087400256] ->> SapSSLSetSessionCredential(sssl_hdl=0x1a3310c0, &cred_name=0x1a49e4e0)
[Thr 1087400256]   SapISSLComposeFilename(): Filename = "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] <<- SapSSLSetSessionCredential(sssl_hdl=0x1a3310c0)==SAP_O_K
[Thr 1087400256]      in: cred_name = "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] ->> SapSSLSetTargetHostname(sssl_hdl=0x1a3310c0, &hostname=0x1a4a09e0)
[Thr 1087400256] <<- SapSSLSetTargetHostname(sssl_hdl=0x1a3310c0)==SAP_O_K
[Thr 1087400256]      in: hostname = "<remoteServer_to_be_accessed>"
[Thr 1087400256] ->> SapSSLSessionStart(sssl_hdl=0x1a3310c0)
[Thr 1087400256]   SapISSLUseSessionCache(): Creating NEW session (0 cached)
[Thr 1087400256] Tue Jan 13 10:10:22 2009
*[Thr 1087400256] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL*
[Thr 1087400256]    session uses PSE file "/usr/sap/XID/DVEBMGS00/sec/SAPSSLSPHTID.pse"
[Thr 1087400256] SecudeSSL_SessionStart: SSL_connect() failed
secude_error 536871693 (0x2000030d) = "none of the PSEs registered with hSsl can suffice the negotiated SSL cipher suite"
[Thr 1087400256] >>            Begin of Secude-SSL Errorstack            >>
[Thr 1087400256] ERROR in ssl3_get_certificate_request: (536871693/0x2000030d) none of the PSEs registered with hSsl can suffice
[Thr 1087400256] <<            End of Secude-SSL Errorstack
[Thr 1087400256]   SSL_get_state() returned 0x00002150 "SSLv3 read server certificate request A"
[Thr 1087400256]   No certificate request received from Server
[Thr 1087400256] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x1a3310c0)==SSSLERR_SSL_CONNECT
[Thr 1087400256] ->> SapSSLErrorName(rc=-57)
[Thr 1087400256] <<- SapSSLErrorName()==SSSLERR_SSL_CONNECT
[Thr 1087400256] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt
On the iSaSiLk server we're getting:
ssl_debug(2): Starting handshake (iSaSiLk 3.06)...
ssl_debug(2): Received v3 client_hello handshake message.
ssl_debug(2): Client requested SSL version 3.0, selecting version 3.0.
ssl_debug(2): Creating new session 11:5F:04:C9:0D:32:15:B9...
ssl_debug(2): CipherSuites supported by the client:
ssl_debug(2): SSL_RSA_WITH_RC4_128_SHA
ssl_debug(2): SSL_RSA_WITH_RC4_128_MD5
ssl_debug(2): SSL_RSA_WITH_3DES_EDE_CBC_SHA
ssl_debug(2): SSL_RSA_WITH_DES_CBC_SHA
ssl_debug(2): SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
ssl_debug(2): SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
ssl_debug(2): SSL_RSA_EXPORT_WITH_RC4_40_MD5
ssl_debug(2): CompressionMethods supported by the client:
ssl_debug(2): NULL
ssl_debug(2): Sending server_hello handshake message.
ssl_debug(2): Selecting CipherSuite: SSL_RSA_WITH_RC4_128_SHA
ssl_debug(2): Selecting CompressionMethod: NULL
ssl_debug(2): Sending certificate handshake message with server certificate...
ssl_debug(2): Sending certificate_request handshake message...
ssl_debug(2): Sending server_hello_done handshake message...
ssl_debug(2): IOException while handshaking: Connection closed by remote host.
ssl_debug(2): Sending alert: Alert Fatal: handshake failure
ssl_debug(2): Shutting down SSL layer...
ssl_debug(2): Closing transport...
From the iSaSiLk everything seems to be OK, but on the SAP WebAS the error "none of the PSEs registered with hSsl can suffice the negotiated SSL cipher suite" is really unclear, since the cipher chosen by the iSaSiLk is one of the ciphers sent by SAP WebAS...
Can anyone give me any suggestion?

Hello Olivier,
Thanks for your answer.
I've implemented note 800240 which facilitates the PSE analysis by implementing the report ZSSF_TEST_PSE. With this report I'm able to check all the PSE content, which are:
Filename            SAPSSLSPHTID.pse
PIN                 <no>
Signature           X
Encryption          X
Profile Parameter
DIR_INSTANCE                   /usr/sap/XID/DVEBMGS00                       /usr/sap/XID/D00
sec/dsakeylengthdefault                                                     1024
sec/libsapsecu                 /usr/sap/XID/SYS/exe/run/libsapcrypto.so
sec/rsakeylengthdefault                                                     1024
ssf/name                       SAPSECULIB
ssf/ssf_md_alg                                                              SHA1
ssf/ssf_symencr_alg                                                         DES-CBC
ssf/ssfapi_lib                 /usr/sap/XID/SYS/exe/run/libsapcrypto.so
ssf2/name
ssf2/ssf_md_alg                                                             SHA1
ssf2/ssf_symencr_alg                                                        DES-CBC
ssf2/ssfapi_lib
ssf3/name
ssf3/ssf_md_alg                                                             SHA1
ssf3/ssf_symencr_alg                                                        DES-CBC
ssf3/ssfapi_lib
Environment variables
USER                xidadm
SECUDIR             /usr/sap/XID/DVEBMGS00/sec
PSE
Validity            18.12.2008 19:47:04   18.12.2009 19:47:04
Algorithm           RSA (OID 1.2.840.113549.1.1.1)
Test signature
Signature OK
Verification OK
Test encryption
Encryption OK
Decryption OK
As you can see, the cipher algorithm used is RSA. Any suggestion... ?
An iSaSiLk server "is a Java programming language implementation of the SSLv2 (client-side), SSLv3, TLS 1.0 and TLS 1.1 protocols. It supports all defined cipher suites (except for Fortezza), including all AES and PSK cipher suites. iSaSiLk implements all standard TLS extensions, comes with an easy to use API and operates on top of the IAIK-JCE Javau2122 Cryptography Extension. iSaSiLk is highly configurable and will work with any alternative JCE implementation supported by a proper provider for supplying the required cryptographic algorithms".
Once again thanks for your answer.

Upgrade from SAP Webas 6.40 to SAP Netweaver 2004s

Do we have to change the virtual host name used for high availability clustering environment to local host name before we conduct the upgrade from SAP WebAS 6.40 to SAP NetWeaver 2004's ?

Do we have to change the virtual host name used for high availability clustering environment to local host name before we conduct the upgrade from SAP WebAS 6.40 to SAP NetWeaver 2004's ?

"SSO" for non-sap web application using SAPGUI to browse?

I have a web application (non SAP) and the user base are also SAP users in an ABAP system.
To strengthen the authentication in the web app, I wanted to implement SSO
authentication as we pity the users for having to remember so many strong pw's and I
dont like LDAP based pw sync or other technology I dont understand, because then we are
just yet another application with the same pw...
We are having technical problems implementing SSO on the web app side, and are anyway a
bit sceptical about the user admin / role admin assignment if we get it to work.
So I have created a transaction in SAP which browses the web app and the intention is to
send the SAP sy-uname as the web app user. We can control this using s_tcode, and
an own auth object on the WAS side and a check on the session type before the connection is
established. In this sense we are dependent on the SAP concept implemented, but even so:
The role assignment is controlled in the web app itself -> so assume that I am not overly
worried about unauthorized access to the web application, as they would not have any
system role for it as their sy-uname does not exist. (Infact we can monitor this)
The browser on the front end is the SAPGUI with html controls on the SAP side.
I would be interested in knowing whether anyone else has experience with this approach, and
whether there are any areas to be carefull of?
I would also like to know whether this is a strategic error?
Kind regards,
Julius

Hi Julius,
well, if that web application would run on the same ABAP backend system then the solution described in <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0612670">SAP Note 612670</a> would be applicable:
a so-called "Re-entrance ticket" (based on the "SAP logon ticket" SSO proceedings) is issued, transported via the SAPGUI connection and back to the system via the invoked HTML control.
But for non-SAP web applications that does not help.
In that case only X.509 client certificates can be used for SSO. Actually, the web application could then also be invoked directly (independent from the SAPGUI session). The user is authenticated based on the X.509 client certificate - and not based on the ABAP userID (of the SAPGUI session).
Well, if you don't mind the effort you could also use the "SAP Logon Ticket evaluation library" (sapssoext, see <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0304450">SAP Note 304450</a>) to evalute the SAP logon ticket externally. You'll then need to have a "stub application" at the ABAP side that triggers the http redirect to your external web application. Not a nice solution but a possible one.
In the future SAML browser artifacts would be an option (preferable to integrate non-SAP applications). But currently that's not available (for NWAS ABAP).
Cheers, Wolfgang

How to change the default operators in sap web ui Search screen?

How to change the default operators in sap web ui Search screen?
For eg. Using advance search option , I have some fields with default operators like equals, contains,is between, is less than and is greater than. I don't need all these operators for this field.
I need only "equals" operator. How do i remove the rest of the operators?

There is a view cluster crmvc_dq where all the standard setting is present related to you r issue. Please try if you can modify that, that way you will avoid the code.
Incase you are not able to make any changes there then in that case you have to redefine the method GET_DQUERY_DEFINITION () of the IMPL class to delete the operators for a particular serach field.
Regards,
Harshit

Communication problem between external web server and SAP WebAS

Hello Experts,
We are having a serious problem over here where we had one external server is pushing XML string using a HTTP-POST request to our SAP WebAS server (a BSP application is handling this request). We are not able to see the request coming to SAP i.e. SAP-BSP is not receiving XML.
Also we found that, if request is routed through another proxy server (apache tomcat server redireting the request) connected through VPN to our network, it works but if the the same server is inside our network it doesn't. Rather in that case it never hits the Apache-Tomcat server itself.
We tried to identify the network issue but it seems it is not the network or any firewall issue. When we had a small Echo server (itu2019s a small Java server) running on our SAP machine, we could see the request coming in. So it is definitely reaching the SAP server but the SAP Web AS is not picking up. Rather what we found that if the URL is simple e.g. http://<hostname>:<port> it works but if the URL is complex like something generated by SAP incase of BSP application it doesn't.
Any idea what is causing this issue?
I tried to look at SMICM trace files but got nothing. Any idea where would find the trace of incoming HTTP requests to SAP WebAS?
Thanks in advance.
regards
rajeev

Hi Rajeev,
Pelase find the below link. i am not sure this is the exactly one for you. But i hope it'll help you.
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417800)ID0350917650DB11174011760851503410End?blog=/pub/wlg/10285
http://www.sap-img.com/basis/basis-faq.htm
Regards,
CSK.

Invoking a SAP web service from Dreamweaver MX

I am trying to invoke a SAP web service from ColdFusion and it looks like ColdFusion does not even recognize the rfc generated wsdl file as a wsld file. I have tried other wsdl url's outside my company and they work...so I know that web services at least work in ColdFusion. Can anyone advise on this topic?
Thanks!

Paula,
I suppose you're using CFINVOKE (http://www.activsoftware.com/code_samples/code.cfm/CodeID/44/ColdFusion/Invoking_SOAP_Web_Services_with_ColdFusion_MX_CFINVOKE_Tag) or are you using a third party tool like CFX_SOAP (http://www.activsoftware.com/products/productdetail.cfm/id/1015)?
Are you working with WebAS 6.4 or 6.2?
It works with web services created with WebAS 6.4, but you should generate proxy classes. Check Thomas' weblog (second part of it)->https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1012. [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken]
The WSDL generated by this method is more standard than the one generated when you just Remote enable an FM and look at the webservice browser.
Th core of CF MX is Java and that engine is rather strict in standards.
Eddy

How to remove user authentication for SAP Web Service?

Hi there,
I am using SAP Web Services in my flex application. Every time wsdl url is called, the username\password window pops up. I want to remove this.
I searched in the forum and based on the discussions, I tried giving the user name password under Web Service Administration using SOAMANAGER, by selecting No Authentication option. But this did not work. I still get that pop up.
I also tried giving the credentials in SICF, under Logon Data tab of the service. This too failed. I kept getting the pop up.
Can someone pls let me know how can I remove this? If username password in mandatory to be passed, I can create a temporary username which will be used to access all of my webservices and use it. But I want to remove this authentication part when I am using the flex application ang calling the web service url from within it.
Appreciate your help.....
-Deepak

Hi,
It is a little bit tricky, because the interface has changed several times in different releases. I know that it is possible without authentification.
I remember that i defined somewhere the default client, the username and password in the ERP system to use by this web service.
Maybe it helps if you try the old transactions WSADMIN, WSCONFIG or WSADMIN2 ?
Sorry that I cannot help you more. I hope it helps.
Best regards,
Joern

Calling SAP Web Service from BPEL

Hi
I am trying to call a SAP Web Service friom BPEL using the SAP WSDL.It requires a basic authentication (Username/Password) which i am providing as partnerlink properties in bpel.xml.
While testing the BPEL Process from the console, it is giving me an error
"<summary>exception on JaxRpc invoke: HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Bad response: 401 Unauthorized</summary>"
But when i am testing it from SOAP UI tool it is giving me the desired response.
Does anyone has any idea why it is failing from BPEL?Is there any configuration which i am missing?
Regards
Ayush

HI Ayush / Suryaveer..
I am stuck at the same situation, trying to invoke a secured SAP webservice. The invoke fails with a security previlege exception.
Am using the basicHeaders property to propagate the credentials to the SAP system.
Can you please suggest on the same.
credential propagation in bpel.xml :
<property name="basicHeaders">propagate</property>
<property name="basicUsername">ABC</property>
<property name="basicPassword">DEF</property>

Consuming a sap web service via jde 4.5.7 (ecc 6.0)

Hi all,
I have a question here, if u could help me, i have to call a sap webeservice via jde , but before i test a jde example by calling a public web service which is not a sap web service , i used to give url as:
connThread.get("http://www.webservicex.net/globalweather.asmx/GetCitiesByCountry?CountryName="Morocco;deviceside=true";
i was not obliged to set the apn parameters and it does work
here as it's mentioned , there is the access point, getcities ... the method name and the parameter name and the parameter value
"Morocco", but i m asking how did we precise the methods of an rfc sap, and the name parmeter and his value.
have u any idea to help me understand how we call sap rfc, method name, parmaeter name, cz i m a newbie to sap and bb.
but now when i try to call an rfc sap , i give the link
connThread.get("http://hca-ecc.hca.group:8000/sap/bc/srt/wsdl/sdef_Z_WS/wsdl11/ws_policy/document?sap-client=800;deviceside=true;apn=hca-ecc.hca.group;tunnelauthusername=forma02;tunnelauthpassword=hcaforma" );
but it's always giving me transmission failed without any error that may help me when debugger run.
Thakx in advance.

Hello Merry,
Have you tried searching 'blackberry' in SDN. I found following and many more links. It gives me impression that you may have to use MDS and also may be SAP Webdynpro technology for UI rendering.
blackberry integration with Mobile Infraestructure
There seems to be special site from blackberry for SAP integration (free registration).
https://www.blackberry.com/CorpDevZone/download/SAP/sap.shtml
Re: Steps to show data on actual Blackberry :) Urgent please....
Hope this will give you some headway in resolving your issues.
Regards,
Vandana.

Unable to install SAP webAS on Windows 2003

Hi Everyone , I am trying to install SAP WebAS Java 6.4. We use an Oracle Database and i want to deploy
our web apps on the SAP WebAS . I get this error during installation :
ERROR 2004-11-09 15:00:39
CJS-00081 Assertion failed: in
function sapdb_sql_query(db_nm, sql_s, db_node) {
var ret_s = "";
var sdbInst = new sdbInstance();
sdbInst.dbName = db_nm;
sdbInst.dbHost = (db_node == undefined) ? installer.getHostName() : db_node;
var r_arr = sdb_sql_query(sql_s, sdbInst);
ASSERT(arguments.callee, r_arr != undefined, "ERROR EXECUTING DBMCLI COMMAND!");
if (r_arr[0] == "false") {
var err_msg = "ERROR EXECUTING SQL QUERY: ";
for (var i_cnt = 1; i_cnt < r_arr.length; i_cnt++) {
err_msg = err_msg + r_arr[i_cnt];
ASSERT(arguments.callee, false, err_msg);
} else {
end_l = new RegExp("END");
for (i_cnt = 0; i_cnt < r_arr.length; i_cnt++) {
if (end_l.test(r_arr[i_cnt])) {
ret_s = r_arr[i_cnt + 1];
break;
return ret_s;
ERROR EXECUTING SQL QUERY: OKERR-24988,ERR_SQL: sql error-5015,Missing keyword:USERGROUP,TIMEOUT,STANDARD,RESOURCE,REPLICATION,NOT,LIKE,EXCLUSIVE,DBA,COSTWARNING,COSTLIMIT,CACHELIMIT
How do i get over this problem ?
Thanks
Ravi

Hello Ravi,
this problem probably occurred when a SQL user was trying to be created using a password with special characters, but failed.
Could you please copy the last couple of lines of the protocol named 'XCMDOUT.log' into this thread?
Regards,
Roland

ABAP workbench SAP R/3 4.6c to SAP Web AS 6.20

Hi Friends,
can anyone give the links for
Delta ABAP Workbench SAP R/3 4.6c to SAP Web Application Server 6.20 difference
helpful that above will be in pdf format
who so ever i will be thankful for it
thank u
With regards
Vjai

Hello Vijay,
the Workbench is rather a collection of tools than a single one. I don´t know of a delta spec but on the ABAP forum start page some of the tools are described by PDF.
Regards,
Klaus

SAP WEB AS 6.40 Export CDs (3)

Hello there,
I am trying to re-install R/3 Enterprise. However, to the part "Checking Software Packages" for installation of "DB Instance", it asks me for "SAP Web AS 6.40 Export CD 1/3". I currently have Web AS 6.20.
I couldn't find them from "SAP Market Place". Is Web AS 6.40 Export currently Beta version or already out?
Anyone please tell me where I can get it from.
Thank you very much.
thaiba.

Hello Thaiba,
what I've found at http://service.sap.com/swdc -> Installations and Upgrades -> SAP NetWeaver -> SAP NETWEAVER -> SAP NETWEAVER 04 -> Installation & Upgrade
-> OS -> DB was:
DVD SAP NetWeaver 04 SR1 Installation Export
I think that is it.
Regards
Gregor

System Refresh Process of SAP Web AS 6.20 in BW env

We are in the process to refresh our BQA system from the offline backup copy of BPR(Production server). We did it number of times in 4.6 R/3 server successfully in past. We used the oracle backup/restore method for refresh process in R/3. The same oracle backup/restore method we used for BW refresh. But this method is not able to change the schema name in tablespace (in BQA system, tablespace are like PSAPBQAFACT and in BP1 , it is PSAPBP1FACT). Seems to me this is not the right method to refresh SAP Web AS 6.20 and above systems.
Could anyone pls suggest the right documents or if someone has the procedure for refresh process of SAP Web AS 6.20, pls confirm.

Hi Reiner! Thanks for your reply!
- I want to create a secure connection between the .NET client and the SAP Web AS 6.20 Web Service, and HTTPS would be great. Is there any documentation regarding this issue?
- No, I don't want to provide the result of a Web Service as a Web Service. Maybe I was quite unclear... :/ What I meant was:
I want my Web Service to return a table (the result comes in the structure of a table). How do I define the Out-parameter in transaction se37 to accomplish this? Right now the best solution I got was to construct an array of strings (like the ZZVALUES int array in the example) where each position of the array, is a string that has the various fields of the table i want to return concatenated.
I'm able to retrieve the array in Visual Studio .NET 2003 client, and separate the fields (to fill a table again with them). If I could just return the table from SAP and receive it in .NET would be much more simpler.
Thanks again.

JAXB on SAP Web AS 6.40 SP14

Similar Messages

Maybe you are looking for