Logon group SPACE

How can i delete logon group SPACE?
I'd like have 1 logon group custom: gruppo1.
I don't like have SPACE from groups SAP GUI ( version 7.10).
Help me.
thank Tou

Hi,
You can not delete the SPACE logon group, it's a SAP default logon group. You can create your own gruppo1 logon group in SMLG trx.
Regards,
Sachin Rane.

Similar Messages

Public logon group not showing up

Hi everybody
I am trying to create a SAPGui entry for logon group access to customer ECC6.0 system.
I have configured the service and sapmsg.ini file.
I was told by customer sysadmin that PUBLIC logon group was created but in the list of logon groups I can only see SPACE.
Moreover, if I complete the procedure with SPACE logon group, when I try to login it won't succeed, warning that even the client number is wrong (?!).
My questions are:
- how to retrieve message server number and port (even though I am fairly certain that they are ok, otherwise the Logon group list wouldn't have been populated... right?)
- what might be the cause for the PUBLIC logon group not to show up
Thanks, points will be awarded
Vincenzo

Hi,
Since you get such strange errors, it almost seems like you are trying to logon to the wrong server.
Please check sapmsg.ini again to see that the correct hostname/ip-address is entered.
Also, did you notice if the server name is correct at the logon screen ?
Every Dialog instance or Central Instance gets logon group SPACE by default. Then, when you create logon groups for the instance,
the group SPACE will disappear.
In some installations the central instance and the message server both uses the instance number of the central instance as a base to calculate the ports.
CentralInstance/DialogInstance = 3200, MsgServer=3600
but, on some installations (E g Windows Cluster) this could be different.
There you might have something like:
CentralInstance/DialogInstance = 3200 and the MsgServer=3601
You need to ask your sysadmin for message server port and host.

Logon group not found when launching planning workbench

When I start planning workbench in RSPLAN, the following error appears:
Connect to message server host failed Connect_PM TYPE=B MSHOST=bwdev.shdl.com GROUP=PUBLIC R3NAME=BWD MSSERV=sapmsBWD PCS=1 ERROR Group PUBLIC not found TIME Mon Sep 25 13:13:13 2006 RELEASE 700 COMPONENT LG VERSION 5 RC -6 MODULE lgxx.c LINE 4288 DETAIL LgIGroupX COUNTER 1
We filled group "PUBLIC" for template installer and it went through with all green lights including BI IP required 4 JCO desitinations.
but after having a look at the following threads Re: BIP in 2004s, I notice the following sentence: "3. Logon Group - Make sure logon group is specified in ABAP system (SMLG)", when I go to SMLG, only one record with empty logon group exists, but the status is green.
Shall I maintain anything in SMLG? create "public" group in SMLG?
need suggestion...
Patrick

Hi Gregor
I have already followed points with 919850, and our basis already setup SLD (for bw system in SLD, he setup two logon group: SPACE(default) and PUBLIC).
After I maintain logon group "PUBLIC" in SMLG, and then re-execute the step 14 (maintain 4 BI IP JCO destinations), 4 JCO destination appears with green lights again afterwards.
However, now the internl error 500 appears in the web.
any more suggestion?
Patrick

Webcenter group space access denied for newly added user in oid group .

Hi All,
We have upgraded our webcenter with latest version 11.1.1.4.
We have created a groupspace where we set the acceess for group space usiing add groups .
Suppose i have added userRoles1 to get access of this groupspace.
Now i am adding another user part of this usergroup from some oid console .
I am able to see this user in the member of this userRoles but whenever this user
is trying to access this gs getting unauthorized access message .
Any pointer please .
Regards ,
Arun

Hi,
User Account Control treats members of the Administrators group as standard users.
With UAC enabled, members of the local Administrators group run with the same access token as standard users. Only when a member of the local Administrators group gives approval can a process use the administrator’s full access token. This process is the
basis of the principle of Admin Approval Mode.
When an administrator logs on to Windows Vista or newer, the Local Security Authority (LSA) creates two access tokens. If LSA is notified that the user is a member of the Administrators group, LSA creates the second logon that has the administrator rights
removed (filtered).
To work around this issue, use the net use command together with a UNC name to access the network location.
Programs may be unable to access some network locations after you turn on User Account Control in Windows Vista or newer operating systems
http://support.microsoft.com/kb/937624
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SSO to SAP via SAP Logon Group

Hi,
I've tried to configure SSO to SAP via SAP logon group. When trying this I'll get the following error:
Connect to message server failed Connect_PM MSHOST=<server>, R3NAME=IB1, GROUP=IB1_Web LOCATION CPIC (TCP/IP) on local host ERROR The message received isn't from a message server. Are you really connected to the message server? Please check your connection parameters. (<server> / sapmsIB1) TIME Tue Dec 16 16:48:49 2008 RELEASE 640 COMPONENT MS (message handling interface, multithreaded) VERSION 4 RC -2
I've also configured the file services under winnt\system32\drivers\etc on the BO server with the following line:
+sapmsIB1 443/tcp +
Is there anything I'll have to configure too? Or what does this error mean? The server which I have tried to reach is a message server.
Thanks in advice.
Claudia

HI Ingo,
yes I can connect with SAP GUI via message server and application server. I can also connect with BO via sso to the application server. Only the message server failed.
I have now found out that I had the wrong port. But also the right port doesn't work. I have tested the port with telnet. The port is reachable.
Thanks
Claudia

Issue with parallel operation of SAP NW SSO 2.0 and SNC Client Encryption (Logon Groups)

Hi!
One of our customers is using the SNC Client Encryption solution to ensure encryption using SNC (based on Kerberos Technology) for their SAP GUI Dialog connections. They have lots of SAP backends DEV, QAS, PRD all with the SNC Client Encryption SNC Lib installed. The profile parameter snc/identity/as contains the following value: p:CN=SAP/<ServiceAccount>@<DOMAIN>.
Example: p:CN=SAP/[email protected]
The customer is using one AD Service Account "SNCServiceUser" with one registered SPN "SAP/SNCServiceUser" for all systems (yes, this is not recommended... but the case).
Important: All users use group entries in the SAP Logon (saplogin.ini). Means, for SAP logon the SNC name can not be manually configured on the SAP Front End. With group logons, the application server's SNC name is dynamically requested by the message server each time a SAP GUI connection is started. The SNC Name is greyed out in this case as dynamically obtained from the applications servers profile parameter snc/identity/as.
Now our customer implements SAP NetWeaver Single Sign-On 2.0 within his landscape. Based on the Secure Login Server 2.0 (SP3) he likes to use X.509 based authentication to his AS ABAP backends using SAP GUI SNC while others still use SNC Client Encryption.
Replacing the SNC Library on the AS ABAP
The Secure Login Library 2.0 (SP3) has been installed on one of the ABAP systems and the SNC Client Encryption SNC Library (which is based on SSO 1.0) is no longer used, thus we changed the parameter snc/gssapi_lib to point to the new SNC library. We removed the old PSE.ZIP containing the keytab and created the new SAPSNCSKERB.PSE incl. the keytab and proper credentials. To ensure parallel operation, we kept the snc/identity/as value as is = p:CN=SAP/[email protected].
After restarting the system with initialized Secure Login Library 2.0, still the SNC client encryption works fine for existing users.
The problem
We created on the Secure Login Server an SNC certificate for the AS ABAP which has the following X.509 Distinguised Name Fomat: CN=SAP/[email protected] This is to avoid having to change the snc/identity/as to an "real" X.509 DN which would lead to non-working SNC Client Encryption for all the other users using SAP GUI and logon groups.
As soon as we install the PSE via STRUST on the system the SNC Client Encryption solution stops working with error „Server refuses kerberos key exchange“.
As part of an pilot implementation we have installed Secure Login Client 2.0 (SP3) on some test PCs. The test PC with SLC is able to perform Single Sign-On with SNC based on X.509 (incl. Encryption) to the ABAP system.
Seems the SAP System now only tries to do X.509 based authentication thus key exchange fails. The problem is, we cannot change the snc/identity/as value because of the logon groups. If we were able to do so, we would in any case set the server identity to X.509 DN and in addition create the SAPSNCSKERB.PSE incl. keytab. This should work, as confirmed by SAP see this post.
Any ideas how to solve this and have both solutions in parallel?
Appreciate any help.
Regards,
Carsten

Hi all,
we was able to fix the issue. It was an issue with the customers cluster configuration and the $SECUDIR variable. This tricky issue leads to non working or sporadic working SNC Client Encryption...
This was how the configuration looks before:
Environment variable $SECUDIR is defined:
"/ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec“
sapgenpse seclogin -l -v
running seclogin with USER="<SID>adm"
Credentials for username '<SID>adm':
0 (LPS:OFF):
         (LPS:OFF): /ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCSKERB.pse
1 (LPS:OFF):
         (LPS:OFF): /usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCS.pse
After changing the $SECUDIR to "/usr/sap/<SID>/DVEBMGSxx/sec“ and re-creating the credentials, it worked like a charm.
As a result of this we can confirm, this configuration and SNC Client Encryption works with CommonCryptoLib in parallel to the SSO configuration.
And Valerie was right with 2. SLC starting from V. 1.0 SP2 PL3 was able to convert the CN= part of the SNC Name into an SPN, was my mistake. In addition SNC Client Encryption starting from Version 1 SP1 PL1 does this also.. just to make this clear
Thread closed hope this helps someone
Carsten

How to get pages list for a group space or create a page for a group space

hi All,
I am using wc11.1.1.3, I want to use java api to implementing the following functions in site template:
1. Get pages list for a given group space
2. Create a page for a given group space
I researched the following codes from web site:
PageDef newPage = mPageService.createPage(
PERSONAL_USER_PAGE, pageNameFormat, pageTitle,
"MyPageTemplate1.jspx",
"/mytemplates/",
null, null, null);
What should be used instead of PERSONAL_USER_PAGE if a group space page is intended to be created? which parameter is for defining group space name that the page should be created for?
By the way, PageService seems has method for getting list of pages, but how to use it to get page list which is in a specified gs?
Best regards

did you manage to get the page list using Page Service API?

Scheduling background job on Logon group

Hi All,
We have 4 logon groups configured in SMLG, while scheduling the job in SM36 ->Target server field i am able to see only one group and other indivdual servers not all the Groups configured in SMLG.
Is there any option i have to check to let all the groups configured in SLMG to diaply in SM36 for scheduling so that i can select the Logon group. I tried giving the logon group names manually which are not listed in Target server field it's giving the error group not exist..
Please suggest..how to make all the Groups configured in SMLG to get displayed in SM36 for scheduling jobs...
Thanks,
Subhash.G

Target server field is Name of an SAP instance at which a background job should be run. The name has the following format: <host name>_<SAP System name>_<SAP System number>, where host name is the name of the server computer on which the instance is running, as specified in the system profile parameter SAPLOCALHOST.
The name of each instance is specified in the system profile parameter rdisp/myname.
Example: hs0123_C11_55
In programming: As the table field EXECSERVER, shows the target instance selected by the user for running a job. As the table field REAXSERVER, shows the SAP instance at which a job was actually run.
Hope this is clear.
Thank you,
Shyam

Best practice for sharing html content on different group spaces?

How can html content be shared between several group spaces?
One way I have found is to add a html doc to ucm and then to add this doc as a iframe to a page.
Are there other ways, like adding on one group space page a html layout element and then to view this content in a different space. How could this be done, with an expression language reference?
Has someone experience in presenting the same html content on different spaces and can share how he does it. Any ideas are welcome.
Thanks,
Max

Hey Max,
Check out our technical whitepaper on Integrating ECM with Portal Technologies.
Our "Fishbowl Portlets" allow you to share any content - HTML, WYSIWYG user generated content, documents etc - in multiple contexts (portlets, web apps, etc).
This is one of the things that we showcased as the recent Collaborate conference in Vegas - WebCenter framework, UCM and the portlets surfacing the same items in different contexts - all personalization aware, configurable and end user/super user editable.
The white paper can be found here:
http://www.fishbowlsolutions.com/StellentSolutions/ContentManagementResources/index.htm
A blog post on it can be found here:
http://cfour.fishbowlsolutions.com/2010/03/10/fishbowl-portlets-followup-cis-and-content-consumption-options/
warmly,
Billy Cripe
Fishbowl Solutions

J2EE logon groups in an ABAP+JAVA system

Hi,
We are trying to restrict java calls to specific App servers in our ABAP+JAVA system. So if we have 5 App servers, we want all J2EE requests to go to 3 Apps only.
We are using SAP web dispatcher for this purpose. When checking on SAP help site, it suggested two options.
1) Configuring Logon Groups on AS Java
2) Configuring Logon Groups Using Configuration Files
Which of the above would be a better option for ABAP+JAVA system?
Has anyone implemented this before? If yes, can you share your experiences/lessons learned??
Thanks.
Fahad

1. Log on to the ABAP system.
2. Call transaction SPRO.
3. Go to SAP Solution Manager Implementation Guide -->
SAP Solution Manager --> Basic Settings --> SAP Solution Manager
System --> General Settings --> Client Copy
4. Perform the following steps:
a) Maintain Profile Parameters
b) Create Client
c) Copy Client 000
d) Convert UME

Replacing Home Space with a specific Group Space.

Hi,
We have a Webcenter Spaces 11.8 environment.
We are trying to completely bypass the home space and take the user to a specific space.
While this is possible to do it through the initial redirection based on application/enterprise role, some re-directions are causing the user to land in the home space.
Also, the user can get to the home space pages by typing in the url. We want to restrict the user from viewing the home space altogether and replace it completely with our group space.
Approach1 : Page Links -
We tried to bring in pages from the group space into the home space navigation model as page links. Even if the group space is public, we cannot link to its pages as we cannot see the pages in the page link popup. Only home space pages are shown. Is this expected? How do we bring in pages from a specific group space into the home page navigation?
Approach 2: Group Space Pages Query -
We can bring all the pages from the "Default Navigation Model" of the group space into the home space navigation model. However, the landing page upon login needs to be a visible page in the home space. How do we get the user redirected to a specific page in a group space and make that node as selected once the user logs in.
Thanks in advance.

Hi,
Check this code.
data : role(10) type c value 'crick ter',
role1(10) type c,
role2(10) type c.
write: / role.
SPLIT role AT space INTO role1 role2.
concatenate role1 role2 into role separated by '_'.
write: / role.
<REMOVED BY MODERATOR>
Regards.
Edited by: Alvaro Tejada Galindo on Mar 10, 2008 7:25 PM

How to create Logon groups for JAVA Systems

Hi,
I am implementing an BI JAVA Landscape. We do have 1 Central Instance(CI) and 2 Dialog Instances (DI) JAVA Standalone. Everything based on NW04s
I have set up a Web Dispatcher to do a load balancing. The Web Dispatcher is connected to the Message Server (MS) of the JAVA CI to get all the information about the Engines.
I am now looking to create Logon groups to distibute the load according the application used applications. I am not sure if there is a possibility to set up logon groups (server groups) directly somewhere in the J2EE engine, or if I have to set this up in the WebDispatcher konfiguration files?!
Thanks in advance and best regards,
Dominik

We're trying to do something similar with NetWeaver CE 7.1.
According to [this documentation|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/frameset.htm] there are 3 steps to doing this for NetWeaver CE 7.1:
1. Logon Groups
2. Web Dispatcher profile changes
3. HTTP Provider property changes
We've set up a Logon Group in the NetWeaver nwa and associated the two instances (one host) with it.
"[Configuring Logon Groups Using Configuration Files|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3c3f0cad9f4c2de10000000a1553f6/frameset.htm]" says: "...to create the files using HTTP Provider service."
There it doesn't say exactly how to generate those 3 text files; it says: "1. Create the icrgroups.txt and urlinfo.txt files that define the logon groups. For more information, see the documentation of SAP Web Dispatcher." ; but, has no link to what it says to see. So, I manually go to ["SAP Web Dispatcher", "Assigning Logon Groups"|http://help.sap.com/saphelp_nwce10/helpdata/en/b4/9aa8862e714e6db8e74e48e5d3283b/frameset.htm]. But, it all pretty much breaks down there because it's referring to apparently non-NetWeaver CE 7.1 stuff (as near as I can tell); for instance, how do the transactions SMLG and SICF relate to NetWeaver CE 7.1, or am I in the wrong place?
I tried to press ahead with files similar to the examples here, but I hit this error in the Web Dispatcher:
[Thr 5132] *** WARNING => ICT: path prefix /Curam/ not allowed in this context. Only prefix / allowed. [ictxxptab.c 764]
[Thr 5132] *** WARNING => When a file is specified in wdisp/J2EE/url_map_location only URL prefix '/' is supported. See also SAP note 1033470. [icrxx.c 2925]
The note reference looks hopeful, but I cannot read it; I get:
Note 1033470
The requested SAP Note is either in reworking or is released internally only
Does anyone have a copy of this Note or knows if it's helpful?
Has anyone done this with NetWeaver CE 7.1?
Tahnks,
William

Display default Group space for users in a Role upon login

Is it possible to configure the role/group space so that the users in that role will see the group space as default page after logging into webcenter.
Scenario:
Group Space : G_SPACE1
Role: W_ROLE1
Uers with W_ROLE1: user1, user2, etc
Requirement:
Whenever users with role W_ROLE1 login to webcenter(http://..../webcenter ),
they should see the group space G_SPACE1.
Note: I am aware that we can access the group space directly with url as http://...../webcenter/spaces/G_SPACE1.
Thanks-
Sachin

Hi,
Not as far as I know. This is something I had a requirement to do but couldn't find a way.
Although PS3 added support to configure the landing page/space for a user, it wasn't a very useful addition in my opinion. It only allows the admin to hard-code a single Space as the default for all users and doesn't work with ELs either.

Send Idoc's to R/3 System with logon group

Hello everybody,
I have the next scenario
Sender R/3 Idoc -> XI -> Receiver R/3 Idoc
now I have a doubt, the receiver system has a logon group, is there any benefits for me in XI to use the logon group to send the Idocs to this system?, and if it's better to use logon group how can I use it, juts by defining the RFC that exists in SM59 that points to the receiver R/3 system in XI as load balancing and pointing to the logon group????, thanks in advance for your answers.

Julio,
Yes you are right, load balancing can be achieved using logon groups in the RFC destination for the IDoc adapter. It basically enables the ABAP dispatcher to decide whats the best available application server to process the inbound message sent by PI.The purpose is to load-balance successive connections across a group of ECC application servers.
To do this a connection is established through the message server (the central ECC instances communication process) to determine which ECC instance is to handle the RFC call.
The key parameters here are:
u2022     the hostname, on which the message server process runs,
u2022     the system name of the ECC central instance, and
u2022     The logon group, which indicates the cluster of applications servers that an ECC instance will be selected from, to serve the request.
Greetings,
Gerardo.

Viewing Discussion Forum in public group space

Hi all,
I have the following requirement:
a) let anonymous users visit a group space and
b) let them view discussion forum content inside that space.
I can enter the group space as anonymous user, but the Discussions Forum portlet tells me I'm not authoritzed to view this portlet.
How can I make this work?
Thanks in advance

Hi,
Write a dummy custom Identity Asserter/Authentication Provider and create a Weblogic subject for anonymous users so that weblogic knows that it is a authorized user and then it will let it do what a logged in user can do.
Thanks
Vishnu

Logon group SPACE

Similar Messages

Maybe you are looking for