Logon groups not visible/usable

Hi,
I'm experiencing problems with using logon groups for load-balancing connections to my NSP 7.01.
Ultimately I want to create a JCo Connection from my CE 7.1.1 to the ABAP system and CE forces me to use a load-balancing connection using a message server and a logon group. But in order to test the proper configuration of my ABAP system, I'm simplifying the scenario but just attempting to log on to the system via Sapgui with load balancing.
Here's my setup:
It's a local scenario where both Sapgui and the AS ABAP reside on the same server.
The system has SID NSP and SysNr 02.
The proper services (sapmsNSP 3602/tcp plus sapdp02, sapgw02) and hosts entries are present on the server.
Everything else works fine
The instance knows itself as tron7661_NSP_02 (I had to correct some errors in the standard installation
Profile file NSP_DVEBMGS02_TRON7661 contains: rdisp/enqname = tron7661_NSP_02, rdisp/myname = tron7661_NSP_02
In transaction SMLG, I created a logon group HUGO, assigning instance tron7661_NSP_02 with attribute "Ext. RFC enabled" = true and everything else left blank.
When I press the "Test" button, I get message "Internal error (SIMULATION:INACTIVE_SERVER)" (Message no. RZ783). I can confirm and save anyway. A green LED is displayed in the "Status" column for my logon group.
After restarting the server, I would expect the new logon group to be usable when creating a new entry in Saplogon.
In Saplogon, I choose "Create new entry", connection type "Group/Server Selection", and enter the host name of my message server TRON7661.
As a result, a single entry "tron7661 (tron7661_NSP_02, DIA UPD ENQ BTC SPO ICM)" appears in the field "Group/Server".
This entry represents not a logon group, but a single application server.
(When I try this for other SAP systems and message servers in my landscape, I always get the logon groups configured for this systems plus an entry for the application server.)
Do you have any idea what might be wrong here?
Thank you and best regards,
Thorsten
P.S.: I have found and reviewed thread /message/208613#208613 [original link is broken] but found nothing helpful in it.

Hi Raja,
Thank you very much! -- Thomas' blog solved my problem. It was in fact just a matter of running the report that makes the configured logon group usable.
Best regards,
Thorsten

Similar Messages

Public logon group not showing up

Hi everybody
I am trying to create a SAPGui entry for logon group access to customer ECC6.0 system.
I have configured the service and sapmsg.ini file.
I was told by customer sysadmin that PUBLIC logon group was created but in the list of logon groups I can only see SPACE.
Moreover, if I complete the procedure with SPACE logon group, when I try to login it won't succeed, warning that even the client number is wrong (?!).
My questions are:
- how to retrieve message server number and port (even though I am fairly certain that they are ok, otherwise the Logon group list wouldn't have been populated... right?)
- what might be the cause for the PUBLIC logon group not to show up
Thanks, points will be awarded
Vincenzo

Hi,
Since you get such strange errors, it almost seems like you are trying to logon to the wrong server.
Please check sapmsg.ini again to see that the correct hostname/ip-address is entered.
Also, did you notice if the server name is correct at the logon screen ?
Every Dialog instance or Central Instance gets logon group SPACE by default. Then, when you create logon groups for the instance,
the group SPACE will disappear.
In some installations the central instance and the message server both uses the instance number of the central instance as a base to calculate the ports.
CentralInstance/DialogInstance = 3200, MsgServer=3600
but, on some installations (E g Windows Cluster) this could be different.
There you might have something like:
CentralInstance/DialogInstance = 3200 and the MsgServer=3601
You need to ask your sysadmin for message server port and host.

Users/groups not visible in WGM after migration. (UIDs lower than 500)

I have migrated from a 10.5 to a 10.6 server.
Some of my user & groups are not visible in the WGM. However, the user can login to the system.
I discovered that if I check Workgroup Manager > View > Show System Records, that I can see the missing users and groups. The users and groups all of UID/GID's from 100 to 130.
All of the affected users & groups were created many versions ago, probably Mac OS X 10.1 Server. The accounts that are visible are newer and have UID's starting in either at 501 or 1025. So it looks like overtime OS X server has changed what ID's are used for system vs. users.
What is the proper way to solve this problem? The WGM will let me to manually change the UID/GID, but I am worried about doing this will not change file ownerships.
Thansk!

You are correct, the ACL and or POSIX permissions will not update if you just change the UID of the group or user account. You will need to add the new UID to the directories in question. And be sure to propagate the permissions.
I would take one each group and user account and use it as a test case to discover how much is involved. Document what steps are needed to make the changes and then do them in bits and pieces.

Groups not visible in GAL

Hi All,
We are in co-existence with OCS 2007 R2 and Lync 2013. The security groups are visible in the users who are still located at OCS pool and using OCS client, but not users who are moved to Lync 213 and using Lync 2013 client and OCS 2007 R2 pool users
and using Lycn 2013 client. Both the files GalContacts.db
and GalContacts.db.idx
are not seen among the uses who use Lync 2013 clients.
Which server generated the address book OCS FE or Lync 2013 FE during the co-existence? How to configure Lync 2013 FE to generate the Addressbook.
Regards,
Swamy

I have noticed the command fails when i use -TargetUri https://southlyncpool.contoso.com/abs/handler, but succeeds when i use -TargetUri https://southlyncintweb.contoso.com:443/abs/handler
adding :443 at the URL suceeds !!
Test-CsAddressBookService -TargetUri https://southlyncpool.contoso.com/abs/handler -UserSipAddress "sip:[email protected]"
Target Fqdn :
Target Uri : https://southlyncpool.contoso.com/abs/handler
Result : Failure
Latency : 00:00:00
Error Message : Getting web ticket for the given user is failed. Error Code: 28037 , Error Reason: The AppliesTo element of web ticket request points to a different web server or site.
Diagnosis :
Test-CsAddressBookService -TargetUri https://southlyncintweb.contoso.com:443/abs/handler -UserSipAddress "sip:[email protected]"
Target Fqdn :
Target Uri : https://southlyncintweb.contoso.com:443/abs/handler
Result : Success
Latency : 00:00:00
Error Message :
Diagnosis :

Logon group not found when launching planning workbench

When I start planning workbench in RSPLAN, the following error appears:
Connect to message server host failed Connect_PM TYPE=B MSHOST=bwdev.shdl.com GROUP=PUBLIC R3NAME=BWD MSSERV=sapmsBWD PCS=1 ERROR Group PUBLIC not found TIME Mon Sep 25 13:13:13 2006 RELEASE 700 COMPONENT LG VERSION 5 RC -6 MODULE lgxx.c LINE 4288 DETAIL LgIGroupX COUNTER 1
We filled group "PUBLIC" for template installer and it went through with all green lights including BI IP required 4 JCO desitinations.
but after having a look at the following threads Re: BIP in 2004s, I notice the following sentence: "3. Logon Group - Make sure logon group is specified in ABAP system (SMLG)", when I go to SMLG, only one record with empty logon group exists, but the status is green.
Shall I maintain anything in SMLG? create "public" group in SMLG?
need suggestion...
Patrick

Hi Gregor
I have already followed points with 919850, and our basis already setup SLD (for bw system in SLD, he setup two logon group: SPACE(default) and PUBLIC).
After I maintain logon group "PUBLIC" in SMLG, and then re-execute the step 14 (maintain 4 BI IP JCO destinations), 4 JCO destination appears with green lights again afterwards.
However, now the internl error 500 appears in the web.
any more suggestion?
Patrick

Re: Subscription not visible-usable

mu subcsription not visible why i recharge today

NO...I have only 1 accaunt...I always use 1 skype...first time i bought subscription from my Canada Visa card ..2012....croatian unlimited...then when i back to Croatia ..I bought June 2013 -1 month subscription Canada.
Now i move to Ireland..I bought Croatia Unlimited mins to landlines 1 month( 2015.07.02)with my IRELAND VISA CARD..skype charged my card...but i cant use that subscription.
From July 2 till today on my skype web page sometimes i see that subsrription(2x per day)..
So I CANCEL today.
Your subscription Croatia Unlimited mins to landlines 1 month will terminate at the end of the current billing period, which is on 2015.08.02

OIM 11gR2 : User groups not visible on UI

Hello Experts,
I have a requirement in which i need to assign the user provisioned to AD to some group(s) depending upon certain conditions like BU, Location etc. I created a Process Task adapter for the same and am able to successfully assign the users to the desired groups.
But i am able to check for this validity from the Backend only.
Ideally the groups assigned to the user must be visible after following these steps:
*1. Search for a user provisioned to AD.
2. Go the the Accounts tab.
3. Click on the AD account (to which the user has been provisioned)
4. A process form is displayed in the lower half of the webpage which also shows the information regarding the groups assigned to the User. But the groups are not getting displayed.*
Kindly Help.
Edited by: IDM_newbie on Jan 24, 2013 11:24 PM

But sir, the groups are listed under the Accounts tab. Is there any schedule job provided by OIM 11gR2 which results in the display of Groups assigned to the user as well under the Accounts tab ?
Edited by: IDM_newbie on Jan 25, 2013 1:51 AM

LDAP user groups not visible for configuring a Group Portal

Hi,
We have created a Custom Security Realm(myRealm) on WebLogic 7.0 SP2 in which
I've added the Novell LDAP Authentication provider as the authentication provider
and then set "myRealm" as the default realm for the domain. I am able to start
the WLS server instance and login to portalAppTools with the "administrator" account.
We would like to configure a Group Portal. In Portal Administration interfaces,
when I click on Group Administartion, I am unable to see any of my external LDAP
groups. I know that we cannot create/delete users or groups in the external LDAP
repository thru the Admin UI but the documentation says that I should be able
to view the users/groups in the Admin UI. Authentication against the external
LDAP repository works fine. Can anybody suggest the reason why we are unable to
view any of the Users or Groups in our external LDAP repository thru the User
Administration interfactes.
Appreciate any feedback.
Thanks
Vikram

Hi Jim,
I've configured a default LDAP V2 Compatibility Realm by modifying the Config.xml
file. I was able to restart Weblogic and see the LDAP Groups and Users thru the
WLS console. In our project we've a unique requirement wherein all Application
Groups and User Accounts would be stored in an LDAP repository and all BEA SERVICE
level accounts and groups are stored in a Database (groups like AdminEligible,
Administrators etc.). We need to be able to look at the groups in both the Database
and LDAP repositories in order to administer and configure a Group Portal. On
the outset it looks like we will not be able to do what we want to with the current
portal framework. Please suggest if there are any alternatives in order to implement
this solution. I am sure there are lot of other Clients who cannot create groups
like Administrators, AdminEligible etc in their LDAP repositories and will be
forced to think of alternatives.
I would appreciate if you can reply back at your earliest convenience.
Thanks
Vikram
Jim Litton <replyto@newsgroup> wrote:
The Weblogic 7.0 Authentication Providers (new JAAS Framework) is not
supported with Portal 7.0. You will need to configure the Compatibility
Security CustomRealm for Novell to try to get Portal working.
see defaultLDAPRealmForNovellDirectoryServices at
http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html#1083149
In addition, remember to test functionality through the Weblogic
Console. If you can see groups and users there okay it is very likely
that Portal will operate.
-- Jim
Vikram wrote:
Hi,
We have created a Custom Security Realm(myRealm) on WebLogic 7.0 SP2in which
I've added the Novell LDAP Authentication provider as the authenticationprovider
and then set "myRealm" as the default realm for the domain. I am ableto start
the WLS server instance and login to portalAppTools with the "administrator"account.
We would like to configure a Group Portal. In Portal Administrationinterfaces,
when I click on Group Administartion, I am unable to see any of myexternal LDAP
groups. I know that we cannot create/delete users or groups in theexternal LDAP
repository thru the Admin UI but the documentation says that I shouldbe able
to view the users/groups in the Admin UI. Authentication against theexternal
LDAP repository works fine. Can anybody suggest the reason why we areunable to
view any of the Users or Groups in our external LDAP repository thruthe User
Administration interfactes.
Appreciate any feedback.
Thanks
Vikram

Webdynpro application group not visible in Portal

Dear All,
I have a webdynpro for java application in my portal and being used by nearly 70000 employees.
Strange issue: 1 of the employee in the application cannot see the group UI element in the Bottom of the page, though I had not made it invisible or anything. All others could perfectly see all parts of the UI.
After much investigation and failure, I deleted the Userid and made his ID again, to my astonishment, the problem was solved.
Did anyone experience this issue and can explain how and why did this happend???
Ankur

Hi Ankur,
The user might have selected the "Remove from Page" option from the menu of the iview on the right hand side. We had the same problem and realised about this after a while. It mus have been the same issue.
I hope this helps.
Regards,
Gopal.

HP 8600 Plus - Printer is on wifi but not visible/usable for any computers on the same network

Hello,
I am on windows 7 x64 and I have an HP 8600 Plus. This printer has been working fine since we bought it but suddently it does not show up on the network. It started when my wife would try to print and the HP software says it cant connect to the printer. I tried resetting everything, including the router. I restored factory settings on the printer as well, still no luck.
I am able to connect the printer to wifi. The indicator shows that it is connected and ready. It has no errors there. It has an IP address and all seems well. I have several other computers on the same wifi network and none of them can SEE the printer. It does not show up in network devices and I am not able to install it using the HP wizard software (it gets stuck looking for the printer, then asks for a manual IP address and it still fails)
Please help, it worked fine for a few months and suddenly it is 100% not working!

Anyone out there ever seen anything like this before? I searched the forums pretty heavily and I see similar issues but none quite like mine.
I have also tried the Print and Scan Doctor. Again, since the software cant find the printer on the network it won't connect and won't resolve any problems. It tells me to make sure the printer has a wifi connection and that the blue light is on and the indicator is showing it is connected, all of which are true.

Subscription not visible-usable

I bought 2.7. 15 Croatia Unlimited mins to landlines 1 month.I was billed with Visa 6.14 eur.After 3 days I still can not use that subscription ...The e-mail I received notice:It's now ready for you to use. If you have any problems, visit our support section on skype.com,date,order number,amount,status is delivered I dont know what is a problem.

NO...I have only 1 accaunt...I always use 1 skype...first time i bought subscription from my Canada Visa card ..2012....croatian unlimited...then when i back to Croatia ..I bought June 2013 -1 month subscription Canada.
Now i move to Ireland..I bought Croatia Unlimited mins to landlines 1 month( 2015.07.02)with my IRELAND VISA CARD..skype charged my card...but i cant use that subscription.
From July 2 till today on my skype web page sometimes i see that subsrription(2x per day)..
So I CANCEL today.
Your subscription Croatia Unlimited mins to landlines 1 month will terminate at the end of the current billing period, which is on 2015.08.02

Not visible in group messaging

Hi,
I have a Curve 8530 and have upgraded to the latest BBM version couple of weeks ago. For several weeks now some members of various groups cannot see my posts while some can. We are all on different models/service providers and till last month BBM'd without any problem!!!
I've tried battery pulls, leaving and joining a group, starting a new group and re-inviting.....all no help!!!! Funnily one-to-one chats with these same people is no problem at all!!
Pls help!!!!

Hello Chaitanya,
I have manully created a button and it displays at runtime .... then I deleted the table which I created before, and I again re-created this same table ( set the properties as I did before ) and run the application, and this time it shows the table at runtime, dont know what was the problem ....
But the last column of the first table is still not visible....
Thanks anyway for your suggestions, point awarded....
Regards,

How to make logical link visible in workcenter group (not type AA, BB, CC)?

In Marketing Workcenter MKT-MKT-WCC there are 5 assignment blocks with grouplinks. Except the classified link groups (AA=Create, BB=Search, CC=Reports), there are 2 non-classified groups.
How to add a Z-link in these assignment block.
When we create a new Z-group, add Z-links and make them visible in the businessrole, they don't appear. Only when we set the Z-group to classified, for example Create, the link becomes visible.
Please advise,
Toine

Hi Toine
If you create a Direct Link Group(including direct links with pos number), then
assign the same to your Nav Bar Profile with some position number.
If you do this, then by default Direct Link Group will be visible in the Business Role
but, the links under the Direct Link Group will be invisible. So make the Direct links
under the link group to visible and then relogin.
It should work 100%, because i have already done the same.
Please let me know with the steps you are following if it is still not working.
Thanks
Arun

Office Communicator 2007 R2 IM not visible when in Chating with Group (Communicator Group)

Hi,
We are facing a issue when user IM is not visible when he chats with the group which he created in his Office Communicator Client.
Whereas he can send IMs to individual who is a member of that group in the same time.<o:p></o:p>
Need any suggestions on this.
Thanks in advance.

Hi,
Please check if there is any error message on OCS Server.
Please also check if all OCS Services on OCS Server started as well.
Please try to check the following link:
http://support.microsoft.com/kb/980043
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

LDAP Groups not displaying correctly in EP User Administration

I am having difficulty configuring EP to pull my Active Directory groups correctly. Currently, it is pulling a list of objects that have an objectClass of 'organizationalUnit', instead of 'group' which is how it is set-up inn Active Directory. I have tried setting the objectClass = group in the direct editing of the UM Configuration, but that does not seem to matter. Each time I change the configuration, I am re-starting the J2EE engine.
Any suggestions would be greatly appreciated
ume.acl.validate_cached_acls=FALSE
ume.admin.account_privacy=FALSE
ume.admin.addattrs=
ume.admin.allow_selfmanagement=TRUE
ume.admin.auto_password=TRUE
ume.admin.create.redirect=
ume.admin.debug_internal=FALSE
ume.admin.display.redirect=
ume.admin.modify.redirect=
ume.admin.nocache=FALSE
ume.admin.password.migration=false
ume.admin.phone_check=TRUE
ume.admin.search_maxhits=1000
ume.admin.search_maxhits_warninglevel=200
ume.admin.self.addattrs=
ume.admin.selfreg_company=FALSE
ume.admin.selfreg_guest=TRUE
ume.admin.selfreg_sus=FALSE
ume.admin.selfreg_sus.adapterid=SUS
ume.admin.selfreg_sus.adminrole=
ume.admin.selfreg_sus.deletecall=TRUE
ume.allow_nested_groups=TRUE
ume.allow_nested_roles=FALSE
ume.authenticationFactory=com.sap.security.core.logon.imp.SAPJ2EEAuthenticator
ume.cache.acl.default_caching_time=1800
ume.cache.acl.initial_cache_size=10000
ume.cache.acl.permissions.default_caching_time=3600
ume.cache.acl.permissions.initial_cache_size=100
ume.cache.default_cache=distributableCache
ume.cache.group.default_caching_time=3600
ume.cache.group.initial_cache_size=500
ume.cache.notification_time=0
ume.cache.principal.default_caching_time=3600
ume.cache.principal.initial_cache_size=500
ume.cache.role.default_caching_time=3600
ume.cache.role.initial_cache_size=500
ume.cache.user.default_caching_time=3600
ume.cache.user.initial_cache_size=500
ume.cache.user_account.default_caching_time=3600
ume.cache.user_account.initial_cache_size=500
ume.company_groups.description_template=Company
ume.company_groups.displayname_template= ()
ume.company_groups.enabled=FALSE
ume.company_groups.guestusercompany_enabled=TRUE
ume.company_groups.guestusercompany_name=Guest Users
ume.db.connection_pool.j2ee.is_unicode=FALSE
ume.db.connection_pool.j2ee.jta_transaction_support_enabled=FALSE
ume.db.connection_pool.j2ee.xatransactions_used=FALSE
ume.db.connection_pool_type=SAP/BC_UME
ume.db.or_search.max_arguments=50
ume.db.parent_search.max_arguments=300
ume.db.use_default_transaction_isolation=FALSE
ume.ldap.access.action_retrial=2
ume.ldap.access.auxiliary_naming_attribute.grup=
ume.ldap.access.auxiliary_naming_attribute.uacc=
ume.ldap.access.auxiliary_naming_attribute.user=
ume.ldap.access.auxiliary_objectclass.grup=
ume.ldap.access.auxiliary_objectclass.uacc=
ume.ldap.access.auxiliary_objectclass.user=
ume.ldap.access.base_path.grup=DC\=left,DC\=sand
ume.ldap.access.base_path.uacc=
ume.ldap.access.base_path.user=DC\=sand
ume.ldap.access.context_factory=com.sun.jndi.ldap.LdapCtxFactory
ume.ldap.access.creation_path.grup=
ume.ldap.access.creation_path.uacc=
ume.ldap.access.creation_path.user=
ume.ldap.access.dynamic_group_attribute=
ume.ldap.access.dynamic_groups=FALSE
ume.ldap.access.flat_group_hierachy=MIXED
ume.ldap.access.msads.control_attribute=userAccountControl
ume.ldap.access.msads.control_value=512
ume.ldap.access.msads.grouptype.attribute=grouptype
ume.ldap.access.msads.grouptype.value=4
ume.ldap.access.multidomain.enabled=FALSE
ume.ldap.access.naming_attribute.grup=ou
ume.ldap.access.naming_attribute.uacc=
ume.ldap.access.naming_attribute.user=
ume.ldap.access.objectclass.grup=group
ume.ldap.access.objectclass.uacc=
ume.ldap.access.objectclass.user=
ume.ldap.access.server_name=myserver
ume.ldap.access.server_port=3232
ume.ldap.access.server_type=
ume.ldap.access.size_limit=0
ume.ldap.access.ssl=FALSE
ume.ldap.access.ssl_socket_factory=com.sap.security.core.server.https.SecureConnectionFactory
ume.ldap.access.time_limit=0
ume.ldap.access.user=domain
svc_user
ume.ldap.access.user_as_account=TRUE
ume.ldap.blocked_accounts=Administrator,Guest
ume.ldap.blocked_groups=Administrators,Guests
ume.ldap.blocked_users=Administrator,Guest
ume.ldap.cache_lifetime=300
ume.ldap.cache_size=100
ume.ldap.connection_pool.connect_timeout=0
ume.ldap.connection_pool.max_connection_usage_time_check_interval=120000
ume.ldap.connection_pool.max_idle_connections=5
ume.ldap.connection_pool.max_idle_time=300000
ume.ldap.connection_pool.max_size=10
ume.ldap.connection_pool.max_wait_time=60000
ume.ldap.connection_pool.min_size=1
ume.ldap.connection_pool.monitor_level=0
ume.ldap.connection_pool.retrial=5
ume.ldap.connection_pool.retrial_interval=10000
ume.ldap.default_group_member=cn\=DUMMY_MEMBER_FOR_UME
ume.ldap.default_group_member.enabled=FALSE
ume.ldap.record_access=FALSE
ume.ldap.unique_grup_attribute=
ume.ldap.unique_uacc_attribute=samaccountname
ume.ldap.unique_user_attribute=samaccountname
ume.persistence.batch.page_size=25
ume.persistence.data_source_configuration=dataSourceConfiguration_ads_deep_readonly_db.xml
ume.persistence.pcd_roles_data_source_configuration=dataSourceConfiguration_PCDRoles.xml
ume.persistence.ume_roles_data_source_configuration=dataSourceConfiguration_UMERoles.xml
ume.principal.cache_group_hierarchy=TRUE
ume.principal.cache_indirect_parents=TRUE
ume.principal.cache_role_hierarchy=TRUE

Hi Doug,
I request your help on this. I am faced with a similar issue.
In my WinAD system, one user can be stored in multiple groups. However, the tree-structure is also present in my Windows AD hierarchy. Hence I am either using a Flat hierarchy or a Mixed hierarchy.
Changing the Datasource Configuration file to a Flat Readonly didn't solve the issue. The AD group path mentioned is correct and hence the group is visible in EP. However, I am not sure what should the UserPath be (As for now, I have kept it the same as the Group path).
Request you to please let me know what should the userpath be.
Rgds,
Sree

Logon groups not visible/usable

Similar Messages

Maybe you are looking for