MDM trusted connection

hi all,
i would like to know how trusted connection to manage the connectivity to MDM and perform MDM data manipulation.
for example,
i have an ID that can access to data manager with restriction, which this ID can only view record but not alter any record seen in Data manager.
If trusted connection is set based on this ID, can we still perform any update of MDM data?
Thanks!
Shanti

As sudhanshu mentioned, an MDM trust works on an IP address level. If an MDM server trusts an IP address then ALL logins from that IP adress are automatically authenticated without providing a password.
The trust is therefore something to setup between MDM and (for example) a portal server. It's not something to setup between MDM and each client / enduser.
If you setup the trust between MDM and the portal then you still have to maintain user mapping on the portal, but no passwords are required. The MDM username specified in the user mapping will still be used to log the user into MDM, so they will still be restricted to whatever MDM permissions they would have if they used (for example) the Data Manager and had to specify a username AND password to login.
HTH,
Mark

Similar Messages

  • Trusted Connection Problem while creating a project in MDM WD Confg.Manager

    Hi Experts,
    We have the Netweaver instance (CE7.2) and MDM instance (MDM7.1SP07) installed in the same machine.
    In our current scenario we are trying to create a projects in the MDM WD Configuration Manager for displaying the MDM records.
    Things Done:-
    1) Created allow.ip file and added the IP address of the server and also added the IP address of the Local Host (127.0.0.1).
    2) Same user exists in the Netweaver and as well as in the MDM repository with same case.
    3) Created a necessary MDM Destination.
    4) After adding the entry in the allow.ip file, i have restarted the MDM server too.
    Now when i create a project in the Config. Manager, after selecting the MDM destination i get a Trusted Connection error.
    Cannot retrieve language list from repository [null] on server [null]. UserConnectionException: Can not connect with UserSessionContext to repository 'Inbox' on the server 'ctsinsapnw7'.,  Can not connect with UserSessionContext to repository 'Inbox' on the server 10.239.31.178'.,  Can not resolve JCA connection. Cause exception: Connection Failed: Cannot create JCA connection. Cause exception: Failed to create trusted connection to MDM server '10.239.31.178' for user 'mdmuser' because server is not defined as trusted, error code: ConnectionNotTrusted,  com.sap.mdm.internal.protocol.manual.ServerException: The connection is not trusted
    Is there anything to be done. Any help on resolving this will be very much appreciated.
    Regards,
    Prasanna Kumar R Y

    Please make sure of below things...
    1. Location of allow.ip file.
             Default location is exe folder where your MDM server executable are available.
    2. If not using default location,
             Then check the entry of 'TrustedFiles Dir" property in mds.ini file.
    3. Is server stops completely?
             Its very important to restart the server.
             Sometime console may show that the server is stopped but server might be running.
             If possible please check whether server stopped, using Console on different machines.
    4. Check the log of MDM server while starting and stopping the MDM server.
             Please pest the log messages in this thread to help you better.

  • How do I add a trusted connection one time in firefox?

    I have a user who is trying to access my department's external site. The pages that she is trying to access pulls data from a different domain (One in our DMZ) than the external host domain. This DMZ domain is a trusted domain and pulling data from this domain has worked well for years on multiple browsers without incident. Now for every other page that hits this internal DMZ server the user is getting "This connection is not trusted" and has to go through the manual exception dance to see her data. We host hundreds of pages and having to do this for each one is going to drive people to grab another browser quickly. I got this user working on Chrome without a problem and have tested it in IE without problem.
    I have recreated the cert8.db file in her profile and run into the same problem after reboot.
    How do I add a trusted connection for this domain one time?

    This should add the permanent exception:
    [https://support.mozilla.org/en-US/kb/connection-untrusted-error-message#w_bypassing-the-warning Connection Untrusted Error Message: Bypassing the Warning]
    However if it is not staying until the next time that the user opens up Firefox, is it possible that they are in permanent private browsing? [[Private Browsing - Browse the web without saving information about the sites you visit]] - that should have instructions to get in and out of it.

  • MDM- PI Connection Error

    Hi Experts,
    Any idea on the below error showin in the PI MDM Adapter Sender communication channel while connecting to MDM.
    I feel the error is something related to patch mismatch??
    Error as  below:
    MDM Adapter listener could not start due to: Can not create repository session '<server=10.250.4.218 serverUser=Admin repository=VENDOR_HZL_112010_V1 user=Admin>' caused by: class com.sap.mdm.connector.connection.MdmConnectionSpec:sap.com/com.sap.mdm.tech.connector"@"com.sap.engine.boot.loader.ResourceMultiParentClassLoader"@"512ed845"@"unregistered incompatible with class com.sap.mdm.connector.connection.MdmConnectionSpec:sap.com/com.sap.mdm.tech.connector"@"com.sap.engine.boot.loader.ResourceMultiParentClassLoader"@"18059292@alive
    Cheers
    Dhwani

    Please check this discussion yes , this is a patch issue
    Re: MDM Unknownserver in PI
    regards
    Ninad

  • How to establish a trusted connection with JDBC for SQL SERVER 2000

    Hi!I am using jdk 1.4 and eclipse 3.3.
    I create a servlet in eclipse with in-build tomcat.
    When I run it ,it was working perfectlly has it was suppose to work.
    In this servlet I connect to a sql 2000 database using jdbc-odbc bridge driver.
    But when I tried to deploy the servlet on tomcat 5.5 manully on the same machine ,it gave me error saying
    [Microsoft][SQLServer JDBC Driver][SQLServer]Login failed
    for user 'sa'
    I searched around some post and found that ok ,I need trusted connection
    But I have 2 Questions
    1). Why was in eclipse I was able to connect to the SQL server and why not in the servlet which I deployed manully on tomcat.
    2). How do I create a trusted connection with JDBC for SQL server 2000
    Thnaks for your help in advance.

    Hi! duffymo ,QussayNajjar ,dvohra09 .
    Thank for help.
    The ideas are really great.
    I am trying generate reports for my company.
    When I used eclipse the code worked perfectly.
    below is code which I used
    out.println("Calling For Class Name<br>");
    Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
    out.println("Calling For Class Name success Now calling database <br>");
    1). jdbcConnection = DriverManager.getConnection("jdbc:odbc:SQLJasper");
    2). jdbcConnection = DriverManager.getConnection("jdbc:odbc:Driver={SQL Server};Server=ServerName;Database=tempdb");
    3). jdbcConnection = DriverManager.getConnection("jdbc:odbc:Driver={SQL Server};Server=ServerName;Database=tempdb","UID=UserName","Password=Password");
    out.println("connecting to database success<br>");
    I had tried to connect the database using this three way.
    In 1st I tried using DSN name .
    Next 2 self explainer for expert like you.
    I used to 2nd variant to connect in eclipse and it worked fine.
    I not an expert in java ,I just doing some research on jasperReport.
    My best guest is that eclipse is using some library files of which I have no clue.
    Thank's for your help,I appretiate it.
    Once again thank a billion.
    Sorry for the messy righting.

  • Trusted Connection - C# Console App

    I have been developing a C# Console Application in VS2008, and am having trouble figuring out how to use a Trusted Connection when generating the report, rather than passing it my SQL Authentication username and password.  It's connecting to SQL Server 2005. ODBC (RDO).
    As of now, the application runs the report with two dates being passed, then exports it as a PDF. It works when passing it the connectioninfo, but how can I make it windows authenticated? I have used the following lines to get it to work using SQL authentication.
    crConnectionInfo.ServerName = "server";
    crConnectionInfo.DatabaseName = "db";
    crConnectionInfo.UserID = "user";
    crConnectionInfo.Password = "pass";
    Edited by: djhorn on Feb 1, 2010 5:28 PM

    Running CR XI with .NET 2008 gives me the ebee jeebes. All kinds of problems will come down eventually for you. Honest. (Reports created in CR XI and run with CR 10.5 are OK as long as you are not using features that are not present in CR 10.5 (dynamic parameters, LOVs, etc.)).
    10.5 is OK, but integrated security is not handled by the report (or the CR APIs) as such. It is handled by the app / process which you will have to run under a system account that could validate the users. If the database is on a different server than the app, this constitutes a double hop and will not work. The Article I referenced (https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b021e47e-be1d-2b10-c6b2-efa9db3abd6b) applies to CR 11.5 as well as CR 2008 (v 12.x). So, for you going to CR 2008 may be the best option(?). An eval of CR 2008 is available from here:
    http://www.sap.com/solutions/sapbusinessobjects/sme/freetrials/index.epx
    Ludek

  • Hide a company to a windows group connect with trusted connection

    I mean, how can I do, to create two groups in the windows active directory, and do users member of the first group and other to the second groups.
    Now, when a user from the first group connect with client sap b1 with trusted connections doesn't see all companies (databases) but only those that I decide. The same thinks with the second group.
    I don't want to use the 'sa' connections, because in the sap b1 8.8 the connections will be on server.

    Not sure if understood correctly.
    If you want to assign to each user only specific companies and you are using trusted connection to sql, you may modify
    tmsp_getcomplist stored procedure in sbo_common for example as
    USE [SBO-COMMON]
    GO
    /****** Object:  StoredProcedure [dbo].[TmSp_GetCompList]    Script Date: 09/04/2009 10:01:56 ******/
    SET ANSI_NULLS ON
    GO
    SET QUOTED_IDENTIFIER ON
    GO
    ALTER proc [dbo].[TmSp_GetCompList]
    --With Encryption
    as
    begin
      set nocount on
      declare @comps int
      set @comps = 0
      select @comps = count(1) from SRGC
      if (@comps <= 0)
      begin
         exec TmSp_RefreshCompList
      end
    declare @user as nvarchar(100)
    SELECT @user = SYSTEM_USER
      select * from SRGC
          where dbUser =   convert(varchar(50), CURRENT_USER)
    and
    (@user <> 'John' or (@user = 'John' and dbname = 'Demo') )
    end
    User John in this example will wee only demo company and the rest users will see all companies.  Hope it helps.

  • MDM -LDAP connectivity

    Hello MDM guru's,
    Happy New Year
    Could anyone guide me how to achive MDM -LDAP connectivity. can any one please share their document used for above said connectivity in their company or steps how to perform it.
    Thanks in Advance
    cheers
    Srihari Reddy

    If you check the MDM Console reference guide here :
    https://websmp105.sap-ag.de/~sapidb/011000358700006291622006E
    You will find that there is a complete appendix regarding how MDM and LDAP is working and how to implement it.
    regards
    Mark

  • MDM-BW connection

    Hi All
    I would like to ask you about MDM-PI connection. There are two possibilities to send data from MDM to BW.
    One is PI, other one Open Hub.
    We would like to implemend Open Hub. Did you tried it, how it works, I am wondering if we can have MDM test server work both PI and Open Hub at that same time.
    Please share if you have any experiance with Open Hub.
    Thank you
    BR
    Rafal Paczynski

    Hi
    I have some pages I print out form SAP but do not have the link.
    Here is something I was also reading:
    http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b01e4269-f744-2b10-929b-fa7b49aac540
    Thank you for help.
    BR
    Rafal

  • Trusted Connections in 8.8 PL16

    Hi,
    I have upgraded a site to PL16 and am trying to cinfigure to use trusted connections. The SQL Sever & the license server are on separate boxes
    The site's IT provider have created a user code for us which has "log on as a service" rights and is a member of the user group that has DB Owner rights to the SAP databases and SBO-Common.
    The License server will not accept the user with the message User credentials are not valid. Can anyone help with the minimum requirements for thos user in order to get it configured?
    They are currently unable to use any lauots as these are all set up to use trusted & I don't want to have to edit them all!
    Thanks

    Hi,
    you may try to apply the solution from this link:
    http://www.sqldev.org/sql-server-data-access/integrated-securitywindows-authentication-does-not-work-in-windows-7-vista-59375.shtml
    JimM

  • SAPGUI for JAVA - "pre"define a trusted connection in "trustClassification" file on Linux

    Hello,
    I would like to deploy a new version of SAPGUI 730 for JAVA (JAVAGUI or PlatinGUI). And this time, to prevent my user from choosing the wrong "trust level classification" for the productive system, I would like to deploy a "trustClassification" file with a predefined trusted connection.
    In the help webpage called "Security policy", different configuration files are proposed :
    - <system preferences>/trustClassification
    - <user preferences>/trustClassification
    I easily found the "<user preferences>" directory in "/home/<user>/.SAPGUI" but this is not relevant for a central deployment with hundreds of people.
    And until now, I didn't find the "<system preferences>" directory. Can someone tell me what is it ?
    I'm using Linux Ubuntu 12.
    Regards,
    Simon

    Hello Simon,
    when you open About dialog and press the "more info" button, you get a long list of information.
    Beginning of the "Path Information", you will see a line starting with "SAP GUI system prefs".
    The value should be what you are looking for.
    Best regards
    Rolf-Martin

  • Trusted Connection

    Hi,
    How to create trusted connections?

    Steps:
    1. First establish the RFC Connections between the systems.
    2. Then in the trusting system register the system that the system wants to trust using
       the tcode  SMT1
    3. Then go to the system that has been registered as trusted in the trusting system and
       execute the tcode SMT2 to chk whether you have created the trusted connection
       successfully. Return code zero indicates your connection is successful.

  • Centralize/De-Centralize using Trusted connections

    Hi experts,
    I have a question regarding Trusted Connections for Centralized GRC implementation. According to some of the SAP guidelines we are using trusted connections (Note: 1701047 and several others).  Now the problem that this is creating is that if I use trusted connections for all Connection Settings (AUTH, PROV, ROLMG and SUPMG) then all users need to be created locally (GRC) and in the target system.  We have played with the config for S_RFCACL but independent of what we do since is trusted we haven’t found a way to bypass the user creation everywhere.  Later we try just having 2 connections (one trusted and another non trusted) for each system but this is creating duplicate values (every data element on trusted and non-trusted version).  Is there a way to go around this? 

    Did you read the file SSLNOTES.txt included with JavaMail?
    If you're connecting to a server with a self-signed certificate, you'll need to
    load that certificate into your trust store, or you'll need to provide your own
    trust manager. The InstallCert program, referenced from the JavaMail FAQ,
    might help.

  • Does Microsoft SQL Server 2k JDBC Driver SP3 support "trusted connections"?

    I get the following error when attempting to connect to a SQL Server instance via JDBC :-
    [Microsoft][SQLServer 2000 Driver for JDBC][SQLServer]Login failed for user '<username>'. Reason: Not associated with a trusted SQL Server connection.
    Does Microsoft SQL Server 2000 JDBC SP3 Driver support "trusted connections"?

    No, the MSDE instance I'm trying to connect to from my J2 application is configured as "Integrated Windows Authentication" ONLY (i.e not "mixed mode" and deliberately so) hence my search for a JDBC driver that supports o/s-based authentication.
    I appear to have found one now however at it appears that DataDirect's JDBC driver supports NTLM and Kerberos authenicaiton on Windows (although I haven't got it working yet).
    Thanks for your reply tho'

  • 8.8 Connection Settings & Trusted Connections

    Hi,
    Has anyone managed to get 8.8 to use trusted connections from clients rather than a database user?
    I have a customer who has two databases, and two groups of users, one that can access one database & one that can access the other, with a few users accessing both.
    This has previously been managed using user groups.
    We are now having issues as we cannot seem to get anything to save in the Trusted Connections username & password.
    Ideally we would like to specify user groups.
    I have seen a couple of related threads, but not found anyone who has a resolution?
    Thanks

    You're welcome Julie.
    To know how to use SQL server authentication, pls read  the solution in the note 677884. let me know if you can't open the note.
    if you use trusted connection:
    SQL Server will use WindowsAuthentication to validate your access to the SQL server instance. Depending
    on how you are connecting you may use the Trusted_Connection or Integrated Security options in the connection string. It does not mean that you will have permissions to connect or permissions on any securables (although by default local administrators will be allocated System Administrator privileges). These will still need to be granted either directly or indirecty (e.g through a role or windows security group) to that user.
    the sa user id login properties can use windows authentication or sql server authentication.
    You may check these links to find out the differences between windows authentication and sql server authentication:
    http://databases.about.com/od/sqlserver/a/authentication.htm
    http://database.ittoolbox.com/documents/windows-authentication-vs-sql-server-authentication-18609
    You could to try to create new login id in SQL server 2008 and select windows authentication. you will succeed to create if you have created valid window credential e.g. sboserver\julie_j. you use this new sql login id in the connection strings of license manager.
    if the workstation user have had valid window credential to login to the sboserver, then the user is able to run SBO.
    JimM

Maybe you are looking for