NetWeaver and SNC

We are looking at the possibility of using SNC to tie User Names to related Life Number within NetWeaver. I do see that within ECC there is a SNC option however I don't see anything that "Bites me in the nose" for the SNC option within NetWeaver IDM.
Has anybody used SNC within NetWeaver IDM or the SAP NetWeaver Administrator that can help me with this task? Am I barking up the wrong tree?
Thanks again!
Gordon Deppe

Hi Gordon,
some questions:
- you've maintained the responsible profile parameters at your instance profile for each ABAP-Server you want to use SNC?
- you've provided the necessary dll file to all pcs? (don't know whether this is still necessary or not)
- the creation of the snc name for your users looks like this p:<userprincipalname> (e.g. p:aheinekamp(at)corp.com)
- normal login is still possible? so you have to enable the appropriate flag at the snc tab within SU01
Kind regards,
Achim Heinekamp

Similar Messages

Issue with parallel operation of SAP NW SSO 2.0 and SNC Client Encryption (Logon Groups)

Hi!
One of our customers is using the SNC Client Encryption solution to ensure encryption using SNC (based on Kerberos Technology) for their SAP GUI Dialog connections. They have lots of SAP backends DEV, QAS, PRD all with the SNC Client Encryption SNC Lib installed. The profile parameter snc/identity/as contains the following value: p:CN=SAP/<ServiceAccount>@<DOMAIN>.
Example: p:CN=SAP/[email protected]
The customer is using one AD Service Account "SNCServiceUser" with one registered SPN "SAP/SNCServiceUser" for all systems (yes, this is not recommended... but the case).
Important: All users use group entries in the SAP Logon (saplogin.ini). Means, for SAP logon the SNC name can not be manually configured on the SAP Front End. With group logons, the application server's SNC name is dynamically requested by the message server each time a SAP GUI connection is started. The SNC Name is greyed out in this case as dynamically obtained from the applications servers profile parameter snc/identity/as.
Now our customer implements SAP NetWeaver Single Sign-On 2.0 within his landscape. Based on the Secure Login Server 2.0 (SP3) he likes to use X.509 based authentication to his AS ABAP backends using SAP GUI SNC while others still use SNC Client Encryption.
Replacing the SNC Library on the AS ABAP
The Secure Login Library 2.0 (SP3) has been installed on one of the ABAP systems and the SNC Client Encryption SNC Library (which is based on SSO 1.0) is no longer used, thus we changed the parameter snc/gssapi_lib to point to the new SNC library. We removed the old PSE.ZIP containing the keytab and created the new SAPSNCSKERB.PSE incl. the keytab and proper credentials. To ensure parallel operation, we kept the snc/identity/as value as is = p:CN=SAP/[email protected].
After restarting the system with initialized Secure Login Library 2.0, still the SNC client encryption works fine for existing users.
The problem
We created on the Secure Login Server an SNC certificate for the AS ABAP which has the following X.509 Distinguised Name Fomat: CN=SAP/[email protected] This is to avoid having to change the snc/identity/as to an "real" X.509 DN which would lead to non-working SNC Client Encryption for all the other users using SAP GUI and logon groups.
As soon as we install the PSE via STRUST on the system the SNC Client Encryption solution stops working with error „Server refuses kerberos key exchange“.
As part of an pilot implementation we have installed Secure Login Client 2.0 (SP3) on some test PCs. The test PC with SLC is able to perform Single Sign-On with SNC based on X.509 (incl. Encryption) to the ABAP system.
Seems the SAP System now only tries to do X.509 based authentication thus key exchange fails. The problem is, we cannot change the snc/identity/as value because of the logon groups. If we were able to do so, we would in any case set the server identity to X.509 DN and in addition create the SAPSNCSKERB.PSE incl. keytab. This should work, as confirmed by SAP see this post.
Any ideas how to solve this and have both solutions in parallel?
Appreciate any help.
Regards,
Carsten

Hi all,
we was able to fix the issue. It was an issue with the customers cluster configuration and the $SECUDIR variable. This tricky issue leads to non working or sporadic working SNC Client Encryption...
This was how the configuration looks before:
Environment variable $SECUDIR is defined:
"/ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec“
sapgenpse seclogin -l -v
running seclogin with USER="<SID>adm"
Credentials for username '<SID>adm':
0 (LPS:OFF):
 (LPS:OFF): /ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCSKERB.pse
1 (LPS:OFF):
 (LPS:OFF): /usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCS.pse
After changing the $SECUDIR to "/usr/sap/<SID>/DVEBMGSxx/sec“ and re-creating the credentials, it worked like a charm.
As a result of this we can confirm, this configuration and SNC Client Encryption works with CommonCryptoLib in parallel to the SSO configuration.
And Valerie was right with 2. SLC starting from V. 1.0 SP2 PL3 was able to convert the CN= part of the SNC Name into an SPN, was my mistake. In addition SNC Client Encryption starting from Version 1 SP1 PL1 does this also.. just to make this clear
Thread closed hope this helps someone
Carsten

Configuration related to PO colabration in ECC and SNC

Hi
Can anybody throw light configuration related to PO colabration in ECC and SNC.
Regards
Raj

Hi Raj,
Below link provide you SNC information about Integration ECCPISNC and functionality of SNC
link http://help.sap.com/saphelp_snc70/helpdata/EN/b4/f20483605b0d4fa856354a986e900d/frameset.htm but if you want configuration document then Click on below link
http://help.sap.com/bp_bblibrary/500/BBlibrary_start.htm
A07_BB_ConfigGuide_EN_DE.doc (Kanban processing)
S32_BB_ConfigGuide_EN_DE.doc (SCM setting)
S34_BB_ConfigGuide_EN_DE.doc (Supplier)
S55_BB_ConfigGuide_EN_DE.doc (Contract Manufacturing Procurement)
hope this documents are useful.
Thanks,
Nikhil

[Bug report] ONVIF and SNC-DH140

Hi,
I’m a software designer in a French Home Automation company, and I’ve been working in the last weeks to create an ONVIF client able to support all kind of ONVIF cameras. For this, I was using a Sony SNC-DH140 camera for all my tests.
However, since a recent firmware update (1.34.00, the exact information of the firmware are : *V Series: SNC-CH140, CH180, CH240, CH280, DH140, DH140T, DH180, DH240, DH240T, DH280 *SNC-CH/DH V Series V1.34 Firmware Upgrade), the camera simply doesn’t answer to any ONVIF calls anymore (I just get 417 Expectation Failed errors).
I’ve tried to do a factory reset, and that indeed brought back the camera to those settings, but the Firmware wasn’t downgraded. It seems the Sony website does not offer support to download older firmware versions so I cant even try to downgrade it myself.
Is this ONVIF-handling change intended or a bug? Will another firmware update come soon ?
Bye
Solved!
Go to Solution.

To the OP:
I believe the 417 Expectation Failed error is caused because the server does not support 100 Continue in HTTP POST.
I had this problem with Sony and Panasonic cameras. It can be circumvented by disabling the "Expect 100 Continue" feature. In C#, this would look like:
System.Net.ServicePointManager.Expect100Continue = false;
Hope this helps. It did for me with SNC-DH240 and SNC-CH140.

NetWeaver and FileNet

Hi,
Does anybody have any info about:
1. Comparison between NetWeaver's Content Management and FileNet's Web Content Management.
2. Integration between Netweaver and FileNet's Web Content Management.
Any info will help me.
Warm Regards,
Manish

This reply may be a little old but someone else may find this helpful. Answers to your questions.
1. FileNet's Enterprise Content Management (as oppose to Web) is far superior content management when compared to NW Content Management. Below are just a few points.
- Better version control
- Ability to create unique document and folder classes
- Metadata (master data) not limited to SAP standards
- Document based workflows as opposed to business process workflows
2. Integration can be achieved via FileNets web service or Java API. FileNet normally recommend FileNet ACSAP (application connector for SAP) but please consider this carefully. It'll only work for basic archivelink integration for some modules of R/3 only. Try it with anything else and you'll hit a wall with FileNet when it comes to support. They won't support it.
Last tip. There is very little information about ACSAP out there. Don't listen to what your FileNet sales rep tells you. Speak to an ACSAP developer if you can.
Hope this helps.
Cheers

SAP NetWeaver and SAP ERP Central Component 6.0 installed or not,how to fin

Hello Friends,
I would like to know that in my system whether
 SAP NetWeaver and SAP ERP Central Component 6.0
Installed or not?How to check whether these are installed or not?
and where can i Find in the system?
Regards
Preethi

Kinldy make clear cut query before you look for an answer to that!
To check for the WAS-J2EE Stack installation - kindly use the following link to access your WAS j22 Start page "http://hostname:5XX00" where XX will be the System No. for SAP System.
Incase if you want to find out that you have a EP installed: goto:-
"http://hostname:5XX00/irj"
For XI , you can go to "http://hostname:5XX00/rep"
Incase the links work properly the software component is installed.
PREREQUISITE for the above CHECKS:
1) The system number should be correct.
2) The Fully qualified domain name should be used for the hostname.
3) The Software components and the J2EE Stack should be operational.
(ON the SAP SERVER)On OS level --> you can Go and have a look for the following directories existence --->
1) usr/sap/SID/DV*.../j2ee,
2) usr/sap/SID/DV*.../SDM
This means that you have atleast the Java Stack installed on your SAP Server.
Next in the task manager(WINDOWS) / process level(UNIX) you can check if you have process "jlaunch process under the sidadm owner".
In SAP Frontend-GUI :
You can login and go to T-Code ST11 and check for the log files
dev_disp, dev_dispatcher, dev_server0, dev_jcontrol, dev_bootstrapID.......,
these file will give you info regarding the J2ee stack and its components....
Hope this helps you...
Regards,
Prem

Web Dispatcher and SNC WAS

If I connect my Web Dispatcher to a WAS that is not running SNC it connects okay but if I point it to a WAS that is running SNC I get SNC related arrors in the file dev_webdisp.log:
[Thr 6968] *** ERROR => invalid service descriptor token 'p:GB\SAPServiceQAS' [ictxxroute_r 2681]
[Thr 6968] *** ERROR => syntax error in text description near line 4 [ictxxroute_r 3135]
[Thr 6968] *** ERROR => IcrUpdateServerPoolFromDescrString() failed 6 [icrxx.c 1762]
If I call the /sap/public/ping service on the WAS directly from Internet Explorer on my PC it connects okay, but if I call the same service from my PC via the Web Dispatcher it failes with the above message in the log file and the below HTTP message:
500 Dispatching Error
Dispatching Error
Error: -26
Version: 6040
Component: HTTP_ROUTE
Date/Time: Tue Feb 07 12:47:50 2006
Module: http_route.c
Line: 2352
Server: UKLONSAP011_QE7_10
Detail: no valid destination server available for '!ALL' rc=13
I cannot find any information relating to the Web Dispatcher and SNC on help.sap.com or OSS.
Do I have to install the SNC library onto the Web Dispatcher server? If so, how do I then reference it?
Any ideas?
Thanks.
Paul

Hi Paul,
SNC library is not required for Web Dispatcher.
The problem seems to be the data the message server provides with the URL http://<msg_host>:<msg_http_port>/msgserver/text/logon?version=1.2
If SNC is activated you will have an entry for RFCS in the data like:
RFCS bin.wdf.sap.corp 4853 p/secude:CN=BIN, O=SAP-AG, C=DE
The error " invalid service descriptor token 'p:GB\SAPServiceQAS' " indicates that the parser could not parse the response from the message server. Then the server list is empty and you get the "dispatching error".
Maybe the backslash lets the parser struggle. Please check that you have an up to date version running (6.40 kernel patch level > 90). If that is the case, then this problem should be handled by OSS message.
Kind regards,
 Oliver

SAP ECC, SRM and SNC integraton

Hi everyone,
I want to know if we can integrate ECC, SRM and SNC. We don't want to use SUS, we want to use SNC. Is it possible to have this implementation? If yes, what is the correct technical scenario for SRM (Classic or Extended Classic)?
Thanks,
Ivá

Hello Iván,
Regarding your first query, "What kind of changes we can do in SNC " --> As a vendor we can modify the PO quantity and PO delivery date only and update the same as POR. We cannot add any items in the PO.
Regarding your next query ," changes cannot be send to PO if we are in extended classic?" --> i think we can send the changes to the SNC even in the extended classic scenario , but we need to then customize our system accordingly with regards to the document types used , vendor classification , idoc and xml mapping , etc.
We will be using some sort of SRM - SUS integration here in the extended classic.
Also changes can be synched between SRM - ERP - SNC. and we can have the extended classic with ASN creation in SNC.
Best Regards,
Rahul

Netweaver and Tendering with shipments

Hi,
I have problem which I need more background information how to solve it.
We make shipments and deliveries when transporting goods from consolidation points to end customer. Tendering Tab in shipment is not so familiar for me. I have now resolved that we can make freight cost shipment and transportation order for one shipment, but how that Tendering Tab works with Netweaver? If we send request of quotation from shipment into Netweaver and our TSP have rights to Netweaver and they make actions there how it show into shipment? Or have in SAP some other transactions how to tender transportation costs and comparing quotations between different TSP's.
Thanks for the answers already!
- Antti Kaituri -

SAP don't recommend directly access to the database tables, you need to use the functions modules called RFC and BAPI to access and change data into SAP System.

Netweaver and OAS10G

Is there any documentation (white paper, research paper, etc) where we can get a comparison of Netweaver and OAS10G?

Hi alex,
Netweaver and java are equally vast to explain in sentences.Can u tell me ,whta information you are actually looking for?
Netweaver is a open intgeration platform to integrate people,information n business processes from hetergenous business environments.
Netweaver has taken ABAP,which is SAP product as basis foundation and implemented JAVA on it to enable web service applications.
Java as you know,is a platform independent language which has its own Runtime environment and can be implemented on any platform.That adds on to product value of netweaver.
Netweaver has EP(enterprise portal) for people integration
XI(exchange infrastructure) for process integration
and BI(Business intelligence) for infromation mobility.
I can explain u in detail,if u want to know about any component in detail.
reward points if helpful..........

Netweaver and Java

Any information between netweaver and Java.
PLz send to [email protected]

Hi alex,
Netweaver and java are equally vast to explain in sentences.Can u tell me ,whta information you are actually looking for?
Netweaver is a open intgeration platform to integrate people,information n business processes from hetergenous business environments.
Netweaver has taken ABAP,which is SAP product as basis foundation and implemented JAVA on it to enable web service applications.
Java as you know,is a platform independent language which has its own Runtime environment and can be implemented on any platform.That adds on to product value of netweaver.
Netweaver has EP(enterprise portal) for people integration
XI(exchange infrastructure) for process integration
and BI(Business intelligence) for infromation mobility.
I can explain u in detail,if u want to know about any component in detail.
reward points if helpful..........

Netweaver and MySAPERP

Hi All,
I am new to SAP,I would like to know what is the relationship between Netweaver and MySAP ERP like
Is Nw2004s a part of MySAP2005? or they are different packages?.are there any documents stating the differences ?.Thanks for your time in advance.
Best Regards,
Siva

Hi, Michael.
I need upload evolution the
SapScripts ---> SmartForms ---> SAP Interactive Forms by Adobe to KM in the Portal, but need portal version working in Nw04s BI.
Componentes en ERP : MySAP ERP 2004 (v.5.0)
SAP_BASIS 640 0018 SAPKB64018 Sistema Base SAP
SAP_ABA 640 0018 SAPKA64018 Componente multiaplicaciones
ST-PI 003C_640 0001 SAPKITLPS1 SAP Solution Tools Plug-In (ST-PI 003C_6
PI_BASIS 2005_1_640 0008 SAPKIPYJ68 Basis Plug-In (PI_BASIS) 2004_1_640
SAP_BW 350 0017 SAPKW35017 Business Information Warehouse
SAP_HR 500 0018 SAPKE50018 Gestión de Recursos Humanos
SAP_APPL 500 0012 SAPKH50012 Logísitica y Finanzas
PI 2004_1_500 0004 SAPKIPZI64 PI 2004_1_500 : Add-On Delta Upgrade
EA-IPPE 300 0004 SAPKGPIC04 SAP R/3 Enterprise iPPE
EA-RETAIL 500 0005 SAPKGPRC05 SAP R/3 Enterprise Retail
EA-PS 500 0012 SAPKGPPC12 SAP R/3 Enterprise Public Services
EA-HR 500 0005 SAPKGPHC05 SAP R/3 Enterprise AddOn HR
EA-GLTRADE 500 0005 SAPKGPGC05 SAP R/3 Enterprise Global Trade
EA-FINSERV 500 0005 SAPKGPFC05 SAP R/3 Enterprise Financial Services
EA-DFPS 500 0005 SAPKGPDC05 SAP R/3 Enterprise Defense Forces & Public Security
EA-APPL 500 0005 SAPKGPAC05 SAP R/3 Enterprise AddOn PLM, SCM, Financials
We Making New Install in the Servers, but need know the components required or more info ...
Thank you ,,, any idea ?

What is Netweaver and How Visual compser is linked to Netweaver

Hi guru
Tell me What is Netweaver and How Visual compser is linked to Netweaver
Thanks in advace

Hi namit,
NetWeaver is a SOA plattform. It allows to build business application with the services and the tools, which are released by the SAP. Enough said about that, you can find so much information about NetWeaver in the internet and of course of the SAP websites and here in the SDN. NetWeaver is the future for business applications.
Visual Composer is part of the SAP Portal, which is part of the NetWeaver.
You can also get information about VC in the<a href="https://wiki.sdn.sap.com/wiki/display/VC/Main">VC wiki</a>.
Best Regards,
Marcel

Difference between ICH and SNC

Hi All,
Can some one explain what is the difference between ICH and SNC..

Hi Prawmu,
You can also check below sap help link
SAP SNC 7.0
http://help.sap.com/saphelp_snc70/helpdata/EN/46/41fb29cf955e40e10000000a11466f/frameset.htm
SAP SNC 5.1
http://help.sap.com/saphelp_snc2007/helpdata/EN/dd/8e51341a06084de10000009b38f83b/frameset.htm
SAP ICH/SNC 5.0
http://help.sap.com/saphelp_scm50/helpdata/en/b4/f20483605b0d4fa856354a986e900d/frameset.htm
Regards,
Nikhil

Difference between SRM and SNC

Hi all,
i frequently get this question from many of my friends who work on SRM, as what is the difference between SRM and SNC.Because the supplier collaboration part of SNC resemles with few functionalities of SRM.
What kind of industries go for SRM?
What kind of industries go for SNC?
Regards,
Nandan

Hi Nandan
SRM and SNC have few functionalities common.
SUS and Plan driven procurement. Like SNC Purchase Order Collaboration, these are direct procurement(Supplier known).
Where SRM has other business process like Self Service Procurement, where in they can create quotations and then compare and select the best supplier(In direct Procurement)
In SNC we do not support Service Orders, We only support Quantity Orders. Where SRM can support both.
They have other Business process(SAP SRM Supplier Collaboration), where in the solutions and backend systems like SAP Supplier Relationship Management (SRM), SAP Product Lifecycle Management (PLM), Collaboration Folders (cFolders), and SAP Supply Chain Management (SCM), to provide collaborative planning, sourcing, procurement.
Where SNC plays a material monitor here communicating between OEM & Supplier Org
SRM support both quantity procurement and service procurement directly and indirectly.
Where in SNC supports direct quantity procurement.
It is the business need, upon which they select SNC or SRM.
Best Regards
Vinod

NetWeaver and SNC

Similar Messages

Maybe you are looking for