New environment: URL timeouts, Configuration failures, EAS login failures

We are migrating hardware of our 9.3.1 environment. We have completely patched our Essbase, EAS, Planning, Reporting, Shared Services to the latest and greatest patches (Essbase 9.3.1.6, EAS 9.3.1.5, Planning 9.3.1.3, SS 9.3.1.1, Reporting 9.3.1.3)
We are in a development environment and 'anything goes' but we are noticing that pulling up Shared Services, Planning URL, Webconsole for EAS are timing out. We are getting time out errors during configuration utilities. The services on one server (for example shared services) are taking over 4 minutes to 'acknowledged'.
Also using esscmd we did a createapp command it takes over 15 minutes to complete.
Could the MSAD setting in Shared Services (we use MSAD for our users, our groups are native) cause the timeouts? In reviewing many log files there is a connection timeout to css.xml which references an external MSAD server that is not in the development domain.
Just look for avenues/ideas/logs to check..
Thanks
JTS

Jbooth and John,
One thing I would like to gripe, why does EAS and Essbase have an installer yet Shared Services requires you to pick and replace various files which just increases the room for error.
According to all documentation we have applied the correct .jar/.ear and other related files to EAS server when stated. We are going to review all logs and patches and then may reapply some to resolve the issue.
I a third note...
Via windows I skipped over a patch for business rules for Shared Services because I wasn't extracting/compating ear files correctly.
I see in Hyperion/common/JDK/Sun/1.4.2/bin the executable to extract/compact jar/ear files but it doesn't work via the windows command prompt. I think this could be our problem.
How can we successfully expand/compact jar/ear files in a Windows environment?
I looked via Google and though it gives me syntax none appear to work
JTS

Similar Messages

Historical Reporting Client Login Failure - UCCX 7.0(1)

We're experiencing intermittent login failures with the Historical Reporting Client, extract from the log file below:
1: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK: Error # 35761 ,Description= Request timed out ,LastDllError= 0
2: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK:Authentication response was NOT received from (http://<ip address>/histRepWebSrvrComp/histRepClientsServlet)
3: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
4: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Authentication response was NOT received from (http://ip address/histRepWebSrvrComp/histRepClientsServlet)
5: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
6: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Connection to web server failed due to: 12017 : Operation cancelled
7: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Connection to web server failed due to: 12017 : Operation cancelled
8: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Failed to load authentication response due to empty XML buffer from authentication servlet)
9: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
Does anyone know why this may be happening as it's driving the customer mad. User can usually login after a few attempts.
The authentication timeout is set to 15 seconds, surely this is more than enough time or should we increase the timer?
Any advice much appreciated.

Hi Robert
Thanks for the response and all very good suggestions which should help Chris narrow down his particular issue.
It's been about a year since we last looked at this so I'd quite forgotten most of the diagnostics we'd done however we did go through most of the same diagnostics ourselves but the resolution was hampered due to the fact we support the telephony/WAN and another third party supports the desktops and LAN infrastructure so after months of to and fro with the customer and their third party (and many, many man hours) we eventually left the risk with the customer and investigations never progressed any further.
1.) Upgrade to UCCX 7.0SR5. This is a very stable release of code with few open bugs or caveats against it.
            - Agreed. We also ran into other bugs which required an upgrade.
2.) Verify that the active NIC is indeed at the top of the bindings order. Just having it active isn't enough, there needs to be the further test of moving to the top of the bindings order.
            - We did check this.
3.) Verify that the hosts file on the UCCX server(s) has the external IP and hostname of the server in it.
            - Did this too.
4.) Check the remote locations to verify that the network is correctly configured, there are no line errors on the WAN circuits, no misconfiguration on the switch/router ports and that QOS is in place across the network.
            - This part of the investigation stalled due to another 3rd party supporting the onsite network however no WAN issues were found.
5.) Try to take a test system that is on the same network as the one having HRC errors. See if it's seeing the issues. If not, progressively move out to other offices/locations until you replicate the issue and then see what has changed. Something there should hopefully point to the cause of the error.
            - We did this also, using my laptop I connected from various locations and even when using the same network connection as the end user had no problems, we did note the successful connection attempts used a slightly different network route/DNS/WINS however again got nowhere with the third party supporting this aspect of the network.
6.) Finally, you may want to consider creating external data warehouse servers so that your UCCX servers aren't serving up the HRC data.
            - Not an option for this customer, again this aspect of the service is a different third party on their own network and customer not willing to pay for additional servers for the telephony estate to provide this functionality when they only have a few CCX users.
Regards
June

SSL VPN Login failure issue

Hello,
I am having an issue with some users trying to login to our SSL VPN (Anyconnect) via ASA5505 8.2(1). Authentication is done via AD. From the same computer, the client finds the DNS name and unlocks the login username and password. When I enter a username and password and click connect, it is instantly rejected with login failure with the following event log:
Function: ConnectMgr::setPromptAttributes
File: .\ConnectMgr.cpp
Line: 2657
Invoked Function: setPromptAttributes
Return Code: -33554423 (0xFE000009)
Description: GLOBAL_ERROR_UNEXPECTED
Error text:
Login failed.
If I change the user account to another user (from the same PC), login works perfectly fine - this is only happening with 3 or 4 users - I have compared the user accounts of a failing account and a successful account and they are identical in AD.
This has been driving me crazy - as a work around for the failing users, I just created a temporary account which works perfectly fine. The request doesn't even seem to hit the ASA (there is nothing in the logs that show a failed attempt). Still troubleshooting and looking at certificate's at this point. Any help/suggestions would be greatly appreciated!! Thanks.
Regards.
After a little more testing, seems somehow related to users being in to many groups in AD.
Message was edited by: Rich Viola

Hello,
If the website is unavailable or in this case, the website is missing several characters(charts, canvas, etc or some other objects), usually could be an issue with the rewrite engine.
Solution (workaround):
You may use smart tunnel for this website, so the rewrite engine will not override any content, and it will display the website as it should.
You can implement it as follow:
Add a Bookmark
Bookmark for the service and clicking the Enable Smart Tunnel option in the Add or Edit Bookmark dialog box.
For further information you can find it here:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/configuration/guide/config/webvpn.html#wp1272236
Let me know how tit works out!
Please don't forget to rate and mark as correct the helpful Post!
David Castro,
Regards,

Need suggestion on new environment (server - database combi).

Hello,
We have two database instances (DB1 and DB2 - Both 10g) each of size 10TB. Currently, both the databases are mounted on same AIX server.
There are several schemas in each database. There will be data transfer activity between two databases. Currently we are using DB links for the same.
We are planning to build a new environment(Server / Servers) with data from both the databases.Need your inputs and suggestions on building / designing the new environment.
2 Servers with DB1 and DB2 mounted on each seperately. - Pros and cons ?
1 server with DB1 and DB2 mounted on the same server. - Pros and cons ?
1 server with 1 DB (Merging both schemas from DB1 and DB2). - Pros and cons ?
Please suggest your thoughts, advantages and constraints of the different approaches.
A few things which come to my mind instantly are : Modularity , Data transfer , Security , Ease of maintenance , Expandability of business , Architectural recommendations , Backup and Restore.
Thanks,
Anand.

Hi Arjun.Singh,
Now can I create a new database with name JKL at Server B with backup of PQR?You need a target to use the duplicate command in rman.
Is your backup of PQR a image copy?
If so you could use a classic clone procedure to create a new database.
Regards,
Tycho

It will not open Mozilla at all, it comes up with a problem box, which states on the first line: Access denied to system because of URL Filter Configuration.

Problem Report -
Access denied to system because of URL Filter Configuration.
Message ID -
FILTER_DENIED
Problem Description -
Your system was configured to deny access to the requested URL.
Possible Problem Cause -
Request denied, as specified in the local filter list configuration.
Possible Solution -
Contact your network support team if this problem persists.
It comes up with thie above in a box with two colums. i can only usse internet explorer now.

Does any body know how to fix it?
I just got off the phone to my new isp and they said they could not help me at all.

FLEX Builder Pro 3 New Flex Project cannot configure J2EE

I have FLEX Builder Pro 3 installed on a Windows XP machine. LiveCycle Data Services is installed (with Tomcat) on a Linux RHEL 5 machine. When trying to create a new FLEX project and configuring a J2EE server am very confused on what to put in Root Folder and Root URL. I have tried various paths on the Root Folder (with a drive mapped through windows and also with just using the servername) and keep getting the error message:
Invalid root. The WEB-INF/flex folder must contain either flex-config.xml or services-config.xml.
I've located the flex-confing file in the tomcat5\webapps\ROOT\WEB-INF directory, but still get the error.
Please any help would be greatly appreciated.

Are your new classes referenced from the old code? Mxmlc employs a questionable form of "as-needed" linking, so classes that are not referenced from the main application are not even compiled. This referencing requirement is recursive; that is, any classes that are to be included have to be referenced from the main application, or from classes referenced by the main application, or from classes referenced by classes referenced by the main application, and so on. But if your new classes are not referenced at all from the old code, they will be ignored.

LMS 3.2 Windows - 10 minute timeout while using TACACS+ Login Module

Hello,
we have changed our login module to TACACS+ (Non-ACS). All works fine when we use users which are set up in TACACS+. Using an account which does not exist (or only exists in CiscoWorks Local login module - even as fallback user) we register a timeout of 10 minutes until the login module fails the request (turned on Debugging and watching the stdout.log of tomcat). While running the backup.pl script it seems that the user "admin" tries to access the web server, but as this user is not set up in TACACS+ we have to wait 20 or more minutes until the backup starts. So, is there a way to set a timeout value for that login module?Is it known that the admin account is needed to perform the backup?
Thanks and kind regards
Allessandro

This delay is coming from your TACACS server. Can you shorten the authentication failure there? As for the user ID, check your System Identity User under Common Services > Server > Security > System Identity Setup. Make sure this use exists in the TACACS databases.

BPC 7.5 NW PERIODIC Measure returns error in new environment only

Recently we created a new BPC environment/server. This new environment has had HANA installed and is going through testing. In our testing we have incurred the following issue, but we are not sure if it is HANA related or just a result of something in the new environment not being set up correctly.
Our BPC LEGAL/Consolidations application is a YTD application. A basic EVDRE was created with Time in Column (expanded to month), and Entity, Account, Profit Center and Reporting Currency in the Row. The EVDRE is first expanded with the MEASURE set to YTD. The correct results are returned. The MEASURE is then changed to PERIODIC and the EVDRE expanded. The result is an error - "Errors found retrieving data".
This same EVDRE opened in any of our other environments does not result in an error and returns the correct periodic results. I have verified that the time dimension is exactly the same in the working and non-working environment. I also had the BW team verify with UJA_FORMULA_APP that the contents of the table for LEGAL/Periodic. I had them pull out the Formulas from a working and non-working environments. It appears they are the same.
QG1:
MEMBER [MEASURES].[PERIODIC] AS 'IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="INC",-[MEASURES].[/CPMB/SDATA],IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="EXP",[MEASURES].[/CPMB/SDATA],IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="AST",([MEASURES].[/CPMB/SDATA], CLOSINGPERIOD([%TIME%].[LEVEL02])),IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="LEQ",-([MEASURES].[/CPMB/SDATA], CLOSINGPERIOD([%TIME%].[LEVEL02])),-[MEASURES].[/CPMB/SDATA]))))';SOLVE_ORDER=3
QG0:
MEMBER [MEASURES].[PERIODIC] AS 'IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="INC",-[MEASURES].[/CPMB/SDATA],IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="EXP",[MEASURES].[/CPMB/SDATA],IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="AST",([MEASURES].[/CPMB/SDATA], CLOSINGPERIOD([%TIME%].[LEVEL02])),IIF([%C_ACCT_FA%].CURRENTMEMBER.PROPERTIES("2/CPMB/ACCTYPE")="LEQ",-([MEASURES].[/CPMB/SDATA], CLOSINGPERIOD([%TIME%].[LEVEL02])),-[MEASURES].[/CPMB/SDATA]))))';SOLVE_ORDER=3
Does anyone know where else we should look? Any help would be greatly appreciated.
Thanks in advance!
Deana

Hi,
If when you launch BPC Server Manager, you do not get "Cannot connect to ABAP server", this means user BPC_SYSADMIN is connecting correctly. And assuming you had invalid RFC user in BPC Web, your issue is then only with user BPC_USER (or BPC_ADMIN if the issue is with BPC Admin client only)
If you do get that error, it means the error is for more than one user, so I would look for something big missing.
In point 1 you mention domain users, make sure in BPC Server Manager under "reset login credentials" that you do not have windows users specified there as it's a common mistake, those should be your 3 BW communication users
On BPC .Net server, if you installed SAP GUI, run an MDX_PARSER test in SM59 to check librfc32.dll is working correctly
Also quite common issue it is possible your background users have wrong authorizations; in PFCG check the roles SAP_BPC_SYSADMIN SAP_BPC_ADMIN and SAP_BPC_USER were copied to customer namespace and that the role are active (user tab should be displaying green light) and assigned to the background communication users
Also check the background users are not locked in SU01 (if they are locked the password saved on .Net server was or is not matching the real password defined on NW server)
Thanks,
Julien

Overseas office spinning out - MS Exchange 2010 currently tied to company AD - Should we create a new environment or UTILISE the current Exchange.

We have a situation where our company is in the process of separation. Our office does not have domain controllers onsite - authentication is actually done at our head office - where domain controllers are in fact installed.
At our site we have an exchange server running Exchange 2010 - this obviously houses our mailboxes for domain X. The separation will mean would have to install 2 new domain controllers locally as well as either :
Disconnect Exchange from DOMAIN X and re-configure for THE NEW DOMAIN.
My question, is :
Question1
How easy would it be to disconnect our existing exchange from the current global exchange environment (where it currently fails over to an exchange in the US ) ?
Question2
Given that the exchange server can not take any down time - unless over a weekend - is disconnecting it from the current environment and re-connecting to two domain controllers a workable option ( 2 days ) As the company will be a new entity
- no data will need to be imported.
Is it better practice to disconnect the current exchange and re-connect or would it be considered more appropriate to install a complete new exchange environment. Side by side the cut over?
Question3
Licensing is another concern here - as all licensing currently comes in the MS Enterprise agreement. Does anyone know if there is a way to buy licenses or transfer the licenses that we are using for desktops / servers / exchange to a new MS Enterprise
agreement. without transferring the whole agreement as this is used by the head office. If there is no way to transfer specific licenses over to a new agreement for the new firm - is there a way of changing license keys ?
Thanks in advance for your help
Bonzo-Dog

1: If it's Production Server and Holding the Active Copy of Database then you have to Activate all the database on another server. Once that's done, remove the server from DAG Member. But before you do that make sure you have the backup of all the databases
on the server. Once it's done you can decommission the server from the environment.
Note: You can't mount those backed up databases into another exchange environment, only option will be to export the PST from EDB file and import it into new environment Mailboxes.
2: No, you can't connect exchange server to new organization, it has to be new install.
3: About the licensing, It would be better if you talk to Microsoft about it.
https://www.microsoft.com/licensing/servicecenter/help/contact.aspx
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Service URL - location & configuration question

Running CUCM 7.1.3...
Created a service modeled after the SDK 'measurement' example, to be used as a time clock.
It queries a SQL server for validation as well as inputting information to a table.
In development, I'm using a Windows server 2008 R2, with IIS 7.0.
I created the virtual directory on the 'default website', and used the following (example) URL when putting the service into CUCM
A local user was created, an a specialized App Pool (IPTC) was applied at the website level.
http://10.0.0.1/CiscoIPServices/timeclock/menu.asp
The service worked fine.
Transferred it to the Production side, and it doesn't work.
Production side is using Windows server 2003 with IIS 6.0.
App Pool (IPTC) is applied to the Virtual Directory, rather than the website.
We've tried several variations of URL - and each comes up with an error on the phone.
Note: the website it is attached to is the outside corporate website.
It does NOT use http:// - starts straight off with www._______
Using primarily 7942 phones, but some are newer. Doesn't matter which one you're using.
?? Is the http:// a required part of the URL when configuring a service in CUCM?
?? What other possible issues could be causing this to happen?
I've provided examples of my testing, with results.
Any help would be greatly appreciated.
Thanks
Cindy
Examples: Service URL in bold -
http://10.0.x.x/CiscoIPServices/timeclock/menu.asp
Result in Browser -Bad Request (Invalid Hostname)
Result on Phone: Bad Request (Invalid Hostname)
http://www.mycompany.com/CiscoIPServices/timeclock/menu.asp
Result in Browser - Can see the XML of the page (but the http:// is stripped off the URL)
Result on phone - Error: Host Not Found
www.mycompany.com/CiscoIPServices/timeclock/menu.asp
Result in Browser - Can see the XML of the page
Result on Phone: Doesn't find the service at all.
//10.0.x.x/CiscoIPServices/timeclock/menu.asp - Error: Doesn't find the service at all.
Result in Browser -Bad Request (Invalid Hostname)
Result on Phone: Bad Request (Invalid Hostname)

Hi Cindy,
Most likely your phones do now have DNS configured and therefore are not able to resolve hostname part of service URL into IP address.
URLs with IP address may not work due to firewall between IP Phones VLAN and your production IIS or IP filters on the IIS server.
You can test the network infrastructure settings by moving your PC into the same VLAN as IP Phones and opening http://10.0.x.x/CiscoIPServices/timeclock/menu.asp via browser.
Cheers,
Boris

SP15 in Java engine failed, "Login Failure: all modules ignored"

Hi
During the installation of sp15 (with JSPM) failed, the sdm log shows:
ERROR: Cannot connect to Host: [hostname] with user name: [J2EE_ADMIN]
My instance was down so I started but now there is an error, when I try to log on to User management it give me the error: "Login Failure: all modules ignored".
I checked the logs for the server and found the following:
#1.5^H#0000000000000067000000250000596D00045A79FA4B224F#1225379843613#com.sap.engine.services.security.resource.ResourceHandl
eImpl#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_GUEST#0##n/a##da7
065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.
ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#session-pool#ge
t_session_pool#ALL#
#1.5^H#0000000000000067000000260000596D00045A79FA4B32AC#1225379843613#com.sap.engine.services.security.authentication.loginco
ntext#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.authentication.logincontext#J2EE_GUEST#0##n/a##da7
065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error##Java###Caller not authorized.
[EXCEPTION]
#1#com.sap.engine.services.security.exceptions.BaseSecurityException: Caller not authorized.
        at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:627)
        at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:513)
        at com.sap.engine.services.security.resource.ResourceContextImpl.checkPermission(ResourceContextImpl.java:45)
        at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:119)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getSessionPool(AuthenticationContextImpl.java:39
5)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContextFactory(AuthenticationContextImpl
.java:740)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContext(AuthenticationContextImpl.java:2
54)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at com.sap.engine.system.SystemLoginModule.initialize(SystemLoginModule.java:72)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:662)
        at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
        at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
        at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.getLoggedInUser(SAPJ2EEAuthenticator.java:146)
        at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.forceLoggedInUser(SAPJ2EEAuthenticator.java:231)
        at com.sap.security.core.admin.ServletAccessToLogic.getActiveUser(ServletAccessToLogic.java:141)
        at com.sap.security.core.admin.UserAdminLogic.executeRequest(UserAdminLogic.java:438)
        at com.sap.security.core.admin.UserAdminServlet.doPost(UserAdminServlet.java:26)
        at com.sap.security.core.admin.UserAdminServlet.doGet(UserAdminServlet.java:19)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
nMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
I found the SAP Note 971249 but Iu2019m not sure it applies and even I can log on into Visual administrator.
Log for the Visual Administrator
<!LOGHEADER[START]/>
<!HELP[Manual modification of the header may cause parsing problem!]/>
<!LOGGINGVERSION[1.5.3.7185 - 630]/>
<!NAME[/usr/sap/SID/DVEBMGS00/j2ee/admin/log/./traces/visual_administration.trc]/>
<!PATTERN[visual_administration.trc]/>
<!FORMATTER[com.sap.tc.logging.ListFormatter]/>
<!ENCODING[UTF8]/>
<!FILESET[0, 5, 10000000]/>
<!PREVIOUSFILE[visual_administration.4.trc]/>
<!NEXTFILE[visual_administration.1.trc]/>
<!LOGHEADER[END]/>
#1.5^H#C000AC11873E00000000000100CEC78D00045A541BE7A040#1225217198758#com.sap.engine.services.adminadapter.gui.tasks.LoginTas
k##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-1,5,main]##0#0#Error#1#/System/Server/VisualA
dministrationTool#Java###Error while trying to login to host: null
[EXCEPTION]
#1#java.lang.NullPointerException
        at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImpl.login(RemoteLoginContextHelperImpl.
java:72)
        at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImplp4_Skel.dispatch(RemoteLoginContextH
elperImplp4_Skel.java:64)
        at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:319)
        at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:200)
        at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:136)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
nMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Thank you very much for your help.
Best Regards

hi
we had the same issue some time back when we upgraded to SP15, we opened a OSS message and SAP had to come and fix the issue.
It was some inconsistencies in -Config DB settings and they made quite a few changes in security/configurations/ticket(config tool)
also
one Java parameter was wrong(config tool - server config) :
-Djava.security.policy=/java.policy it should be -
> Djava.security.policy=./java.policy (The DOT was missing)
thank you
Jonu Joy

OS X server (10.10.1) Imap Internal login failure

I have a problem with my main server on a OS X server 10.10.1 (Mac mini)
Clients cannot log in to the IMAP side of an account on the server.
So when using the mail client Connection Doctor the SMTP is successful and the IMAP portion not.
This happens with both accounts Local as with the accounts in the Open Directory service
The log of the Open Directory service indicates that ist was an successful login.
The IMAP log shows.
error Jan 17 18:44:04 imap-login: Info: Internal login failure (pid=93306 id=27) (internal failure, 1 successful auths): user=<test>, method=PLAIN, rip=10.0.0.101, lip=10.0.0.101, mpid=93310, TLS
The user test is local users.
The server was up-grade from Maverick to Yosemite a few months ago.
It runs 10.10.1 and Server 4.0.3
Any suggestion?
Thanks and regards,
Jacob

The reason that I wanted to use WGM was because it allows you to configure a maximum backup volume size per machine. If you just configure through TM, a single machine could fill the entire volume with backups.
I know that there's a way to use hdiutil to max the sparsebundle size that is created when you don't use WGM, but lets face it folks - if the option is there, then apple should support it!

Upgrade Planning from 11.1.2.0 to 11.1.2.1 on new environment

Hi guys,
We recently got a requirement that we need to install a completely new environment for Hyperion Planning 11.1.2.1. The old system is with 11.1.2.0 on a separate network.
The installation and configuration document says 11.1.2.1 is a maintenance release. I also couldn't find the 11.1.2.0 -> 11.1.2.1 upgrade path. Does this mean we have to install 11.1.2.0 in the new environment then performance "in place upgrade" to 11.1.2.1?
What is the recommended upgrade method from 11.1.2.0 to 11.1.2.1 if the deploy to a new environment?
Thanks,
Fred.

Thanks for your reply John!
The 11.1.2.1 version is required to be installed on a separate network. If we follow the official route that means to install 11.1.2.0 -> Migrate -> apply maintenance release to upgrade to 11.1.2.1. This would be the last option we want to go with... The 11.1.2.0 installation files are not available from Oracle any more.
I still have a few questions about the other options.
Option 2: Clean install of 11.1.2.1 -> Create empty planning apps -> Clone planning apps relational database
Question: After all the steps above, do I need to perform "upgrade" for each app inside of planning?
Option 3: Clean install of 11.1.2.1 -> Create empty planning apps -> Use LCM to migrate the content
Question: Will LCM work between 11.1.2.0 and 11.1.2.1? I personally had some bad experience with LCM when the target and source system is not 100% identical.

EAS login not getting succeeded..

Hi All,
We are able to install OEPM 11 and successfully deploy the applications with Oracle Application Server...
Shared Services and Provider Services are working fine
When i try to connect to EAS through http://servername:7777/easconsole/console.html
was able to see the login page and when providing credentials , it says
"Could not connect to Administration Server"
Did anybody come across this situation...if so please help me in getting this resolved
Thanks,

Hi Nra,
Thanks for your reply!!
Our Essbase server resides on the same box where EAS is installed..But i need some clarification on what you said...
Here my problem is first to connect to EAS Server and not to the Essbase Server..They are two different things
Once i connect to Administration Server, i can add the Analytic Server and then the Essbase comes into picture for administration
Please correct if am wrong at any point
My problem here is during the login screen to connec to EAS server(Middle - Tier Server) itself, it is not allowing me to do...and in OEPM 11.1.1.2
we can connec through the web console method apart from Client installed locally using http://servername:10080/easconsole/console.html
Strange thing is that after i start the EAS process, this URL opens up upto the login screen and ask for the credentials(to connect to Admin server)...
when i pass on the login information, it says "could not connec to Administration Server"
I need help to rectify this...I hope you understand my problem
Thanks,

How to configure smart card login in sunray 2fs??

Hi all,
Please help me to configure smart card login using Sun Ray Server Software 4.0... How to assign a smart card for a particular user? Do I need to flash th smart card for user information or any other method exists?

I'm not sure what you know or don't know about this so I'll give you what I know:
1. Create a token reader and a token
* Plugin a Sun Ray DTU/client
* Check the MAC address of the Sun Ray you just plugged in
* Access the Sun Ray admin GUI
* Choose the 'Desktop Units' tab
* See if your Sun Ray DTU is listed (if it isn't listed you have Sun Ray Server configuration issues...)
* If it is listed click the identifier
* Check the status of the DTU to see if this particular unit is already a token reader (normally it is not, i.e. by default a Sun Ray DTU is not)
* Click 'Edit'
* Check 'Token Reader'
* Click 'OK'
* /opt/SUNWut/sbin/utrestart (I'm not sure if a warm restart is OK or a hard restart is necessary)
Now insert a shiny new Java card into your token reader's slot
* In the Sun Ray admin GUI choose the 'Tokens' tab
* Search for currently used tokens
* You should see a token identifier such as 'Payflex.blah' under your desktop unit (i.e. the token reader)
* Click the token identifier and click 'Edit'
* Assign a username (i.e. Unix username) to the token under 'Owner'
* Click 'OK' and remove the smart card from the token reader
2. Assign the Token
* Insert your smart card from step 1 into the token reader
* In the Sun Ray GUI click 'Tokens' and 'New'
* Under 'Identifier' you should see 'Read Identifier from Token Reader' checked
* Click 'Read Token'
* Assign an owner (i.e. Unix user account) and a session type (Kiosk or Regular)
* Click 'OK'
Item 2 from the notes I used for this looks alot like item 1 so I can't say that it is strictly necessary.
I don't have a Sun Ray Server accessible to me at the moment to confirm but this procedure should help I hope.

New environment: URL timeouts, Configuration failures, EAS login failures

Similar Messages

Maybe you are looking for