Permissions Metadata User for System Connection in CE 7.2

Hi,
I want to create a system connection in NWA to an R/3 system with WSIL as service source. The Metadata User has SAP_ALL and SAP_NEW. But when I ping the system, following error is displayed: u201CUser credentials are valid but user does not have valid access rightsu201D
In Log Viewer following exception is listed:
[EXCEPTION]
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (403) Forbidden. The requested URL was:"Connect to http://XXHOST:xxPORT/sap/bc/srt/wsil?sap-client=030, used user to connect: XXUSER, used sap-client: 030"
at com.sap.esi.esp.service.server.query.discovery.WSTransportSettingsResolverSoa.resolveEntity(WSTransportSettingsResolverSoa.java:432)
at com.sap.engine.services.webservices.espbase.query.WSQueryImpl.initialize(WSQueryImpl.java:351)
at com.sap.engine.services.webservices.espbase.query.WSQueryImpl.findWSInterfaces(WSQueryImpl.java:282)
at com.sap.esi.esp.wsquery.ui.wsquerycomp.WSQueryComp.searchByPhysicalSystem(WSQueryComp.java:744)
at com.sap.esi.esp.wsquery.ui.wsquerycomp.WSQueryComp.search(WSQueryComp.java:372)
at com.sap.esi.esp.wsquery.ui.wsquerycomp.wdp.InternalWSQueryComp.wdInvokeMethod(InternalWSQueryComp.java:458)
at com.sap.tc.webdynpro.progmodel.generation.ExternalControllerPI$ExternalInterfaceInvocationHandler.invoke(ExternalControllerPI.java:339)
If I open the WSIL-URL in browser with the metadata user, the xml-structure with the services is displayed.
We are on CE 7.2 SP3.
Hope, anybody has an idea.
Kind Regards,
Gerhard

Hi
Have you defined the HOST file entry? and , try with user having admin rights.
Best Regards
Satish Kumar

Similar Messages

Accessing Component Information for systems connected to Solution Manager

We currently aggregate system component information for our ABAP systems through the following manual (and tedious) process:
Log into each ABAP system
Menu: System -> Status
Click Component Information button (magnifying glass icon)
Retrieve the information: Component, Release, Level, Support Package Name, Description.
Recently, we were drilling through Solution Manager Root Cause analysis -> Change reporting and noticed that this information is available for each system. In the ABAP-Software data store. This led us to consider if this information is contained within the Solution Manager BW cubes.
However when we looked at the SMD Change Analysis (thinking this would map to what we saw in the Change Analysis reporting), we didn't see this information.
So, the question is, does anyone have any thoughts were the Component information for systems is stored in Solution Manager? Ideally, we would like to tap into this source for our own custom report as opposed to retrieving it manually from each system as I described.
Thanks,
Jeff Henke

Hi Jeff,
the information about software components (and this is I think what you are looking for) is stored in the LMDB of Solution Manager. Each satellite system sends its component info into SLD (either in an external system or in Solution Manger itself). From there it is redirected to LMDB.
Try transaction LMDB in Solution Manager. There you have (depending on your SP-Stack) access to several reports to evaluate your landscape.
Best regards, Alexander

System preference crashes when add user for ssh connection...

Hi all, I've enable ssh to all user and it works perfectly. When I try to restrict the access trying to add an user ( clicking on + ) on the share the system preference crash... I have a new mac pro with all update ! Anyone have the same problem ? Thank you, regards.
Message was edited by: egariM

Hi egariM. Can you post the contents of the crash report?

How many users for remote connection can I create, from support SAP

Dear all
I have a doubt with how many users can be created in my system ERP 6.0 for the remote connection, for the error product messages on the marketplace SAP,without this counts as user license.
I have not found any notes or documents from SAP to explain this.
I appreciate your help.
Best Regards,
Erika

Ok...I will reply to myself. I can use more than 10 simultaneous connection, using vnc.

Run Labview as different windows user (for database connectivity)

I have to connect to a corporate remote MSSQL-Database on the network, using the database connectivity toolkit for LabVIEW.
The db-authentification is realized checking the windows user (ads) who acceses the datebase (not a database user / password which is standard in the database vis)
Therefore I have to run LabVIEW as the defined windows user, different than the logged in user on the pc.
Is that possible to realize with LabVIEW?
Other Windows-tools allow to define the windows user/password which "run" an application - how can I do that with LabVIEW?

Hi Zav. There is a windows command 'runas' which _may_ let you do what you want; I haven't
tried what you need to do, but is has worked for other tasks for us. Try 'runas /?' for the switches.
You will have to build your LV program into an executable, then use runas to launch it. Is there
a reason you can't just login to Windows as the required user?
If you can get your db admin to allow dbuser/password authentication that would be a much better
way to go.
Matt

Create users for teradata in ADAM / Acitve Directory

Hi
I was wondering if you could help me with the ability to create a user in AD / Adam? I am trying to write the powershell code to create users for Teradata connectivity. the manual process is to use adsiedit and create the users through groupof names class.
This is what I have that is NOT working and was looking where to go from here.
$dom=[ADSI]"LDAP://OU=Users,OU=dev,OU=tdev,dc=acme,dc=com"
$obj = $dom.Create('GroupOfNames', 'CN=ASmith')
$obj.SetInfo()
any help would be greatly appreciated.
Thank you
John R Remillard

Hello,
You should ask in the
Windows PowerShell forum.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book:
Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Create a new user for oracle 10G ASM instance with sysdba system privilege

Hi,
In our Golden Gate Project, we require the SYS user credential to connect to the Oracle 10g ASM instance to read the database transaction logs.But our client is not providing the SYS user credential to connnect to ASM instance.
I'm getting the error message "ORA-01109: database not open",When I tried to create a new user using the below the steps in oracle 10g ASM instance
1. Login using "sqlplus / as sysdba"
2. Create user <username> identified by <password>;
But in oracle 11g ASM instance, I'm able to create new user by connecting the ASM instance with SYSASM role without issues.
Is there is any workaround to create a new user with sysdba system privilege in oracle 10g ASM instance?.
Thanks in advance .

Hi,
Recreate the password file for the ASM instance as follows:
Unix:
orapwd file=<ORACLE_HOME>/dbs/PWD<SID> password=<sys_password>
Windows:
orapwd file=<ORACLE_HOME>/database/PWD<SID>.ora password=<sys_password>
Now sys password is reset, we are ready to use sys for ASM management. I decided to create another user ASMDBA as I tried above.
SQL> create user ASMDBA identified by test01;
User created.
SQL> grant SYSASM, SYSOPER to ASMDBA;
Grant succeeded.
SQL> select * from v$pwfile_users;
USERNAME SYSDBA SYSOPE SYSASM
SYS TRUE TRUE TRUE
ASMDBA FALSE TRUE TRUE
Please see this link : http://orachat.com/how-to-change-asm-sys-password-creating-sysasm-user-11g/
Thank you

System Connection Test was not fully tested but all web dynpro java app and Transaction iviews working fine.Any problem for this Kind of activity Lets give some idea.

System Connection Tests
You can test the connectivity to the backend application represented by the current system object. Choose the relevant tests.
Note: The test is based on the properties currently defined in the system object. It does not check if the system properties are correct.
System Connection Tests
Test Name
Description
Status
SAP Web AS Connection
Tests the connection to an SAP Web Application Server
ITS Connection
Tests the connection to an SAP ITS server
Connection Test for Connectors
Tests the connection to a backend system using an associated connector
Test
Clear Results
Results
SAP Web AS Connection
Test Details:
The test consists of the following steps:
1. Checks the validity of system ID in the system object.
2. Checks if the system can be retrieved from the PCD.
3. Check whether a SAP system is defined in the system object
4. Validate the following parameters: WAS protocol; WAS host name
5. Checks if the host name of the server can be resolved.
6. Pings the WAS ping service; works only if the service is activated on the ABAP WAS.
7. Checks HTTP/S connectivity to the defined back-end application
Results
1. The system ID is valid
2. The system was retrieved.
3. The system object represents an SAP system
4. The following parameters are valid: Web AS Protocol (http) Web AS Host Name
5. The host name ssprdxi.stylespasapnet.com was resolved successfully.
6. The Web AS ping service was pinged successfully.
7. An HTTP/S connection to was obtained successfully.
ITS Connection
Test Details:
The test consists of the following steps:
1. Checks the validity of system ID in the system object.
2. Checks if the system can be retrieved from the PCD.
3. Check whether the system object has a valid system alias
4. Check whether a SAP system is defined in the system object
5. Validate the following parameters: ITS protocol; ITS host name
6. Checks if the host name of the server can be resolved.
7. Checks HTTP/S connectivity to the defined back-end application
Results
1. The system ID is valid
2. The system was retrieved.
3. Retrieval of the default alias was successful
4. The system object represents an SAP system
5. The following parameters are valid: ITS Protocol (http) ITS Host Name ()
6. The host name ssprdxi.stylespasapnet.com was resolved successfully.
7. An HTTP/S connection to was obtained successfully.
Test Connection with Connector
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
Results
Retrieval of default alias successful
Connection failed. Make sure that Single Sign-On is configured correctly
regards
Antony

Hi Stefan,
This correct see SAP Note [947081|https://service.sap.com/sap/support/notes/947081]
If the locale for the Web Dynpro iView is changed in the portal (through portal personalization), this is not reflected in the running login session. The user needs to logoff and login again, in order to see the locale change in the Web Dynpro iView.
Regards,
Leo

Having problem w 3rd party software ., there tech advsed me to repair permissions before reinstalling software . However , querrie says repairing permissions is not good for system . whats up ,, help !!!

having problem w 3rd party software ., there tech advsed me to repair permissions before reinstalling software . However , querrie says repairing permissions is not good for system . whats up ,, help !!!

I've fixed the problem - I think.
I forgot I had the program "Little Snitch" installed on my computer. So I went into it and saw that it was blocking most of my connections for all the programs I use on a daily basis. Once I lifted the RULE to those certain programs - BAM - everything came back to life in an instant!

SSRS Database Configuration Manager Error - Could not connect to server: The type initializer for 'System.Data.SqlClient.SqlConnection' threw an exception

I'm Getting the "Could not connect to server: The type initializer for 'System.Data.SqlClient.SqlConnection' threw an exception" Error on an existing Instance of SSRS that had been working previously (lots of installs/patches since).
Any time I try to hit the "Test Connection" button on existing connections or create new ones from the SSRS Config Mgr., it throws that error.
I know the SQL Server connectivity works (I have SSMS installed on there and can cut and paste server Login to connect). The problem is I can't really get any more details on the error...Event Viewer isn't logging anything, I have upped the trace level
to 4 in the reportingservicesservice.config file, I have even watched it with procmon and nothing obvious pops up.
Let me know if anyone else has been down this path and what they have tried.

Hi BillOlive,
Based on my research, the issue may be related to user access permission. You can refer to the following method to troubleshooting the issue:
Open C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG folder | right click on the machine.config file | Properties | Security | make sure your domain account has FULL CONTROL permission on this file.
If above steps still do not work, please backup your machine.config file to somewhere else and replace with the attached one from my Windows Server 2008 environment.
Alternatively, app.config file also may cause the same issue. There is a similar issue, you can refer to it.
http://stackoverflow.com/questions/6922879/exception-type-initializer-for-system-data-sqlclient-sqlconnection
Hope this helps.
Regards,
Alisa Tang
If you have any feedback on our support, please click
here.
Alisa Tang
TechNet Community Support

RFC User for satellite systems

Hello Gurus,
I just wanted to ask about one issue. We are a SAP partner and using Solution Manager in VARs scenario. There are many systems of our customers connected to our Solution Manager..
Now I want to ask about RFC user(s). As I see, in our Solution Manager there are many users(communications type C) with Synthax SOLMAN<system id> or something like that. It means basically, that we have for every particular customerS system one SOLMAN user for RFC(cust_scout) in our Solution Manager. My question is if we can replace all of these users with only one RFC user for all the systems and customers?
Many thanks in advance for your help
Miloslav Pudil
IDS Scheer
Prague
Czech Republic

>
Miloslav Pudil wrote:
> I just wanted to ask about one issue. We are a SAP partner and using Solution Manager in VARs scenario. There are many systems of our customers connected to our Solution Manager..
> Now I want to ask about RFC user(s). As I see, in our Solution Manager there are many users(communications type C) with Synthax SOLMAN<system id> or something like that. It means basically, that we have for every particular customerS system one SOLMAN user for RFC(cust_scout) in our Solution Manager. My question is if we can replace all of these users with only one RFC user for all the systems and customers?
Hi Miloslav,
Technically, it will work that you define one common RFC user in your SolMan for communication (RFC BACK destination) from all connected managed systems.
BUT, I would never recommend it.
Once a managed system cause issues in your SolMan, you are not able (or at least it's much more difficult) to identify the managed system. Same happens, if a invalid password in the BACK destination leads to a locked user.
My recommendation: Spend the extra effort in creating a user per managed system. Operation will be much easier later.
See also this guide:
[Activating EarlyWatch Alert [EWA] in End Customeru2019s System |http://service.sap.com/~form/sapnet?_SHORTKEY=00200797470000089947&_OBJECT=011000358700000567342009E]
Best regards,
Ruediger

RFC User for Connectivity with ABAP Server Proxy Required?

Hi people,
I am just wondering how I set-up my connectivity between XI and my business system B.
Our basis already set-up the connection to the runtime workbench from B->XI
For that sake they've added the xirwbuser to B (Xi has it as well, of course).
Now I am configuring the whole thing in the Directory. There I need an receiver agreement and a channel. For that I take the adapter type "XI". Anyway, I need to give here an RFC destination as well. I've added one of type "H".
And now the issue: Do I really need a separate user for that rfc connection? I thought with proxies the systems are somewhat like "hard-wired" and do not need special users.
Anyway, if I need a dedicated RFC user: Is a certain role enough or do I need special roles depending on the stuff I am doing in the business system?
Thanks in advance!
Helge

You can of course use an existing service user.
But for monitoring purpose it is receommended to use a seperate user. (Think about system log entries).
The user needs the role SAP_XI_APPL_SERV_USER.
Regards
Stefan

Insufficient permissions for system restart

Hi All,
We are receiving the following error when attempting to restart a domain controller, after MS updates have been installed, from within SCCM 2012 R2 CU1 software center.
"Insufficient permissions for System Restart"
"Restarting this computer is only allowed for users with administrative permissions, or your IT department does not allow you to restart this computer"
The user on the domain controller can restart the server using a normal windows shutdown procedure outside of the software center, as they are in the Active Directory domain "backup operators" group.
The domain controller is running server 2008 R2 SP1. The SCCM 2012 infrastructure is running R2 CU1 with the latest client installed on the domain controller.
Any help would be very much appreciated.
Regards PowerShell90

Hi Garth,
Thanks for the quick reply
Domain administrators can install the updates and reboot within software centre without a problem. No restrictions have been put in place for the domain controllers or backup operators. We allow the Microsoft default option to allow members of
the domain "Backup Operators" to shut down domain controllers. They are able to do this on the DC, but they get an error when trying to complete this through SCCM 2012 R2 CU1 software centre. I can't understand why?
Regards
Regards PowerShell90

Failed to update permissions used for end-user recovery on . Permissions update failed for the following reason: (ID 3123)

I patched 2012 to the SP1 level and now I'm getting these warnings on many servers.
It seems to be considering these items as removable media?
DPM 2012, SP1, version 4.1.3313.0
Failed to update permissions used for end-user recovery on skutter.pmuk.net. Permissions update failed for the following reason: (ID 3123)
Affected area: skutter.pmuk.net
Occurred since: 11/01/2013 09:04:43
Description: Failed to update permissions used for end-user recovery on skutter.pmuk.net. Permissions update failed for the following reason: (ID 3123)
DPM is unable to enumerate contents in 2aad3f75a7e54a0f91b640d7f158f00a , 5702fef3756e4ca8af0554013951f32d , 78f9e6070fbd43aeb328700a88a3c926 , aquaria.pmuk.net_MTATempStore$ , ariel.pmuk.net_MTATempStore$ , atlantis.pmuk.net_downloads , atlantis.pmuk.net_MTATempStore$
, atlantis.pmuk.net_print$ , capricorn.pmuk.net_MTATempStore$ , CCM.pmuk.net_IvrDirectory , CCM.pmuk.net_MTATempStore$ , CHIRON.pmuk.net_MTATempStore$ , cpeserv-i03.pmuk.net_IMAGING , defiant.pmuk.net_idsc , defiant.pmuk.net_MTATempStore$ ,firebird.pmuk.net_Accts_serve
, firebird.pmuk.net_case , firebird.pmuk.net_Control ,firebird.pmuk.net_Fuel Cell , firebird.pmuk.net_HADCAD , firebird.pmuk.net_haddesign , firebird.pmuk.net_hadendurancelab , firebird.pmuk.net_HADEngCad , firebird.pmuk.net_HADPCLGainspeed ,firebird.pmuk.net_HADPCLProjects
,firebird.pmuk.net_HADPCLQuality , firebird.pmuk.net_HADPCLStandards , firebird.pmuk.net_hrXerox , firebird.pmuk.net_hs , firebird.pmuk.net_ITXerox , firebird.pmuk.net_JunHigashimura , firebird.pmuk.net_MTATempStore$ ,firebird.pmuk.net_office ,firebird.pmuk.net_OMPM
, firebird.pmuk.net_Outplacement ,firebird.pmuk.net_personal , firebird.pmuk.net_PJSESCANNER ,firebird.pmuk.net_pmuk ,firebird.pmuk.net_pwa ,firebird.pmuk.net_pwa2 , firebird.pmuk.net_scanfret ,firebird.pmuk.net_Siebel8 ,firebird.pmuk.net_Spares
,firebird.pmuk.net_test ,firebird.pmuk.net_TVDC ,firebird.pmuk.net_xeroxcpe$ ,firebird.pmuk.net_xeroxrd$ , HALLEY.pmuk.net_MTATempStore$ ,legion.pmuk.net_dfs ,legion.pmuk.net_MTATempStore$ , legion.pmuk.net_NETLOGON ,legion.pmuk.net_SYSVOL
, nemesis.pmuk.net_KEvin ,nemesis.pmuk.net_MTATempStore$ , PLEIDES.pmuk.net_Archive , PLEIDES.pmuk.net_DGHOME , PLEIDES.pmuk.net_MTATempStore$ ,PLEIDES.pmuk.net_print$ , roosevelt.pmuk.net_ARCserve$ ,roosevelt.pmuk.net_CHEYALERT$ , roosevelt.pmuk.net_HADQCEOLP
,roosevelt.pmuk.net_home3 , roosevelt.pmuk.net_MTATempStore$ ,roosevelt.pmuk.net_smssource , roosevelt.pmuk.net_WindowsEasyTransfer ,roosevelt.pmuk.net_XeroxScan , sagittarius.pmuk.net_MTATempStore$ ,sagittarius.pmuk.net_print$ , sakura.pmuk.net_MTATempStore$
,scorpia.pmuk.net_MTATempStore$ ,scorpion.pmuk.net_chandleram, scorpion.pmuk.net_Control ,scorpion.pmuk.net_CPE ,scorpion.pmuk.net_Digital ,scorpion.pmuk.net_Electrical , scorpion.pmuk.net_MTATempStore$ , scorpion.pmuk.net_NASUtils ,scorpion.pmuk.net_Personal
,scorpion.pmuk.net_QA ,scorpion.pmuk.net_QC , scorpion.pmuk.net_Technical , silverberg.pmuk.net_dfs ,silverberg.pmuk.net_MTATempStore$ ,silverberg.pmuk.net_NETLOGON , silverberg.pmuk.net_SYSVOL ,skutter.pmuk.net_dfs , skutter.pmuk.net_MTATempStore$ ,skutter.pmuk.net_NETLOGON
,skutter.pmuk.net_sharepoint-saver ,skutter.pmuk.net_SYSVOL , tempest.pmuk.net_MTATempStore$ , tempest.pmuk.net_Quarantine ,tempest.pmuk.net_SiteBackups , tempest.pmuk.net_tsdp , titania.pmuk.net_MTATempStore$ , valiant.pmuk.net_domino , valiant.pmuk.net_hadprod
, valiant.pmuk.net_MTATempStore$ ,valiant.pmuk.net_oracle ,vindaloo.pmuk.net_MTATempStore$ , virgon.pmuk.net_faxclient ,virgon.pmuk.net_FxsSrvCp$ ,virgon.pmuk.net_MTATempStore$ , xavier.pmuk.net_Address ,xavier.pmuk.net_downloads ,xavier.pmuk.net_drivers ,
xavier.pmuk.net_Exchange IS Starter ,xavier.pmuk.net_ExchangeOAB , xavier.pmuk.net_ExchangeUM , xavier.pmuk.net_MTATempStore$ , xavier.pmuk.net_out-arch , xavier.pmuk.net_Resources$ on the protected computer tower.pmuk.net. Recycle Bin, System Volume Information
folder, non-NTFS volumes, DFS links, CDs, Quorum Disk (for cluster) and other removable media cannot be protected. (ID 38 Details: )
Any Ideas? backups are OK, recovery points/sync's etc.
Mark.

I am using DPM 2012 R2, what finally worked to me to resolve my problem with EUR was to:
In DPM I disabled EUR
In Computer Management delete all DPM Shares (\\?\c:\Program Files\...)
Using ADSI edit go to CN=MS-ShareMapConfiguration,CN=System,DC=X,DC=Y (Replace X & Y for your domain)
Delete all of the mappings within the container
In DPM enable EUR
In DPM on a protection group I created a new recovery point and selected “Only synchronize (available only for file data)”
Related article on ADSI Edit and DPM -
http://social.technet.microsoft.com/Forums/en-US/e0258384-8422-408c-8839-2580d616a9ec/edsi-edit-related-to-data-protection-manager?forum=dpmfilebackup
I hope this helps
JD Young

Deploy user for automatic deployment on development system

Hi everybody,
I am not sure what user to configure in the "Runtime Systems" tab of my track configurations.
We use AS Javas of the Version 7.1 EHP1 as runtime systems. Thus we use the deploy controller for deploying. So far we just have used the personal user of whoever created the track as deploy user. Is this the recommended way? Or should we better use some technical user for automatic deployment? If yes, which permissions should this user have?
Thanks in advance for your help!
Tobias

Hi Satya
Thanks for the quick answer. Do you happen to know if a separate technical user for CMS deployment ist the "standard"/best practice?
Best regards,
Tobias

Permissions Metadata User for System Connection in CE 7.2

Similar Messages

Maybe you are looking for