PI 7.31 Dual Stack SSL configuration

HI Gurus,
I have a quick query, I am configuring SSL on my PI 7.31 systems.
I have checked all the standard guides and forums but I have one doubt.
Q1 - Is it necessary to configure SSL both in ABAP and JAVA side ?
Q2 - If I just configure SSL in STRUSTSSO2 in ABAP , will it be more than enough ?
Q3 - In what cases do we need to configure SSL in JAVA side ? And does configuring SSL in JAVA mandatory require sapcryptolib files ?
Please share your views.
Cheers, SG

I want to understand is it necessary to configure SSL in both ABAP and JAVA in case of dual stack PI ?
>>> Please refer to Huseyin's comments in the below thread..
PI 7.3 Dual Stack SSL configuration
In what cases do we use JAVA SSL in Dual stack system ?
>>> AFAIK - when you use http_aae adapter/soap with https then you should configure the SSL on java stack.

Similar Messages

Dual stack BGP Configuration guide for enterprise CPE

Hi,
I couldn't find the config guide for BGP in a IPv4 & IPv6 dual stack environment for CPE in Cisco website. Hope someone can share the URL.
Thanks

The following URL shows how to configure Multi-protocol BGP - http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bgp/configuration/15-mt/irg-15-mt-book.html.
hth,
-jim

Dual-Stack CTS configuration

Hi All,
My question is :
Once we have configured the ABAP-Stack of a dual-stack system into the transport domain through CTS, so can we now move the JAVA-based objects as well or we need to do something else also.
If so, what is that?
Regards

Hi Chilbul,
Your question is pretty vague. As per it, we don't know if you have actually carried out all the steps of CTS+ configuration prior to including the abap stack in transport routes or not.
If you have already completed CTS+ configuration and this was the last step you did, then your java developers should be able to include their objects in a transport request.
However, if you haven't done the CTS+ configuration yet, then please do that. For reference, these are some documents that should help you:
CTS+ config for dual stack systems -->
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10456aac-44f7-2a10-1fbe-8b7bcd7bcd58?quicklink=index&overridelayout=true
Other helpful guides:
/people/dolores.correa/blog/2009/06/05/cts-configuration-in-solution-manager-70-ehp1
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/e0249083-c0ab-2a10-78b8-b7a7854b1070
Regards,
Shitij

LDAP configuration for HR Portal in dual stack EHP4 - Best Practice

Hi Experts,
Hello Experts,
We are trying to use the JAVA Stack of ECC server for HR Portal i.e Dual Stack and have applied EHP4 package for ESS/MSS Appraisal. When we are trying to configure the LDAP ADS datasource through portal , we are not able to do it since ABAP datasorce file is available by default.This we are doing for HR(ESS/MSS) Portal.This is for access to the object data stored in the Active Directory.
We have already checked note 718383.
Also, for the scenatrio ,LDAP <-> ABAP <-> J2EE
We have already checked sap help doc.here:
http://help.sap.com/erp2005_ehp_04/helpdata/EN/e6/0bfa3823e5d841e10000000a11402f/frameset.htm
What should now be the best practice to follow for configuration ? Should we go for separate Portal server or is it possible to use Java Stack of ECC server for configuration ?
Also, LDAP <-> ABAP <-> J2EE scenario please suggest if it a best practice and we can follow the same .What are the limitations , risks and issues ? Please suggest if this has been implemented and running well in any live project .
Are the suggestions applicable for load balanced production servers as well?
Thanks,
Rakesh

Hi,
the UME datasource must remain ABAP but you can sync the users between ABAP and LDAP using the LDAP connector:
http://help.sap.com/saphelp_nw70ehp2/helpdata/en/48/74040175bb501ae10000000a42189b/frameset.htm
Regards,
Jozsef

[ASR1K] ISG Dual Stack configuration

Hello
Is it possible to configure l3-connected ISG dual stack on ASR1000?

Hi,
According to document http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/isg/configuration/xe-3s/asr1000/isg-xe-3s-asr1000-book/isg-ipv6.html, it is possible:
Restrictions for ISG IPv6 Support
Layer 2 connected interfaces are not supported. Only Layer 3 routed in-band IPv6 sessions are supported.
Session Coexistence on ISG Interfaces
The following session combinations can exist on the same ISG interface in Cisco IOS XE Release 3.5S and later releases:
Native IPv6 and native IPv4 sessions
Regards

EHP4 Dual stack

hi guys,
we plan to upgrade Enterprise Dual stack(ABAP+JAVA) System to EHP4 system.
In EHP4 upgrade document it says, No dual stack supported for EHP4 installation..was that mean
only for Installation or upgrade too.
Seperate SID is required for EHP4 system after upgrade? Please confirm.
thanks

hi jaichan,
yes, you are right ..For new installation of SAP ERP to EHP4 level, you cannot install dual stack system..i have read in sap note 855534..please find below the extract from this note:
As of SAP Business Suite 7, you can no longer install Dual Stack Application Systems (ABAP+Java).
If you want to use both SAP Business Suite ABAP and Java Components in your system landscape, you have to proceed as follows:
1. Install a separate ABAP-based SAP Business Suite system.
2. Install the required Java components in a separate Java-based SAP system.
3. Configure the connection of the Java-based SAP system to the ABAP-based SAP Business Suite back-end system.
The SAP Business Suite 7 comprises: EHP4 for SAP ERP 6.0, SAP CRM 7.0, SAP SCM 7.0, SAP PLM 7.0, SAP SRM 7.0
As of now you will find the latest recommendations at a central place in SDN:
https://www.sdn.sap.com/irj/sdn/landscapedesign -> Distribution Models
You will also find information about the deployment of SAP NetWeaver usage types and the SAP Business Suite there.
but you can upgrade your previously installed SAP ERP dual stack system without having seperate SID's thing...
We have upgraded around 50 of our systems without any problem
thanks sunny

PI 7.1(dual stack) and PI 7.31(Single stack) -

Friends,
I have a proxy to proxy scenario - Proxy --> PI --> Proxy
We have two servers PI 7.1(dual stack) and PI 7.31(Single stack)
i did the development in ESR and my ESR is pointing to PI 7.1, when i execute the scenario i receive one error message "receiver could not be determined", i ensured that all my input is correct, still i get the same error message.
the expectation is my scenario should point to PI 7.31, Can some one help me where and what settings i need to make in-order to make it work.
Please Note: All my data is correct and i read some scn forums wherein they asked to refresh the cache , i have refreshed the cache also still the problem persists.
Thanks in advance!

Iñaki Vila
Communication component in ID is the same as sender side.
could you share your sender configuration?
Did you mean Tcode - SXMB_ADM and under that Sender/Receiver configuration
Krupa Rao Atluri
In ID steps are correctly defined.
I spoke to my colleague he hinted that at RUN TIME we want to point to PI7.31, he mentioned config change needed in SXMB_ADM
any further inputs from any one could be useful.

Issue while creating Component Based Message Alerting in PI 7.31 Dual Stack

Hi,
We tried to implement Component Based Message Alerting following the steps mentioned in the below blog.
http://scn.sap.com/community/pi-and-soa-middleware/blog/2012/03/25/michals-pi-tips-component-based-message-alerting
Ours is PI 7.31 dual stack. However, after setting up the job with my own user id, I am getting the below error inside the log of Jobs tab:
javax.jms.JMSSecurityException: You do not have permissions: action alertingVP.queue and instance:name alertingVP.queue
action consumer
instance jms/queue/xi/monitoring/alert/ALERT-TO-MAIL
Please let us know what permission is required to set up the job.
Thanks,
Rahul

Hi,
Now I am able to receive alert in my mailbox. But it's coming with improper content.
I have set up the job at an interval of every 2 minutes in NWA, and in case if only 1 message fails in IE, in ideal case, I should receive only 1 message details in alert.
However, in every 2 minutes, I am receiving junk data and the number is increasing for the particular scenario for which the alert has been created. Also the Error Category mentioned is showing improper.
But in table SXMSALERTCONTENT I am able to view only the newly added failed entry.
An erroneous alert email content is pasted below:
63 messages failed for "Test_XXX" on "af.s0i.saps0i"
Root cause: -1
To navigate to the failed messages in the local message monitor use this link
The first 1 messages of that data collection:
"AdapterNamespace": "http://sap.com/xi/XI/System",
"AdapterType": "File",
"Channel": "FileSender_XXX",
"ChannelParty": "",
"ChannelService": "XXXXX",
"Component": "af.s0i.saps0i",
"ErrCat": "",
"ErrCode": "",
"ErrLabel": "-1",
"ErrText": "Configured source directory '\\Outbound\\XXX\\CREMAS' does not exist",
"FromParty": "",
"FromService": "XXX",
"Interface": "Z_CREMAS_SUSMM.CREMAS03",
"Namespace": "urn:sap-com:document:sap:idoc:messages",
"RuleId": "3a64dd6e1b1d3e58aff62ea70c97cb80",
"Timestamp": "2013-02-01T09:43:23Z",
"ToParty": "",
"ToService": ""
The failed message however do not relate to the 'source directory does not exist' issue. Please help.
Thanks,
Rahul

PI system upgrade from 7.1 to 7.4 dual stack

Hi,
We want to upgrade PI system to 7.4 .currently we are using PI 7.1 system (dual stack)and want to go for 7.4 dual stack.
which one single stack or dual stack is the best approach and what are the impacts normally see when upgrading to newer version.
We are planning to install 7.4 freshly recomonded by SAP .
We need to migrate objects from older system to newer system?
I want to know the process from basis perspective also .
Import/export or migrate is the best way to move objects from older sytem to newer system.
Please suggest me any links about the process including basis point of view also suggestions for the approach.
thanks,
aman

>>>> which one single stack or dual stack is the best approach and what are the impacts normally see when upgrading to newer version.
I would prefer single stack considering the SAP's future road map but of course it depends on how much effort your company is ready to spend. Incase you have lot of CCBPM's then you'll have to redesign them using Netweaver BPM if you go with single stack.
As are going with fresh installation(migration) of dual stack then you don't need to invest much.
>>> We are planning to install 7.4 freshly recomonded by SAP .
We need to migrate objects from older system to newer system?
I want to know the process from basis perspective also .
There is wizard using which you can move the directory objects ( classical scenario's to Integrated configurations). Please use it for ID objects
Refer to the below blog for more details. (ignore blog's title. it's applicable for dual stack-> dual stack too)
Moving Integration Directory Artifacts from dual stack to single stack
For ESR you can simply export and import the tpz file.
>>> I want to know the process from basis perspective also .
They can simply follow the installation guide and execute the post installation steps properly.

PI 7.30 dual stack - different time in rwb, pimon and ABAP stack

Hi @all,
I am working with the client on a PI 7.30 dual stack system.
During monitoring of message processing I saw that there are differences in the time displayed while monitoring the processing of identical messages
e.g. channelmonitor (mdt/channelmonitorservlet and rwb) is 1 hour behind pimon
The time displayed in the ABAP Stack (Menu System - Status) differs also 2 hours ahead of pimon.
Are there java parameters to configure the used time zone and which could be reason for this behaviour.
For me it seems strange that there is a difference between to tools (channelmonitor and pimon) I was supposing are based on the same technical stack
Would be nice to have the same time throughout the whole system.
Any help appreciated.
Best regards
Jochen

Hi Jochen,
I did not found the option to change the time zone for pimon. Please refer the below wiki it might helpful
PiMon_TroubleshootingGuide - Technical Operations - SCN Wiki
PiMon_Frequently Asked Questions - Technical Operations - SCN Wiki
regards.
Harish

NWDS for PI 7.4 Dual stack

Dear All
I am on SAP PI 7.4 dual stack which NWDS version should i use because i tried with both NWDS 7.3 and NWDS 7.31 also
NWDS 7.3 its not connecting at all it says improper configuration
NWDS 7.31 connected to ESR and but ID it says only for single stack.
Can you please help
Regards
Sandeep

Hi,
There is no dedicated NWDS 7.40, the NWDS 7.31 is also to be used for NW 7.40 (see also the note 1791485).
For NW server 7.40 SP<X> one has to use NWDS 7.31 SP<X+5>.
Best Regards,
Ervin

Java Stack Vs Dual Stack in Pi 7.3

Hi experts.
I open this thread because I'd like to know your opinion about the newJava installation option in SAP PI 7.3. In previous realeses (7.0,7.1) I felt more comfortable and safe in abap stack and I'm a little afraid about working only with java stack.
I'd like to know advantages and disadvantages to choose java stack instead of dual stack, why you'd choose one of two options or both in your nexts customers.
Thank u so much and happy new year!!!!

Java Stack or Dual Stack in 7.3
Java Stack alone: Almost all standard adapters including HTTP, IDOC and Proxy are all available in this stack. you need to use Integrated Configuration object for this. You are basically going to use Advance Adapter engine alone for the entire processing.
Pros:
No persistance steps here. So you would improve performance many folds for sure.
Throughput is also improved very much.
since 7.3, Solution Manager is available for monitoring inaddition to RWB and NWA. So monitoring would not be issue.
If you are looking for real performance improvement, Single stack Java to go.
Cons:
Abap mapping is not supported.
Message split to multiple receivers are not completely supported.
BPM interfaces are not seamless migration here. SAP 7.1 and lower versions support BPEL wheras 7.3 supports BPMN standards. So you might have to tweak a bit to modify existing interfaces here
Dual Stack:
Your option is pretty open. If you need some specific interfaces to handle only java stack, still that is possible and increase the performance. Also if you have lot of existing interfaces that requires BPM interfaces, ABAP mapping , Multiple split /branching etc.
still dual stack is the better option now. Here developer decides according to the requirement.
Still safe mode is going for Dual Stack for now and change in the future to single java stack alone.

Is SAP PO 7.4 dual stack installation??

HI experts,
Could anyone let me know if SAP PO 7.4 is a dual stack installation or can we go for single stack as well.
As PI 7.4 is based on HANA , so while working on it shall we use ICO or old classic configuration. Shall we go for java based adapters(eg IDOC_AAE/HTTP_AAE) or old abap based adapter..
Thanks,

To add few cents - May be your basis guys just read the title
Support for Dual-Stack discontinued in SAP NetWeaver 7.4 in general with exceptions
SAP NetWeaver 7.4 is positioned as the follow-up on-premise release for SAP NetWeaver 7.31.
SAP NetWeaver is among other things optimized for SAP HANA as the foundation for the SAP Business
Suite on SAP HANA project. This means that dual-stack deployments and implementations are not
supported any longer. The only exception to this rule is SAP NetWeaver Process Integration on a traditional
database system, which still requires a dual-stack implementation. However, note that a single-stack SAP
NetWeaver Process Integration Java exists that offers 95% of the features of classical dual-stack
implementations. Therefore, customers should investigate whether an existing SA
Reference : http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60bf3650-e219-3010-ef93-d11928aa8f8a?QuickLink=index&…

Changing SSL configuration on MedRec

Hi,
We are developing a custom Auditing Provider for WLS. Our provider needs to communicate via https to a remote system, and thus we need to configure SSL in order to use the correct client certificate and trust the remote server's.
We are using the sample MedRec application bundled with WLS for testing purposes, but no matter what, we do not seem to be able to change the SSL configuration. We went to Home -> Servers -> MedRecServer(Admin) -> Configuration in the console, and then
* Keystores
* Custom Identity and Custom Trust + configure all the keystores pointing to our jks files
* SSL: point to our alias
But, when restarting the server, we see the following:
<Mar 6, 2007 11:45:21 AM CET> <Notice> <Security> <BEA-090169> <Loading trusted
certificates from the jks keystore file C:\dev\bea\WEBLOG~1\server\lib\DemoTrust
.jks.>Which seems to indicate that somehow MedRecServer is not acknowledging our configuration changes.
Our WL_HOME\samples\domains\medrec\config\config.xml looks like this:
<?xml version='1.0' encoding='UTF-8'?>
<domain xmlns="http://www.bea.com/ns/weblogic/920/domain" xmlns:sec="http://www.bea.com/ns/weblogic/90/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wls="http://www.bea.com/ns/weblogic/90/security/wls" xsi:schemaLocation="http://www.bea.com/ns/weblogic/90/security/extension http://www.bea.com/ns/weblogic/90/security.xsd http://www.bea.com/ns/weblogic/90/security/xacml http://www.bea.com/ns/weblogic/90/security/xacml.xsd http://www.bea.com/ns/weblogic/90/security http://www.bea.com/ns/weblogic/90/security.xsd http://www.bea.com/ns/weblogic/920/domain http://www.bea.com/ns/weblogic/920/domain.xsd http://www.bea.com/ns/weblogic/90/security/wls http://www.bea.com/ns/weblogic/90/security/wls.xsd">
<name>medrec</name>
<domain-version>9.2.0.0</domain-version>
<security-configuration>
    <name>medrec</name>
    <realm>
      <sec:auditor xmlns:ext="http://www.bea.com/ns/weblogic/90/security/extension" xsi:type="ext:secure-auditorType">
        <sec:name>Foo</sec:name>
        <ext:identifier>Test</ext:identifier>
        <ext:bea-audit-log-service-uri>hessian:https://it-sdm-nb:8443/ksuite/remoting/BEAAuditLogService-hessian</ext:bea-audit-log-service-uri>
      </sec:auditor>
      <sec:authentication-provider xsi:type="wls:default-authenticatorType"></sec:authentication-provider>
      <sec:authentication-provider xsi:type="wls:default-identity-asserterType">
        <sec:active-type>AuthenticatedUser</sec:active-type>
      </sec:authentication-provider>
      <sec:role-mapper xmlns:xac="http://www.bea.com/ns/weblogic/90/security/xacml" xsi:type="xac:xacml-role-mapperType"></sec:role-mapper>
      <sec:authorizer xmlns:xac="http://www.bea.com/ns/weblogic/90/security/xacml" xsi:type="xac:xacml-authorizerType"></sec:authorizer>
      <sec:adjudicator xsi:type="wls:default-adjudicatorType"></sec:adjudicator>
      <sec:credential-mapper xsi:type="wls:default-credential-mapperType"></sec:credential-mapper>
      <sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType"></sec:cert-path-provider>
      <sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
      <sec:name>myrealm</sec:name>
    </realm>
    <default-realm>myrealm</default-realm>
    <credential-encrypted>{3DES}I/3L8IhJVe+jq1vzXAXHODsFazm8NGROsfPVAaunGasgxJ6u41gpHbMAqA4pZSr2u1CWgoxiHR6z895y9Or+CDwkCmqAxJBq</credential-encrypted>
    <node-manager-username>weblogic</node-manager-username>
    <node-manager-password-encrypted>{3DES}HMxdWFl3juTr6BufJFg6WQ==</node-manager-password-encrypted>
</security-configuration>
<server>
    <name>MedRecServer</name>
    <ssl>
      <name>MedRecServer</name>
      <enabled>true</enabled>
      <listen-port>7012</listen-port>
      <server-private-key-alias>auditor</server-private-key-alias>
      <server-private-key-pass-phrase-encrypted>{3DES}tPlZGhoSkfnu0h93w1MeKw==</server-private-key-pass-phrase-encrypted>
    </ssl>
    <listen-port>7011</listen-port>
    <listen-address></listen-address>
    <key-stores>CustomIdentityAndCustomTrust</key-stores>
    <custom-identity-key-store-file-name>C:\dev\bea\weblogic92\server\lib\tomcat.keystore</custom-identity-key-store-file-name>
    <custom-identity-key-store-type>jks</custom-identity-key-store-type>
    <custom-identity-key-store-pass-phrase-encrypted>{3DES}tPlZGhoSkfnu0h93w1MeKw==</custom-identity-key-store-pass-phrase-encrypted>
    <custom-trust-key-store-file-name>C:\dev\bea\weblogic92\server\lib\tomcat.keystore</custom-trust-key-store-file-name>
    <custom-trust-key-store-type>jks</custom-trust-key-store-type>
    <custom-trust-key-store-pass-phrase-encrypted>{3DES}tPlZGhoSkfnu0h93w1MeKw==</custom-trust-key-store-pass-phrase-encrypted>
</server>
<embedded-ldap>
    <name>medrec</name>
    <credential-encrypted>{3DES}W+XDJAixeMZcbdmRm/jIF8u8ZMzBMLyGQpcjb1lWzlM=</credential-encrypted>
</embedded-ldap>
<configuration-version>9.2.0.0</configuration-version>
<admin-server-name>MedRecServer</admin-server-name>
</domain>You can see our Auditor provider configuration and the custom identity and trust sections, which look right.
I'm wondering if somehow the demo application is special in any way, or if we are missing some step to change the identity and trust configuration. Any ideas? Any further investigation clues?
Kind regards,
Alex

OK, we have been reading this:
http://e-docs.bea.com/wls/docs81/security/SSL_client.html
, so I think I need to make a few clarifications.
Our Auditing Provider communicates remotely with another system using remoting libraries (in this case, the Hessian library), which open SSL connections in the "usual JDK manner". In fact, when handshaking, we see a failure that has a stack trace like the following:
<Mar 6, 2007 3:59:36 PM CET> <Debug> <SecuritySSL> <000000> <Exception during ha
ndshake, stack trace follows
java.net.SocketException: socket write error: Connection aborted by peer
        at jrockit.net.SocketNativeIO.socketWrite(Ljava.io.FileDescriptor;[BII)V
(Unknown Source)
        at java.net.SocketOutputStream.socketWrite0(Ljava.io.FileDescriptor;[BII
)V(SocketOutputStream.java:???)
        at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
        at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
        at com.certicom.io.OutputSSLIOStream.write([BII)I(Unknown Source)
        at com.certicom.tls.record.WriteHandler.flushOutput()I(Unknown Source)
        at com.certicom.tls.record.handshake.HandshakeHandler.flush()V(Unknown S
ource)
        at com.certicom.tls.record.handshake.ClientStateReceivedCertificate.hand
le(Lcom.certicom.tls.record.handshake.HandshakeMessage;)V(Unknown Source)
        at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMes
sage(Lcom.certicom.tls.record.handshake.HandshakeMessage;)V(Unknown Source)
        at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMes
sages([BILcom.certicom.tls.interfaceimpl.ProtocolVersion;)V(Unknown Source)
        at com.certicom.tls.record.MessageInterpreter.interpretContent([BIILcom.
certicom.tls.interfaceimpl.ProtocolVersion;)V(Unknown Source)
        at com.certicom.tls.record.MessageInterpreter.decryptMessage(II[BIILcom.
certicom.tls.interfaceimpl.ProtocolVersion;)V(Unknown Source)
        at com.certicom.tls.record.ReadHandler.processRecord()I(Unknown Source)
        at com.certicom.tls.record.ReadHandler.readRecord()I(Unknown Source)
        at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete()V(Unk
nown Source)
        at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake()V
(Unknown Source)
        at com.certicom.tls.record.WriteHandler.write([BII)I(Unknown Source)
        at com.certicom.io.OutputSSLIOStreamWrapper.write([BII)V(Unknown Source)
        at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65
        at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
        at java.io.FilterOutputStream.flush(FilterOutputStream.java:123)
        at weblogic.net.http.HttpURLConnection.writeRequests(HttpURLConnection.j
ava:142)
        at weblogic.net.http.HttpURLConnection.getInputStream(HttpURLConnection.
java:344)
        at weblogic.net.http.SOAPHttpsURLConnection.getInputStream(SOAPHttpsURLC
onnection.java:32)
        at weblogic.net.http.HttpURLConnection.getResponseCode(HttpURLConnection
.java:935)
        at com.caucho.hessian.client.HessianProxy.invoke(Ljava.lang.Object;Ljava
.lang.reflect.Method;[Ljava.lang.Object;)Ljava.lang.Object;(HessianProxy.java:??
        at $Proxy0.startup(JLjava.lang.String;Ljava.lang.String;)V(Unknown Sourc
e)
        at com.kroopier.bea.sap.utils.BeaAuditLogServiceSSLWrapper.startup(BeaAu
ditLogServiceSSLWrapper.java:43)
[/pre]
I guess that the Hessian library opens up a connection, actually using these certicom classes and not the usual https ssl client classes and then I should configure client certificates accordingly in the Certicom thing, but I'm unsure how to do that.
Any ideas?
Alex

Rebuild our XI application server from Single stack to dual stack

Hello,
We currently have an XI landscape with two application servers, the CI is of course a dual stack system, however the two app servers are single stacked, however we would like to make the two app servers into DUAL STACKs, my first guess was to rebuild the two apps from scratch and reinstall them as a dual stack apps. My Q is:
First: Do we need to rebuild both app servers, or can we make a change to the app servers to modify them to become dual stacked
Second: If we do need to rebuild both these apps, is there a specific document available to do this on Market place for installing a Dual stack app servers with PI?
Thanks in advance.
Sam
<Moved from SAP PI Forum>
Edited by: Prateek Raj Srivastava on May 13, 2010 12:27 PM

Hello,
Thank you all for your feedback,
Denny Liao, it is very interesting question you implied, we do have a J2EE directory created under the /usr/sap/SID/D30 directory:
/usr/sap/XQ9/D30
mqaapz28:xq9adm 13% ls -ltr
total 36
drwxr-xr-x   7 xq9adm   sapsys        96 Aug 24 2009 igs
drwxr-xr-x   9 xq9adm   sapsys      1024 Aug 24 2009 j2ee
drwxr-xr-x   2 xq9adm   sapsys      1024 Nov 11 2009 sec
drwxr-xr-x   3 xq9adm   sapsys      1024 Nov 24 10:48 log
obviously this app server does not have any (jlaunch/jcontrol process running) therefore it is not running as dual stacked. but interestingly enough I do see logs in the
/usr/sap/XQ9/D30/j2ee/cluster/server0/log directory created at the time of the initial install. and under:
/usr/sap/XQ9/D30/j2ee/cluster
mqaapz28:xq9adm 29% ls -ltr
total 30
drwxr-xr-x   2 xq9adm   sapsys      1024 Aug 24 2009 bootstrap
-rw-rr   1 xq9adm   sapsys        39 Aug 24 2009 version.bin
-rw-rr   1 xq9adm   sapsys      6339 Aug 24 2009 instance.properties.vmprop
-rw-rr   1 xq9adm   sapsys      3676 Aug 26 2009 instance.properties
drwxr-xr-x   7 xq9adm   sapsys      1024 Aug 26 2009 dispatcher
drwxr-xr-x 11 xq9adm   sapsys      1024 Aug 26 2009 server0
as per the note you mentioned above (741289 ) this explains how to recover a lost J2EE parameter setup, I am guessing this can be simply followed and re-enable the app server to run as a dual stack.
also my system information for the J2EE on the CI is:
System XQ9
Find other systems in SLD... Message Server
Host: mcsapxq9j
Port: 3924
Enqueue Server
Host: mcsapxq9j
Port: 3224
Database
Name: XQ9
Host: mcsapxq9dbx
Type: Oracle (Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production With the Partitioning and Data Mining options)
Software Components all components...
Name Version Applied
sap.com/SAP-JEECOR 7.00 SP21 (1000.7.00.21.0.20091214121410) 20100506125119
sap.com/SAP-JEE 7.00 SP21 (1000.7.00.21.0.20091214121301) 20100506124943
Licenses
Installation Number *** not yet assigned ***
System Number *** not yet assigned ***
Software Product Days Until Expiry
Download system configuration
Instance mqacsz27_XQ9_30 All processes running
Host: mqacsz27
OS: SunOS (sparcv9) 5.10
dispatcher Running
VM system properties...
PID: 21384
Name: Java HotSpot(TM) 64-Bit Server VM
Vendor: Sun Microsystems Inc.
Version: 1.4.2_21-b03
VM Parameters
Cluster
Node ID: 301932700
Kernel Version: 7.00 PatchLevel 76340.450
HTTP Port: 53000
HTTPS Port: 53001
P4 Port: 53004
Telnet Port: 53008
Info for crashes of this node
server0 Running
VM system properties...
PID: 21394
Name: Java HotSpot(TM) 64-Bit Server VM
Vendor: Sun Microsystems Inc.
Version: 1.4.2_21-b03
VM Parameters
Cluster
Node ID: 301932750
Kernel Version: 7.00 PatchLevel 76340.450
Info for crashes of this node
SDM Running
VM
PID: 21400
SDM Port: 53018
So: besides setting up the parameters in the above Note and consider the Load balancing, as there any other major setups required to start this app server as a dual stacked instance?
Thanks in advance.
SAM
Edited by: SAM_ONE on May 14, 2010 3:45 AM
Edited by: SAM_ONE on May 14, 2010 3:55 AM

PI 7.31 Dual Stack SSL configuration

Similar Messages

Maybe you are looking for