PLM Web UI ACM/ACL issue

Hi All,
I am configuring PLM Business package/ Web UI in portal. Version EHP4. (PLM Web UI)
Every screen (Material, BOM) giving me error "Authorizations are missing" . I know this trusted user issue.
I provided the role "SAP_PLMWUI_TRUSTED_USER_ALL" in ECC System.
How I can fix the problem? Which roles I need to assign to resolve the problem. FYI, Document are working fine. Because documents are not the part of ACM
2. I am looking in to SAP Help for authorizations but there are not detailed steps to set up these ACM/ACL .
3. How I can generate Root Context. There is a program we can run in SE38. But before that I need to assign Context Admin role to in IMG. Which role I need to assign as Context Admin.
I appreciate your help. Thanks in Advance.
Regards
Mark

administrator can set up the whitelist in Customizing for SAP NetWeaver under SAP
Web Application Server Web Dynpro ABAP Set-Up Active Controls Whitelist .
o The whitelist has to be named DEFAULT.
o File Extension
All files of this type can be executed in an external program by using the
Customizing option %auto%. For more information see Customizing for Logistics
General under Product Lifecycle Management PLM Web User Interface
Objects Document in PLM Web UI Define Workstation Application
o Application
Enter applications to be used for viewing or editing a file.
o Download
Enter at least one directory and one server. The system opens the directory and
all subdirectories for the download.
o Upload
Enter at least one directory and one server. The system opens the directory and
all subdirectories for the upload.
Make an entry for each option (File Extension, Application, Download,
Upload).
o Find the correct server name for upload and download
Working with a local whitelist in a SAP system requires a certificate for the system used.
The administrator must download the certificate using transaction WDR_ACF_GEN_CERT.
Alternatively, the administrator can create the new certificate in Customizing for SAP
NetWeaver under Application Server Web Dynpro ABAP Generate Certificate for
Whitelist
3. Each user has to install the certifcate using transaction ACF_WHITELIST_SETUP.
Alternatively, the user can install the certificate via Customizing for SAP NetWeaver
under Application Server Web Dynpro ABAP Activate Active Controls Whitelist .
o The provided list of whitelists is only for display reasons. The certificate is always
installed for the DEFAULT whitelist.
o You have to install the certificate after each change of the DEFAULT whitelist

Similar Messages

DMS Errors in PLM Web UI

Hi Folks,
I am running into errors when trying to edit an original and add an original to a DIR using the PLM Web UI (everything works fine in SAPGUI).
Upon opening the DIR (which as created in SAPGUI) I get the warning "No entry for the document maintained in viewer customizing". Not sure exactly what this is referring to and I could not find anything in customizing. If I try to edit or add an original I get the message "Inconsistent security list".
After searching forums and notes I came across note 1224097 (PLM Web User Interface: Installation of Applets) which talks about creating white lists using transaction WDR_ACF_WLIST. I am not sure if this is related to my issue, however, when I went into the transaction there was no default white lists as the note mentions. Is this typically done by basis?
Appreciate any help or suggestions you might have in getting the issue resolved. Support pack levels are mentioned below.
SAP_BASIS SAPKB70207
PLMWUI SAPK-70104INPLMWUI
Thanks,
Lashan

administrator can set up the whitelist in Customizing for SAP NetWeaver under SAP
Web Application Server Web Dynpro ABAP Set-Up Active Controls Whitelist .
o The whitelist has to be named DEFAULT.
o File Extension
All files of this type can be executed in an external program by using the
Customizing option %auto%. For more information see Customizing for Logistics
General under Product Lifecycle Management PLM Web User Interface
Objects Document in PLM Web UI Define Workstation Application
o Application
Enter applications to be used for viewing or editing a file.
o Download
Enter at least one directory and one server. The system opens the directory and
all subdirectories for the download.
o Upload
Enter at least one directory and one server. The system opens the directory and
all subdirectories for the upload.
Make an entry for each option (File Extension, Application, Download,
Upload).
o Find the correct server name for upload and download
Working with a local whitelist in a SAP system requires a certificate for the system used.
The administrator must download the certificate using transaction WDR_ACF_GEN_CERT.
Alternatively, the administrator can create the new certificate in Customizing for SAP
NetWeaver under Application Server Web Dynpro ABAP Generate Certificate for
Whitelist
3. Each user has to install the certifcate using transaction ACF_WHITELIST_SETUP.
Alternatively, the user can install the certificate via Customizing for SAP NetWeaver
under Application Server Web Dynpro ABAP Activate Active Controls Whitelist .
o The provided list of whitelists is only for display reasons. The certificate is always
installed for the DEFAULT whitelist.
o You have to install the certificate after each change of the DEFAULT whitelist

Whitelist Setup for PLM Web UI

Hello Guru's,
I would like to know what file path format do we have maintain for setting up whitelist for download and upload option.
Please see the attachment for screenshot.
Any inputs would be much appreciated.
Thanks & Regards
Jo Pz

Hi Christoph,
I followed the OSS Note: 1896169 for whitelist setup and I still get the below error when I try to display an original attached to DIR through PLM WEB UI. I have no issues from ECC.
In your reply you had mention the file path forward.
http://<server>:<port> - for File Loc. "Server"
C:\temp\ - for File Loc. "Directory".
Just want to confirm the Server path & port number should be the one from OACT.
Sample screen shot.
Kindly advice.
Thanks & Regards
Jo Pz

Full text search on PLM Web UI

Hello,
Full text search functionality in DMS with TREX solution , is working with SAP GUI. ( Original is checked in CV01N or CV02N )
Same functionality is not working with PLM Web UI .
Is there any setting has to be activated for this.
Thanking you,
Regards,
Satya

Hi ,
Yes. When I checkin Document in CV01N , then I can find in CV04N.
But if I check original in PLM Web UI , then I can not find in CV04n.
I assume that indexing will not problem as it is working in SAP GUI case.
Indexing functionalities ( TREX ) are not called when Document is checked in through PLM Web UI.
Where we can check these settings ?
Thanking you,
Regards,
Satya

PLM WEB UI - Personal Object Worklist for Material BOMs dumps in Portal

We installed business package for PLM WEB User interface and we start playiong around with the POWL functionality. For some reason teh system ends in an error calling ....../sap/bc/webdynpro/PLMU/wda_wcc_myobj/
This is section Personal Object Worklist for Material BOMs within Material BOMS
Below is what I get
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Error when processing your request
What has happened?
The URL ......../sap/bc/webdynpro/PLMU/wda_wcc_myobj/ was not called due to an error.
Note
The following error text was processed in the system ... : The ASSERT condition was violated.
The error occurred on the application server sapdl1_DL1_00 and in the work process 2 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: /PLMB/IF_SPI_METADATA_BASE~GET_NODE_DEFINITION of program /PLMB/CL_SEA_SELOPT_MP========CP
Method: GET_NODE_DEFINITION of program /PLMB/CL_SPI_METADATA=========CP
Method: GET_INSTANCE of program /PLMB/CL_SPI_METADATA=========CP
Method: GET_PROVIDERS of program /PLMB/CL_SPI_FACTORY==========CP
Method: CONSTRUCTOR of program /PLMB/CL_SPI_CONNECTOR========CP
Method: GET_SEA_CONFIG of program /PLMU/CL_WCC_PWL_FEEDER_ABS===CP
Method: CREATEPOWLDEF of program /PLMU/CL_WCC_PWL_FEEDER_ABS===CP
Method: IF_POWL_FEEDER~GET_SEL_CRITERIA of program CL_POWL_EASY_FEEDER===========CP
Method: IF_POWL_FEEDER~GET_SEL_CRITERIA of program /PLMU/CL_WCC_PWL_FEEDER_ABS===CP
Method: GET_UPDATED_SELCRIT of program CL_POWL_UTIL==================CP
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system ... in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server sapdl1_DL1_00 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 2 in transaction ST11 on the application server sapdl1_DL1_00 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Error code: ICF-IE-http -c: 020 -u: AXH7220 -l: E -s: DL1 -i: sapdl1_DL1_00 -w: 2 -d: 20100603 -t: 060408 -v: RABAX_STATE -e: ASSERTION_FAILED
HTTP 500 - Internal Server Error
Your SAP Internet Communication Framework Team
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
However , if I run this service as a standalone URL I get a screen where I can fill in an application, business object and/or system. If I select one, it works perfectly
What step do I miss?
Thanks for any input on this
kind regards
Angelique Heutinck
IFF

Hi,
I would reconmend to open an OSS message about this error.
Martin

SAP PLM Web UI: Document functionality working very slow or timing out

Dear Experts,
In the SAP PLM Web UI, when we open any existing document or try to create a new document system continues to process with out any error for long time before getting timed out.
Even Descriptions tab or any other tab and attached originals do not open.
Is this got something to do with the whitelist? I havent generated any whitelists so far for this system.
We are on ECC 6.0 EHP 6 and PLMWUI SAPK-70206INPLMWUI.
Thanks and regards,
Shashikumar BS

Hi Shashikumar,
it is quite hard to find out the reason for anybody without system access... I think the best and quickest would be for you to raise an OSS to SAP: http://service.sap.com/incident
Best regards
Tamas

PLM web document

Hi.
¿where can i find PLM web document?
thanks.

Hello,
you find informations about DMS WebDocuments here:
documentation:
http://help.sap.com/saphelp_erp2005vp/helpdata/en/c1/1c31a243c711d1893e0000e8323c4f/frameset.htm
Service Marketplace:
Service.sap.com/plm
-> Lifecycle Data Management
-> Document Management
-> Web Documents

Unable to checkin Original in PLM Web UI

Hello Gurus,
I am unable to checkin the originals PLM Web UI and also a duplicate content version gets created. Please see the attached screen shot.
The below message stays for few seconds and then disappears automatically
I checked the content version setting but none of them are activated.
What am I missing here? Kindly advice
When I try to save the DIR I also get "Certificate does not exist" as well.
Thanks & Regards
Jo Pz
Message was edited by: Jo Petz

Dear Jo,
regarding the provided error message I would kindly ask you to check the information at http://wiki.scn.sap.com/wiki/display/PLM/26+504+-+File+extension+not+allowed
So please verify that in transaction DC30 in the backend the application ADU is able to handle format *.pdf.
Further please check also the whiltelist settings in transaction WDR_ACF_WLIST. Here ensure that the whitelist is setup correctly and you have installed this certificate on your PC too.
Best regards,
Christoph

DRM Web Client 500.19 issue on windows 2008(x64) ERROR

Hi,
I installed DRM version 11.1.2 on windows server 2008(x64), according to the documents, I pre-installed .Net 3.5.1 and modified the applicationHost.conf file.
I found this in epm_install_troubleshooting
Web Client Access Failure
Issue: After installing Data Relationship Management on Windows 2008 64-bit platform, you
get this error message when attempting to access the Web client:
HTTP Error 500.19 - Internal Server Error The requested page cannot be
accessed because the related configuration data for the page is invalid.
Solution: In the IIS configuration file (C:/Windows/System32/inetsrv/config/
applicationHost.config), replace the two occurrences of Deny in the following section with
Allow:
<configuration>
<configSections>
<sectionGroup name="system.webServer">
<section name="handlers" overrideModeDefault="Deny" />
<name="modules" allowDefinition="MachineToApplication"
overrideModeDefault="Deny" />
However when I access the web client I got the 500.19 error, can't find C:\inetpub\wwwroot\drm-web-client\web.config, the web.config file do not exist.
Config File \\?\C:\inetpub\wwwroot\drm-web-client\web.config

Might be too late, but the problem is that IIS is pointing to the incorrect path. Should not be pointing to C:\Inetpub\wwwrooot\.... it should be pointing to Oracle\Middleware\EPMSystem11R1\products\DataRelationshipManagement\client\web-client same thing with the migration-client IIS app. To fix use the IIS Manager click the drm-web-client virtual directory and select "Advanced Settings" and update the "Physical Path" property.
Pablo

DRM Web Client 500.19 issue on windows 2008(x64)

Hi guys,
I installed DRM version 11.1.2 on windows server 2008(x64), according to the documents, I pre-installed .Net 3.5.1 and modified the applicationHost.conf file. The installation is successful without error. However when I access the web client I got the 500.19 error, can't find C:\inetpub\wwwroot\drm-web-client\web.config, the web.config file do not exist.
I guess this is something about IIS configuration but I'm not familiar with IIS, can anybody give me some suggestion?
Thanks

I found this in epm_install_troubleshooting
Web Client Access Failure
Issue: After installing Data Relationship Management on Windows 2008 64-bit platform, you
get this error message when attempting to access the Web client:
HTTP Error 500.19 - Internal Server Error The requested page cannot be
accessed because the related configuration data for the page is invalid.
Solution: In the IIS configuration file (C:/Windows/System32/inetsrv/config/
applicationHost.config), replace the two occurrences of Deny in the following section with
Allow:
<configuration>
<configSections>
<sectionGroup name="system.webServer">
<section name="handlers" overrideModeDefault="Deny" />
<name="modules" allowDefinition="MachineToApplication"
overrideModeDefault="Deny" />

ACL issue

Hi
I have activated the ACL switch by selecting ACL FLAG & Edit ACL check boxes in Tcode dcswitch but the authorization tab is not coming in DMS screens (CV01N, CV02N & CV03N). Can you please help me to solve it.
Regards
Harris

Hi Deepak Kori
The link provides the steps to get the option for turn on / off the ACL/browser switch. But in our system i can see these option in the Tcode dcswitch.
I selected (tick mark) the ACL FLAG & Edit ACL checkboxes in Tcode dcswitch but i can't see the Authorization tab in CV01N. This problem exist only in DEV client not in IDES.
If i don't select "Use ACM" check box in DC10 for the particular document type then the authorization tab is coming for that document type in IDES system. But in DEV client there is no field like "Use ACM" check box in DC10. Can you please clarify that 1. The ACL authorization tab will come only in IDES system?
2. The ACL authorization can be used only in SAP Easy Document Management System or we can use it for SAP GUI also?
3. Do we need to install anything (ex: PLM WebUI) to use the ACL authorization?
Regards
Harris.

Regarding web analysis data export issue

Hi all,
Iam new to web analysis we had a issue on one of the report
I can open the report and i can work perfectly on the report but when i export the data to excel its showing up as fallowing error
FATAL ERROR: gui report is inccorect
In the same application i have some other reports those are working fine and data is being exported to excel for those reports
What might be going with that report Please let me know if you have any ideas.
Thanks,
Ramesh

As report was exceding 65000 records we have modified the report by adding the pages and reduced the count of output records. So the issue was resolved.

ADFS 3.0 - Web Application Proxy configuration Issue

Hi All,
We are in the process of implementing ADFS 3.0 published to the internet for o365 Federation purposes.
The setup consists of the following
- 2 x windows 2012 R2 running ADFS 3.0 ( only one server presently installed and configured though)
- 2 x Windows 2012 R2 Running Web Application Proxy ( only one server presently installed and configured though ).
There is an F5 Big-IP load-balancer for both internal and external interfaces and it has been configured after a lot of issues with the SNI part on the F5.
So, in short the setup is now a single server hosting ADFS 3.0 using SQL and a single WAP server, however the traffic to these servers are still going through the LB.
Now the issue is that i cannot complete the installation/configuration of the Web Application Proxy server. There is a firewall in between our DMZ and the internal network. I can reach the internal services via the following url and telnet on port 443
to the federation service as well. (ports for 443 and 80) are opened to internal network on the load balancer ip . I can reach https://fs.domain.com/adfs/ls/idpinitiatedsignon.aspx and federationmetadata/2007-06/federationmetadata.xml location as well
from the Web APplication proxy server without any issues or certificate prompts at all.
When i do the configuration for WAP, i use the same account which was used as a service account for the ADFS service internally. If i use a local admin account, it errors out with another message stating the connection was closed.
The certificate on the internal server along with its private key was exported and has been imported on the WAP server . This is not internal CA, instead we are using DIGICERT SSL with SAN Names for enterprise registration and work folders. Hence the CA Chain
issue is ruled out and also this is not a wild card certificate.
When the wizard starts configuring, it does establish the trust with the federation service which is shown up in the event viewer with EventID 391 within 15 seconds i get another event id 422 which states that it cannot retrieve the proxy configuration
and eventid 276 on the Federation server which states the authentication failure. this continues until the servers stops to try configuring the wizard.
I have read all the available threads on the 3.0 WAP installation /configuraiton problem and tried all the steps possible but i am still stuck with this issue.
There is one more part that i noticed on the ADFS server, that the self signed services for the token-encrypting and token decrypting are self-signed certificates. Also, in the certificates it was showing up as not trusted. and i installed them to the TRUSTED
ROOT CERTIFICATION STORE after wich i cannot see any private key showing up when viewing the certificate which means i cannot get the MANAGE PRIVATE keys option when right clicking on the cert to assign read permissions for the ADFS service account.
Should i assign the same SSL sertificate (SAN based for enterpriseregistration & Workfolders) to the token-encrypting and token-decrypting services in ADFS console or should i leave them as self signed ? I did read that self-signed is not recommended for
production environment ? If not the same certificate what are the requirements for the certificate ?
I am not sure what I am missing in the configuration that is causing this issue. The WAP servers are not part of the domain and have also ensured the time synchronization between the domain machine as well.
The service name is fs.domain.com on both the internal and external DNS ( we have domain.com as a zone in DNS internally as well ). I am able to Authenticate inside and from the WAP server when accessing the link.
Could it be a Load Balancer Configuration ? [i will try eliminating this from the configuration]
Let me know if there are any options that i can try to resolve this and get the configuration working.
Cheers,

Does the load balancer pass the certificate session through to the ADFS server or are you offloading SSL. SSL offload does not work with WAP/ADFS integration (at least at the time of writing it does not).
Can you try through the load balancer with SSL pass through turned off please.
Also as ADFS 3.0 (Server 2012 R2) uses Server Name Indication (SNI) then any health checks that run on the load balancer must support this, so if they do not then you need to use TCP 443 checks for a listening port, as doing a standard HTTPS check will fail,
and if the load balancer fails its checks whilst you are configuring ADFS that might be a reason why it has gone offline for you (error 442 is to do with failure to swap client certificates between WAP and ADFS).
Finally, check the June update to Server 2012 R2 (http://support.microsoft.com/kb/2964735) as that has fixed some certificate issues with multiple servers for WAP and ADFS when you don't have the
2012 R2 AD schema in place.
Brian Reid
Exchange MVP and Exchange and Office 365 Certified Master
www.c7solutions.com
Brian Reid C7 Solutions Ltd (www.c7solutions.com)

Office Web Apps Server 2013 issue

Dear All,
I am encounter problem when I try to open document from my browser. Prompt message will pop-out when it try to preview a document:
"sorry, there was a problem and we can't open this document. If this happens again, try opening the document in Microsoft word"
When I check in Event viewer, there is an error display:
"Could not contact WOPI End Point. Error details - 'Unauthorized url - http:bla.bla.bla....."
Kindly advise on how should I resolve this issue.
Application Note:
1. Windows OS: Windows Server 2012 R2
2. Office Web Server 2012 SP1
3. SharePoint Server 2013
Thank you.

Verify if you have configured correctly by checking the following post
https://technet.microsoft.com/en-us/library/ff431687.aspx
In case everything is correct, Please check the following post for similar issue
https://social.technet.microsoft.com/Forums/sharepoint/en-US/f7be5f88-8c98-464e-8596-60956b5e98fd/sharepoint-2013-office-web-apps-problem-unable-to-openviewedit?forum=sharepointgeneral.
http://blogs.technet.com/b/justin_gao/archive/2014/12/19/troubleshooting-error-event-id-8115-when-you-install-office-web-apps-server-2013-on-windows-server-2012-r2.aspx
Note:Check with non Farmadmin account
Please Mark it as answer if this reply helps you in resolving the issue,It will help other users facing similar problem

SharePoint 2013 Anonymous (public) site and Office Web Apps Server 2013 issue with download.aspx

Our organization has a public facing anonymous site in SharePoint 2013 which allows access to documents (docx) in a library. ViewFormsLockdown is activated as we present the documents via CQWP / custom template. We are combating the usual
issue of multiple login prompts when using Internet Explorer when a user accesses said document. We also have tried using the Word Viewer (view only mode) from Office Web Apps Server 2013 which works well, but ...
the problem stems from the fact that users can go the file menu from the word view and choose to download the document (which is what we want), unfortunately it looks like the link redirects via /_layouts/15/download.aspx which also presents a login
prompt. Much has been written out there about doing direct links for documents via /_layouts/download.aspx to address multiple login prompts when the document is opening in word (from IE).
I've tried nearly every combination of recommendations (disabling client integration, browser file handling (permissive/strict), ViewFormsLockdown feature, web.config modifications with options and propfind verbs and more) all to varying levels of success,
but never totally getting rid of the prompt. It has been stated that because the downloads.aspx inherits from Microsoft.SharePoint.ApplicationPages.Download this will not allow anonymous access. We really want to use the word view from the Office
web app and have the file download functionality work from the menu there ... can anyone suggest an alternate fix? I might be wishing but will appreciate any guidance offered ...
cheers,
Dean
some reference links (but not all) for various things we've tried:
http://mohitvash.wordpress.com/2013/06/18/sharepoint-download-a-file-programatically/
http://blog.sharedove.com/adisjugo/index.php/2012/09/29/open-sharepoint-files-in-edit-mode-from-client-applications-and-not-read-only/
http://stackoverflow.com/questions/375390/office-documents-prompt-for-login-in-anonymous-sharepoint-site
http://yalla.itgroove.net/tag/anonymous-access/
Glifnard

I'm glad to here that the problem has been fixed. Thank you for sharing your experience here, it will be helpful to other community members who have similar questions.
Cheers,
Steve Fan
TechNet Community Support

PLM Web UI ACM/ACL issue

Similar Messages

Maybe you are looking for