Portal 7.0 First Intall

Hi,
I am trying to get my first portal up and running to become familar with the application. I have followed the instructions detailed in edocs.bea.com/wlp/docs70/newdom.htm and gotten to Step 4: Make new Portlet Visible.
When I go to the Portal Management area of the portalAppTools, there is no default group portal defined and I do not see a way to add one. The docs show that a "default (everyone)" group should be defined, but I dont have that. Syncronization appears to work correctly with no errors. Any help would be greatly appreciated.

Dirk,
Make sure you logged in as a user in the delegated admin group -
installadministrator for example. If you don't (logging in as
system/weblogic for example) you won't see a default group portal.
Sincerely,
Daniel Selman
"Dirk Meilinger" <[email protected]> wrote in message
news:[email protected]..
Hi,
I am trying to get my first portal up and running to become familar withthe application. I have followed the instructions detailed in
edocs.bea.com/wlp/docs70/newdom.htm and gotten to Step 4: Make new Portlet
Visible.
>
When I go to the Portal Management area of the portalAppTools, there is nodefault group portal defined and I do not see a way to add one. The docs
show that a "default (everyone)" group should be defined, but I dont have
that. Syncronization appears to work correctly with no errors. Any help
would be greatly appreciated.

Similar Messages

User profile is not avaliable on the first request to portal.

Hi, I am having a problem with anonymous user profile.
When user come to our portal for the first time:
1) In desktop backing file we will initialize it's anonymous profile.
ProfileWrapper userProfile = SessionHelper.getProfile(SessionHelper.getSession(request, true));
userProfile.setProperty("UserProperties", "user-region-name", "Germany");
2) The in Java Page Flow action I could read or change this value, but in the following forwarded .jsp page
I read only NULL values.
In the JSP I tried to read it by scriptlet, tags.
<%
ProfileWrapper userProfile = SessionHelper.getProfile(session);
String segmentJ = ((String) userProfile.getProperty("UserProperties", "user-region-name"));
System.out.println("JSP CODE:"+segmentJ);
%>
JSP CODE: [<%=segmentJ%>]
<profile:getProperty propertyName="user-region-name" propertySet="UserProperties" id="segment"/>
ruser-region-namee : <c:out value="${segment}"/><br>
But in the both situations I read only NULL values.
In the next request(F5) all values are accessible.
Please adivice how can I read user profile or deal with it in correct way?
P.S At the same moment I couldn't read user profile in the Struts portlet at all. :(
Thanks

Hi
Couple of things.
1. Try using this below API to get ProfileWrapper and see if that helps. This is what I use on my side after login action, and I could get user profile details.
ProfileWrapper aProfileWrapper = ProfileFactory.getProfile(loginId, null);
http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14255/index.html
2. Now, in the backing file, you are setting some properties. Which lifecycle methods are you setting them in. Like in handlePostBack or preRender. For time being, set them in both these methods and add proper System.out.printlns to observer which method is actually getting invoked. handlePostback gets called only when we move across tabs, as per my observation so far. So I set them or get them in preRender method.
Thanks
Ravi Jegga

Scheduling web intelligence reports from SAP EP Portal : Server Side Trust

Hello,
We have set-up SSO between SAP EP 701, SAP BI 701 and Business Object XI 3.1 to allow users to access reports without having to sign-on again as explained here :
/people/ingo.hilgefort/blog/2008/09/19/businessobjects-and-sap--configure-sap-authentication
But, we have recently been contacted by some users because when scheduling Webi Report from a link within the portal they have the following errors :
u201CA database error occured. The database error text is: Unable to connect to SAP BW server System received an expired SSO ticket. (WIS 10901) u201D
The user told us that he doesn't encounter the error when :
Login in directly to the BO Infoview (without SSO from the SAP Enterprise Portal.)
The first Webi scheduling is succesful from the portal (I suppose because the portal token is still valid)
I understand that we also have to configure the Server Side Trust between BO Enterprise server and the SAP BI7 backend as explained here , but I do not really understand its purpose
https://websmp106.sap-ag.de/~sapidb/011000358700001646962008E/XI3-1_BIP_SAP_INSTALL_EN.pdf
I've found a similar discussions here ;
Issue with SAP Single Sign-On and Scheduling Reports
I still have some questions :
If we configure the Server Side Trust between BO Enterprise server and the SAP BI7 backend .
The Portal Logon ticket will remain an issue at some point of time , does it mean tha the WeBi report job sheduling should not be perfromed from the SAP EP Portal ?
We haven't configured the Server Side Trust , yet the users told us that they are able to schedule webi report directly from the BO Infoview ? How is it posible ?
Thank you in advance for your help.
Regards.

Thank you Mr Hilgefort for your detailled explanations.
I now have to provide some explanations to my managers, and to be honest , there are still some points that
are unclear to me, and it would be extremely helpful if could confirm (or not) the follwoing points.
When scheduing Webi report from the sap portal, we're getting SSO errors.
SAP provide the follwoing note explaining how to extend the validity of the J2EE token (Portal token), but this is not a long term solution, at certain point of time the ticket will expire. Webi shceduling should not be perfromed from the Portal.
Sap note 1352127 - Scheduled Webi report fails with: A database error occurred. The database error text is: Unable to connect to SAP BW server System received an expired SSO ticket
Webi Scheduling should be performed from BO Infoview. SNC should be configured between BO server and SAP BI7.0 backend.
We should Configure Server SNC as explained in the BusinessObjects XI Integration for SAP Solutions Installation and Administration Guide at Chapter "Configuring SAP for server-side trust". (1341043)
The SAP Portal is not involved here and is not an option even with the configuration of SNC/Server side trust.
thank you for your patience.
Best Regards.

Assertion Failed - Dump when clicking on the links from Portal for WD Comp

Hi,
We have a WD Component which is integrated to the Portal . When we click on the link in the Portal for the first 2 times, the selection screen is shown correctly ( when debugged, the program stops in WDDOINIT method before the sel.screen is shown).
When we click on the link for the third or fourth time with no time gap, it shows a dump. This is the dump I am getting.
Runtime Errors         ASSERTION_FAILED
Date and Time          01/06/2011 10:13:58
Short text
The ASSERT condition was violated.
What happened?
In the running application program, the ASSERT statement recognized a
situation that should not have occurred.
The runtime error was triggered for one of these reasons:
- For the checkpoint group specified with the ASSERT statement, the
activation mode is set to "abort".
- Via a system variant, the activation mode is globally set to "abort"
for checkpoint groups in this system.
- The activation mode is set to "abort" on program level.
- The ASSERT statement is not assigned to any checkpoint group.
How to correct the error
Probably the only way to eliminate the error is to correct the program.
If the error occures in a non-modified SAP program, you may be able to
find an interim solution in an SAP Note.
If you have access to SAP Notes, carry out a search with the following
keywords:
"ASSERTION_FAILED" " "
"CL_NW7_VIEW_ELEMENT_ADAPTER===CP" or "CL_NW7_VIEW_ELEMENT_ADAPTER===CM004"
"DISPATCH_NW7_EVENT"
If you cannot solve the problem yourself and want to send an error
notification to SAP, include the following information:
1. The description of the current problem (short dump)
To save the description, choose "System->List->Save->Local File
(Unconverted)".
2. Corresponding system log
Display the system log by calling transaction SM21.
Restrict the time interval to 10 minutes before and five minutes
after the short dump. Then choose "System->List->Save->Local File
(Unconverted)".
3. If the problem occurs in a problem of your own or a modified SAP
program: The source code of the program
In the editor, choose "Utilities->More
Utilities->Upload/Download->Download".
4. Details about the conditions under which the error occurred or which
actions and input led to the error.
User and Transaction
Client.............. 010
User................ "STECURRY"
Language Key........ "E"
Transaction......... " "
Transactions ID..... "4D250E9ADDFB00BDE10080000A041004"
Program............. "CL_NW7_VIEW_ELEMENT_ADAPTER===CP"
Screen.............. "SAPMHTTP 0010"
Screen Line......... 2
Information on Caller ofr "HTTPS" Connection:
Plug-in Type.......... "HTTPS"
Caller IP............. "10.6.4.220"
Caller Port........... 443
Universal Resource Id. "/sap/bc/webdynpro/sap/ZEM_INV_APP_ASSIGNMENTS/"
Information on where terminated
Termination occurred in the ABAP program "CL_NW7_VIEW_ELEMENT_ADAPTER===CP" -
in "DISPATCH_NW7_EVENT".
The main program was "SAPMHTTP ".
In the source code you have the termination point in line 5
of the (Include) program "CL_NW7_VIEW_ELEMENT_ADAPTER===CM004".
Source Code Extract
Line
SourceCde
1
METHOD dispatch_nw7_event.
2
DATA: l_event_handler TYPE REF TO if_wdr_nw7_event_handler.
3
4
l_event_handler = get_nw7_event_handler( i_event_handler_id ).
>>>>>
assert l_event_handler is not initial.
6
7
" View-based Delta Rendering: tracking of client events
8
raise event on_nw7_handle_event
9
exporting
10
event_handler = l_event_handler
11
event_name    = i_event_name.
12
13
14
l_event_handler->handle_event(
15
i_event_name       = i_event_name
16
i_event_parameters = i_event_parameters
17
i_update_data      = i_update_data
18
i_event_queue      = i_event_queue ).
19
ENDMETHOD.
- I have cut the dump to make it short and clear.
One of my colleague ran a HTTP watch trace and I am attaching it as well.
<body> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr> <td> <h1> Error when processing your request </h1> <br> <h2> What has happened? </h2> <p> The URL https://uswasspq.deloitte.com:/sap/bc/webdynpro/sap/ZEM_INV_APPROVER_MAIN//ucfLOADING was not called due to an error. </p> </td> </tr> <tr> <td> </td> </tr> <tr> <td class="emphasize"> <strong> Note </strong> <br> <ul> <li> The following error text was processed in the system SPQ : <b> User session (HTTP/SMTP/..) closed after timeout </b> </li> </ul> <ul> <li> The error occurred on the application server usuxc204_SPQ_01 and in the work process 1 . </li> </ul> <ul> <li> The termination type was: ERROR_MESSAGE_STATE </li> </ul> <ul> <li> The ABAP call stack was: <br> Method: PREPROCESS_REQUEST of program CL_WDR_CLIENT_ABSTRACT_HTTP===CP<BR>Method: IF_HTTP_EXTENSIONHANDLE_REQUEST of program CL_WDR_MAIN_TASK==============CP<BR>Method: EXECUTE_REQUEST_FROM_MEMORY of program CL_HTTP_SERVER================CP<BR>Function: HTTP_DISPATCH_REQUEST of program SAPLHTTP_RUNTIME<BR>Module: %_HTTP_START of program SAPMHTTP<BR> </li> </ul> </td> </tr> <tr> <td> </td> </tr> <tr> <td> <p> </p> <h2> What can I do? </h2> <ul> <li> If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system SPQ in transaction ST22. </li> </ul> <ul> <li> If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server usuxc204_SPQ_01 in transaction SM21. </li> </ul> <ul> <li> If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 1 in transaction ST11 on the application server usuxc204_SPQ_01 . In some situations, you may also need to analyze the trace files of other work processes. </li> </ul> <ul> <li> If you do not yet have a user ID, contact your system administrator. </li> </ul> <br/> <p class="note"> Error code: ICF-IE-https -c: 010 -u: STHUGHES -l: E -s: SPQ -i: usuxc204_SPQ_01 -w: 1 -d: 20110208 -t: 131808 -v: ERROR_MESSAGE_STATE -e: User session (HTTP/SMTP/..) closed after timeout </p> <br/> <p> HTTP 500 - Internal Server Error <br/> <p> Your SAP Internet Communication Framework Team </p> </td> </tr> </table> </body> </html>
After this error a URL is called form the WebDynpro to the following html page.
https://uswasspq.deloitte.com/sap/bc/webdynpro/sap/zem_inv_approver_main/dps_Error_Page.html ( this is the friendly message we have put so that the user does not see the dump on his screen.
I tried invalidating the nodes in the WDDOEXIT at the view level but it did not help. This is a show stopper for the project to go live.
Thanks,
Guru.

Hi Guru,
It is not readable the way you posted and that might be the reason that you do not get reactions.
Can you please confirm the following.
1. Is this problem occurs with out portal when you run the application standalone in SAP GUI.
2. What is going on wddoinit method or wddomodify method, any resource handling there ?

How to add 1 more column in standard portal UWL and map the values.

Hi
I have one issue/requirement, please help me out on that also.
In portal UWL, i want to add one more column TICKET ID COLUMN, and ticket id value I will be putting as work item ID of abap Workflow, so whenever approver opens his portal UWL, in first column i want to show ticket ID say 00012345, so how to add this ticket ID column in standard portal UWL and how to put/map value of work item in that column.
My idea behind this is, when ever say employee wants to know the status about his ticket ID, he can simply ask his manager regarding the ticket status by referring to that ticket ID which manager can easily find in his portal UWL in that extra TICKET ID COLUMN .
Do I have to change anything in SAP inbox also ? Do i have to add 1 more colum in sap R/3 inbox also ? and will adding 1 more colum in sap inbox (R/3 inbox), will create automatically one more ticket ID colum in portal UWL also ?
please let me know , as i do not want to add 1 extra column in R/3 inbox, just i want in portal UWL extra ticket ID column should come and i want to put workitem ID generated at the start of workflow, in that colum in portal UWL
please help me on this.
Thanks...
Edited by: User Satyam on May 29, 2011 6:16 AM

Hi Satyam,
These are called custom attributes. Here is a powerpoint that may be able to assist you with the documentation that the other poster gave you too.
Always remember too when you make a change on the backend R/3 side, you must reregister your UWL connector. And yes, the column must be available on the backend R/3 side. We can't create on the fly columns in the UWL, that have no reference to the backend system in this case.
Beth Maben
EP - Senior Support Consultant II
AGS Primary Support
Global Support Centre Ireland
Please see the UWL Wiki @
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq ***

Portal performance monitoring scripts : (Unable to generate reports) HELP

Hi,
Using 10.1.2.0.0
I followed README.html document to load the logs files to generate reports for Portal Performance.
First of all while running loadlogs.pl I keep getting the following error. I even tried adding -nodirect but still gets the same error. Don't know why. But it looks like there is some data loaded in OWA_LOGGER table
C:\ORACLE_PRODUCTS\PORTAL_AS\portal\admin\plsql\perf\loader>perl loadlogs.pl -logical_host localhost -connection owa_perf/owa_perf@orcl -http_logfile C:\ORACLE_PRODUCTS\PORTAL_AS\Apache\Apache\logs\error_log.1130457600 -webcache_logfile C:\ORACLE_PRODUCTS\PORTAL_AS\webcache\logs\access_log -oc4j_logfile C:\ORACLE_PRODUCTS\PORTAL_AS\j2ee\OC4J_Portal\application-deployments\portal\OC4J_Portal_default_island_1\application -nodirect
25-Oct-05 13:20:17, Copying abc:C:\ORACLE_PRODUCTS\PORTAL_AS\Apache\Apache\logs
\error_log.1130241600
25-Oct-05 13:20:17, Loading C:\DOCUME~1\whitesox\LOCALS~1\Temp\abc_error_log.1130
241600.20051025.132017
25-Oct-05 13:20:21, Copying abc:C:\ORACLE_PRODUCTS\PORTAL_AS\j2ee\OC4J_Portal\a
pplication-deployments\portal\OC4J_Portal_default_island_1\application
25-Oct-05 13:20:21, Loading C:\DOCUME~1\whitesox\LOCALS~1\Temp\abc_application.20
051025.132021 -nodirect
SQL*Loader-350: Syntax error at line 127.
Token longer than max allowable length of 258 chars
end",
^
25-Oct-05 13:20:22, Copying abc:C:\ORACLE_PRODUCTS\PORTAL_AS\webcache\logs\acce
ss_log
25-Oct-05 13:20:31, Loading C:\DOCUME~1\whitesox\LOCALS~1\Temp\abc_access_log.200
51025.132022Then I ran reports.sql but I don't see any reports being generated, but running this script did populate some other tables. I tried running some other scripts also but somehow I don't see any reports being generated as opposed to what is said in the README.HTML document i.e. "A sample web page (reports.html) is included which provides links to the generated reports.". How really I get to see the reports, where are the reports generated, is it something else that I am missing. No matter what script I run I don't see any report being generated. The document is not so clear. Can someone please help me out here. Thanks

Hi!
You have to change to directory
ORACLE_HOME$/portal/admin/plsql/perf/scripts
(you can find reports.sql in it) before you run reports.sql script!
It will produce several .txt files.
After running the script just open reports.html, that will point the generated files.
A better place to ask questions like this:
Portal Performance and Scalability
http://forums.oracle.com/forums/forum.jspa?forumID=15

BO XI Portal Integration

Hi Folks,
is try to setup an evaluation scenario on the integration of BO Reports into Enterprise Portal according to this document:
http://help.sap.com/businessobject/product_guides/boexir3/en/xi3_bip_sap_user_en.pdf
chapter "Managing the SAP Enterprise Portal". The first step is "Configuring the BusinessObjects Enterprise server entry point".
According http://help.sap.com/saphelp_nw04s/helpdata/en/f7/f3a94076b63713e10000000a155106/frameset.htm the precondition to do this is "You integrated an appropriate SAP System in the portal system landscape and defined a system alias".
My questions:
why (except authentication) do i need a SAP System and what makes a SAP System "appropriate"?
Whats about licensing? As i understand, BO users also need a user on the SAP System. What licenses are required for the SAP users?
In the scenario decribed above the Crystal Enterprise Server is a property of the of the SAP System object in SLD. Is there a way to connect the Business Objects Server directly without a SAP System?
thanks a lot
regards
Torsten

hi ingo,
sorry, but with our discussion we are totally on the wrong track. My problem is not authentication. Instead, ist's how to use the BO masterview iview. To use it, i have to configure the "BusinessObjects Enterprise server entry point". This entry point in turn is a subset of configuring a SAP system in SLD.
The point of my question was: How can integrate BO in the portal without having a SAP system. As i understand it, i need a SAP system to use the BO masterview iview. But what is the technical need for the SAP system?
In the end the question was: Wy i can't configuring the BO server directly in the SLD?
regrads
torsten

Document access via WAN in portal

Hi,
I have the following problem. I have installed portal with KM in place A and some users are in place B. Both places are connected via WAN (1Mbit/s). Users in place B have some documents stored in there LAN so they can access them relatively quickly. But they would like to use functionality of KM. When I move their documents to the portal they will access these files over WAN connection. Is there some alternative solution? (users can navigate to the document via portal but than they download them from LAN). Can this be solved by WebDAV or Web repository manager?
Thanks a lot,
Zdenek

Hi Praskah,
thanks for help but I would like to avoid network traffic between two WAN locations. Imagine that you have 10MB file on network A on some WebDAV server for example that is in network A too. Portal resides in network B which is conntected with network A via 1mbit/s connection. Webdav repository is connected to this portal. I suppose that if you want to download your document from portal you must firstly transfer it from network A to network B (to the portal) and then from network B to network A again (to your desktop).
My question is: Can I avoid described useless network traffic and download document directly from network A?

Publish to Portal no longer working

Hi there
We have published numerous templates from the WAD to our portal environment.
It has been a while since we have needed to do this, and now, all of a sudden, the link is no longer working.
We can open a template in the WAD, then choose Web Template >> Publish >> to Portal. The first screen I am presented with, then, is the portal login screen (as expected), then, once authenticated, I get a "Cannot find server or DNS error" error message.
The portal is accessible, as I can navigate to it normally and browse all the other reports already published.
The URL that is used for publishing is
http://a03a001.ucs-solutions.co.za:50100/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex3x?system=SAP_BW&CMD=START_BROADCASTER70&SOURCE_TEMPLATE=PRINTTEST&START_WIZARD=X&DISTRIBUTION_TYPE=PCD_EXPORT
If I follow that URL, it takes me to an iview in PCD >> Portal Content >> Content Provided by SAP >> Platform Add-ons >> Business Intelligence >> iViews >> BEx Launcher (Format SAP BW 3.x).
We are using a 2004s system ... so I assume this is the correct iView to be using. If its the wrong one, how do I configure to use an alternate iView?
If I look at the properties of this standard iView, the only one that concerns me is the BEx Web Application Query String, which is set to "to_be_defined".
If I try to preview the iview, I get the same error message as described above.
Any ideas?
Cheers,
Andrew

Originally Posted by danh2010
All systems are preexisting, except the Groupwise. We migrated from 8 to 2012 an dit no longer works. I did reinstall Cisco Personal Communicator and that did nothing different.
I can right-click from FireFox or IE and choose call and it'll call out.
But from GroupWise, the right-click menu shows dial and wants to use the default XP dialer.
I can't find any info on this at all.
Maybe double check the settings found in GroupWise and set/reset the standard dialer (should be within the environment's default actions options). If that works you might be able to "catch" the change and push it as a default to the other systems. There should be a regkey "DefaultTelephonyProvider" found in HKEY_CURRENT_USER\Software\Novell\GroupWise\Client \Setup once set. Don't know if that is the only key needed to be set or if there are others.
If that does not fix it an ugly workaround could be to rename the dialer exe and replace it with the/a link for the Cisco dialer. Ugly, but might work.
Cheers,
Willem

Problems in Changing LDAP (AD) Initial Password from Portal

Hello ,
We are using EP 7.01 SP 05 with Microsoft AD as our user data store (flat structure).
For newly created users on AD, we are wanting them to be able to change their initial passwords from portal (on their first logon).
SSL is set up between EP and AD.
The user we are using to access LDAP has write privileges.
We are using a standard configuration file (writeable version) (dataSourceConfiguration_ads_writeable_db.xml)
We are able to modify users from User Administration console (including password change) without any problem.
However, there are two problems we are facing:
1. If the flag "User must change password at first logon" is set on AD/LDAP, then on Portal the user is not getting prompted for changing password - and User authentication failed
2. If the flag "User must change password at first logon" is NOT set on AD/LDAP, then - User is getting prompted to change the password" - however password change is not going through successfully - Error says - "Missing".
From logs I can see the following error:
#1.5#0050568767DE006B0000000700005D7C00048EC433D5B0FC#1282873241046#com.sap.security.core.persistence#sap.com/irj#com.sap.security.core.persistence.[cf=com.sap.security.core.persistence.datasource.imp.LDAPPersistence][md=changePassword][cl=64495]#Guest#0#SAP J2EE Engine JTA Transaction : [044ffffffd35700451]#n/a##19ae55e0b17c11dfb0d00050568767de#SAPEngine_Application_Thread[impl:3]_23##0#0#Error##Java###Can not change password
[EXCEPTION]
{0}#1#javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - 0000052D: AtrErr: DSID-03190F00, \#1:
0: 0000052D: DSID-03190F00, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9005a (unicodePwd)
]; remaining name 'cn=portal test'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3010)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2943)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2749)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1449)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:255)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:172)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:161)
Can any one pls suggest what is this error about and what I am missing.
Thanks ,
Shanti

Hello All,
Thank you for your time and valuable replies.
I got rid of the "Missing" error and now I am one step away from the solution.
Now I am at a stage where: (for a user with initial password on LDAP)
1. In AD if "User needs to change password on next logon" flag is NOT set - user can successfully logon to portal. (without being prompted for password change)
2. In AD if "User needs to change password on next logon" flag is set - then user cannot logon to portal - I get User authentication failed error.
I have went through a lot of discussions around this topic on SDN and different SAP Notes. I have tried to maintain UME Security policy as close as possible to LDAP (I cannot make it exactly same due to some differences in LDAP and UME).
However, when and administrator can change passwords from UME successfully without any problem - it means that:
- Security policy is being met
- Service user used to communicate to LDAP has all the required access
The only missing piece of the puzzle is how to enable the users to be able to change their passwords (with initial or expired passwords).
According to Note 865399 - the default value for The property ume.ldap.access.set_pwd is TRUE.
Also the property ume.ldap.access.pwd.via.usercontext can only be TRUE when ume.ldap.access.set_pwd is set to FALSE.
So, I have tried setting the following without any success:
<ume.ldap.access.pwd.via.usercontext>true</ume.ldap.access.pwd.via.usercontext>
<ume.ldap.access.set_pwd>false</ume.ldap.access.set_pwd>
Thanks,
Shanti

SSL Setup in a load balanced portal

Hi,
We are implementing a portal landscape and also we are using a hardware based (Cisco ACE) load balancer for load balancing purposes.
So the configuration would be:
Portal requests --> Load Balancer --> Portal --> Backend
We are trying to implement SSL until the portal server and I have a question regarding the SSL certificate installation process.
The URL on the load balancer would be for example https://portaltest.mycompany.com which would load balance the requests between the application servers of the portal (https://sapeptest1.mycompany.com:50001/irj/portal and https://sapeptest2.mycompany.com:50001/irj/portal).
So, first thing we will have to do would be to install an SSL certificate (signed by a Trusted CA) on the load balancer with a CN=portaltest.mycompany.com.
I understand that for https to function properly, the host name in the URL we are using to get to the server should match the CN of the SSL certificate installed on the server.
Now, can we install the same certificate (that we put on the LB) on the portal as well?
(This might not work because the server type will be different)
(or)
Do we need to buy 2 certificates with the same CN and install one each on the LB and portal ?
Can some one please suggest on how to proceed with the SSL setup and certificate installation process ?
Thank You ,
Raj

Raj Kumar wrote:
My question is about how to go about installing the certificates on the LB and on the portal.
If you aren't using web dispatcher, then the details of the installation on the LB will depend on your LB (Cisco? Radware? etc?). I suggest contacting your LB vendor for that.
Sen's link is for SSO, you want the [SSL procedure|http://help.sap.com/saphelp_nw70/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm].
You probably don't need a signed cert on the portal server itself (depending on whether your LB validates the cert). You could just use the default self-signed cert, since users won't be connecting to it directly and so won't be troubled by warnings about untrusted certs: the traffic from the AS would still be encrypted, you would only lose out on the server authentication feature (which you don't need, since again users won't see it).
On the other hand, do you really need SSL on portal server? That adds overhead at both the LB and portal. It's usually sufficient to use HTTP from the LB to the back-end, as long as the servers only allow connections from the LB. I realize you aren't using web dispatcher, but this looks like scenario #3 in [this diagram|http://help.sap.com/saphelp_nw70/helpdata/en/d8/a922d7f45f11d5996e00508b5d5211/frameset.htm]
Regards,
Sean

Adding mail users from Portal 'sign me up' facility

When users access the Portal for the first time, they have the opportunity to sign up as new users.
This will create their user id and they can then access IM or Calendar quite happily.
They can't, however, access mail. Adding mail users appears only to be possible via the command line tools. This essentially means that it's not practical to have users sign themselves up!
Is there any integration module/howto out that describes how to let users sign up to mail and the other services and not just an inconvenient subset?

If you create a Mail service (have a look at the sample one provided with Identity Server 6.1 in /opt/SUNWam/samples/integration) you can specify default values for the relevant attributes, then specify that the service you create is a required service in the organization your users area being created in.
Haven't tried it myself but it should work.
--Stephen

Parameter for Query to prevent automatic execution when broadcast to portal

When our users open a Portal folder the first query is automatically executing.   We are using a PCD Subfolder structure.   Does anyone know of a parameter that can be set that requires the user to select the query to execute.
See structure below
Finance
    AR
     Query 1

Hi,
regarding how to call "bindings.ViewCriteriaQuery.processQuery" from Java code. You create a method binding in JSF and execute it.
http://thepeninsulasedge.com/frank_nimphius/2007/10/29/jsf-12-invoking-a-method-binding-programmatically-in-java-to-add-pre-post-triggers/
Frank

JPDK : first name and last name

hi
Using JPDK, I would like to build a portlet that displays the Portal user's first name and last name. (This information was provide when I created the Portal user.)
Seems to me that this should not be difficult, but I don't know what API I'm supposed to use.
Suggestions anyone?
tnx
-Jan

hi
In 9iAS r2, Oracle Portal uses Oracle Internet Directory to store data about a Portal user.
Would it be "good practice" to use the information returned from ProviderUser.getName() to query OID for the first name and last name?
If not, what is the "intended way" to do this?
tnx
-Jan

Portal Design - Best Practices for Role and Workset Tab Menu

We are looking to identify and promote best practices in SAP Portal Design.
First, is there a maximum number of tabs which should exist on the highest level tab menu, commonly called the role menu? Do a large number of tabs on this menu cause performance issues? Are there any other issues associated with a large number of tabs on this menu?
Second, can the workset tab menu be customized to be 2 lines of tabs? Our goal is to prevent tab scrolling.
Thanks

Debra,
Not aware of any performance issues with the number of tabs in the Level 1 or 2 menus, particularly if you have portal navigation caching enabled.
From an end user perspective I guess "best practice" would be to avoid scrolling in the top level navigation areas completely if possible.
You can do a number of things to avoid this, including:
- Keep the role/folder/workset names as short as possible.
- If necessary break the role down into multiple level 1 entry points to reduce the number of tabs in level 2.
An example of the second point would be MSS. Instead of creating a role with a single workset (i.e. level 1 tab), we usually split it into two folders called something like "My Staff" and My Finance" and define these folders as entry points. We therefore end up with two tabs in level 1 for the MSS role, and consequently a smaller number of tabs in level 2.
Hope that helps......
Regards,
John

Portal 7.0 First Intall

Similar Messages

Maybe you are looking for