Problem in CMC login with SAP authentication type

Hi,
We have installed the SAP Integration kit successfully for BO XI R2 & when I logon to CMC i am able to enable the SAP authentication and import the roles from the SAP BW system as well. But when I try to login into CMC using the 'Authentication type' as SAP it doesn't display the textboxes for entering System ID and Client details. Can you please tell me how to fix this?
Also I see that the CMC & Infoview authentication type drop down list are not the same. The CMC has the authentication types available as 'SAP,LDAP & Enterprise' where as Infoview has 'Enterprise, LDAP & AD'.
Is this an issue with the Plugins? do i need to do some settings on the Tomcat ?
Please help me out in this..
Thanks in advance!
Phani.

Thanks for your update Jac...yes thats correct. Also I had to include authPlugExt.properties file in the tomcat/shared/classes, which i did not include previously. The SAP infoview is working fine now.
Just one more question, in CMC login doesn't the SAP authentication require sap system & client id as its inputs? (in XI R2). I noticed that I was able to login with SAP user id's (without mentioning system details) , that have been added when I have imported the SAP roles to BO.

Similar Messages

Problem in Transactional iView with SAP GUI Type

Hi,
I've one Transactional iView in which I'm opening one SAP report. This report can be downloaded using option Local File. Once I click on this option, one popup appear where format can be selected and afterward file can be downloaded.
Problem: Once I choose SAP GUI Type in Transactional iView is SAP GUI for HTML then it wouldn't allow me to download file and just hanged, once I click on popup download.
But same is working once I choose SAP GUI Type = SAP GUI for Windows.
Can someone suggest me, what is the problem exactly?
Thanks,
Vikas

Yeah Michael, you are absolutely right, it seems same problem, I'm getting some applet loading exception.
But, I already have JVM installed version j2se1.6, same as colleague have.
I couldn't understand solution properly suggested in Note, can you brief me, would be really great.
The error I'm getting is..
load: class Query.class not found.
java.lang.ClassNotFoundException: Query.class
     at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
     at sun.plugin2.applet.Plugin2Manager.createApplet(Unknown Source)
     at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.net.SocketException: Network is unreachable: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(Unknown Source)
     at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
     at java.net.PlainSocketImpl.connect(Unknown Source)
     at java.net.SocksSocketImpl.connect(Unknown Source)
     at java.net.Socket.connect(Unknown Source)
     at sun.net.NetworkClient.doConnect(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.<init>(Unknown Source)
     at sun.net.www.http.HttpClient.New(Unknown Source)
     at sun.net.www.http.HttpClient.New(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
     at java.net.HttpURLConnection.getResponseCode(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader.getBytes(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader.access$000(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     ... 7 more
Exception: java.lang.ClassNotFoundException: Query.class
Please suggest.
Thanks,
Vikas

Log on to Infoview with SAP authentication

Hi Gurus ,
Please can some one provide me documentation , to configure , Infoview with SAP authentication .
I have R/3 system where i have a datasource and then one Remote cube in BW . On the cube developed a BEx Query . I want to log into Infoview using SAP authentication .Now, i am able to login into Infoview using Enterprise as authentication .
Thanks ,
Madhu .

Hi Madhu,
You can go to help SAP and download the BusinessObjects SAP Kit manual, here is the link for SAP BusinessObjects products. [http://help.sap.com/content/bobj/bobj/index.htm]
Link for BusinessObjects XI Integration for SAP Installation Guide (XI3.1SP2) [https://websmp105.sap-ag.de/~sapidb/011000358700000843912009E/xi31_sp2_bip_sap_install.pdf]
Link for BusinessObjects XI Integration for SAP User's Guide (XI3.1SP2) [http://help.sap.com/businessobject/product_guides/boexir31SP2/en/xi31_sp2_bip_sap_user_en.pdf]
I hope this help you.
Best regards,
Fede

BO Mobile 4.0 login by SAP Authentication

Hello gurus,
I configured BO mobile 4.0 server and I am able to login in BOE repository using Enterprise authentication.
But when i try to login using SAP authentication, the simulator gives an error:
"The secSAPR3 plugin does not exist (FWM 02016)".
I have configured SSO between BW-BO system, and it works perfectly on BI Launch Pad and CMC.
Regards
Sushant

Hi,
The error message clearly says that the secsap file is missing.
Make sure the file 'secSAPR3.jaru2019 and 'sapjco.jar' exist in the location below
<install dire bo>/mobile 14/common/lib
Regards,
Atul Bhagwat

Cant login with sap* and pass

Hi,
I created a new entry in SCC4 for new client 100 in nw2004s and now i saved them and tried to login with 100 client sap* and password as pass, but i am not able to login with this default password for client copy.

Surya,
In NW2004s by default the "automatic" SAP* user is not created. This is controlled by a parameter setting in the profile, which you can edit with RZ10. Open the instance profile, create parameter "login/no_automatic_user_sapstar" and set the value to 0. Save and activate the profile, restart your system, and now you'll be able to login with SAP* and pass.
After you finish the client copy, you may want to deactivate this parameter again, for security.
--Matt

Problem consuming web service with basic authentication

Hello,
I've set up a web service with basic authentication. Although I have to log in before being able to open the overview page of the web service in the Web Service Navigator, the response I get after sending a request is:
Authority check failed
I get this response in the Web Service Navigator as well as when consuming the web service via standalone proxy classes.
The following is strange, too: It is not possible to change authentication in the generated logical port. It is set to "none". I changed it via the XML file where I added the properties "AuthenticationMethod" (value "BasicAuth") and "AuthenticationMechanism" (value "HTTP"). But I got the above response anyway.
Thanks for your help!
Regards

I used basic authentication for my web service.
I was able to obtain a hardcopy of the logfiles in the meantime. The invocation of the web service is stored there with the following error messages:
<i>SOAP Runtime: Exception message: Schwerer Prozessierungsfehler macht eine SOAP-Fault-Behandlung erforderlich
SOAP Runtime: SOAP Fault exception occurred in program CL_SOAP_RUNTIME_SERVER========CP in include CL_SOAP_RU NTIME_SERVER... [the picture is cut here]</i>
In addition to that I found a thread in SDN that dealt with exactly the same problem:
Web Service Homepage: Authority check failed
But I have the same problem like Kimberly Carmack (the last post on the second page). We do not have that role in our system.

RV042 v4.2.2.08 problem connecting to ISP with WAN Connection Type PPTP

Hi,
I have an issue with an RV042V3. It does not connect to my ISP with PPTP connection type and username 'comsulting/[email protected]' , pwd 6 digit alphanumeric.
Using the RVS4000 or the old RV082V2 with firmware 2.0.2.01-tm, the WAN PPTP connection works fine.
Unfortunately, the RV042 does not output any logging information about the PPTP dialin attempts to the ISP (if there are any).
Did anybody face the same issues?
Thanks,
Richard

Hi Jonathan,
thanks for the reply. I fear there is a misunderstanding.
I am not having troubles with the PPTP server functions of the RV042 but with the client functions.
My ISP services use PPTP to dialin to the internet instead of e.g. PPPoE.
This can be chosen in the WAN connection settings but does not seem to work!
Regards,
Richard

Issue with SAP Authentication in a Windows 2003 64 Bits Server

Hi Experts
    I have an issue in a Windows 2003 64 Bits Server in CMC when i'm in the authentication section i choose SAP the Role Import works fine and I can see the Users Group from SAP BW but the users don't appear.
    I try the same thing in a Windows 2003 32 Bits with the same parameters and works fine i can see de User Groups and The Users from the same BW Server.
I Think i could be a problem with the 64 bits server the issue is the users from SAP BW are not imported.
Regards Marvin Soto.

Hi Ingo,
              we have some thing similar issue. can you please help us out.
We Imported users and in options we selected concurrent and every thing worked fine up to 1 month and then automatically our license key say you have only 2 named users. we have a license key for 100 named users now. do we need to delete all the concurrent users from sap now and we need to re-import them by selecting named in options tab of sap. what is the work around for this. i tested by changing the one of the sap user profile to named instead of concurrent, then i am able to login to infoview using sap credentials but when i open a report its says you don't have enough license to perform this operation. can i know why is this happening.
            Environment:
                                   BOBJ XI 3.1, SUN SOLARIS, SAP INTEGRATION KIT.
Thanks,
SK.
Edited by: Siva Vallabhaneni on May 27, 2009 3:28 PM

Problem in Sales Order with specific condition type.

Hello Experts,
I'm facing a problem in sales order creation for a specific condition type.
the actual scenario is as below,
We have created a new condition type for special discount.This condtion type is applicable only for specific sales channels.Also the discount percentage has to fetched from a custom table.
To achieve this I've written a user exit "RV64A999"
In the FM, i've calculated the subtotal and fetched the discount percentage and calculated the discount amount. After implementing this, the SO were been created properly. for all the line items the discount amount was getting calculated properly.
But then I added a condition at the top of code in exit that the calculation for the new condition type should happen only for selected sales channels.
But after adding this condition in code, i'm facing problem. Now when I create/ change any SO, the discount amounts are getting calculated incorrectly. I'm getting discount amount even if the line item subtotal amount is zero (0).
Any help or pointers reagrding this issue will be very helpful and highly appreciated.

Hi ..
Check your config. again or debug the routine code with your ABAPer and find the problem area.
-Maharshi

Problem calling stored procedure with user-defined type of input parameters

Hi,
I have to call a stored procedure with IN parameters, but these are user-defined types of input parameters.
function fv_createnews (
pit_groups in T_APPLICATION_USER_GROUPS,
pit_documents in T_DOCUMENTS
return varchar2;
TYPE T_APPLICATION_USER_GROUPS IS
TABLE OF varchar2(500)
INDEX BY binary_integer;
TYPE T_DOCUMENT IS record (
name varchar2(256)
,url varchar2(1024)
,lang varchar2(30)
,foldername varchar2(150)
TYPE T_DOCUMENTS IS
TABLE OF T_DOCUMENT
INDEX BY binary_integer;
How can I do this using the TopLink 10.1.3 API.
I already found following related posts, but I still can' t make it up:
Using VARRAYs as parameters to a Stored Procedure
Pass Object as In/Out Parameter in Stored Procedure
Or do I have to create my own PreparedStatement for this special stored procedure call using Java and Toplink?

As the related posts suggest, you will need to use direct JDBC code for this.
Also I'm not sure JDBC supports the RECORD type, so you may need to wrap your stored functions with ones that either flatten the record out, or take OBJECT types.

How do I get access to Mobile documents admin console login with SAP HANA Cloud cockpit?

Hi All,
I am trying to launch SAP Mobile Documents from my trail version of SAP HANA Cloud.
The Help link which I had followed via link:
https://help.hana.ondemand.com/help/frameset.htm?dc618538d97610148155d97dcd123c24.html#concept_0B49F10346C94249845EC16364FFF66D_76
In SAP Cloud HANA Cockpit Using the link available in Authorization>Authorization Management
I had created an user assigned to a Group, and Group has been assigned to a Role ODP-OPERATOR,
Next step, when I am trying to assign a token, I could not able find a token. How to get a token from here?
My intention of creating user, group, role and token is for getting access to Mobile documents admin console.
However I have also tried to access the mobile documents admin console via link
https://smd-p1886950994trial.hana.ondemand.com/mcm/admin
When I browse the above link, It shows HTTP 503 the requested service is not currently available.
I am not sure, How to get access Mobile documents Admin page from here
Could someone clarify on this please?
Regards,
Saravanan.R

Hi,
I have managed find an answer from this link SAP Mobile Documents on SAP HANA Cloud saying, SAP Mobile documents trial is not available in SAP HANA Cloud cockpit.
Regards,
Saravanan.R

Synchronisation problem of ERM roles with SAP BACKEND

Hi ,
In GRC could anyone please let me know what is OPEN bug regarding Sync ERM roles from backend and is it still a issue .
Anyone experiencing this, I am using GRC ac v5. 3 and sp13 ,
Thank You

Hi Folkvar,
There might be specific issues but as general there are very few. I recommend you to reply with the exact details on the current setup, i.e., the role setup in your landscape (parent roles, derived roles etc) and other information such as your current setup etc., Incase if you have started sync'ing the roles, post the exact error message so that some expert can guide you towards a resolution.
Best Regards,
Raghu

Problem with packed data type variable?

Hi all,
I have a problem while doing calculations with packed data type variables . As they are saving in the format '0,00'. so unable to do calulations because of ',' .
To convert these fields into str and replacing ',' with '.' is very time consuming because i have many packed data type variables.
Can you please provide any other alternative for over coming this problem? Is there any option while defining these variables?
Thanks,
Vamshi.

Hi VAMSHI KRISHNA,
First check out SU01 Tcode (if u don't have permission then u can ask BASIS to do it)
Enter User Name
Execute
Goto Defaults Tab
Check Out Decimal Notation here... set it 1,234,567.89
SAVE it
Log Off once and again login with the same user id and check the result...
Hope it will solve your problem..
Thanks & Regards
ilesh 24x7

How to use CMS Users with SAP BOPC NW 7.5

Hello,
I have problems importing and using CMS Users with BO PC 7.5 NW.
I am trying two types of CMS-users
1. CMS Enterprise Users created in CMS and using "Enterprise" authentication
2. SAP BW Users imported into CMS using their SAP authentication "secSAPR3")
but both don't work:
In the BOPC Admin Client, I can succesfully select Security->Users->"Add new Users". Both CMS "Enterprise Users" and CMS Users that use SAP authentication are displayed in the "Everyone" Group.
The CMS Enterprise Users are displayed as <username>, e.g. "Miller".
The CMS users with sap authentication are displayed as <SAPSystem><Client>/<SAPusername>, e.g. "KBE100/Smith".
Now If I try to import a user...
1. CMS Enterprise Users
If can successfully import CMS Enterprise Users and add them to the ADMIN Team, e.g. "Miller".
The problem is they can't be used to log in to the Admin Client and Excel Client:
E.g. I enterUser-ID "Miller" and his CMS-Enterprise-password under password after starting Excel Client, an error message shows up: "The UserID, Password or Domain cannot be authenticated. Go back and make sure you entered valid credentials" ... (same error message as if the user wouldn't exist/wrong pw.).
Seems the user wasn't added as BO PC user. Or do I need to use any prefix before the "user ID" for CMS Enterprise users in the User_ID field instead of just "Miller"?!
2. CMS Users which use SAP-authentication (users imported into CMS from BW and use SAP-authentication)
In the BO PC Admin Client, I can't import them: I go through "1. User Setup" select "KBE~100/Smith", "2. User Detail", "3. Assignments", but if I am in "4. Finish" and click on "Apply", the following error shows up:
"Failed to create directory \root\Webfolders\<AppSetName>\<Appname>" for "KBE~100/Smith".
My guess is that the operating system doesn't like the "/" in the Username - but I guess this can't be changed bc. these Users from CMS and are already displayed with the "/" between SAPSystemID~ClientNummer and username in the User-list in BOPC Admin Client!
side remark: if I create a SAP CMS Enterprise user which contains a "/" in the username (on pupose ), I am getting the same error message.
Any help, explanations and workarounds are greatly appreciated - Any solution will be awarded with maximum points!
Best Regards and thanks a lot for your help!

Hi Florian,
The problem seems indeed the file system on the bw not being able to handle "/". The automatic user import from the bw role into the CMC does not give you an option to replace the "/" character with anything else.
This should solve it:
- Go to the CMC double click the user. Delete the server part "KBE100/" and click save. Make sure the default system is set to "KBE100". The user should now be able to login from BPC with the user Smith.
Good luck,
Martin

SharePoint 2010 with LDAP authentication, using NOVELL eDirectory

One of my customers needs a SharePoint application that allows people to authenticate with either an Active Directory account (internal staff) or a Novell eDirectory account (external customers).
Using the following article as a base guide (http://blogs.technet.com/b/speschka/archive/2009/11/05/configuring-forms-based-authentication-in-sharepoint-2010.aspx)
I configured a claims-based test application that had Windows authentication enabled and Forms based authentication (FBA) enabled (this is on a Windows 2008 server and not a domain controller)
In the Membership provider name text box I entered "LdapMember"
In the Role provider name text box I entered "LdapRole"
In the web.config for the SharePoint Central Admin, I modified/added the following details right before </system.web>
<membership>
<providers>
<add name="LdapMember"
type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
userDNAttribute="dn"
userNameAttribute="cn"
userContainer="OU=people,O=validobject"
userObjectClass="person"
userFilter="(ObjectClass=person)"
scope="Subtree"
otherRequiredUserAttributes="sn,givenname,cn" />
</providers>
</membership>
<roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" >
<providers>
<add name="LdapRole"
type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
groupContainer="OU=people,O=validobject"
groupNameAttribute="cn"
groupNameAlternateSearchAttribute="samAccountName"
groupMemberAttribute="member"
userNameAttribute="sAMAccountName"
dnAttribute="distinguishedName"
groupFilter="((ObjectClass=group)"
userFilter="((ObjectClass=person)"
scope="Subtree" />
</providers>
</roleManager>
I modified the SecurityTokenServiceApplication web.config with these details
<system.web>
<membership>
<providers>
<add name="LdapMemebr"
type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
userDNAttribute="dn"
userNameAttribute="cn"
userContainer="OU=people,O=validobject"
userObjectClass="person"
userFilter="(ObjectClass=person)"
scope="Subtree"
otherRequiredUserAttributes="sn,givenname,cn" />
</providers>
</membership>
<roleManager enabled="true">
<providers>
<add name="LdapRole"
type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
groupContainer="OU=people,O=validobject"
groupNameAttribute="cn"
groupNameAlternateSearchAttribute="samAccountName"
groupMemberAttribute="member"
userNameAttribute="sAMAccountName"
dnAttribute="distinguishedName"
groupFilter="(&(ObjectClass=group))"
userFilter="(&(ObjectClass=person))"
scope="Subtree" />
</providers>
</roleManager>
</system.web>
I modified the web.config of the test application I created with these details
<roleManager defaultProvider="c" enabled="true" cacheRolesInCookie="false">
<providers>
<add name="c" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
<add name="LdapRole" type="Microsoft.Office.Server.Security.LdapRoleProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
groupContainer="OU=people,O=validobject"
groupNameAttribute="cn"
groupNameAlternateSearchAttribute="samAccountName"
groupMemberAttribute="member"
userNameAttribute="cn"
dnAttribute="dn"
groupFilter="(&(ObjectClass=group))"
userFilter="(&(ObjectClass=person))"
scope="Subtree" />
</providers>
</roleManager>
<membership defaultProvider="i">
<providers>
<add name="i" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
<add name="LdapMember" type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword= "validpassword"
useDNAttribute="true"
userDNAttribute="dn"
userNameAttribute="cn"
userContainer="OU=people,O=validobject"
userObjectClass="person"
userFilter="(ObjectClass=person)"
scope="Subtree"
otherRequiredUserAttributes="sn,givenname,cn" />
</providers>
</membership>
With all of this configured, I can go to the new test site, I do see the form where I can choose either Windows authentication or Forms authentication. I can successfully login with Windows authentication, but forms authentication gives me me an error.
The server could not sign you in. Make sure your user name and password are correct, and then try again.
I can successfully login to a LDAP management tool, using the same credentials I entered on the form, so I know the username and password being submitted are correct. I get the following items in the event viewer
8306 - SharePoint Foundation - The security token username and password could not be validated.
in the SharePoint trace logs - Password check on 'testuser' generated exception: 'System.ServiceModel.FaultException`1[Microsoft.IdentityModel.Tokens.FailedAuthenticationException]: The security token username and password could not be validated. and
then this:
Request for security token failed with exception: System.ServiceModel.FaultException: The security token username and password could not be validated.
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response)
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)
at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)
I monitored the LDAP server and did a packet-trace on the communication happening between the SharePoint server and the LDAP server and it is a bit odd. It goes like this:
The SharePoint server successfully connects to the LDAP server, binding the ldapserviceid+password
The LDAP server tells the SharePoint server it is ready to communicate
the SharePoint server sends an LDAP query to the LDAP server, asking if the name entered in the form authentication page can be found.
The LDAP server does the query, successfully finds the entered name and sends a success message back to SharePoint
The LDAP server sends notification that it is done and is closing the connection that was bound to theldapserviceid+password
The SharePoint server acknowledges the connection is closing
... and then nothing happens, except the error on SharePoint
What I understand is that the SharePoint server, once it gets confirmation that the submitted username exists in LDAP, should attempt to make a new LDAP connection, bound to the username and password submitted in the form (rather than the LDAP service account
specified in the web.config). That part does not seem to be happening.
I am at a standstill on this and any help would be greatly appreciated.

OK, our problem was resolved by removing any information about the ASP.NET role manager. Initially, we had information about a role manager defined in three different web.config files, as well as in the SharePoint Central Administration site, where there
is the checkbox to Enable Forms Based Authentication (you see this when you first create the new SharePoint app, or afterwards by modifying the Authentication Provider for the app.) In either case, you will see two text boxes, underneath the checkbox item
for enabling Forms Based Authentication:
"ASP.NET Membership provider name"
"ASP.NET Role manager name"
We entered a name for Membership provider, and left Role manager blank.
In the web.config for the SharePoint Central Administration site, the SecurityTokenServiceApplication app, and the web app we created with FBA enabled, we entered the following:
<membership>
<providers>
<add name="LdapMember"
type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
server="ldap.server.address"
port="389"
useSSL="false"
connectionUsername="cn=ldapserviceid,ou=sharepoint,ou=test,ou=location,o=validobject"
connectionPassword="validpassword"
useDNAttribute="false"
userDNAttribute="dn"
userNameAttribute="cn"
userContainer="OU=people,O=validobject"
userObjectClass="person"
userFilter="(ObjectClass=person)"
scope="Subtree"
otherRequiredUserAttributes="sn,givenname,cn" />
</providers>
</membership>
<roleManager>
<providers>
</providers>
</roleManager>
useDNAttribute="false" turned out to be important as well.
So, for us to get LDAP authentication working between SharePoint 2010 and Novel eDirectory, we had to:
leave anything related to the role provider blank
configure the web.config in three different applications, with the proper connection information to reach our Novel eDir
Ensure that useDNAttribute="false" was used in all three on the modified web.config files.
Since our eDir is flat and used pretty much exclusively for external users, we had never done any sort of advanced role management configuration in eDir. So, by having role manager details in the web.config files, SharePoint was waiting for information from
a non-existent role manager.

Problem in CMC login with SAP authentication type

Similar Messages

Maybe you are looking for