Problem in SSO configuration

Hi,
ISSUE 1
Description
When a user is logged on to the SAP Portal and presses the logoff button he/she is forwarded to the Anonymous/Guest page of the SAP Portal. This is by design and is OK.
it was discovered that the first time a person pressed the logoff button he/she did got forwarded tot the Anonymous/Guest area of the RaboShop but was still logged in (user name was still visible in welcome area). A second logoff actually did the trick.
Analysis
During issue analysis it turned out that on of the session u201CCookiesu201D that is steering the Portal and the SSO Module was not erased when clicking on the logoff button. This cannot be changed as this u201CCookieu201D is set by the SAP Portal (SAP Coding). What causes it to go wrong is that the SSO Module was designed to work based on the value of this u201CCookieu201D. This turns out to be an incorrect design decision and need to be changed.
What should we do to correct this issue?
ISSUE 2 :
Description
When a user is logged on to itu2019s Workstation an browses tot NON SAP PortalOR any other area on the Web that containts the link to the SAP Portal, it opens in a new window. When the user, for any reason, closes the SAP Protal window and again clicks on the link for the SAP Portal in the NON SAP Portal then he/she is confronted with the UserID and Password Logon screen. This happens every even (2nd, 4th 6th, etcu2026) time.
Analysis
During issue analysis it turned out that the initiating window (NON SAP Portal) acts as a parent window for the SAP Porta Window. This allows the windows to share u201CCookieu201D information.
Because a u201CCookieu201D that is steering the Portal and the SSO Module was not erased when the user closes the SAP Portal window it stays active in the parent window. Every second request by the parents window (NON SAP Portal) will cause that the Cookie is send to the SAP Portal again.
The SSO Module was designed to work based on the value of this u201CCookieu201D and will handle accordingly. It turns out that using this u201CCookieu201D to steer the SSO Module is an incorrect design decision and need to be changed.
Whats the solution for this issue?

Have a look with name of thread "Delete cookies automatically after logoff ".
Check out the following URL
http://www.elated.com/articles/javascript-and-cookies/
Use the above methods in logoff scripts
Koti Reddy

Similar Messages

SSO Configuration Assistant failed during installation of OCS 10G on linux

I am trying to install OCS 10g infrastructure on CentOS 4.2
the linux version which the installer displays is redhat-4
The installation works fine but the SSO CA fails and gives this message
NLS_LANG param = AMERICAN_AMERICA.AL32UTF8ERROR : Exception while configing SSO DAD :oracle.ons.SubscriptionException: Subscription request timed out after 120000 millseconds. Possible causes: OPMN may not be running, you may have an OPMN running in an alternate ORACLE_HOME using duplicate port values, or OPMN may be misconfigured.
     at oracle.ons.SubscriptionNotification.waitForReply(SubscriptionNotification.java:82)
     at oracle.ons.ONS.addSubscriber(ONS.java:336)
     at oracle.ons.Subscriber.realStartup(Subscriber.java:92)
     at oracle.ons.Subscriber.<init>(Subscriber.java:80)
     at oracle.ons.ONS.createNewSubscriber(ONS.java:690)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.init(Unknown Source)
     at oracle.ias.sysmgmt.EntryPoint.init(Unknown Source)
     at oracle.webdb.config.smi.GeneralConfig.<init>(Unknown Source)
     at oracle.webdb.config.smi.GeneralDADConfig.<init>(Unknown Source)
     at oracle.webdb.config.smi.DADConfig904Imp.<init>(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getGeneralDADConfig(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfig904(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfigLatest(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfigLatest(Unknown Source)
     at oracle.security.sso.SSOConfigAssistant.configDAD(SSOConfigAssistant.java:1493)
     at oracle.security.sso.SSOConfigAssistant.ssoConfig(SSOConfigAssistant.java:1270)
     at oracle.security.sso.SSOConfigAssistant.main(SSOConfigAssistant.java:217)
Please fix the error reported in the stack trace above and re-run SSO Config Tool.
/home/oracle/product/10.1.2/ocs_1/jdk/bin/java
-cp
/home/oracle/product/10.1.2/ocs_1/lib/xmlparserv2.jar:/home/oracle/product/10.1.2/ocs_1/sysman/webapps/emd/WEB-INF/lib/emd.jar:/home/oracle/product/10.1.2/ocs_1/sysman/webapps/emd/WEB-INF/lib/log4j-core.jar:/home/oracle/product/10.1.2/ocs_1/lib/emSDK.jar
-DORACLE_HOME=/home/oracle/product/10.1.2/ocs_1
oracle.sysman.emSDK.conf.TargetInstaller
deletetarget
oracle_sso_server
infra_inst.nufastserver.local.nu_Single Sign-On:orassogetASTargetInfo: oracleHome = "/home/oracle/product/10.1.2/ocs_1".
getASTargetInfo: iasName = "infra_inst.nufastserver.local.nu".
getASTargetInfo: iAS Target Type = "oracle_ias".
Setting the AS product version value in targets.xml to be "10.1.2.0.2".
Calling method getASTargetInfo.getASTargetInfo: StatusURL value = "http://nufastserver.local.nu:7777".
Retrieved SSO protocol, host, and port info from targets.xml.
The values are: "http://nufastserver.local.nu:7777".The following values will be used to configure the sso_server target entry in targets.xml.
Protocol: "http".
Hostname: "nufastserver.local.nu".
Port: "7777"./home/oracle/product/10.1.2/ocs_1/jdk/bin/java
-cp
/home/oracle/product/10.1.2/ocs_1/lib/xmlparserv2.jar:/home/oracle/product/10.1.2/ocs_1/sysman/webapps/emd/WEB-INF/lib/emd.jar:/home/oracle/product/10.1.2/ocs_1/sysman/webapps/emd/WEB-INF/lib/log4j-core.jar:/home/oracle/product/10.1.2/ocs_1/lib/emSDK.jar
-DORACLE_HOME=/home/oracle/product/10.1.2/ocs_1
oracle.sysman.emSDK.conf.TargetInstaller
addtarget
/home/oracle/product/10.1.2/ocs_1/sso/sso_server_target2add.xmlConfiguring SSO languages with the following language code:
us Language us is already installed.
About to execute java call using emConfigInstall.jar.
Here are the arguments:
/home/oracle/product/10.1.2/ocs_1/jdk/bin/java
-DORACLE_HOME=/home/oracle/product/10.1.2/ocs_1
-jar
/home/oracle/product/10.1.2/ocs_1/jlib/emConfigInstall.jar
consolesn
/home/oracle/product/10.1.2/ocs_1/sso/conf/consoleConfigSNSegment.xml
Finished executing the call.Child Process has exited.
SSO Configuration Assistant failed.
I have checked thelog files but there is nothing in that.
in the hosts file I have given fully qualiifed name as "nufastserver.local.nu"
Can any bosy help me in this problem. I have tried reinstalling the OS also but the problem is still there at the same place

I had exactly the same poblem on a red hat 64bit OS on the infrastructure install.
But while trying to start opmn manually (that is definitely not to do to solve the problem). I had the error telling me that the shared library libdb.so.2 was not accessible.
I did add the compat-db-4xxxxx.i386.rpm and then retry the check. Then all passed threw.
To note that the .log file from the install says definitely nothing about this and that just trying to start the opmn did create another .log that gave me the file problem.
Hope it can help for 64bit linux OS installation.

ESH 7.2 SSO Configuration failes

Hi,
I tried SSO Configuration for ESH 7.2 as described in document
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/00007511-5c0e-2d10-26bd-f30b7f433b9a?quicklink=index&overridelayout=true.
It was not able to me to call the custom service created
under /default_host/zes/... Therefore I had to copy this node
to /default_host/sap/zes/...
After calling
http://nwbs1db.intra.net.blanco:50100/sap/zes/opensearch/search the
redirect application will be called. SSO Ticket is issued but internal
service of ESH abap stack calls redirect application again. Due to this
fact I get an infinite loop.
Has anybody an idea where I should check my configuration again to solve this problem?
Thanks and best regards,
Matthias

Hi Matthias,
I will notify the responsible colleagues about your post.
But can you log this as a support message to SAP as well, please?
After all, that is still the only way to get guaranteed atention by SAP (as opposed to community here) and also it is the way to get this into our official list of things to check and, if necessary, fix.
Best,
Karsten

Sso configuration assistant failed

my envirament is redhat AS4 + oracle 10.1.0.4.2
MR and OID are installed in different PC. There is no problem when I install the MR,but the "sso configuration assistant failed " alway appear when I install OID.
the installation log is as fllow:
Configuration assistant "Single Sign-On Configuration Assistant" failed
================================================================================================================
Output generated from configuration assistant "Single Sign-On Configuration Assistant" (attempt 4):
CLASSPATH=/home/oracle/OraHome_1/jlib/repository.jar:/home/oracle/OraHome_1/sso/lib/ossoca.jar:/home/oracle/OraHome_1/lib/xmlparserv2.jar:/home/oracle/OraHome_1/jdbc/lib/classes12.jar:/home/oracle/OraHome_1/jdbc/lib/nls_charset12.jar:/home/oracle/OraHome_1/jlib/jndi.jar:/home/oracle/OraHome_1/jlib/ojmisc.jar:/home/oracle/OraHome_1/j2ee/home/jazn.jar:/home/oracle/OraHome_1/j2ee/home/jaas.jar:/home/oracle/OraHome_1/jdk/lib/rt.jar:/home/oracle/OraHome_1/jdk/lib/i18n.jar:.:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/emd.jar:/home/oracle/OraHome_1/dcm/lib/dcm.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/portalSMI.jar:/home/oracle/OraHome_1/jlib/emConfigInstall.jar:/home/oracle/OraHome_1/lib/dms.jar:/home/oracle/OraHome_1/opmn/lib/ons.jar:/home/oracle/OraHome_1/j2ee/home/oc4j.jar:/home/oracle/OraHome_1/jlib/ojmisc.jar:/home/oracle/OraHome_1/j2ee/home/jaznplugin.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/click-agent.jar:/home/oracle/OraHome_1/sso/conf:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/disco_dsc_smi.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/f90em.jarParameters passed to ssoca : param0:config param1:/home/oracle/OraHome_1 param2:cn=orcladmin param3:***** param4:"AMERICAN_AMERICA.WE8ISO8859P1" param5:http param6:localhost.localdomain param7:7777 param8:en
Wed Aug 11 19:50:56 PDT 2010
Parameters received by ssoca : param0:config param1:/home/oracle/OraHome_1 param2:cn=orcladmin param3:***** param4:"AMERICAN_AMERICA.WE8ISO8859P1" param5:http param6:localhost.localdomain param7:7777 param8:en Content of ssoca config file is :
-- listing properties --
config_sso_oid=true
config_lang=true
config_sso_seed=true
config_targets_xml=true
config_ssoupg=true
config_dad=true
config_em_integ=trueSSO seed is already configured in the database.ACTION by SSOConfigAssistant :
/home/oracle/OraHome_1/bin/sqlplus [email=orasso/*****@]orasso/*****@"cn=wmz,cn=oraclecontext[email]"
@/home/oracle/OraHome_1/sso/admin/plsql/sso/ssooidd.sql localhost.localdomain 636 "cn=orcladmin" ***** Y
SQL*Plus: Release 10.1.0.4.2 - Production on Wed Aug 11 19:50:58 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> Connected.
SQL> Creating OID entries for SSO
Error code : 1
Error message: User-Defined Exception
LDAP error : ORA-31203: DBMS_LDAP: PL/SQL - Init Failed.
ERROR: deleting application entry
Error code: 1
Error message: User-Defined Exception
ERROR: creating SSO users and groups in OID
PL/SQL procedure successfully completed.
*** Refreshing WWC OID cache....***
declare
ERROR at line 1:
ORA-06510: PL/SQL: unhandled user-defined exception
ORA-06512: at "ORASSO.WWSEC_OID", line 1199
ORA-06512: at "ORASSO.WWSEC_OID", line 1328
ORA-06512: at "ORASSO.WWSEC_OID", line 2498
ORA-06512: at "ORASSO.WWSEC_OID", line 2528
ORA-06512: at "ORASSO.WWSEC_OID", line 1606
ORA-06512: at "ORASSO.WWSEC_OID", line 1755
ORA-06512: at "ORASSO.WWSEC_OID", line 2133
ORA-06512: at line 8
No errors.
Disconnected from Oracle Database 10g Enterprise Edition Release 10.1.0.4.2 - Production
With the Partitioning, OLAP and Data Mining options
NLS_LANG character set = AL32UTF8
NLS_LANG param = AMERICAN_AMERICA.AL32UTF8/home/oracle/OraHome_1/jdk/bin/java
-cp
/home/oracle/OraHome_1/lib/xmlparserv2.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/emd.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/log4j-core.jar:/home/oracle/OraHome_1/lib/emSDK.jar
-DORACLE_HOME=/home/oracle/OraHome_1
oracle.sysman.emSDK.conf.TargetInstaller
deletetarget
oracle_sso_server
wmz_oid.localhost.localdomain_Single Sign-OnrassoSetting the AS product version value in targets.xml to be "10.1.2.0.2".
Calling method getASTargetInfo.
getASTargetInfo: oracleHome = "/home/oracle/OraHome_1".
getASTargetInfo: iasName = "wmz_oid.localhost.localdomain".
getASTargetInfo: iAS Target Type = "oracle_ias".getASTargetInfo: StatusURL value = "http://localhost.localdomain:7777".
Retrieved SSO protocol, host, and port info from targets.xml.
The values are: "http://localhost.localdomain:7777".
The following values will be used to configure the sso_server target entry in targets.xml.
Protocol: "http".
Hostname: "localhost.localdomain".
Port: "7777".
/home/oracle/OraHome_1/jdk/bin/java
-cp
/home/oracle/OraHome_1/lib/xmlparserv2.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/emd.jar:/home/oracle/OraHome_1/sysman/webapps/emd/WEB-INF/lib/log4j-core.jar:/home/oracle/OraHome_1/lib/emSDK.jar
-DORACLE_HOME=/home/oracle/OraHome_1
oracle.sysman.emSDK.conf.TargetInstaller
addtarget
/home/oracle/OraHome_1/sso/sso_server_target2add.xmlConfiguring SSO languages with the following language code:
us Language us is already installed.About to execute java call using emConfigInstall.jar.
Here are the arguments:
/home/oracle/OraHome_1/jdk/bin/java
-DORACLE_HOME=/home/oracle/OraHome_1
-jar
/home/oracle/OraHome_1/jlib/emConfigInstall.jar
consolesn
/home/oracle/OraHome_1/sso/conf/consoleConfigSNSegment.xml
Finished executing the call.Child Process has exited.
SSO Configuration Assistant failed.
Configuration assistant "Single Sign-On Configuration Assistant" failed
=============================
Can someone help me?

I had the similar issue and same error mesaage.
One of the possible reason is the DNS and/or host file configuration.
If the OID/SSO and metadata repository are on two different servers, make sure for both servers, the entries IP <fully qualified hostname> <Alias> reflects in host file of each of them.
Simply click retry and the install should run to completion.
Good Luck!

Please read my problem when I configure Weblogic https

I want to use https protocol and SSL for my web application in Weblogic
I have a problem but I am not sure it's related to configuring Weblogic or not please if you can advice me
I use "openssl" to be my own Certificate Authority (CA)
I used this instructions for using openssl [http://www.g-loaded.eu/2005/11/10/be-your-own-ca/]
after configuring openssl I used these steps for creating my keystore
1. First I use this keytool for creating my private key and public key
keytool -genkeypair -keyalg rsa -keystore ali_keytool.jks -storepass ali120 -alias ali_alias
What is your first and last name?
[Unknown]: AliKhosravi
What is the name of your organizational unit?
[Unknown]: Boors
What is the name of your organization?
[Unknown]: software
What is the name of your City or Locality?
[Unknown]: Tehranali_keytool.jks
What is the name of your State or Province?
[Unknown]: Tehran_Province
What is the two-letter country code for this unit?
[Unknown]: IR
Is CN=AliKhosravi, OU=Boors, O=software, L=Tehran, ST=Tehran_Province, C=IR correct?
[no]: y
2. I create my CSR by this command
keytool -certreq -alias ali_alias -keystore ali_keytool.jks -storepass ali120 -file ali_keytool.csr
3. I sign the ali_keytool.csr by openssl . I do it like this :
openssl x509 -req -in ali_keytool.csr -CA certs/myca.crt -CAkey private/myca.key -out ali_keytool.crt -days 365 -CAcreateserial -CAserial my_ca.seq
4.Now my I have a signed certificate (ali_keytool.crt) and my CA certificate (myca.crt)
and I import CA certificate to my keystore
keytool -import -alias Openssl_ca -file myca.crt -keystore ali_keytool.jks -storepass ali120
5. I import the signed certificate into my keystore by alias of private key
keytool -import -alias ali_alias -file ali_keytool.crt -keystore ali_keytool.jks -storepass ali120
6. I import the CA certificate again into a new keystore for creating Trust
keytool -import -alias my_ca -file myca.crt -keystore ali_keytool_trust.jks -storepass ali120
All steps done without any errors
I used this address for help [http://www.startux.de/java/44-dealing-with-java-keystores]
Now I want to configure kestores ans ssl in Weblogic
7. I go to the Environment-->Servers-->AdminServer-->Keystore tab in wblogic
8. I set "Keystores=Custom Identity and Custom Trust", "Custom Identity Keystore = H:\trust\ali_keytool.jks" , "Custom Identity Keystore Type=jks" ,
"Custom Identity Keystore Passphrase:ali120"
"Confirm Custom Identity Keystore Passphrase=ali120"
"Custom Trust Keystore=H:\trust\ali_keytool_trust.jks" , "Custom Trust Keystore Type=jks" ,
"Custom Trust Keystore Passphrase=ali120" , "Confirm Custom Trust Keystore Passphrase=ali120"
9. Then I go to SSL tab and I set "Identity and Trust Locations=Keystores" , "Private Key Alias=ali_alias" ,"Private Key Passphrase=ali120",
"Confirm Private Key Passphrase=ali120"
10. I go to the General tab and select "SSL Listen Port Enabled"
11. I user Firefox as WebBrowser so I configure my Browser I select Tools-->Options-->ViewCertificates --> Authorities tab
and I import the server certificate here is "myca.crt the openssl certificate"
in Downloading Certificate window I select
"Trust this CA to identify web sites"
"Trust this CA to identify email users"
"Trust this CA to identify software developers"
12. I restart Weblogic
13. I try to loging in weblogic like this "https://127.0.0.1:7002/console"
The webBroser show me this warning:
This Connection is Untrusted
You have asked Firefox to connect
securely to 127.0.0.1:7002, but we can't confirm that your connection is secure.
Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.
What Should I Do?
If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn't continue.
Technical Details
I Understand the Risks
I don't know why the WebBrowser show me this warning while I imported the Server Certificate
I don't know that my problem is in configuring WebLogic or FireFox WebBrowser or Keystore
If you know please advice me
Thanks

Moderator Action:
You already aked this question a couple of weeks earlier:
My problem when I enable SSL in Weblogic and I don't have a trusted CA cert
This is a user-to-user forum.
There is no obligation that anyone respond. They will answer if they choose to.
If there is a business need for a resolution, use your service contract privileges and open a support ticket with Oracle Support.
http://www.oracle.com/us/support/contact-068555.html
This duplicate forum post is locked.

Unable to view BI Publisher report with SSO configuration enabled

Hi All,
Can anybody let us know the configuration of the BI publisher with SSO enabled. We are unable to see any of the BI Publisher reports. without SSO configuration we have integration working perfectly fine with the OBIEE and Publisher.
We followed the configuration steps to integrate BI Publisher with Oracle SSO. The following are the steps:
1. deploy analytics.ear as a new application 'analyticsSOAP' in OAS
2. protect analyticsSOAP in mod_osso.conf file under OAS
3. change OBIEE Presentation services configuration to use analyticsSOAP/saw.dll
4. run credstore utility to encrypt password
5.restart xmlp server
6.restart http server
7.restart obiee server
8. restart obiee presentation service
Still we have issues when we try to accesses BI Publisher reports by clicking more Products -> BI Publisher or view reports directly on the OBIEE Dashboard
Thanks in advance.

configure one more virtual path which is unprotected from site minder. we had similar issue for Marketing and resolved by this virtual path.
ref:
http://vaandun-analytics.blogspot.com/2009/11/obi-publisher-with-empty-obi-catalog.html
Thanks
Sarathi

SSO Configuration in UNIX Environment

Hi,
We are planning to impliment SSO between 2004s Portal with R/3, BW, and host of other non SAP application which supports SSO. All the applications are hosted in UNIX environment.
Could anyone help us in understanding the pros and cons of having SSO in unix envrionment. Also you could give us any document (other than help.sap.com) which guides us in configuring will be of great help.
Thanks
Vivek Raj.

Hi,
There are no pros and cons for <b>SSO on Unix</b>. Needless to mention, the pros and cons of different operating systems supported by SAP.
The steps involved to configure SSO remains the same for any of the SAP backend systems:
1) Create a system on Portal and give a system alias to it.
2) Download the verify.der file from Portal (System Administration -> System Configuration -> Keystore Administration)
3) Log on to the backend SAP system.
4) Use transaction STRUSTSSO2 and import the Portal certifcate (verify.der) to the SAP R3 or SAP BW or SAP CRM or for that matter any SAP system with ABAP stack.
5) Give the values for EP system ID, client and language. Refer to this link : http://help.sap.com/saphelp_nw2004s/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm
6) Configure the backend SAP systems to accept and verify the logon ticket. Use RZ10 and set the parameters : login/accept_sso2_ticket=1 and login/create_sso2_ticket=1
7) Restart your R3 or BW system.
For non-SAP systems, can you just let me know which systems are you referring to ?
Incase you need a document for SSO configuration, do send me your email address. You can also find documents in SDN Library.
Regards,
Sunil

Problem with audio configuration

when i turned on Itunes on on my computer it had this message: Problem with audio configuration. Audio/video playback may not operate properly. How do I fix it?

I reinstalled iTunes & QuickTime as per giterdone response to rpestow on 12 November
instructions at: http://docs.info.apple.com/article.html?artnum=93698
Thanks giterdone

Problem on the configuration about creating an SPN for your CMS on a Window

I have some problem on the configuration about creating an SPN for your CMS on a Windows 2003 domain
My Environment:
Domain Controller and AD Server :SV01
Crystal Report Server: SV07
Domain Name: SVG.NTT.LOCAL
I created a domain user "BOUSER" in SV01
When type the following command in the SV01, it have not any response.
"SETSPN.exe u2013A BOBJCentralMS/SV07.SVG.NTT.LOCAL BOUSER"
And i cannot find the "Delagation" tab in the domain user property window.
Have any wrong in the command ?

Hi Tim,
Thank you for your reply.
We used Tomcat and MySQL database.
I have only integrating with AD and requiring manual logon.
I had created a bscLogin.conf file and krb5.ini file
krb5.ini file:
[libdefaults]
    default_realm = DNS.COM
    dns_lookup_kdc = true
    dns_lookup_realm = true
[realms]
DNS.COM = {
    kdc = SV01.SVG.NTT.LOCAL
    default_domain = SVG.NTT.LOCAL
bscLogin.conf file
com.businessobjects.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required;
And insert the following two lines in Tomcat's Java Tab
-Djava.security.auth.login.config=C:\WINDOWS\bscLogin.conf
-Djava.security.krb5.conf=C:\WINDOWS\krb5.ini
I also set Serivice Principal Name "bouser FQDN" in Crystal Report Server.
We can login in Central Management Console with our domain user.
But When we logon in InfoView with our domain user account.
It display the following error:
"Account Information Not Recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again."
Any step i missed ?

Problem With Cutom Configuration with Object Type

Dear Guru's
I am working WebUI, I am facing a problem with Custom Configuration.
1. The initial requirement to control the visibility for a dropdown event in ERP Quotation.
2. To this i copied the default configuration to custom configuration with custom Object type and Subtype.
       CONFIG KEY: ZPJQTN
       OBJECT TYPE: ZOTYP_CONFIG
       OBJECT SUB TYPE: ZSTYPE_CONFIG1
3. I have created customm fields in enhancement.
4. Now i chosen my new configuration (ZPJQTN,ZOTYP_CONFIG,ZSTYP_CONFIG1), when i click Show available fields, the custom fields are not showing. Instead the created fields are available at other configuration.
5. I am able to control the visibility for the standard available fields.But i am not getting the custom created fields
(Note: I have created the Object type and Object sub type as follows: SPRO->CRM->UI Framework->Define Object Types
Object type: ZOTYP_CONFIG Callback class: ZCL_CONFIG_CALLBACK
Redifned the method: IF_BSP_DLC_OBJ_TYPE_CALLBACK~GET_OBJECT_SUB_TYPES
Coded as below:
data: lv_subtype type bsp_dlc_object_sub_type.
lv_subtype = 'ZSTYP_CONFIG1'.
append lv_subtype to result.
lv_subtype = 'ZSTYP_CONFIG2'.
APPEND lv_subtype to result.
Now Please suggest me how to achieve this.
Also please let me know, whether i am following the correct procedure for controlling the visibility.
Thanks in Advance,
S.Meganadhan.

Hi Harshit,
I added custom fields using AET only.
I am able to see the field got added in the structure. I am able to access GET and SET methods of the field.
But the problem is, it is not getting saved. Am i missed any configuration step?
Please suggest me.
Thanks in advance,
Regards,
S.Meganadhan.

Problems encountered while Configuring IBM webshere5.0

Hi All,
I'm the process of Configuring the IBM websphere 5.0. I'm getting the following annoying error for quite sometime. Can anybody please help?
I have installed a standalone Webapplication and mapped the right. JDBC resources. My team uses SQL server 7.0 and Im's using Websphere embedded connect JDBC driver for SQL server as the driver. Every time I have changed the configuration , I have stopped the application and restarted it. Following is the error that I get when I start the application.
"Resource reference " DATA SOURCE NAME" could not be located, so default values of the following are used: [Resource-ref settings]
res-auth: 1 (APPLICATION)
res-isolation-level: 0 (TRANSACTION_NONE)
res-sharing-scope: true (SHAREABLE)
res-resolution-control: 999 (undefined) "
What does this mean? Is there a problem in the configuration?
My next question is , Is there a way to associate an applciation with a JDBC resource?
thanks

This is documentation from IBM's website. I got only a cached copy from google, but could not find the real copy.
Also this other link might help you.
http://www.mainframeforum.com/t624817.html
Answer for your second question.
Datasources are setup at server level. In WebSphere it is shared between applications at the node, cell or server level.
But you do configure your applications to use the datasource. So the answer is that there is a way to associate an application with a JDBC resource.
You have to define your JDBC resource references in the application descriptor and match these to the datasources you have defined in WebSphere.
http://publib.boulder.ibm.com/infocenter/wasinfo/index.jsp?deployment=Enterprise
The resources, data access section should be of some help.
Vijay
Information for your config error.
If a J2EE 1.3 EJB project contains Container Managed Persistence (CMP) beans, then that project must be configured to use only WebSphere Application Server Version 5 data sources, even if some or all of the CMPs are only EJB 1.1 beans.
In a J2EE 1.2 application (EAR), all JDBC applications, or Servlets 2.2, or EJB (must be 1.x) beans must use WebSphere Application Server Version 4 data sources.
In a J2EE 1.3 application, all EJB 1.1 Modules (which can only contain EJB 1.x beans) must use WebSphere Application Server Version 4 data sources.
In a J2EE 1.3 application, all JDBC applications, or Servlet 2.3, or EJB 2.0 Modules (which may have CMP version 2.0 and/or 1.x) must use WebSphere Application Server Version 5 data sources.
If you incorrectly configure an WebSphere Application Server Version 4 data source, then at runtime there is no "Resource Reference" for this data source (required by the J2EE 1.3 container) and you will get the runtime error:
68c343ee ConnectionFac W J2CA0122I: Resource reference jdbc/YourBank could not
be located, so default values of the following are used: [Resource-ref
settings] res-auth:1 (APPLICATION), res-isolation-level:0 (TRANSACTION_NONE),
res-sharing-scope:false (UNSHAREABLE), res-resolution-control:999 (undefined).

SAP CRM to ECC - SSO Configuration - Logon Language Setup

Hi All,
I am a BASIS consultant currently handling one CRM project. I need a help in configuring SSO between CRM and ECC. Now SSO is not configured, so When I click on the External Link created in CRM calling an ECC transaction, it requests for Client/UserID/Password/LogonLang for the ECC system. Here it takes Logon Language as same as what I have logged in CRM. Hope once SSO configured it will check only for the userID and log into ECC without requesting any further details. But the issue here is we are planning to have additional languages in CRM but not in ECC. So whenenver user logs in CRM with language other than EN - english (eg. FR), and when tried to login to ECC with the external link from CRM, by default ECC login needs to be logged in with language EN, as FR will not be available in ECC. I do not find any logon language configuration in SSO, how can we achieve this, logging into language FR in CRM, logging in EN when clicking External ECC link? Configuring Logon Data defaults (in SU01) in ECC, restricting to logon language EN, will not help I hope. Please advise.
Thanks in advance.
Regards,
Shahul

Hi Srikishan,
Thanks for the response. When user from CRM logged in another language than EN for eg. FR, clicks on external link in CRM, takes to EN, only if that language FR is not installed in ECC, else it will take to the same language in which CRM user logged in. This cannot be controlled in SSO configuration. Is this correct?
In case if FR is installed in both the systems, ie CRM and ECC, but user wants to log only to EN when clicked the external link(to ECC) from CRM, how we can configure this, Is any parameter can control or SSO setup configuration available? Please advice.
Regards,
Shahul Hameed

SSO Configuration in biztalk

Hi
I referred the below url to store config info to SSO DB , from biztalk i am reading those values.
http://www.codeproject.com/Tips/559597/How-to-store-BizTalk-configuration-in-the-SSO-data
its working fine. i have used the MMC snap in tool to create configurable values.
but now i have a situation to store one more key/value in the same application via programatically.
i tried to use the below code snippet for storing values
SSOConfigStore ssoStore = new SSOConfigStore();
ConfigurationPropertyBag appMgmtBag = new ConfigurationPropertyBag();
object value = "Sample";
appMgmtBag.Write(propName, ref value);
((ISSOConfigStore)ssoStore).SetConfigInfo(appName, idenifierGUID, appMgmtBag);
but when i try to update , it is not updating the new key/value pair in the same application store. also, when i open the MMC snap in tool, i am not able to see the existing key/value pairs.
can any one please help me how to store the sso configurable values dynamically?
Thanks
Vinoth

Hi Vinoth,
Please have a look at this thread
http://social.msdn.microsoft.com/Forums/en-US/5b914e0c-50ea-4226-8f0e-7e15e2f482ae/biztalk-2013-sso-mmc-snapin-does-not-show-key-pairs?forum=biztalkgeneral
Probably, this will solve the issue of existing key/value pairs missing in MMC
Thanks,
Deepthi
DeepthiAdith

Problem in SSO

Hi,
iam having problem with SSO regarding verify.der when iam exporting it it is ok but when iam trying to import the certificate and add to certificate list it is saying that error occured dunring import it is saying plz provide me a solution for this problem.
Regards,
Shilpa.p

I assume that when you export the verify.der from the portal you are then extracting the actual certificate from the zip file before uploading it to your backend system?
Have you looked at the content of the certificate once its extracted from the verify.zip file - you should be able to view its contents (right click --> open).
If that looks ok then it could be your backend system PSE that is at fault.
Haydn

SAP Best Practices for SSO Configuration

Hello There,
Are there any SAP Best Practices available for SSO Configuration. If so, Kindly help me with those..
And also any Third party tools available in the market for SSO Configuration..
Appriciate your Help on this.. Thanks in advance.
Regards,
Pranay S
Edited by: Pranay Subedari on Apr 29, 2011 9:12 AM

Hello,
Types on the SSO are classified with the systems involved in configuration (i.e.) SSO between ABAP Stack and Java stack or LDAP, OS
Refer the link for more details [Document Deleted]
Regards,
Anand
Message was edited by: Jason Lax

Problem in SSO configuration

Similar Messages

Maybe you are looking for