Reference and service users
what exactly this reference and service users do and for what kind of activities these user types has to be assigned?
Hello Veera ,
Hope you looking for this ....
Characterization of user types
Dialog user 'A'
Individual system access (personalized)
Logon with SAPGUI is possible. The user is therefore interaction-capable with the SAPGUI.
Expired or initial passwords are checked.
Users have the option of changing their own passwords.
Multiple logon is checked.
Usage: For individual human users (also Internet users)
System user 'B'
System-dependent and system-internal operations
Logon with SAPGUI is not possible. The user is therefore not interaction-capable with the SAPGUI.
The passwords are not subject to to the password change requirement, that is, they cannot be initial or expired.
Only an administrator user can change the password.
Multiple logon is permitted.
Usage: Internal RFC, background processing, external RFC (for example, ALE, workflow, TMS, CUA)
Communication user 'C'
Individual system access (personalized)
Logon with SAPGUI is not possible. The user is therefore not interaction-capable with the SAPGUI.
Expired or initial passwords are checked but the conversion of the password change requirement that applies in principle to all users depends on the caller (interactive/not interactive). (*)
Users have the option of changing their own passwords.
Usage: external RFC (individual human users)
Service user 'S'
Shared system access (anonymous)
Logon with SAPGUI is possible. The user is therefore interaction-capable with the SAPGUI.
The passwords are not subject to the password change requirement, that is, they cannot be initial or expired.
Only a user administrator can change the password.
Multiple logon is permitted.
Usage: Anonymous system access (for example, public Web services)
Reference user 'L'
Authorization enhancement
No logon possible.
Reference users are used for authorization assignment to other users.
Usage: Internet users with identical authorizations
Regards ,
Santosh
Similar Messages
-
I have gone through different threads that are available on this forum. In summary
>>The service users are used for internal communication within XI components which are trigerred by Dialog users. The service user username, password, language are given in Exchange profile.
Again there we have 2 different service users ( service users during design&configuration and service users in during runtime). As a developer whether at any time we are going to use these ?? If so what are the occations in which we will use service users (design & runtime users ) ??
Thanks
Kumarhi
Ref this
http://help.sap.com/saphelp_nw04/helpdata/en/9f/d12940cbf2195de10000000a1550b0/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/f9/e3162ec55f4df6922d161f3785012a/frameset.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/3d/3272396ace5534e10000000a11405a/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/d4/d12940cbf2195de10000000a1550b0/frameset.htm
Dialogue or Service User
/people/alexander.bundschuh/blog/2007/01/16/principal-propagation-in-sap-xi
http://help.sap.com/saphelp_nw04/helpdata/en/52/671126439b11d1896f0000e8322d00/frameset.htm
Thanks -
Dear All,
I have a simple Runbook with the following details:
Initialize Data: (First Name, Last Name, Login Name, Deparment Name) --> Create User: Name:(Domain), Common Name, Display Name, First, Last Name, SAM Account Name (From Initialize Data) --> Enable
User: Distinguished Name --> Add User to Group: Group Distinguished Name, User Distinguished Name
Active Directory Management Pack in place and the Prerequisites Configurations are added Too (Configuration User Name, Configuration Password, Configuration DC, Configuration Default OU.
The Runbook is Synched with Service Manager, Request Offering/Service Offering and published to the portal.
When I filled the 4 required values (First Name, Last Name, Login Name, Deparment Name), the Runbook will kick off and the user is created in Active Directory.
The user is placed in the Default OU which is predefined in AD Prerequisites Configurations in Orchestrator.
I need to add another Required Value to my Request Offering (SR) called User Level Enum List (Low, Medium, High).
I need to place the user in a Specific OU based on the Level entered from SSPortal, If the user is Low, then Create the user in this OU, if the user is Medium then create it in this OU, etc...
How can I do this in Orchestrator? What I want to modify in my runbook to accomplish this task?
Thank you,I AM TRYING TO USER/MAILBOX CREATION PROCESS, FOLLOWING IS THE BUSINESS REQUIREMENT
GET THE USER FROM ERP SYSTEM (SQL)
CREATE USER IN SPECIFIC OU
ENABLE THE MAILBOX IN SPECIFIC DATABASE BASED UPON USER ROLE
CREATE A USER IN NAVISION SYSTEM WHICH IS AGAIN JUST CREATING SQL LOGIN.
PLEASE ADVISE ME THE PROCESS AND PROCEDURE ILLUSTRATION IF IT ALL POSSIBLE IN SINGLE RUNBOOK.
I AM ABLE TO CREATE USER/MAILBOX BUT STRUGGLING TO CREATE IN SPECIFIC OU/MAILBOX DB AND SQL LOGIN.
FARRUKH
[email protected]
Farrukh Anwar -
Difference between a Service user and Dailog user ?
Hi All,
Can anybody tell me the difference between a service user and a dailog user?
Why can't we use a service user for BSP applications?
We are on a 620 system and use bsp system login.
With a dialog user it works, but when I switch this user to a service user the login returns an empty login screen.
Thanks in advance.
RobA service user can only be used for background processing and communication within a system (such as RFC users for ALE, Workflow, TMS, and CUA). Dialog screens are not allowed for these users.
Dialog users however have individual, interactive system access.
[user types|http://help.sap.com/saphelp_nw70/helpdata/EN/3d/3272396ace5534e10000000a11405a/content.htm] -
Need to migrate Shared services users and groups from 9.3.1 to 11.1.2.2 ver
Hi All,
We need to migrate Shared services users and groups from 9.3.1 to 11.1.2.2 version. Any help would be appreciated. Can we use CSS import export utility?
Thanks in advance!!Hi John, In my another environment I have to migrate the users and groups from Hyperion HSS 11.1.1.2 to Hyperion shared services 11.1.2.2. I am using LCM for that, when I export the users and gropus from 11.1.1.2, it exports fine but when i import it to my 11.1.2.2 using LCM, I am getting the below errors.
Error when I try to import the groups:
ErrorEPMIE-00051: Failed to perform operation on role. Could not locate role matching filter {0} and filter attribute {1}. Please ensure that a role exists matching the filter with filter attribute.
EPMIE-00024: Failed to import all of the membership info for group test group. Invalid group members encountered. Please ensure the validity of members and its existence in their respective providers.
Errors when i try to import the users:
ErrorEPMIE-00051: Failed to perform operation on role. Could not locate role matching filter {0} and filter attribute {1}. Please ensure that a role exists matching the filter with filter attribute.
EPMIE-00020: Failed to update user 04668162 during import. Invalid identity for user. Please ensure that the user is available in the system with the identity specified in the import file.
Any idea?
Thanks in advance. -
I donot see pi/xi related service users and roles in ecc6 box
hi,
I donot have pi/xi related service users(PISUPER etc) and roles in ecc6 box. Do i need to create these.
Thank you
MoniHi,
>Do you meen to say there wont be any pi related services users and roles exists in ECC6 box?
yes
Cheers
Agasthuri Doss -
SAP user licensing - service users and system users
Hello,
In SAP licensing process, will it count service users and system users for the license.
(or licensing occurs only to the dialog users)
In the license agreement , it is not mentioned.
(Mentioned as 500 user license only)
regards,
zerandib.Hi Zerandib,
This forum is for SAP Business One users only. I think your question is related to R/3. Please close your thread and post on a proper forum.
Thanks,
Gordon -
Impossible to unlock network-admin, services, users and groups
Hi all,
it is impossible to unlock network-admin, services, users and groups in gnome.
Suggestions or ideas?
Thanks in advance
Greetsalessandro_ufms wrote:
xaiviax wrote:Just fyi, rebuilding system-tools-backends with ABS does not fix issue for me.
Are you put your login user on group stb-admin, put stbd in DAEMONS on rc.conf and restart the computer?
yes, although didn't have stbd in DAEMONS before (worked fine), still didn't fix issue. Been watching this thread, just downgraded package again, works great. I'd rather not downgrade on principal, but that the only thing that works for me currently, so... -
Difference between service and communication user
Hi,
We ran into a big problem in our CRM system getting millions of Dynpro_Send_in_background dumps while processing inbound queues R3AD* from R/3 system to CRM. Lots of Updates getting failed with CRM_SCHEDLIN_UPDATE_DU function module while executing report LCRM_SCHEDLIN_DUU01.
Error Details - CRM_ORDER_MISC 002: Error in updating object SCHEDLIN
We posted to SAP as well but did not find root cause. SAP saying we need to change RFC user "S_ECC_PR0400" from Service user to Communication user, that would stop the dump problem.
I want to know what is the unique difference between these users(Service & Comm) which will resolve the dump problem though I know the common difference between these users.
Thanks
AnjuHi Anju ,
Communication 'C' User :
Use the user type Communikation for dialog-free communication between systems (for RFC or CPIC service users of different applications, for example, ALE, Workflow, TMS ZBV).
Dialog logon is not possible.
Service 'S' User :
A user of type Service is a dialog user available to a large anonymous set of users. It usually has closely-restricted authorizations.
Service users are e.g. used for anonymous system access via an ITS service. You can change a session which began as an anonymous session with a service user into a personal session under a dialog user with an individual authentification.
There is no check for obsolete/initial passwords at logon. Only the user administrator can change the password.
Multiple logon is allowed.
Hope this may help you.
Thanks
Gyan -
User Profile Service - User Profile Incremental Synchronization Progress: 33% Status: Pausing
It has been almost 15 days.
Both User Profile Service and User Profile Synchronization Service are in Started state and FIM service also starting
I tried clearing sharePoint config cache.
I also restarted the sharepoint timer service.
I tried almost everything that is on Internet but nothing helped me.
Is there any other way to solve the issue as I was struck on production server (ASAP)
In synchronization serivce manager status of MOSS_DeltaImport is Inprogress from past 2 days
Best Regards.Hi,
Please follow the steps in the link below to clear the configuration cache.
http://blogs.msdn.com/b/jamesway/archive/2011/05/23/sharepoint-2010-clearing-the-configuration-cache.aspx
Here is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/en-US/beaa852c-6f40-428a-b97c-20722864e045/user-profile-service-user-profile-incremental-synchronization-timer-job-stuck-at-88-status?forum=sharepointadminprevious
Or try to clear the file system cache on all servers in the server farm on which the Windows SharePoint Services Timer service is running. Microsoft has provided a step by step procedure on clearing file system cache from the SharePoint front-end servers
in this kb article.
You can also see the ULS logs and check error messages.
http://sharepointlogviewer.codeplex.com/
Best Regards
Dennis Guo
TechNet Community Support -
SSRS 2008 R2 is extremely slow. The query runs in less than a second in the dataset designer but if you try to view the report it takes over 10 minutes. I have read this is a bug in SSRS 2008 R2. We installed the most recent patches and
service packs. Nothing we've done so far has fixed it and I see that I'm not the only person with this problem. However I don't see any answers either.Hi Kim Sharp,
According to your description that when you view the report it is extremely slow in SSRS 2008 R2 but it is very fast when execute the query in dataset designer, right?
I have tested on my local environment and can‘t reproduce the issue. Obviously, it is the performance issue, rendering performance can be affected by a combination of factors that include hardware, number of concurrent users accessing reports, the amount
of data in a report, design of the report, and output format. If you have parameters in your report which contains many values in the list, the bad performance as you mentioned is an known issue on 2008 R2 and already have the hotfix:
http://support.microsoft.com/kb/2276203
Any issue after applying the update, I recommend you that submit a feedback at https://connect.microsoft.com/SQLServer/
If you don’t have, you can do some action to improve the performance when designing the report. Because how you create and update reports affects how fast the report renders.
Actually, the Report Server ExecutionLog2 view contains reports performance data. You could make use of below query to see where the report processing time is being spent:
After you determine whether the delay time is in data retrieval, report processing, or report rendering:
use ReportServer
SELECT TOP 10 ReportPath,parameters,
TimeDataRetrieval + TimeProcessing + TimeRendering as [total time],
TimeDataRetrieval, TimeProcessing, TimeRendering,
ByteCount, [RowCount],Source, AdditionalInfo
FROM ExecutionLog2
ORDER BY Timestart DESC
Use below methods to help troubleshoot issues according to the above query result :
Troubleshooting Reports: Report Performance
Besides this, you could also follow these articles for more information about this issue:
Report Server Catalog Best Practices
Performance, Snapshots, Caching (Reporting Services)
Similar thread for your reference:
SSRS slow
Any problem, please feel free to ask
Regards
Vicky Liu -
EREC- Assigning Service User to Services in SICF
Hi Experts,
Service user "RCF_CAND_EXT" has been assigned the roles:
SAP_RCF_EXT_CANDIDATE_SERVER
SAP_RCF_EXTERNAL_CANDIDATE
SAP_RCF_UNREGISTERED_CANDIDATE
When i try to assign this service user to the service meant for external candidate i am getting an error that the user name and password is incorrect. Why is this so? But when i change the Authentication (inside logon data tab) to "Standard SAP User", it is working fine. Where in case of "Internet User" it is showing error or wrong user name and password.
N.B. my services would be used by the external candidates
What is it that i am doing incorrectly?
Regards,
KishoreHello Kishore,
First, the unregistregistered role assignment has to be deleted, as RCF_CAND_EXT is the the reference user for the external candidates (so it is not a service user). One service user we have is the unregistered service user (in standard RCF_UNREGSER) which has the unregistered candidate role assigned and is responsible eg. for the unregistered search and registration service. As most of these services are configured as 'required with logon data' you usually don't need to choose between 'internet user' and 'SAP Standard-User'.
So could you please clarify if you mean that one?
Regards
Nicole -
Windows Azure Pack setup - 500 Internal Server Error - failed to configure databases and services
Hi,
I am trying to setup the Windows Azure pack to use the site to configure the Service bus 1.1 installation. When I try to configure the Windows Azure Pack I get the following error:
Admin Authentication Site
500 Internal Server Error - Failed to configure databases and services: Object reference not set to an instance of an object.
I'm not sure where the logs are to see what is causing this error. I have tried running as admin, running as a different user with no luck.
thanks,
Georgi
GeorgiHere's what I'm getting for this error:
Log Name: Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite/Operational
Source: Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite
Date: 3/27/2014 12:52:03 PM
Event ID: 103
Task Category: (65431)
Level: Error
Keywords: None
User: CLINICALSYSTEMS\Administrator
Computer: SERVER-PC.clinicalsystems.com
Description:
##### Application_Error: Exception=System.Web.HttpException (0x80004005): Failed to configure databases and services: Object reference not set to an instance of an object. ---> System.Management.Automation.CmdletInvocationException: Object reference not
set to an instance of an object. ---> System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.AddUserToGroup(GroupPrincipal group, UserPrincipal user)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureDefaultTrusts()
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureClaimSecurity(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureCore(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.FeatureConfigurer.Configure(Hashtable settings)
at Microsoft.WindowsAzure.Server.PowerShell.Common.BaseCmdlet.ProcessRecord()
at System.Management.Automation.CommandProcessor.ProcessRecord()
--- End of inner exception stack trace ---
at System.Management.Automation.Runspaces.PipelineBase.Invoke(IEnumerable input)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.PSClient.RunCommand(Command command)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.ConfigurationPSClient.InitializeFeature(String name, Hashtable settings)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<>c__DisplayClass3.<ConfigureFeature>b__0()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at lambda_method(Closure , Task )
at System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass3f.<BeginInvokeAsynchronousActionMethod>b__3e(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult)
at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite" Guid="{1F742CC8-BDAA-56B6-A4B8-49F946D19CD1}" />
<EventID>103</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>65431</Task>
<Opcode>0</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2014-03-27T16:52:03.223741300Z" />
<EventRecordID>111</EventRecordID>
<Correlation />
<Execution ProcessID="8068" ThreadID="7680" />
<Channel>Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite/Operational</Channel>
<Computer>SERVER-PC.clinicalsystems.com</Computer>
<Security UserID="S-1-5-21-3021050346-1670805799-1320812125-500" />
</System>
<EventData>
<Data Name="exceptionInfo">System.Web.HttpException (0x80004005): Failed to configure databases and services: Object reference not set to an instance of an object. ---> System.Management.Automation.CmdletInvocationException: Object reference not set to an instance of an object. ---> System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.AddUserToGroup(GroupPrincipal group, UserPrincipal user)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureDefaultTrusts()
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureClaimSecurity(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureCore(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.FeatureConfigurer.Configure(Hashtable settings)
at Microsoft.WindowsAzure.Server.PowerShell.Common.BaseCmdlet.ProcessRecord()
at System.Management.Automation.CommandProcessor.ProcessRecord()
--- End of inner exception stack trace ---
at System.Management.Automation.Runspaces.PipelineBase.Invoke(IEnumerable input)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.PSClient.RunCommand(Command command)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.ConfigurationPSClient.InitializeFeature(String name, Hashtable settings)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<>c__DisplayClass3.<ConfigureFeature>b__0()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at lambda_method(Closure , Task )
at System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass3f.<BeginInvokeAsynchronousActionMethod>b__3e(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult)
at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)</Data>
</EventData>
</Event>
Kori Francis Lead Software Developer Clinical Support Systems, Inc. -
Sapjsf locks ABAP service user psswd: M ***LOG US1= Login, Wrong Password
I have a PI system and a number of ABAP systems connecting to this.
I have defined a service user in PI for each ABAP system - SY_SID_999 (where SID is the SAP System ID and 999 is the client). Various connections (e.g., RFC, ABAP proxy) use these userid and I rely on the user name to identify the source of the activity within PI.
I was forced to change the password of one of these userids and, subsequently, to update connection details in RFCs etc within the source system. All went well for these connections.
Now, however, at 25 minutes past the hour, I get the following error in the PI system's developer trace
M ***LOG US1=> Login, Wrong Password (SY_SID_999 ) [sign.c 4545]
and the SM21 log says
10:25:47 DIA 000 100 SAPJSF US 1 User SY_SID_999 locked due to incorrect logon
SU01 change records show no changes to SY_SID_999 from the time I unlock it until 25 minutes past the hour when this error occurs.
The SM19 security audit log in the PI system has errors:
12.08.2009 10:08:18 SAPJSF localhost SAPMSSY1 Logon Failed (Reason = 53, Type = U)
Type=U means "user switch (internal call)" according to the documentation.
Reason 53 means "Too many failed password logon attempts"
These errors occur in bunches but without a consistent repetition interval. For example, there were 8 at 10:04:56/57 then 2 at 10:08:18 then a string of success messages as follows:
12.08.2009 10:08:18 SAPJSF localhost SAPMSSY1 Logon Successful (Type=U)
Then, at 10:25...
12.08.2009 10:25:47 SAPJSF localhost SAPMSSY1 User SY_SID_999 Locked in Client 100 After Erroneous Password Checks
12.08.2009 10:25:47 SAPJSF localhost SAPMSSY1 Logon Failed (Reason = 1, Type = U)
If I do not unlock the SY_SID_999 userid in the PI ABAP system, there will be no further errors in SM21 but if I do, at 25 minutes past the hour after the error pattern will repeat.
I have set the rfc/logon_error_log parameter to 3 in PI ABAP to trigger a short dump.
Internal notes from the short dump do not identify the who, what or where of the sign-on attempt...
Internal notes
The termination was triggered in function "ab_xsignon"
of the SAP kernel, in line 2725 of the module
"//bas/710_REL/src/krn/rfc/absignon.c#4".
The internal operation just processed is "CALY".
Internal mode was started at 20090812112528.
Caller system......: " "
Caller.............: " "
Caller client......: " "
RFC user ID........: " "
RFC client.........: 100
Login return code..: 20
Transaction code...: " "
(Note: In releases < 4.0, no information on the caller is available)
The source system represented by the SY_SID_999 userid is an ABAP ONLY stack so has no sapjsf userid. (For the record, SY_SID_999 doesn't exist in client 999 of SID either - it's defined in the PI system to do work on behalf of SID client 999.)
So the question, after all that, is:
How do I identify the source of this password error?Thanks Michael
I did get a short dump during the testing process and it indicates that the failed RFC logon attempt originates from within the PI system. My implementation partner was rather careless in the assignment of userids to connections so, while this userid should only be used for connections originating from the SID, I cannot guarantee that.
I've been into both my PI system and the ABAP system (which doesn't have a sapjsf userid so should not be the offending party) and run an SQL select script to find all RFC destinations which contain the string "SID" or "sid" in any of the RFCOPTIONx fields. I've carefully checked out each of these RFC destinations and, in SID they contain the SY_SID_999 userid and, when that's unlocked in PI, the connection and authorisation tests succeed. That rules out upper/lower case issues and pretty much eliminates these legitimate RFC destinations from the suspect list. The RFC destinations identified in the PI system by the SQL search contain "SID" because they name that as their target system; these definitions don't reference the SY_SID_999 userid at all.
All the evidence I can find points very strongly to some process running as SAPJSF in the Java stack of the PI (dual stack) system calling something on the ABAP side and trying to connect as SY_SID_999. Trouble is I can't find it. In fact, I'm don't even know where to start looking to find a job running in the Java stack - on the ABAP side I'd head for SM37 but what to use on the Java side? -
Item and service invoices in same query
Hi All,
i want item based and service based invoices in same query but in this query when user individuality select item or service it shows records how can i get both in same query
SELECT
1 as sr,'Invoice' [Document Type],
t0.docentry,
T0.[CardCode] as 'BP Number',
T0.[CardName] as 'BP name',
t0.numatcard as 'Vendor reference No.',
t0.u_loc as 'Location name' ,
t4.state ,--'Null') as 'State' ,
T0.[DocNum] as 'Document Number',
--T0.[DocType],
t0.docdate,
ISNULL(T1.ItemCode,'Service Item') AS 'Item Code',
T1.[Dscription],
T1.[Quantity],
t3.name as 'MAG',
t1.linetotal as 'Net Amount',
t1.vatsum as 'Tax Amount',
(t1.linetotal + t1.vatsum) as 'Invoice Value'
FROM [dbo].[OINV] T0
INNER JOIN [dbo].[INV1] T1 ON T0.DocEntry = T1.DocEntry
left outer join owhs t4 on t1.whscode = t4.whscode
LEFT JOIN [dbo].[OITM] T2 ON T1.ItemCode = T2.ItemCode
LEFT JOIN [dbo].[@ITMG] T3 ON T2.U_itmg = T3.Code
WHERE
T0.[DocType] = '[%0]' and t0.cardcode between [%3] and [%4] and t0.docdate >= [%1]and t0.docdate <=[%2]
union
SELECT 2,'Credit Memo' [Document Type],
t0.docentry,
T0.[CardCode] as 'BP Number',
T0.[CardName] as 'BP Name',
t0.numatcard as 'Vendor reference No.',
t0.u_loc as 'Location name' ,
t4.state ,--'Null') as 'State' ,
T0.[DocNum] as 'Document Number',
--T0.[DocType],
t0.docdate,
ISNULL(T1.ItemCode,'Service Item') AS 'Item Code',
T1.[Dscription],
-T1.[Quantity],
t3.name as 'MAG',
-t1.linetotal as 'Net Amount',
-t1.vatsum as 'Tax Amount',
(t1.linetotal + t1.vatsum) as 'Invoice Value'
FROM [dbo].[ORIN] T0
INNER JOIN [dbo].[RIN1] T1 ON T0.DocEntry = T1.DocEntry
left outer join owhs t4 on t1.whscode = t4.whscode
LEFT JOIN [dbo].[OITM] T2 ON T1.ItemCode = T2.ItemCode
LEFT JOIN [dbo].[@ITMG] T3 ON T2.U_itmg = T3.Code
WHERE
T0.[DocType] = '[%0]' and t0.cardcode between [%3] and [%4] and t0.docdate >= [%1]and t0.docdate <=[%2]
pls help me
ketan..........Hi Ketan,
You don't need to add anything to this query. When you select service type documents, the State would automatically become NULL.
Thanks.
Gordon
Maybe you are looking for
-
Why does Safari crashes when opening a new tab?
Here is the crash report. Process: Safari [11775] Path: /Applications/Safari.app/Contents/MacOS/Safari Identifier: com.apple.Safari Version: 5.0.5 (6533.21.1) Build Info: WebBrowser-75332101~1 Code Type: X8
-
Transparency Issue when exporting Image Sequence
Hi, I'm creating short anims which have transparency and exporting them as png image sequences. I'm finding two issues with the export though: 1) The first frame is always solid black (when it should be totally transparent) 2) The R,G,B channels o
-
My iPod touch 6.1.5 doesn't update to IOS 7. How can I update it?
About 3 years ago I bought my mother an iPod touch and so she only used it for abouut 2 years and stopped using it. She started using it just a couple months ago, but the device is still in the firmware 6.1.5 and I trieyd updating it to the current v
-
Applicationhost.config updates for HTTP Slow Post with Azure Websites
We are trying to update our Azure websites to not show as vulnerable to the HTTP Slow Post vulnerability. Some articles suggest fixing this by updating the applicationHost.config via IIS to update the connection timeout values. Obviously with Azure w
-
Need video clips to "fall into place" using scale and position, but Premiere isn't cooperating...
Hey guys, I'm working on a project for a client where I need 50 video clips to "fall" from full screen to a "puzzle" in the background, then I have some after effects to do, but my problem is that I can't seem to get a video to play "underneath" anot