Regarding CUA System

hi guys,
we are planning to Connect CUA system with IDM and execute Initial load to collect users, roles, groups, assignment of roles to users, groups to users.....etc.
Now I believe IDM will have all the info including CUA system Users, Groups etc and Other child ABAP systems Users, Groups.
1) Later if we remove CUA from IDM and if Child systems directly connected with IDM(Executed Initial load), the Old CUA System Local users and Groups will be removed?
2)How the rules in CUA system can be transferred to IDM system.
(do we need to Create the CUA system rules again in IDM freshly again??)
regards
jaichan

thanks

Similar Messages

Error in job for connection to CUA System

I have a problem with the two jobs in the u2018AS ABAP - Initial loadu2019 for a CUA system. According to the log is seems to be a memory issue!!!!
Extract from the logfile:
u2026u2026u2026
26.03.2009 09:57:31 :I:Initializing custom pass FromSAP: ReadABAPRoles
26.03.2009 09:57:31 :I:Initializing MX SAP BAPI object
26.03.2009 09:57:31 :W:Filter not supported when Listing CUA Roles. Ignoring :*
26.03.2009 09:57:35 :E:Unhandled Error in DSERuntime
java.lang.OutOfMemoryError: Java heap space (failed to allocate 84038672 bytes)
u2026u2026u2026
This error is related to the both the jobs: ReadABAPRoles and ReadABAPProfiles.
Please note:
Setting the %$rep.CUA_MASTER% equal u2018falseu2019 using the repository constant works for the both jobs (only the roles and/or profile in u2018localu2019 system the is read meaning no data from the subsystems in the CUA is read )
Any suggestions for handling this problem??
Best Regards
Tom Svarre

The text you enter in the dispatcher script after JAVAOPTIONS= is passed on as one parameter to the java executable. When you set JAVAOPTIONS=-Xmx256M -Xmx256M the effect is like the commandline java "-Xmx256M -Xms256M" java interprets this as an illegal heap size and refuses to start.
If you want to specify more than one javaoption, you also have to set MXDISPATCHER_EXECSTRING=1
This option causes the dispatcher to pass the arguments to the java executable as one string instead of split into separate parameters.
The reason this option is not turned on by default, is that this can cause problems with paths and parameters containing special characters that causes the command line interpreter to fail.
In your case, only specifyng the -Xmx is probably the best solution. Specifying -Xms will cause heavier load on the system also for jobs thatdoes not need a large heap.

No IDOC's for the change record in child and CUA systems.

Hi,
The user profile was modified and assigned roles and profiles on so and so date by someone as it is showing in the change record of the user in the child system with a batch user id.
I have search the IDOC's with respective of the child system, date & time but I didnu2019t find any IDOC with respective of the above criteria.
So kindly help me out is there a way I can find the information as who changed the user profile via CUA system....
Thanks for your help...
Thanks & Regards
Sukumar. V

Release:
700   Master & Child
SP level
Can i know for which area you need it...
BASIS
0015   Master
0013   Child
Netweaver
0016   Master
0015   Child..
Please let me know if you need any further info....
SV

You cannot logon (CUA system assignment missing)

I request the access to HU2,... systems, but when I tried to logon via GUI, got the error message - You Cannot logon (CUA system assignment missing).
I tried Web GUI, it tells me that user name and password not valid,...
Any clue?
Thanks,
Andrew

Dear Andrew!
Sorry for delay reply, I hope your problem has been solved till now. Anyhow my reply may help to other guys.
Sometime this error will appear after System copy/migration or technical upgrade.
Suppose that xyz user face an error "You cannot logon (CUA system assignment missing)" during login attempt after system copy/migration or system upgrade.
Solution:
Login as sap* user and reset xyz user password in su01. New password length of xyz should be at least 14 to 15 characters. If you are unable to login as sap* then reset sap* user with database utility in usr02 table and remove parameter u201Clogin/no_automatic_user_sapstaru201D from profile if active. Login as xyz user and insert new password with any length at new password windows.
After successful login of xyz user, do the same practice for all users who are facing the same problem.
Regards.
Yasir.
Edited by: Muhammad Yasir Shafiq on Mar 29, 2011 10:07 AM

Question regarding CUA

Suppose I have 4 systems connected CUA(SID CA1)
AS1
QW1
ZX1
ER1
Is it possible to create a CUA Admin in CA1 system such that the Admin can only make changes in the CUA system for systems ZX1 and ER1, but he cant make changes related to AS1 and QW1.
Thanks in advance.

Hi Gautam,
In the child system, change the system user (such as CUA_PRD_324) in transaction SU01 by removing the role Z_SAP_BC_USR_CUA_CLIENT on the Roles tab page. If this means that the user is no longer assigned any roles or any profiles, you can assume that it is not used for any other purpose, and can delete it.
for more on this .. refer to the below link.
http://help.sap.com/saphelp_nw70/helpdata/en/cc/50b43be7492354e10000000a114084/frameset.htm
just remove the above mentioned role, from the child system's, system user.
hope this info helps you,
regards..
raj
<i>pls award points!!!</i>

PLEASE HELP ME TO FIND THE SOLUTION REGARDING "LOGICAL SYSTEM CHANGED"

HAI EVERYBODY,
PLEASE HELP ME TO FIND THE SOLUTION REGARDING "LOGICAL SYSTEM CHANGED" during the material master replication by using middleware parameters.
step1 : i have taken SRM client 810 and named it as CHINNISRM
step2 : i have taken r3 client 810 and named it as CHINNIR3
step3: During material master replication i maintained tables like crmconsum,crmrfcpar,crmparoltp in r3 and smofparsfa in srm client and filtered the objects and loaded the objects through r3ac3,r3ac1,r3as.
step4 : And later i have checked in r3 queues to activate the objects,but i have seen a message like "LOGICAL SYSTEM CHANGED:SEE 588701".according to the oss instructions i have checked in CRMPRLS table in se16 in R3 .there i found out there is one logical client named with T90CLNT810.
oss :588701
Solution
There are different cases in which different forms of processing are
required or where several options exist:
- The logical system name of an R/3 Backend client was changed in
current operation. In this case, the data hangs in the outbound
queues of the R/3 Backend system as specified under point 1 of
the symptom. In this case, the logical system name must be
changed back to the original value. Then the outbound queues
can be reactivated. If no data was transferred to the EBP/CRM
server before the change, also a correctioin of the check table
is possible.
- The same logical system name was used again in a new client of
an R/3 Backend system that was linked to the EBP/CRM server. In
this case, the data is in the inbound queue of the EBP/CRM
server with the exception GUID_FOR_LOGSYS_CHANGED. In this
case, the queue entries which have status SYSFAIL must be rejected, however, not the entire queues. If the new client of the R/3 Backend system you have linked has exactly the same
data as the old client and if it is meant to replace the old
client (that is, this was deactivated), also a correction of
the check tables is possible. In this case, the inbound queues
can be reactivated after the correction.
oss:765018
1. If the situation in your system corresponds to the situation described
under "Reason and Prerequisites" and if symptom 1 occurs, you can
delete the table entry from table CRMPRLS table (there is just one
entry). Since there is no maintenance dialog for this table and you
cannot maintain it using transaction SE16, you must use a report to
delete it. This report is attached to this note as correction
instructions.
Create the report ZZ_DELETE_CRMPRLS in your system and copy the source
code from the correction instructions. You cannot implement this
source code using transaction SNOTE.
You can use the report in every plug-in or plug-in basis system, even
if it is not specified in the validity section.
After you have run the report, you can trigger existing queues again
in transaction SMQ1.
2. If the situation in your system corresponds to the situation described
under "Reason and prerequisite" and if symptom 2 occurs, you can
delete the entry from table CRMMLSGUID (there is just one entry).
Since there is no maintenance entry for this table and you cannot
maintain it using transaction SE16, you must use a report to delete
it. This report is attached to this note as correction instructions.
If they do not yet exist, add the following messages to message class SMOF in your logon language:
Message Message short text
303 User &1 is not allowed to change table &2.
304 User &1 IS not allowed to display table &2.
305 Logical system &1 was not found in table &2.
306 System error! The current client was not
found in table T000.
Create the report ZZ_DELETE_CRMMLSGUID in your system and copy the
source code from the correction instructions. You cannot implement
this source code using transaction SNOTE.
You can use the report for every release of the CRM system, even if it
is not specified in the validity section. The only exceptions are CRM
releases with Support Package versions that are too low such as CRM
Release 3.0 with Support Package 12.
After you have run the report, you can trigger existing queues again
in transaction SMQ1 of the R/3 back-end system or transaction SMQ2 of
the CRM system.
so what should i do to do the replication.please suggest me .untill and unless i solve my problem i cant move to the further activity.i hope you people can solve my problem.thanks in advance.
thanks and best regards,
n.chakradhar

Hi chakradhar,
Did you find a solution to your issue? We are facing a similar issue and looking to figure out how this can be resolved.
BR// 420

Clarification Regarding Logical System Names

HI all,
I read the blogs regarding Logical System Name, even I am having the some problems in my system.
For PI system client is 100.
R/3 System Client is 100 is created.
IN PI when I checked the sale->basic setting-> LOgical Settings-> Assign Logical Systems
I found there is only one client 100, and it is having the same logical system name as 'PICLNT100'.
In SLD one Business System is created for Client 100 and having the Logical System Name is 'PICLNT100'.
When I checking in the R/3 system that logical system Name ('PICLNT100') is not there and for r/3 client 100 having the different logical system name.
IN ID when I found the Goto ID->File Buinsess system and Menu ->Services->Adapter Specific Identifiers->Logical Ssytem,
It is different from the SLD logical System Name.
How Can I know in PI, that Logical System is belongs to r/3 or PI client 100,
when I running the sceanrio it is giving error as ATTRIBUTE_INV_SND_SERV while doing the file to Idoc scenario.
How I have to maintain the logical system names in this case?
please help me in this.
Regards,
Sree

hi.
each r3 system has his own SLN (PI,BI,ECC,etc). this name identify each R3 sytem.
http://help.sap.com/saphelp_nw04/helpdata/en/78/217dc151ce11d189570000e829fbbd/frameset.htm
IN ID when I found the Goto ID->File Buinsess system and Menu ->Services->Adapter Specific Identifiers->Logical Ssytem,
to export data of your R3 system to SLD, just do it from TCODE RZ70 in your r3 system, not PI.
once you configure it all data from r3 system is exported to SLD.
if the SLN does not match in Adapter Specific Identifiers->Logical Ssytem, edit the Bussines System (press in the little pencil) go to Adapter Specific Identifiers->Logical Ssytem and prees in the little hand icon. in the SLN in not refresh, go to menu enviroment--> CLEAR SLD DELTA CACHE. and repeat the steps before.
each time you send data to an R3 system and the sender system is a legacy. in your receiver communication channel>header mapping>sender system--> select the PI Bussines system and try again.
hope its helps
Rodrigo
PD: rewards points if useful

Can I access cua SYSTEMS- SUBSYSTEMS using remote BAPI calls

I am using an external application to create users on a SAP CUA system and then push them down to the child systems. I can create the user fine but I cant get the create to actually push the user down to the children. If I create the user natively and push it down, I can see SYSTEMS->SUBSYSTEMS coming back and can pull the correct subsystem values from it. That is not a valid input parameter for BAPI_USER_CREATE1 or BAPI_USER_CHANGE though. What is the best call to set SYSTEMS->SUBSYSTEMS?
Thanks in advance.

In case anyone is interested in this, the correct call to use is BAPI_USER_SYSTEM_ASSIGN. This is a new call that is available with note 992375.

You cannot log on (CUA System assignment missing)

Hi
We are in the middle of CRM upgrade. We upgraded couple of test (CRS) and Dev (CRD) server. We are creating both CRD/CRS in the Solution manager system landscape using tcode SMSY as the satellite servers. Connectivity between satellite server CRD and solution manager server SMP (also in CRD and SMP) has been successfully created.
While checking the Authorization test in Sateliite server (CRD/CRS) for RFC "SM_SMPCLNT050_BACK", we are getting the following error:
"You cannot log on (CUA System assignment missing)"
All other RFC created by SMSY is working fine.
To Fix this problem, i tried to repeat same process again. I was able to delete following RFC's using "clean-up RFC" function of SMSy tcode.
- SM_CRDCRMCLNT050_READ
- SM_CRDCRMCLNT050_TMW
- SM_CRDCRMCLNT050_TRUSTED
and in satellite server (CRD), i deleted following RFC's manually:
- SM_SMPCLNT050_BACK
- SM_SMPCLNT050_TRUSTED
Now, when i checked the RFC destination in SMSY of solution manager server, it is still showing me RFC "SM_SMPCLNT050_BACK". But it is not there in the satellite server as i had deleted it manually. To verify it, I checked table RFCDES in satellite server and "SM_SMPCLNT050_BACK" RFC is not there in table.
I again re-generated RFC's in SMSY of solution manager server, but got the same error ""You cannot log on (CUA System assignment missing)" for SM_SMPCLNT050_BACK.
So we are getting two problem for same process:
- You cannot log on (CUA System assignment missing)
- I deleted RFC " SM_SMPCLNT050_BACK" manually in the satellite server but SMSY still showing it in "Clean up RFC windows".
Not sure if both problems are related to each other. Pls guide to solve these issue's.
Thanks

Thanks Sunny
Your suggestion help me to fix one problem. "You cannot log on (CUA System assignment missing)" problem is fixed.
Authorization in SOLMAN system was missing for user ID that is being used in the "SM_SMPCLNT050_BACK" of the satellite server. There was no authorization profile assigned to User. This is strange.
Process (SMSY) should have created user ID and assigned required authorization profile to the User ID but it did not happened properly.User ID was created but no auth profile was assigned.
I'm facing the same problem is other server also. User ID has been created but auth profiles are missing for user ID that is being used in "SM_SMPCLNT050_BACK" of the satelliet system.
Our SOLMAN server (SMP) is the CUA Central System. Do i ned to check anything in SOLMAN server for CUA?
Following detail could be one another reason for the missing authorization profile in User ID:
- To solve the problem of "You cannot log on (CUA System assignment missing)" , i deleted following RFC's using "clean-up RFC" function of SMSy tcode.
- SM_ERDECCCLNT050_READ
- SM_ERDECCCCLNT050_TMW
- SM_ERDECCCLNT050_TRUSTED
and in satellite server (ERD), i deleted following RFC's manually:
- SM_SMPCLNT050_BACK
- SM_SMPCLNT050_TRUSTED
but "SM_SMPCLNT050_BACK" was still showing in the RFC destination in SMSY of solution manager server. In 'generate RFC destinations'. I re-generated and process created "SM_SMPCLNT050_BACK" in SM59 of ERD and user ID for this RFC has been created in SOLMAN server without adding any auth profile.
Not sure, if this is the reason. I opened oss message three days ago but still waiting for reply.
- I'm using my account to generate RFC and i think (as told by security team) that i have all authorization in both server required to generate RFC. I may need to add some more authorization.
Could you pls suggest to fix the problem of "SM_SMPCLNT050_BACK". i would like to know why this RFC is still showing in SMSY even after deleting it manully in SM59 of ERD server.
is it possible if i send you the screenshot of document that i send it to oss for your suggestion. can i hav eyour mail ID?
Thanks a lot for your help again..
Amar

Regarding Last Changed On in SU01( CUA Systems )

Hi,
In our CUA( I mean parent. ) systems, the Last Changed On in SU01 is not getting updated properly.
It gets updated properly, only when one changes the logon data.
This fact & the value for Last Changed On are telling, the source for Last Changed On is UsH02. But in case of child systems, it is Usr04( If I am not wrong. ).
So ultimately Ush02 is not getting updated to provide the right value for Last Changed On & Usr04 is getting updated properly, but the program is not reading it.
Can you please tell me, what has to be done? Thanks in advance.
Please let me know if you need more information.
Regards,
Sachhidanand Rankhambe

Hello Sachhidanand,unfortunately this is the standard behaviour in the moment....
Please refer also to [SAP Note 143999|https://service.sap.com/sap/support/notes/143999] ....
b.rgds,
Bernhard

CUA - System Refresh

Hello,
I am new to CUA and need help in determining the pre and Post steps for CUA during the System Refresh. The System Refresh is performed on the Child System and after the Refresh my original users and Role assignments have to overwrite the users and Role Assignments of the Copying System.How do I retain my original User data ?
Are their any guidelines to this process ?
I am researching oss and forums,and so far I don't have any clear procedure.
thanks,
Farah

Hello Farah,
I think by system refresh you mean system copy.
From system copy perspective follwing steps need to be taken:
pre copy steps:
1. Disconnect CUA. Please go to the child system. Go to TRANSACTION BD64 and delete the ALE model view for CUA.
Subsequently go to parent system. Then to transaction SCUA. In menu bar go to Distribution model and then to Delete. Choose the radiobutton Child System and then give the logical name of the child system.
Post system copy activties:
1. in case the system copy has been performed from parent system of CUA to child system then go to child system and then goto BD64. Delete the exisitng ALE model for CUA. If parent system is not the source system of CUA you can ignore this step. Next Login to parent system. Go to SCUA then change mode and then add the logical system name of child system to it.Next go to SCUG and do user master reconcilliation.for this double click on child system and then under do transfer users wherver it is available.
Frankly these are ideal steps after system copy ahich I follow since there is not much disparity in user master data across systems in my CUA. So even if system copy happens the user master data in child system remains more or less the same.
If at all there is a minor difference I adjust it through SU01 or SU10. However in case there is a major difference then you it becomes a bit complicated. reasons being system copy wil overwrite entire stuff. Whether it is CUA or any other data. Say for example a child role exisits in child system but is not in the source system of system copy then it wont be present after system copy. if there are such issues then let us know. May be we can think
something. otherwise this approach should do the job for you.
Please award points if you found the anwers useful.
regards.
Ruchit.

Assigning authorization in CUA system

Hello,
We are having CUA( Central User Administration) in our system. The requirement now is to create a program and through the program assign roles to the users who requested for the roles.
I found a bapi "BAPI_USER_LOCACTGROUPS_ASSIGN" which does the purpose but i am stuck at two issues:
1. This BAPi deletes the existing roles of the user and adds only our mentioned role. I want to add role to already existing roles of the user.I couldn't find any BAPI which adds the role to the existing one.
2. The most important issue here is the authorization. The requirement of the authorization should not be user specific. For example: If i execute the report and want to approve few requests then even if i do not have authorization to execute the bapi or in other words i do not have authorization to change or delete existing roles i still need to add the role to the user.
Let me explain in detail : If userA wants a request for a role. I log in to the program and find out that user A has asked for the rquest.If certain conditions are satisfied then i can give User A the access to the role and add the role to his user data. Even if i do not have authorization to assign roles i still want the role to be added to User A. How can i achieve this? Can we have some commom user name ( For example: Common name for batch processing) to do this ? I am not aware how to achieve this requirement? Please help.
P.S : I am aware that this kind of requirement is a security breach but this is what the client requirmenet is .
Regards,
Vaishnavi

Hi Vaishnavi,
Yes you are correct. It will delete the existing roles. Hence the sequence should be as follows :-
1. Call 'BAPI_USER_GET_DETAIL' to get all the current roles of the user
2. Call 'BAPI_USER_ACTGROUPS_DELETE' to delete & re-add the roles
3. Call 'SUSR_BAPI_USER_ACTGROUPS_ASSIG' to reassign the old + new roles
Thanks,
Best regards,
Prashant

User roles were deleted for the mass change in CUA system.

Dear Team,
I have assigned a role to a set of users in CUA via SU10 to a specific child system, as like I have executed the task 3 to 4 times for the assignment of the different roles to a set of users and some users may repeated in each execution .
And when I check in child system after few hours the old roles were deleted and contains the role which I have assigned in the mass change.
It was happened only to few users not more than 20 users, then I expected that may be the users who get repeated in SU10 more than one time for the different role assignment it get impacted.
But that is not a problem, because I verified some of the users who repeated more than one time in child system and they didnu2019t get deleted the old roles and it was appended with the new role to the existing rights of the user.
Still some of the IDOC were showing in SCUL transaction with Yellow signal triangle shape
So please help me out what would be the issue.
Kindly let me know if need more information....
SV

Hi,
It is a problem related to IDOC issue. Please contact Basis Team regarding pushing of the Idocs. I am giving an over view of the steps that needs to be executed for idoc push. Please contact Basis with the same.
Run RBDAGAIN report (se38)
Give Idocs and save as variant.
Now go to sm36 specify a job name and start.
This will change the Idoc status from 02 to 30. For 03 to 30 it needs a different report. Please check and let me know if any issue. As long as idocs are not pushed properly it will give an error. At times also check the CUA user is ok or not. It gets locked at times. To know which one is the CUA user->Login to child system->su01->See the change executed by the user->Get the user name.
Let me know if any issue.
Regards
Aveek.

Some questions regarding ESB system.

Hi all,
I've used my ESB system for a few months now, so I thought it would be interesting to look at what's going on in my database schema created by my esb system (oraesb). This led to some questions (and raising eyebrows), I hope some of you soa-experts might have an answer.
* Is my system installed properly:
I noticed that the oraesb schema created by running IRCA.zip installs only tables, views, topic queues and 1 procedure (create_queue). However, looking at the sql scripts in ${soaSuite_home}/integration/esb/sql/oracle there are far more stored procedures defined. Is it normal cq. okay that these objects are not installed or is my esb system faulty?
* No constraints or indices:
My system is yet very small, so it is still performing good/fast. I imagine that when the esb system is going further, performance and locking becomes an issue due to lack of indices on foreign key columns and primary/foreign constraints.
* Only small part of schema used:
When browsing through the tables of the oraesb user I notice that only a few tables are filled with data. For example all "Slide Tables" (this is the name given to these group tables in file ${soaSuite_home}/integration/esb/sql/oracle/wfeventc.sql) are empty. Is this normal? What kind of processes should enter data in these tables? What is the use of the "Slide tables"?
* AQ-tables not being used:
My esb system has five aq-queue tables (esb topics), but they are never used! I recall another thread on this forum about these queue tables growing enormous in size. I guess there must be a sort of switch somewhere to switch between jms-queue's and aq-queue's? Can anyone please explain how switch on the aq-queue's or point me to the proper documentation. I must have overlooked this in the documentation.
Kind regards,
Happy new year,
H

When your podcast is accepted you should receive an email telling you this and giving the URL for its page in the iTunes Store. The string of numbers at the end is the ID number.
It usually takes somewhat longer for a new podcast to appear in the search results. Once you can find it by searching on the title, you can get the Store page URL, if you still don't know it, by control-clicking on the podcast image (or where it should be) and choosing 'Copy Podcast URL'.
You may find this page helpful in giving you basic information about podcasting:
http://www.wilmut.org.uk/pc

Configuring CCMS Alerts in Sol Man 4.0 CUA System

Hi
Can anybody forward me some documents on how to add systems for CCMS Alerts on SolMan 4.0 System which is being used a CUA
Especially, i need a document on the RZ20, RZ21, SCOT and SDCC TCodes during this process
Immediate help would be greatly appreciated
Kalyan Jonna
[email protected]

Hi,
Check this note
763561 - Service Data Control Center (SDCCN) - FAQ Solve all your queries.
You have more here.
861753 - LAW: Replacing SDCC with SDCCN
Hope this will solve your problem.
Feel free to revert back.
--Ragu

Regarding CUA System

Similar Messages

Maybe you are looking for