Regarding session handling in BSP

hi all,
    we have integrated our BSP application to EP 5.o, we have used 'existbspapplication'(used buffered page) function in our default page to handle the sessions.
   and its working fine, but now we have to integrate it to the EP 6.0 and we find the sessions are not terminated, and tend to remain after closing the application manually.
   my question is does portal handle sessions if yes, tried the same(by removing session handling code from default page) but could not get the desired result. is there any other way to handle sessions in EP 6.0
thanks,
raju
Message was edited by: krishnam raju

Hi,
Did you set the checkbox for portal integration on in the properties of the BSP page?
Check also
http://help.sap.com/saphelp_nw2004s/helpdata/en/83/132197c3564643af326a5ebccb604f/frameset.htm
Furthermore, check things like
/people/eddy.declercq/blog/2005/11/15/enemy-of-the-state
/people/eddy.declercq/blog/2006/03/20/wake-me-up-before-you-go-go
Eddy

Similar Messages

Need to warn user of session timeout in BSP app hap_document......

Hi,
We're using the hap_document app to allow employees to change appraisal documents in ESS and for managers to create them thru MSS....
When employees have their documents open for more than 1 hour, the next time they click on save, it takes them to the session timeout (ICM, version 6040, module icxxthr_mt.c)....
Is there a way to add a timer to the document.htm or body.htm pages in the application to start a timer, reset it each time user clicks on save, and warn him with a popup when we're within 5 minutes to a timeout...
I've read messages on the BSP thread that say...
"Document.htm is split in two frames. One hidden to enable session handling, the second one visible which contains the document.
So the document.htm is not refreshed, the second frame is refreshed. I tried your approach as well and was not able to tie the script to the second frame.
Regards and Groetjes,
Maurice"
I've also read Thomas's stateful/stateless timeout parameters article...
Can anyone help me with where I would put the timer javascript code (if not in document.htm or body.htm) and which timeout parameter to check...
Thanks for all your help,
Venkatesh

Look at the sample code..Will solve your problem..
<%@page language="abap" %>
<%@extension name="htmlb" prefix="htmlb" %>
<script type="text/javascript">
function remind() {
var msg = "Your Session will be timed out in 10 Secs";
alert(msg);
</script>
<htmlb:content design="design2003" >
<%
data: v_rem type string.
DATA: port TYPE STRING.
port = request->get_header_field( if_http_header_fields_sap=>server_port ).
DATA: services TYPE TABLE OF ICM_SINFO.
CALL FUNCTION 'ICM_GET_INFO' TABLES SERVLIST = services.
FIELD-SYMBOLS: <service> TYPE ICM_SINFO.
DATA: wait TYPE STRING.
READ TABLE services ASSIGNING <service> WITH KEY service = port.
wait = <service>-KEEPALIVE - 10.
CONDENSE wait.
concatenate `'remind(` wait `)',2000` into v_rem.
%>
<htmlb:page onLoad = "setTimeout(<%= v_rem %>)"
              title = " " >
    <htmlb:form>
      <htmlb:textView text   = "Hello World!"
                      design = "EMPHASIZED" />
      <htmlb:button text    = "Press Me"
                    onClick = "myClickHandler" />
    </htmlb:form>
</htmlb:page>
</htmlb:content>
<i>* Reward each useful answer</i>
Raja T

Event Handling in BSP

Hi guys,
i need the framework of event handling in BSP. if have multiple controls on my BSP (with flow logic, how ican capture each event occured by each control.
a- i have two radiobutton groups, each have two radiobuttons.
b- i have a tableview, if user select a row i need the value of the selected row.
c- i have a button, onclick i want to handle all the events, checked radiobuttons value, selected row to do a action or navigation.

in the event click of the button (oninputprocessing)
you can get the value of other objects (radiobutton, tableview etc,
you have to do something like below.
for tableview
DATA: table           TYPE REF TO cl_htmlb_tableview .
table ?= cl_htmlb_manager=>get_data( request = request
                                            name    = 'tableView'
                                            id      = 'TV1' ).
for radiobuttons
data: radiobuttongroup1 type ref to cl_htmlb_radiobuttongroup.
data: radiobuttongroup2 type ref to cl_htmlb_radiobuttongroup.
radiobuttongroup1 ?= cl_htmlb_manager=>get_data(
                        request      = runtime->server->request
                        name         = 'radioButtonGroup'
                        id           = 'RBG1' ).
if radiobuttongroup1 is not initial.
r1sel = radiobuttongroup1->selection.
endif.
radiobuttongroup2 ?= cl_htmlb_manager=>get_data(
                        request      = runtime->server->request
                        name         = 'radioButtonGroup'
                        id           = 'RBG2' ).
if radiobuttongroup2 is not initial.
r2sel = radiobuttongroup2->selection.
endif.
Hope this helps.
Regards
Raja

Implementation of session handling for using web services

Hi,
I would like to use session handling in web services using ABAP stack in order to start the session with an user login function followed by other RFC calls till a user logout. So far, I found only the following help note in the SAP online help:
Interface Profile
In the interface profile, choose the required processing type: Stateful or Stateless.
A stateful service retains its status within the framework of a HTTP session throughout several calls form the same service consumer. The standard value for services is Stateless.If you require stateful communication, you can choose this instead.
[http://help.sap.com/saphelp_nwpi71/helpdata/de/45/25291b5a2657c0e10000000a1553f7/content.htm |http://help.sap.com/saphelp_nwpi71/helpdata/en/45/25291b5a2657c0e10000000a1553f7/content.htm]
Please, could someone explain me the further required steps of SAPs session handling idea cause just settting the status to stateful is still not the solution itself...
Regards,
Jens

Now, I found the possible scenarios, suggest by SAP Help, regarding security for Web Services ([http://help.sap.com/saphelp_nw73/helpdata/en/48/8ebbba66be06b2e10000000a42189b/content.htm|http://help.sap.com/saphelp_nw73/helpdata/en/48/8ebbba66be06b2e10000000a42189b/content.htm]):
- SAML & WS SecureConversation -> SSO
- WS Security UsernameToken & WS SecureConversation
- User ID and Password in HTTP Header & HTTPS
- SAP Authentication Assertion Ticket & HTTPS -> SSO
- X.509 SSL Client Certificate through HTTPS
- WS Security: X.509 Certificate Authentication at Message Level
Are scenarios with SSO the solution for creating sessions!?

What are default Zend Session handling best practices to prevent Cross Site Request Forgery?

I have enjoyed the David Powers book Adobe Dreamweaver CS5 with PHP: Training from the Source - and have put many of the examples into practice. I have a security related concern that may be tied to the Zend::Auth example in the book. While this is installed an working on my site:
<?php
$failed = FALSE;
if ($_POST) {
if (empty($_POST['username']) || empty($_POST['password'])) {
    $failed = TRUE;
} else {
    require_once('library.php');
    // check the user's credentials
    try {
      $auth = Zend_Auth::getInstance();
      $adapter = new Zend_Auth_Adapter_DbTable($dbRead, 'user', 'login', 'user_pass', 'sha1(?)');
      $adapter->setIdentity($_POST['username']);
      $adapter->setCredential($_POST['password']);
      $result = $auth->authenticate($adapter);
      if ($result->isValid()) {
        $storage = $auth->getStorage();
        $storage->write($adapter->getResultRowObject(array(
          'ID', 'login', 'user_first', 'user_last', 'user_role')));
        header('Location: /member/index.php');
        exit;
      } else {
        $failed = TRUE;
    } catch (Exception $e) {
      echo $e->getMessage();
if (isset($_GET['logout'])) {
require_once('library.php');
try {
    $auth = Zend_Auth::getInstance();
    $auth->clearIdentity();
} catch (Exception $e) {
    echo $e->getMessage();
Apparently, there is very limited protection against Cross Site Request Forgery, where the resulting SessionID could be easily hijacked? I am using the Zend Community edition (I have 1.11.11).     I have an observation from a client that this authentication is not up to snuff.
To boil it down:
1. Is there a Zend configuration file that might have some settings to upgrade the Session and or authentication security basics? I'm wondering specifically about the settings in /library/Zend/session.php? Ie secure the session against a changing user IP, and invoking some other session handling stuff (time-out etc).
2. If I understand it correctly, "salting" won't help with this, unless it's added/checked via a hidden POST at login time?
Ideally, the man himself, David Powers would jump in here - but I'll take any help I can get!
Thanks!

Might ask them over here.
http://forums.asp.net/1146.aspx/1?MVC
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

ERP2004: ESS JCO session handling in Web Dynpro apps?

Hello,
we run ESS/MSS Web Dynpro scenarios, running on WAS 6.40, SP12 in
Enterprise Portal EP6 SP2 Patch 32. Our go live will be with > 1000 ESS users.
1. When will the sessions in R/3 backend system be terminated by the
Web Dynpro Application?
How is the session handling in FPM (Floor Plan Manager) implemented?
2. Are there any recommendations regarding the JCO connection settings
in Web Dynpro Content Administrator (Maximum Pool Size, Maximum Connections,
Connection Timeout, Maximum Wait Time) to reduce / optimize the load for the
backend system? I found a documentation in SDN but it is not
specific for ESS / MSS based on Web Dynpro.
Background of questions above: The customer is worry about the load on
SAP R/3 backend side: too much current users in the R/3 backend system,
possibly bad performance etc. because the JCO sessions are open a long time.
Are there any experiences with customers running productive ESS / MSS scenarios
based on Web Dynpro?
Thanks & Best regards,
Daniel

Hi,
1. For best practices on JCO settings follow the tutorial below and do it accordingly for your no of users. YOu might have to do some trial and error procedure.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/3103eb90-0201-0010-71af-be6f4a6f61d1
2. For standards, security settings, cache management etc, SAP will give a TODO list after a remote audit of your project.
regds,
Sukanta Rudra

-1074130544 The session handle is not valid.

I am using LabView 2011 on Win7.
I am trying to work my way through the "Verification Procedure" part of the "NI PXI-4071 Calibration Procedure". Step 3 of the Verification Procedure states "Call the niDMM Reset VI." and displays Figure 1. The Device, NI PXI-4071, displays OK in NI-MAX (Figure 2) and works OK with the "NI DMM Soft Front Panel" program. When I run what I think is the correct code, the error -1074130544, "The session handle is not valid." is displayed. The BD and FP are shown in Figure 3.
Solved!
Go to Solution.
Attachments:
Figure 1.jpg ‏26 KB
Figure 2.jpg ‏91 KB
Figure 3.jpg ‏42 KB

Hi Ed,
If you want to call niDMM Reset, you will need to provide an instrument handle rather than an instrument descriptor.
To start a session to your DMM and generate an instrument handle that you can use with other NI-DMM functions, you will first need to call niDMM Initialize or niDMM Initialize with Options. You can wire the "Dev1" to the "Instrument Descriptor" pin and the function will return an instrument handle. You can then wire the "instrument handle out" pin to the "instrument handle" pin on the niDMM Reset VI. Whenever you initialize a session to an instrument, it is also good practice to close out the session by wiring the instrument handle to a niDMM Close function. The snippet of code below shows what I've described:
I also included a Simple Error Handler VI to report any errors that occur.
Also, it looks as if you are calling niDMM Reset with Defaults instead of niDMM Reset. If you haven't assigned any user-defined default values to your device's logical name then the two calls should be functionally equivalent.
If you make these changes you should no longer generate the error.
Good luck!
Regards,
Jared R.
Precision DC Product Support Engineer
National Instruments

Session handling missmatch - Integrated ITS

Hi,
we use integrated ITS (ERP 2005, Web dispatcher 7.00.11 Patch Number 167) and have problems with the session handling. Sometimes (Probability 1 to 1000) one user receives information of other sessions (other user).
The problems occurs even with standard services like PZ02.
Are there any service parameters in SICF to avoid this?
Who had similar problems with session handling?
Did anybody solve this problems?
Best regards
Thomas

Hi,
we use integrated ITS (ERP 2005, Web dispatcher 7.00.11 Patch Number 167) and have problems with the session handling. Sometimes (Probability 1 to 1000) one user receives information of other sessions (other user).
The problems occurs even with standard services like PZ02.
Are there any service parameters in SICF to avoid this?
Who had similar problems with session handling?
Did anybody solve this problems?
Best regards
Thomas

Button not triggering event handler in bsp

Hi
I hav e created button in bsp using htmlb component but it is not triggering onInputProcessing event handler
in bsp when i click on button in webpage. Can any body pls provide me solution.
Regards.
Mukesh

Hi Mukesh
Please check if the following link works for you:
http://help.sap.com/saphelp_nw70/helpdata/en/5d/64a0ed34c59e4c9754be5c0759c7c0/content.htm
and
http://help.sap.com/SAPHELP_NW70/helpdata/EN/60/1f1f056f057d4d962375efd3c92ed0/content.htm
Regards
Chen

Session handle with PXI2503

Hello
I have created DLLs with Labwindows 7.0 on windows 2000 operating system. Those DLLs are used by another application developped with Powerbuilder software. I use this application to program PXI materials: MXI3 kit, PXI-1042 chassis, PXI2503, PXI6527 and PXI-GPIB. With my user profile, I can program those materials through the application I have implemented. The other users can't program PXI materials with my application. This application uses niSwitch_init function. When the application encounters this function, it can't establish a session handle. The session value is zero and the returned status code is BFFFA002B. Programming directly the PXI2503 card with NI examples woks with everybody.
I would like to know if there is a link between user profile and programming PXI materials.
Is there any solution to my problem?

Hi,
I answered a similar question on another thread in french.
Actually, it is not usefull to duplicate questions (french & english) on the forum.
Thanks in advance for that,
Regards,
David D.

Again Session-Handling

Hi there, one question about session-handling in JSP.
I'm trying to set attributes in the JSP and afterwards get them back.
No chance! They always vanish! Here is the code:
<%@page contentType="text/html"%>
<%@page import="java.util.*"%>
<html>
<head><title>JSP Page</title></head>
<body>
<%
// Output of Session-Attributes
for (Enumeration enum=session.getAttributeNames();enum.hasMoreElements();)
String name2 = (String)enum.nextElement();
String value2 = (String)session.getAttribute(name2);
out.println(name2+":"+value2);
// Set Attributes that I get from Form!
String name = request.getParameter("name");
String value = request.getParameter("value");
if (name!=null)
session.setAttribute(name,value);
%>
<form action="SessionTest.jsp" method=get>
<input type=text name=name>
<input type=text name=value>
<input type=submit>
</form>
</body>
</html>
Really dont have a clue!
Thx, ToM

Works ok for me:
Couple of suggestions: put the setting code, before the display code.
That way you will see the pair that you just set in session ;-)
Also try this:
Session id = <%= session.getId() %> and see if it stays the same.
If you are getting a different session every time, then its not maintaining the session.
Common cause of session problem is: cookies are turned off.
Either turn cookies on, or use URL rewriting:
<form action="<%= response.encodeURL("SessionTest.jsp") %>">
<%@page contentType="text/html"%>
<%@page import="java.util.*"%>
<html>
<head><title>JSP Page</title></head>
<body>
<%
// Set Attributes that I get from Form!
String name = request.getParameter("name");
String value = request.getParameter("value");
if (name!=null)
session.setAttribute(name,value);
// Output of Session-Attributes
for (Enumeration enum=session.getAttributeNames();enum.hasMoreElements();)
String name2 = (String)enum.nextElement();
String value2 = (String)session.getAttribute(name2);
out.println(name2+":"+value2 + "<br>");
%>
<form action="SessionTest.jsp" method=get>
<input type=text name=name>
<input type=text name=value>
<input type=submit>
</form>
</body>
</html>Cheers,
evnafets

Problem on "Session Handling"

Hi everyone,I write a simple servlet program on Session handling.In this I use invalidate() method to invalidate the session.
invalidate() But the problem is that when i push the back button the session data gets back,means in the previous page session data gets visible.please help me.

All what you can do is to instruct the client not to cache the page. You can do this by adding the following entries to the HTML head:
<meta http-equiv="cache-control" content="max-age=0, must-revalidate, no-cache, no-store, private">
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="expires" content="-1">If you want to do this programmatically on HttpServletResponse (using a Filter or so):
response.setHeader("cache-control", "max-age=0, must-revalidate, no-cache, no-store, private"); // HTTP 1.1
response.setHeader("pragma", "no-cache"); // HTTP 1.0
response.setDateHeader("expires", -1); // ProxyMake sure that you clears your browser cache before testing.

Configure no. of session handled for same sql

hi, experts,
hi, if there is one report (only fire 1 sql by this report).
if only one internet explorer to run this report , it use 3 minutes to get it.
I use 3 internet explorers to run the same report but not running the report at the same time.
firstly, I run the report on first internet explorer.
then after 10 seconds, I run the report on 2nd internet explorer.
then after 10 seconds, I run the report on 3rd internet explorer.
after result on all internet explorer came, I check the sessions on the "Manage Sessions"
there are 2 sessions for same report.
How to configure no. of session handled for same sql on OBIEE?
thank you very much!

shipon_97 wrote:
Here I see that at a particular time of the database , the number of session from v$session is "271" where as the number of session in the "v$resource_limit" is "280" . Here I get some differ among these parameters .
Would anybody plz tell why the no of sessions differ between v$session and v$resource_limit parameters .
The v$session views shows current sessions (which change rapidly), while the v$resource_limit shows the maximum resource utilization, like a high-water mark.
http://download-east.oracle.com/docs/cd/A97630_01/server.920/a96536/ch3155.htm

Error - session handle nor valid for ivi

Hi All
I have posted this question in existing thread also I guess.
I am trying to control TDK lambda power supply through LabVIEW using IVI drivers.
logical name set in a MAX is same as what I am giving in VI to InitializeWithOptions.vi . However I am ending up with this error "IviDCPwr Initialize With Options.vi<ERR>
Primary Error: (Hex 0xBFFA1190) The session handle is not valid."
Not sure why this error is coming.
Can anyone help me with this error?

You might be using an IVI-COM driver and trying to use IVI-C Class driver VIs without having installed the IVI-COM adapters.
As mentioned in the knowledge base below The IVI-COM adapters are included with IVI Compliance Package 3.2 and later, but must be enabled in the installer's feature tree.
IVI-C Class Driver Support for IVI-COM Specific Drivers
http://digital.ni.com/public.nsf/allkb/5499F9DBD07522F686256F260066BA86?OpenDocument
duplicate post
http://forums.ni.com/t5/Instrument-Control-GPIB-Serial/TDK-Lambda-Power-Supply-error/m-p/3118149#M68...

Session Handling in ATG

Friend,
Could you please provide any best document about session handling in ATG.
Thanks in advance

You can refer these:
http://docs.oracle.com/cd/E35318_02/Platform.10-1-1/ATGInstallGuide/html/s0710sessionmanagementinoracleatgwebc01.html
http://docs.oracle.com/cd/E35318_02/Platform.10-1-1/ATGInstallGuide/html/s0814enablingcomponentbackup01.html
https://docs.google.com/file/d/0B8rpgofYlaJnYTBiNGNmNjMtODU0MS00NDNmLThmOWItNGQzN2UwODBjODRi/edit?pli=1

Regarding session handling in BSP

Similar Messages

Maybe you are looking for