Remote Role assingment Issue: Federated Portal

Hi all,
I have created a Url iview, attached it to a role (in producer). In consumer I have assigned this role to "userX". But the ivew is throwing Access denied (Object(s): portal_content/ContentsToShare/TestRemoteRole/News)." this error.
User store: I have created a "userX" in producer and exported to the consumer.
Can any one help in solving this issue?
Regards
George

Similar Messages

Cannot view remote roles while in consumer portal

I have set up federated portal and tested the connection.
I cannot view remote roles, I get the following error in the default trace
SOAP Fault Exception [Actor [prmhpu46.ce.corp.com] com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The U
ser Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not fou
nd.

#2#PRODUCER_BIK6R8VOZ0#com.sap.security.core.persistence.remote.CommunicationException: SOAP Fault Error (n.a) : The User
Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not found.
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.sendToRemote(RemoteProducerAccessImpl.java:438)
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.checkConnectivity(RemoteProducerAccessImpl.java:210)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.evaluateDatasourcesToSearchFor(CompanyPrincipalFactory.java
:648)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.simplePrincipalSearchByDatasources(CompanyPrincipalFactory.
java:3041)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.getSimpleEntitySearchResult(JmxSearchHelper.java:72)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.calculateSimpleEntityTable(JmxSearchHelper.java:1025)
        at com.sap.security.core.jmx.impl.JmxServer.calculateSimpleEntityTableByDatasources(JmxServer.java:926)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)

Problem in Remote Delta Links in Federated Portal

Hi experts,
I am trying the federated portal content usage modes. My producer and consumer are EP7 and SP13.
I have done the Setting up trust both the side.
I have created Netweaver content Producer, with P4 communication properties.
I can able to get the remote roles in consumer (it is working fine).
But I am not able to see the Producer PCD. I didnt get the expand button in the Netweaver content Producer object .
Please help me, Where I made mistake..
Thanks and Regards,
Chinnadurai R

Hi Chinnadurai
1.During the process of Registering (Adding) Producer Portal, while entering the connection parameters of the NetWeaver producer portal use appropriate Host name against Host Name input field instead of IP address. Perhaps this might create some problem during execution in later stage.
e.g. Host Name: use Hostname123 instead of XXX.XX.XXX.XXX
NOTE: Here always use fully qualified domain name
2. Check whether producer is 'Blocked'
3. Try to add new producer again followed by connection test and registration ...it might work...
4. Sometimes it may happen that you are able to see PCD under portal content studio of consumer portal but if when you open the producer under 'NetWeaver content producers' and if it does not contain folders in it, the registration is considered to be unsuccessful even though it stated it was successful while registration
Regards,
Kapil Sharma
Edited by: Kapil Sharma on Mar 20, 2008 4:51 PM

Problem- Create Remote Delta link in Federated Portal Network environment

Dear Experts,
I am working in a Fedeated protal network environment where the producer is BI 7.0 Portal and the EP portal is the consumer.
FPN was already configured at client side and some reports were already integrated .
Now i am working to integrate some other BI reports and need to work on PCD ( creating iviews/pages/worksets/roles )..for integrating the BI reports.
I followed to create th remote delta link for content of producer in the consumer portal as following .
1.In consumer portal i navigated to the Portal catalog of NetWeaver Content Producers
2 .Browse the Portal Catalog of the remote producer and then, choose Copy.
3.Right-click a folder in conusmer local Portal Catalog (in the Portal Content root folder) and then choose Paste as Local Content.
While perfoming third step i am getting following error
"*Could not create remote delta link to object'pcd:portalcontent/com.analog.analog/hcm_bi_reports/iviews/basic_reports/com.analog.cost_center_report'Could not connect to producer portal. Please check that the producer portal is running, there are no network problems, and your consumer settings for the producer are configured properly_* "
Producer potal is already in running mode and producer content is get dispalying in consumer portal under NetWeaver Content Producers.
Could any body help me what might be the problem.
i would appriciate if you replied for the same.
Thanks and Regards
Ratnakar

Hi,
Could you try to set the log level ALL for com.sap.portal.fpn and its subtree (From log configurator service in Visual Administration)?
Then see the log messages in the default.trc logs and possibly post them to this threads.
Regards
Dagfinn

Remote Delta Link on Federated Portals

Hi all,
I have been trying to implement a pederated portal network to share KM content from my producers to my consumers.
I have been follow almost all the steps in this documentation
http://help.sap.com/saphelp_nw04s/helpdata/en/fa/067d4242e66255e10000000a155106/content.htm
So far I stablish a succesfull connection between the portals, but something seems to be missing.
On the Consumer, Inside Content Adminstration -> Portal Content -> NetWeaver Content Producers I see my producer, but when
I click on it I can´t see any of the PCD objects from my producer.
Reding the documentation I could not found where you should conect the UME from both portals (consumer and producer).
Rigth now both of my SAP Portals are connected to the Corporate LDAP.
Any Ideas?
Regards,
Orlando Covault

I hope you have established trust relation between the portals. Once you have done that.do the steps in the following link.
http://help.sap.com/saphelp_nw70/helpdata/en/43/222dc90bb93fece10000000a11466f/frameset.htm
P.S: Kindly assign points if your query is resolved, also close the question to assist other users narrow the search and find solutions

Federation, remote role assignment based on ABAP roles on producer

Hi all,
We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
System I: ABAP + JAVA --> ECC 6.0
Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
System II: JAVA --> NW 7.0 Portal
Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
System III: ABAP + JAVA --> SRM
Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
+PROBLEM+
We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
Best regards,
Jan Laros

Jan,
Interesting question. Let me share my experience and hope that's of some use to you.
We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
- B's UME points to Active Directory
- A's UME points to BI ABAP user store
- User ids are identical in both systems
We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
- A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
Either my story is applicable or I must have got you totally wrong,
Kiran

Federated portal network - missing tab on consumer role

Hi,
We're on EP 7.01, SP4, and on two occantions we've had problems with missing tabs on a consumer role in our federated portal network setup. An entire workset on both occations is missing from the RDL-shared role. In the two cases the problem has been observed on different roles with two different worksets. When analyzing the RDL-shared roles, the producer role is fine but the consumer role is simply missing the attached workset. If the role is copied to the consumer again, the workset is still missing.
A full synchronization solves the problem.
The RDL-mechanism has been running fine for over half a year, so its quit odd that we now experience this issue.
Has anyone else experienced anything similar?
Kind regards,
Rasmus

Hi Rasmus,
Is your consumer portal required High Availability? A scheduled re-bounce of the instance should help (weekly, monthly, etc.) as a preventive measure. Maybe you can observe to see how long does it take before the problem comes back (after a full cache refreshed) and then schedule your re-bounce accordingly. As much as we try to do our best, "things" happen
Or, you can adjust your cache settings (e.g. reduce the maxValidityPeriodInSecond property) to avoid the problem.
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
According to the following link, the cache stores only semantic objects (iViews, pages, layouts and roles); since worksets are not semantic objects, could that be why?!
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
Regards,
Dao

How to make Federated Portal Network Content available in a Consumer Portal

Hello Experts,
we have the following situation:
We have two NW 7.0 Portals: 1 Main Portal on and 1 BI-Portal
We would like to do a remote role assignment via the Federated Portal option in the Portal, so that we can make the BEX-Explorer role from the BI Portal available in our main Portal.
I've already created a connection to the BI-Portal (Producer-Portal) in "Federated Portal" and have already registered the main portal as the Consumer in the BI Portal. I used SAP Help for that:
http://help.sap.com/saphelp_nw04s/helpdata/en/67/7e70424edcc553e10000000a1550b0/frameset.htm
Now I have the problem, that I can not find the remote role from the BI Portal in the Identity Management of our main Portal? Does anybody has a idea (or maybe a solution ) how to fix this problem? The SAP Help is not very helpful, it always deals with the same notes...
Regards
Andreas
PS: Of course u can earn points!!!!

Hi
first of all i would check that the SSO is working between the two portals..
Log into one of the portal.. Change the URL to the other portal. If you have to log in, then there is a problem with your SSO. Remember to have enough permission on both the portal.
If that works, then log into the consumer portal and check what you find in the portal content of the producer portal.
Let me know the result, and I will help you further..
Best Regards
Kristoffer Engh

Publishing Web Pages in a Federated Portal

Hi all,
we´re running WPC pages in a Federated Portal. We create the pcd structure in the root system and publish the roles in the federated portal. For that we created web pages on the root system. As it isn´t possible to publish WPC pages in a federated portal, we created a WPC runtime iView for each of the pages.
But, when we´re logged on in the federated portal only one of the iViews is visible.
Can anyone help me out?
Thx and Rgds,
Andreas

Hi all,
we changed our mind an decided to build a new portal landscape for our project. So the problem doesn´t exist any longer.
Cheers,
Andreas

Can KM Document iView be used through Remote Role in Federated Portal?

I have a Producer Portal and a Consumer portal using Remote Role Assignment. In the same remote role, the KM Navigation iView is working fine, but the KM Document iView is giving http 400 error (The webpage cannot be found). I understand normally we should put KM on the consumer. But some of our KM document iViews are used in the roles in the BI portal, which is the producer.
I cannot find SAP document or notes that tells "If KM Document iView is supposed to work through Remote Role". If you could clarify for me, I will know if it's worthwhile to troubleshoot the issue.
Thanks,
Fubo Liu

Hi Fubo,
There are no restrictions regarding the KM documents iView in the Central Note regarding FPN: [880482|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_ep_pin/~form/handler%7B5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d383830343832%7D]
So this should work fine.
Best regards,
Robert

Federated Portal Language change not visible on remote role

Hi,
Remote role assigment is done on consumer portal. This remote portal role comes from a BI Producer portal.
This roles has worksets and iviews attached to it like km navigation iview etc.
User on consumer portal has options to change his language to french from default english.
Here the issue is, this language change does not reflect or apply to the remote role and its iviews or contents.(It continues to show in english) . But it works without problem o n local roles or ivews as expected.
Any idea on how this language change can be effected on the remote role and its contentc will be much appreciated.
Regards,
Ashok D

Hello Ashok,
You must remember that because this is RRA the content will actually run on the producer (unless this is an AI iView).
This means that the language will be determine according to the user's language defined on the producer itself, therefor you have to change the language of that specific user on the producer portal.
If this does not help it might be that the iView is forcing the language, then we'll have to try somehthing else.
Update me with the results of the first triage,
Also have a look at SAP Note # 1295703 under the Language category, it explains the algorithem of determining the language.
Best Regards,
Nadav.

Assign remote roles with Federated portals

Hello all,
We're trying to implement a federated Portal network using the "Implementing a Federated Portal Network" in Detail document.
The steps that we have follow successfully are:
1. Connect to the user repository (Producer and Consumer).
2. Configure system settings (Producer and Consumer).
3. Define and Configure producers (consumer).
4. Set permisions (producer).
Now we want to assign remote roles to local users in User Administration -> Proxy-to-remote Roles option. But Proxy-to-remote Roles tab doesn't appear in the second level navigation...
We are working with EP7 SP10.
Any idea?
Thanks in advance

Maybe a clue: According to the Remote Role assigment question, We have a similar problem using the Remote content copy option.
In the consumer EP, Content Administration -> Portal Content, the Netweaver Content Producers contains the producer connection icon but it's empty. So, the content share can't be done...
Now... Any idea?
Thanks!
Message was edited by:
Marta Sánchez

Federated Portal Network RRA Issues (SP15)

Hello,
We are attempting to implement a FPN consiting of our BI Portal as a Producer, CRM Portal as a Producer, and our Enterprise Portal as the Consumer. The goal is to set up Remote Role Assignment.
All three portals are at SP level 15, and thus for RRA the Producers require that UME actions "Remote_Producer_Read_Access" and "Remote_Producer_Write_Access" be applied to the a role and assigned to user "pcd_service".
Here is my problem: Although both producer portals are at SP level 15 I am unable to find the required UME actions. I can find them on our consumer portal but this is of course no use.
Is there some action I need to take to add these UME actions or is there some other issue I am missing? Any ideas would be appreciated and thanks in advance!

Hi Kiran,
Thank you for taking the time to post.
I have tried from that link and also Identity Management while logged into the portal itself with identical results.
Is it possible the UME engine was not fully updated when SP15 was applied to these two portals?
Kind regards,
Luke

Federated Portal Network FPN: exception Remote Delta Links rdl

Consumer Portal version: 7.01 SP2
Producer Portal version: 7.00 SP15
I always receive an exception when i try to preview a remote delta link.
I think I've setted up correctly the trust relationship between my portals. Because when I log on to my consumer portal and I open the producer portal in the same browser I don't need to give my user credentials. This is a simple test to see if the the trust relationship is working...
In the portal content studio I'm able to see my portal producers and their content. There is also no problem to copy for eg. an url iView from my producer to the portel content of my consumer portal as local content. when I try to preview my iView I receive a runtime error!
Anyone who'd like to share some ideas? Known issues?
Thanks

I've posted my solution in this thread:
Re: Federated Portal Network FPN: exception Remote Delta Links rdl
My problem is already solved!
Thanks anyway,
Gert

Landscape Issue AccAD 2.2 (Federated Portals)

Hello,
I have a performance issue, I have CE 7.2 and EP 7.0. Both are integrated as a Federated Portal. The CE 7.2 is the producer and EP 7.0 is the consumer or front end to our employees.
We have remote locations with low bandwiths so we implemented AccAD 2.2 with the EP and the performance impoved a lot, ...the EP, but all the cache management is done to the EP objects, all the CE objects (javascripts, themes) are making the portal performance very low. The start page could take more than 240 seconds to display (because is showing some federated web dynpros iviews).
After analizing, I see that one of the files that takes long is the sapurmapi_ie6.js that is loaded from the CE.
How can I make the AccAD platform to work with the CE? What's your recommendation? How can I solve this issue?
I think that if I make an upgrade to NW 7.3 I could avoid the federated portal and work with only one server (CE and EP are together), however right now is not my reality? Please can you give me an advice?
Best Regards
SU

Hi Zeev,
I tried to change again and hit "Apply". it finally went back.
I did it last weekend, since it is production.
Thank you very much.
There are a few things I consider as problem.
1. Secondary SFE: They still do not communicate each other
2. Database error: on Repository, Audit and Traffic history tabs show "Could not connect to the database"
--->by the way, my test systems have no problems.
3. On my SAP system, AL08, connections from CFEs displayed with the CFEs virtual IPs instead of SFEs.
---> as I experienced from 2.1, this is not right. they have to be appeared with the SFEs virtual IP.
version 2.1: Enduser -> CFE -> SFE -> SAP
version 2.2: Enduser -> CFE -
> SAP ???
And, there are a lot of these messages in /var/log/messages
Oct 31 11:03:45 cicamsf1 procmgr_main_adcli: Improper load()
Oct 31 11:03:45 cicamsf1 procmgr_main_adcli: implementation: base implementation not called?
Oct 31 11:03:49 cicamsf1 procmgr_main_adcli: Improper
Oct 31 11:03:49 cicamsf1 procmgr_main_adcli: load() implementation: base implementation not called?
Oct 31 11:03:50 cicamsf1 procmgr_main_adcli: Imprope
Oct 31 11:03:50 cicamsf1 procmgr_main_adcli: r load() implementation: base implementation not called?
Oct 31 11:07:25 cicamsf1 procmgr_main_adcli: Improper load()
Oct 31 11:07:26 cicamsf1 procmgr_main_adcli: implementation: base implementation not called?
Oct 31 11:07:29 cicamsf1 procmgr_main_adcli: Improper
Oct 31 11:07:29 cicamsf1 procmgr_main_adcli: load() implementation: base implementation not called?
Oct 31 11:07:38 cicamsf1 procmgr_main_adcli: Improper loa
Oct 31 11:07:38 cicamsf1 procmgr_main_adcli: d() implementation: base implementation not called?
Thank you!

Remote Role assingment Issue: Federated Portal

Similar Messages

Maybe you are looking for