RFC login and user creation to remote system

Hi there,
Hopefully this is the related forum for this question. We have a scenario where we need an automated process to create users on one system and then create just the same account on a remote system with deactivated password.
How is this best handled in ABAP code where the system account info/password of the remote system is not listed in the abap code. Should a SM59 connection be created and then somehow this is referenced from abap code ?
Also, this will be a SM37 job stream running on the local server under one name running the job and in the code it should be using a different name (destination) for the remote connection to create the user.
I am a security person, not abaper. Input /best practice appreciated.
Thanks !

> I am a security person, not abaper. Input /best practice appreciated.
Actually this is a security question, so I have moved it to the security forum...
If the password is to be deactivated in the target system but not in the source ("master" system) then you can use several standard user provisioning mechanisms for this (CUA, GRC-CUP, IdM, UME configuration...) and configure the target system to deactivate the password itself. There are also several ways of achieving this, without any coding required necessarily.
The most obvious one which jumps to mind is RZ11 parameter login/password_change_for_SSO.
Alternately if your scenario is better suited to it, you can also use login/password_max_idle_initial.
Also see transaction RSUSR200.
Etc...
> Should a SM59 connection be created and then somehow this is referenced from abap code ?
No. It should be referenced from configuration of the application which calls the RFC connection, defined in SM59. You can also optionally use the "current user" setting and alternate authentication methods to (saved) passwords. This I would generally recommend.
Cheers,
Julius
Edited by: Julius Bussche on Feb 23, 2010 10:36 PM

Similar Messages

Why do we need to define RFC destination and user for material replication

Dear Experts,
why do we need to define RFC destination and user for material replication? Here we use crm middleware only for material replication. Could you please help me to understand it?
regards,
Ranjan

Hello,
As far as I know, you can use the same RFC destination already available in ECC to SRM to replicate materials.
You can refer to note 720819.
Regards,
Ricardo

Required History record document and user manual of ERP System.

Required History record document and user manual of ERP System. Please send if anybody have .

In your example you aren't really doing anything. If you just put in something like 1 + 1, AppleScript will execute that (and you will get a result), but unless you actually do something with the information nothing is going to happen.
Computers aren't like they are in the movies and are basically really stupid by themselves (and sometimes with help). When programming, you have to specify exactly what you are doing, what you are doing it with, how you want to do it, and handle other things such as the phases of the moon and various road traffic. The AppleScript Language Guide assumes a little bit of programming understanding (and even then some luck helps) - some other resources that might help get you started are the tutorials at macscripter.net.
In the mean time, a System Profiler script that puts a basic profile into the specified file name/location would look something like:
<pre style="
font-family: Monaco, 'Courier New', Courier, monospace;
font-size: 10px;
font-weight: normal;
margin: 0px;
padding: 5px;
border: 1px solid #000000;
width: 720px;
color: #000000;
background-color: #B5FF6C;
overflow: auto;"
title="this text can be pasted into the AppleScript Editor">
tell application "System Profiler"
if (get documents) is {} then make new document -- make sure there is a document
tell document 1 -- the front document
set detail level to basic -- can also use full or mini
save as text in (choose file name default name "Profile.txt")
end tell
end tell
</pre>

File to RFC - error while processing message to remote system:com.sap.aii.

Hi
i m working on File to RFC scenario. the records are getting displayed in sender CC and receiver CC. But in receiver CC i m also getting the following error:
Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: com.sap.aii.adapter.rfc.afcommunication.RfcAFWException: error while processing message to remote system:com.sap.aii.adapter.rfc.core.client.RfcClientException: JCO.Exception while calling ZRFC in remote system (RfcClient[CC_RIS_STC_PIMASTER_RECEIVER]):com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: Screen output without connection to user.
Error in processing caused by: com.sap.aii.adapter.rfc.afcommunication.RfcAFWException: error while processing message to remote system:com.sap.aii.adapter.rfc.core.client.RfcClientException: JCO.Exception while calling ZRFC in remote system (RfcClient[CC_RIS_STC_PIMASTER_RECEIVER]):com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: Screen output without connection to user.
It was working fine few hours earlier but showing this error now. i was giving a SUBMIT program , but stopped that now.
But still facing the same problem. and in SXMB_MONI its showing recorded for Outbound processing.
could anyone help.

Hi
I am Facing Following Error When I am trying to call SAP Screen through JCO.jar
com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: Screen output without connection to user
Please Guide Whethere it is possible to call SAP screen Through JCO.jar ot NOT
Please HELP if it is possible to Call SAP screen through JCO.jar with step and Code
Thanks
Vivek

How to run windows dll files and driver loaded in remote system?

Dear Friends,
I need some valuable info regd how to run a remote windows dll files and the drivers of the system using java
reply regd thanking you

Please don't make duplicate posts like this.

Read and Write file in Remote system Drive

Hi all,
I am try to create the file in Remote system,
in example i find the method to create file in remote system , ie //computer_name/Share_name/fileName
the above sample , i know the computer name but i dont know Share name of the computer ,
Its any possible to find the share name in java ?
please give some idea to solve my problem ?
With Regards,
Ganesh Kumar.L

tlgkumar wrote:
in example i find the method to create file in remote system , ie //computer_name/Share_name/fileName
the above sample , i know the computer name but i dont know Share name of the computer ,
Its any possible to find the share name in java ?Sure. Ask the person who is writing the requirements which share you should use. Don't settle for incomplete requirements.

Client And User Creation in IDES

Hi ,
I created new client 100 in Client 800 and the user DDIC With the Default PWD.
After the creation of client 100 in SCC4, I Hit the TC RZ10.
Here i selected Profile As "Instance Profile".
Here Where i Should Change parameter login/no_automatic_user_sapstar == 0.
Iam unable to see this.
Please help me in this.
Regards
Khanna

Hi Khanna,
Check these..
http://help.sap.com/saphelp_nw04/helpdata/en/3e/cdacecedc411d3a6510000e835363f/frameset.htm
/thread/327681 [original link is broken]
cheers,
prashanth

How can i make my webpage has login and user has account

i have a project to do, i need user to sign up and have user account where they can check their data

There is nothing built into DW that can do this for you.
This type of thing requires a fair amount of server scripting and database stored content to do correctly (if you are planning to have different content per user or user editable content). Unless you are proficient with the scripting available on the server you're using (ask your hosting company what server scripting languages you have available to you), the best option would be to hire someone to do it for you or find/purchase a pre-made third party "user registration and log-in system".

Restricting logins and users

Hi,
We have a set of users created who have access to the database. These database logins have been created to use Discoverer 10g. We want to make sure that the users don't use this login to pull data using Excel or MS-Access via ODBC.
Is there someone way to restrict ODBC connectivity into the database via these logins?
Thanks

First, I would strongly question why a user's choice of tool matters. If a user finds it easier to view data in Access, in a BI tool, or using Discoverer, why prevent that?
In my experience, the underlying concerns generally relate to privileges and performance. From a privileges standpoint, if a user has privileges that you would be uncomfortable with them exercising at the SQL*Plus prompt, you probably have granted the privileges incorrectly (i.e. if a user should only be connecting via a query tool in order to ensure that he doesn't change data, that user should only have SELECT privileges in the first place). From a performance standpoint, if the concern is that some front end tool is going to issue a query that kills the database, it's relatively easy to create a profile that limits the resources that any one query and/or session can consume or to use Resource Manager to control priorities for different users.
While checking for values in v$session as part of a login trigger may keep the honest people honest as it were, it is trivially easy for a user to bypass the trigger by simply renaming the executable on their local machine. So often times, you end up with a false sense of security-- the folks that are most likely to cause problems can circumvent the restriction while those folks that play by the rules are forced to change their behaviors.
Justin

UI is ignoring stationglobals.ini and users.ini on deployed system

I have built a TestStand and LabWindows/CVI application, and used the deployment tool to deploy it to a workstation. I included the user.ini and stationglobals.ini (which contain my users/privileges and my station global values, respectively) in my workspace. When I install the app on the workstation, I see that these two files are deployed to the machine in the right place, but when I launch the full UI, none of my users or station global values are there. I'm currently stuck as to why the UI can't see my users and globals.
I also tried putting the entire cfg directory contents on the deployment station, but nothing changed.
Has anyone seen this, or better yet does anyone know how to fix it?
Thanks
Walt Wallach

Hi Walt,
I would like to try a few tests to narrow down what is going on. First, I would like to verify with you what the path is for the Configuration Directory on the development machine. You can access this by launching Station Options, and clicking on the Preferences tab and then checking the Configuration Directory drop down.
Also, I would like you to save off your prior users.ini file on the development machine. Then I would like you to open up the sequence editor, add a new user, close the sequence editor and then reopen it to verify that the change persisted. Then I would like you to do a diff on the two users.ini files to verify that they are different.
Also, do you get this same behavior when using an OI shipping example?
Cheers,
Kelly R.
Applications Engineer
National Instruments

View logs in windows server (User login and logout )

Hi Guys,
I want to see the user login and logout times to the systems. I want know on which systems (Hostname) they logged into that account.
Could you please help me. Thanks in advance

Hi
You can check the log's on event viewer console,here is good article for your needs,please check;
https://support.microsoft.com/en-us/kb/556015?wa=wsignin1.0

Conecting with dial up to a remote system

Im trying to create a little application that uses the computer's modem to dial a number and conects to a remote system, login to the system using a login and password that is stored in a local database and report if it conected succesfully or failed to connect.
I have worked before with java creating small applications that take data from a DB and allow it manipulation, but its completly unknow to me if there is an API that lets you use the ATDT comands to conect remotley and also I wouldn't know how to do the login and interpret if it was succesful or not.

Here's some code that may help...
I wrote it many years ago, when I started out with Java. It is compatible with Windows only and is capable of dialing an ISP... I suspect it could be modified to dial an arbitrary number.
import java.lang.System;
import java.lang.Runtime;
import java.lang.Exception;
import java.io.IOException;
public class Dialup
     //Connect-Disconnect commands
     private final String WINNT_CONNECT          = "rasdial.exe ";
     private final String WINNT_DISCONNECT     = "rasdial.exe /disconnect";
     private final String WIN9x_CONNECT          = "Rundll32.exe Rnaui.dll,RnaDial ";
//     private final String WIN9x_DISCONNECT     = //doesn't seem to be possible!
     private String connectCommand;
     private String disconnectCommand;
     private boolean winnt;
      * Constructor
      * @param winnt <code>boolean</code> systems o/s
      * @param connectionProvide <code>String</code> users dialup connection provider
     public Dialup(boolean winnt, String connectionProvider)
          this.winnt = winnt;
          if (winnt)     //sets connect/disconnect commands under Windows NT
               connectCommand = WINNT_CONNECT + connectionProvider;
               disconnectCommand = WINNT_DISCONNECT;
          else          //sets connect/disconnect commands under Windows 9x
               connectCommand = WIN9x_CONNECT + connectionProvider;
//               disconnectCommand = WIN9X_DISCONNECT;
      * connect dials a connection
      * @return <code>boolean</code> dialup connection status
     public boolean connect()
          System.out.println("Establishing a dialup connection...");
          try
               //executes connection command and waits for its completion before continuing
               Runtime.getRuntime().exec(connectCommand).waitFor();
          catch (Exception e)
               System.out.println("Dialup connection failed.");
               return false;
          System.out.println("Dialup connection established.");
          return true;
      * disconnect disconnects a connection
      * @return <code>boolean</code> dialup connection status
     public boolean disconnect()
          try
               //executes the disconnect command and waits for its completion before continuing
               if (winnt)
                    Runtime.getRuntime().exec(disconnectCommand).waitFor();
               else
                    ;     //do nothing (at this point it seems impossible to disconnect under win98)
          catch (Exception e)
               return false;
          System.out.println("Dialup connection disconnected");
          return true;
}

Display files/directories of a remote system (RIO) on a host machine (PC)

Hello,
Please assume that we are discussing software built on the standard "Labview FPGA Control on Compact RIO" sample project. The host is a standard PC running LV14 Fall edition, the remote system is an sbRIO-9636 having an SD card and a USB HDD attached. The objective is process control. The process being controlled is not relevant to the question.
This question is about implementing the following functionality: the user operates a host machine running a Labview user interface vi (UI Main.vi) locally on the host machine. Part of this vi must offer the user a built in dialogue (some express vi or another) or custom dialogue (a bespoke vi displayed on demand). The dialogue must display the directories and files of the remote system which runs RT Main.vi and it must allow the user to select a single XML file on the remote system (which contains some generic configuration information). The name of the file will then be passed to the remote system and the remote system will act to open it and populate some configuration variables.
I am sure that a widely used solution exists for this problem but I've not found the right words to type into my favourite search engine yet to produce the result. I propose the following:
1) User clicks a "select config file" button on UI Main.vi
2) The UI Main.vi event loop enqueues a message on the UI Main message queue based on the value change event caused by the button press
3) The UI Main.vi message loop enqueues a separate message on to the "UI Command Stream" network stream
4) The RT Main.vi, RT Loop - UI Commands.vi subvi receives the message from the stream and enqueues it on the RT Main.vi message queue
5) The RT Main.vi message loop performs some functions to read the disk structures, directories and file names from the RT system
6) The file and directory name data in (5) is converted to a variant and is passed along with a suitable message into the RT Writer network stream
7) The UI Main.vi periodically reads the RT Writer network stream (it's in the "monitoring loop") and enqueues the received message (from 6) into the UI message queue
8) The UI Main message queue populated the UI Main front panel with the data
9) The user selects the directory and file they desire and clicks an "ok" button
10) The ok button click causes the event loop of UI main to enqueue a message in UI Main.vi's message queue due to the value change on the ok button
11) The UI Message loop enqueues a message on to the "UI Command Stream" network stream with the selected fully qualified file name of the selected file as the data (stored as variant)
12) The RT Main.vi, RT Loop - UI Commands.vi subvi receives the message from the stream and enqueues it on the RT Main.vi message queue
13) The RT Main.vi message loop opens the XML file and populated the appropriate variables with the configuration options therein.
The user should be able to cancel the dialogue and avoid using a configuration file but I have not delt with that here.
Now for the questions:
1) Is this a logical approach?
2) Are there any suggestions for a better way?
3) Any links to some pre-written code that will allow me to impliment all or part of this with minimum effort (I'm thinking here of the dialogue box bit rather than the network streams and events bit as those structures are extant and have lots of bespoke code already in them)?
Thanks,
James
Solved!
Go to Solution.

Hi Bob,
Thanks for your input. You're right I have used network streams.
I implimented more or less what I said in my original post. It works. My main objective was to keep all the config stuff, and data for the particular target on the target's SDCard. On reflection that did make my life much harder than keeping stuff on the host.
It is more (quite a lot more) involved to keep the config files on the target and send directory info etc. back to the host on demand. If I was to do this again I would probably keep the config files on the host machine and keep them in Dropbox or a Google drive so that if I had more than one host to work from (Work PC, Home PC and Laptop...) I would have all my files with little effort. Still I didn't konw that when I started.
Thanks,
James

Printing or exporting files from remote system running SAP

Hi to everyone,
I am trying to print or save exported data from SAP (in Excel)to a remote system where I am working. SAP is running in a remote server to which I am connected. So far I have only been able to print and save in the remote system (where SAP is running ), but can't do it to my printer/PC. It is probably a simple problem but I can't see an answer.
Thank very much to anyone who can give me a clue.
Antonio

check if printer LP02 or similar is defined on your SAP system. It prints via SAPLPD to your local printer.
To save anything to your local PC - you can use "save to local file" from the report, or WS_DOWNLOAD FM from ABAP.

Remote systems missing--follow up to other post

Now I have some time and I'm installing 2010 and the drivers which install MAX 4.7. This is a follow up to this post here. I am still missing remote systems in the tree. I was going through the steps to fix a corrupted max database and one of the steps is to make a copy of the data directory. Well...When I navigate to the location, the data directory isn't even there. I'm thinking this could be my problem. I'm downloading some drivers to reinstall MAX and see what happens. I don't think it's the drivers DVD because other people at my office have used the same DVDs with no problem. I am going ot contact support tomorrow, but in the mean time any suggestions on the missing data directory?
CLA, LabVIEW Versions 2010-2013
Solved!
Go to Solution.
Attachments:
missing_data.PNG ‏55 KB

In case anyone has this issue now or down the road here is how I resolved it thanks to App Engineers at NI. Check if there is a mxRmCfg.dll in C:\Program Files\National Instruments\MAX. If it is there and you are missing remote systems this is probably your issue. It means MAX is trying to run the dll from this directory which it should not be doing (at least as far as I understand it). Deleting (or just renaming may be safer) the .dll should solve the problem.
Voila
CLA, LabVIEW Versions 2010-2013

RFC login and user creation to remote system

Similar Messages

Maybe you are looking for