Roles doesn't work

when I connect as SYS ,I find the following error:user SYS lack create SESSION privilege.logon denied. I am sure the SYS has been given the connect role and the connect role has been give the create session privilege,so it seems the role doesn't work.I want to know what cause this error,and how I can fix this error. Any answer is welcome. Thank you in advance.
Ti

HI,
Can you please tell me the SP level of GRC 10.0 which you are using because this was issue in SP02 which was fixed in SP03.
Currently there are many issues in GRC 10.0. Most of them are resolved in SP04 (yet to released) and some in SP05 (Next release of GRC 10.0).
Regards
Rajan Arora

Similar Messages

Assigning role to role doesn't work when applying Database security model

I applied Oracle Database security model for BI Publisher.
then I create some roles and users and assigned roles to users in Oracle Database.
i also assigned appropriate folders to each role in BI Publisher.
the users with direct roles worked successfully but i got problem when i assigned roles to a super role, and assigned this role to a super user.
the super user could only access guest folder.
Please help me.
thanks.
Daniel
Edited by: user13344498 on Jul 5, 2010 11:13 PM

Add a Role to a Role:
1. From the Security Center, select Roles and Permissions; this will invoke the
Security Center page. Here you can see the list of existing roles and permissions.
2. Select the Add Roles icon for the Role.
3. Select the desired role from the Available Roles list and use the Move shuttle
button to move it to the Included Roles.
this is from "Oracle® Business Intelligence Publisher User's Guide Release 10.1.3.2 Part No. B40017-01" book, but the security model is BI Publisher Security.

Select Granted By Role Doesn't Work

Oracle 11.1.0.7.0 running on AIX
This is crazy I don't know why it is happening or even how it is happening but when I grant a role to a user they still cannot select from the granted tables & views.
CREATE ROLE RETROMAN_USERS NOT IDENTIFIED
GRANT SELECT ON YBP.DDA_STATUS_CODES TO RETROMAN_USERS
GRANT SELECT ON YBP.DEMAND_DRIVEN_ACTIVITY TO RETROMAN_USERS
GRANT SELECT ON YBP.V_DDA_STATUS_CODES TO RETROMAN_USERS
GRANT SELECT ON YBP.V_DEMAND_DRIVEN_ACTIVITY TO RETROMAN_USERS
GRANT RETROMAN_USERS TO SABEL WITH ADMIN OPTION
GRANT RETROMAN_USERS TO CKING
GRANT RETROMAN_USERS TO FCROWELL
GRANT RETROMAN_USERS TO HCAMPBELL
GRANT RETROMAN_USERS TO LJOHNSON
GRANT RETROMAN_USERS TO RWILLIAMS
GRANT RETROMAN_USERS TO LMONTCALM
When I try to Select * from ybp.Demand_Driven_Activity as hcampbell I get a "table or view does not exist" error. where other users can get results using the same query. Any ideas? I am completely out of them. I am not a DBA and our company doesn't employ a DBA - scary huh. Any help would be greatly appreciated.
Scott

OK, the user cannot select from the table...
$ sqlplus hcampbell@devorcl
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 07:51:33 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> select * from ybp.demand_driven_activity;
select * from ybp.demand_driven_activity
ERROR at line 1:
ORA-00942: table or view does not exist-----
Let's grant the role and verify that the role is assigned and what privileges it has.
oracle@qa:/home/oracle
$ sqlplus sabel@devorcl
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 07:53:21 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> grant retroman_users to hcampbell;
Grant succeeded.
SQL> select * from DBA_ROLE_PRIVS where grantee = 'HCAMPBELL';
GRANTEE                        GRANTED_ROLE                   ADM DEF
HCAMPBELL                      YBPREGUSER                     NO YES
HCAMPBELL                      OOPS                           NO YES
HCAMPBELL                      YBPENDUSER                     NO YES
HCAMPBELL                      RETROMAN_USERS                 NO NO-----
The role does exist (I think) and has the following permissions
SQL> set linesize 132
SQL> Select * from role_tab_privs Where   role = 'RETROMAN_USERS';
ROLE                           OWNER                          TABLE_NAME                     COLUMN_NAME
PRIVILEGE                                GRA
RETROMAN_USERS                 YBP                            DEMAND_DRIVEN_ACTIVITY
SELECT                                   NO
RETROMAN_USERS                 YBP                            V_DEMAND_DRIVEN_ACTIVITY
SELECT                                   NO
RETROMAN_USERS                 YBP                            DDA_STATUS_CODES
SELECT                                   NO
ROLE                           OWNER                          TABLE_NAME                     COLUMN_NAME
PRIVILEGE                                GRA
RETROMAN_USERS                 YBP                            V_DDA_STATUS_CODES
SELECT                                   NO
SQL> exit
Disconnected from Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options-----
sys can't see the role though - but that may be normal...
$ sqlplus sys@devorcl as sysdba
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:30:34 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> Select * from role_tab_privs Where   role = 'RETROMAN_USERS';
no rows selected-----
The user still cannot select from the table
$ sqlplus hcampbell@devorcl
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:39:46 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> select * from ybp.demand_driven_activity;
select * from ybp.demand_driven_activity
ERROR at line 1:
ORA-00942: table or view does not exist-----
let's try to make it a default role....
$ sqlplus sabel@devorcl
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:42:59 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> ALTER USER HCAMPBELL DEFAULT ROLE YBPREGUSER, OOPS, YBPENDUSER, retroman_users;
User altered.
SQL> exit-----
after the user logs out and then back on, now user can access the table.
oracle@qa:/home/oracle
$ sqlplus hcampbell@devorcl
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:47:57 2012
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> Select Count(1) from ybp.demand_driven_activity;
COUNT(1)
    161295If I remove the retroman_users from the default role I can still access the table until I log out and then back in so it must have something to do with default roles. I don't know why I didn't see this before but the other users that were granted the retroman_users role and could access the table had their default role set to ALL. Sorry, I didn't give you all the information that you needed to help me, this might have helped:
CREATE USER HCAMPBELL
IDENTIFIED BY h
DEFAULT TABLESPACE DATASMALL
TEMPORARY TABLESPACE TEMP
PROFILE DEFAULT
ACCOUNT UNLOCK
-- 4 Roles for HCAMPBELL
GRANT YBPREGUSER TO HCAMPBELL
GRANT OOPS TO HCAMPBELL
GRANT YBPENDUSER TO HCAMPBELL
GRANT RETROMAN_USERS TO HCAMPBELL
ALTER USER HCAMPBELL DEFAULT ROLE YBPREGUSER, OOPS, YBPENDUSERI guess I need to read more about Default Roles. Sorry for my belligerent responses.

CREATE ROLE doesn't work in master database

Running the CREATE ROLE statement in master database as server-level principal gives:
Msg 15247, Level 16, State 1, Server NNN, Line 10
User does not have permission to perform this action.
Running the same statement in user database succeeds. Is there a way to create a role in master database in SQL Database?

Hi Martin,
Thanks for reaching out. It is not possible to create roles in the logical master in SQL database. Some more information on user management in SQL database can be found here: https://msdn.microsoft.com/en-us/library/azure/ee336235.aspx
Thanks,
Jan

Worker Role problems (doesn't work without debugging)

Hello,
I upgraded the OS Version up to 3 last week and everything worked OK. But yesterday worker role stopped working. Windows Azure manager showed that service started up OK. I tried to find problem in code and found out that Worker Role works just great during
the debug only.
Here is ServiceDefinition.csdef code:
<?xml version="1.0" encoding="utf-8"?>
<ServiceDefinition name="Workers" xmlns="http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceDefinition" schemaVersion="2013-03.2.0">
<WorkerRole name="EventsProcessor" vmsize="ExtraSmall">
<Startup>
<Task commandLine="startup\regeventsrc.cmd" executionContext="elevated" taskType="simple" /> 
</Startup>
<Imports>
<Import moduleName="RemoteAccess" />
<Import moduleName="RemoteForwarder" />
</Imports>
<LocalResources>
<LocalStorage name="ZipContainer" cleanOnRoleRecycle="true" sizeInMB="12000" />
<LocalStorage name="CrashDumpsContainer" cleanOnRoleRecycle="false" sizeInMB="1024" />
</LocalResources>
</WorkerRole>
</ServiceDefinition>
Can someone please help? What should I check first?
Thanks!

Hi Alex,
Thank you for advice. I copied the exact connection string from the Azure Management Portal and Worker Role started to work.
Old connection string was:
connectionString="Data Source=xxx.database.windows.net;Pooling=false;Initial Catalog={dbName}; User ID={userName}; Password={password};"
The new one is:
connectionString="Server=tcp:xxx.database.windows.net,1433;Database={dbName};User ID={userName}@xxx;Password={password};Trusted_Connection=False;Encrypt=True;Connection Timeout=30;"
Anyway sometimes (very rarely... once in a 2-3 hours) I get next error:
"System.Data.SqlClient.SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL
Server is configured to allow remote connections. (provider: TCP Provider, error: 0 - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed
to respond.) ---> System.ComponentModel.Win32Exception (0x80004005): A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond"
Probably do you have some ideas regarding this?
Thanks a lot
Alex

[SOLVED] network randomly doesn't work after reboot (e100)

Hi
Lately I have some weird issues with network. I shutdown computer during night, so basicly I reboot it at least once per day and every now and then without any pattern network doesn't work at all and so far only solution I have found is to reboot (again).
Before anything else I'm sure it's not hardware problem, since other OS on same computer don't have any issues, neither is router since other devices in network from laptops to mobile phones work flawless.
Relevant info and what I have found so far (not everything is copy/pasted so there may be some typos):
$less rc.conf (network part)
eth1="eth1 192.168.1.242 netmask 255.255.255.0 broadcast 192.168.1.255
INTERFACES=(eth1)
gateway="default gw 192.168.1.1"
ROUTES=(gateway)
$ifconfig
eth1 Link encap:Ethernet HWaddr 00:D0:B7:5A:7A:A9
inet addr:192.168.1.242 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:380 errors:0 dropped:0 overruns:0 frame:0
TX packets:380 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:36154 (35.3 Kb) TX bytes:36154 (35.3 Kb)
$route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
$ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data
From 192.168.1.242 icmp_seq=2 Destination Host Unreachable
So basicly network is dead, can't even ping router, cable connection is detected tho (lights are on). I have tried to restart newtork with /etc/rc.d/network stop/start, nothing. Only clue is dmesg.
$dmesg
Linux version 2.6.30-ARCH (root@T-POWA-LX) (gcc version 4.4.1 (GCC) ) #1 SMP PREEMPT Fri Jul 31 07:30:28 CEST 2009
e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
e100: Copyright(c) 1999-2006 Intel Corporation
e100 0000:03:07.0: PCI INT A -> Link[APC2] -> GSI 17 (level, low) -> IRQ 17
e100 0000:03:07.0: PME# disabled
e100: eth1: e100_probe: addr 0xfdfff000, irq 17, MAC addr 00:d0:b7:5a:7a:a9
e100 0000:03:07.0: firmware: requesting e100/d101m_ucode.bin
ADDRCONF(NETDEV_UP): eth1: link is not ready
modrope -r e100 and then reloading it doesn't help either, but reboot does (once I had to reboot twice tho).
Anyone with more clue and ideas then me, it's getting really annoying, it also kill whole KDE plasma-desktop for couple of minutes before plasmoids find out network is really down and I'm not really fan of morning "gamble". I can't pinpoint some hard date/update when this started to happening because like I said it's random but last couple of months should be quite accurate. Thanks in advance.
EDIT: dmesg when network works:
tilen@pikmin ~]$ dmesg | grep e100
pci 0000:03:07.0: Firmware left e100 interrupts enabled; disabling
e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
e100: Copyright(c) 1999-2006 Intel Corporation
e100 0000:03:07.0: PCI INT A -> Link[APC2] -> GSI 17 (level, low) -> IRQ 17
e100 0000:03:07.0: PME# disabled
e100: eth0: e100_probe: addr 0xfdfff000, irq 17, MAC addr 00:d0:b7:5a:7a:a9
Last edited by NoOrdinary (2009-09-05 09:47:20)

I don't have anything special set at router but I doubt rc.conf play any role. I will try to set it up with dhcp (but I think I have tried that already) if there is any change.
This morning I had to reboot twice, so new kernel didn't help. Fowler, what network card are you using, also e100 (well or some intel)? I dunno, should this be handed to the kernel team? If it will piss me enough one morning I'll just go and buy a new network card, just wanna be sure that will really solve the problem.
UPDATE: OK, this is just silly. I remebered I have acctualy onboard LAN so I edited rc.conf and dived into the dust under my desk to move cable and there I found out it was acctual onboard in use all the time Now this dosen't make much sense to me anymore, when I can't get net up all the stuff in dmesg is e100 related. Anyway, I connected network to e100 and rebooted, suprise, same story. Dmesg reported again link was not ready. I edited rc.conf to
INTERFACES=(eth0 !eth1)
in case this has anything to do with proper timing at assigning whatever needs to be assigned to network cards at boot so I'm sure just 1 card with all info provided get's kicked in at boot. First reboot after that works, it dosen't prove anything yet but at leat it's some kind of progress in recognising proper cause.
UPDATE 2: Nah, still happens. Googling for "no link during initialization" show a lot of familiar problems, almost all on nforce motherboards and mine is nforce too. I just don't get it why this mess seperate PCI network card. In any case it's extremely annoying.
Last edited by NoOrdinary (2009-09-02 11:46:27)

Used PCUI navigation to follow up a new opportunity, but it doesn't work.

Hello,
We faced a authorization problem with PCUI Navigation. We have configured a navigation for following up other opportunity.
If the user has the SAP_ALL and SAP_NEW authorization, the navigation can work. But we changed the user authorization, the navigation doesn't work.
If we used the user at GUI, the user can follow up a new opportunity successfully.
Symptom:
Open an opportunity and click 'Create opportunity'. The EP open a new window for following up a new opportunity. But the new window is blank(If the user has sap_all and sap_new, the new window can show the new opportunity which was created by navigation).
BSP authorization setting:
BSP_APPL Authorization for BSP Applications
Application CRMD_BUS2000111, CRMD_BUS2000111_F4
View for Display in the People *

Assign the Roles to Object type will solve the issue...

Accessing Collaboration Room with Room Link (URL) doesn't work

hi all
i'm trying to access a collaboration room by room link (url) but it doesn't work. the room url is: https://www.sportal.ch:443/irj/index.html?NavigationTarget=CollaborationConnector://portal_content/com.sap.ip.collaboration/Rooms/b0ce78ec-3f30-2910-2184-b171271d4d95/workset&NavTargetAsRoot=true
i have checked the roombackend-properties => they are ok
i have checked the roles and permissions => they are ok
what me surprises: when i open a new browser window and type in the mentioned url, our portal-start-page is displayed but in the content area there is no content displaied. i expected, that when i type in the url, then the authentification-dialogue would appear, but it does not.... (does this url only work if i am already logged in the portal??)
if you have any ideas, how the problem could be solved, please let me know!
thank you for your help.
greetings
flo

hi ingo
thank you for the input. i have now solved the problem, perhaps my solution fits for you too. here it is:
when i use the function "send room-link" the url looks like this:
https://www.sportal.ch:443/irj/index.html?NavigationTarget=CollaborationConnector://portal_content/com.sap.ip.collaboration/Rooms/9020275c-8348-2810-28a6-a8c1ae60e192/workset&NavTargetAsRoot=true
with this url i can not access the collaboration room.
but when i change the url like this:
https://www.sportal.ch/irj/portal?NavigationTarget=ROLES://portal_content/com.sap.ip.collaboration/Rooms/9020275c-8348-2810-28a6-a8c1ae60e192/workset&NavTargetAsRoot=true
now i can access the room (with authentification).
OK, for me the main problem is solved, but can someone perhaps tell me whats the difference between:
NavigationTarget=CollaborationConnector
and
NavigationTarget=ROLES
thank you for your help!
greetings
flo

Sold-to party rol doesn't fit new support message

Hi,
I'm configuring Solution Manager SP17, I work at VAR SAP so I've to manage many customer numbers. Some scenarios are running.
I've a customer with three SAP systems, these SAP systems have been defined at smsy transaction in Sol. Man. VAR successfully. So these systems exists at ib52 transaction too.
From satellite SAP (customer site):
   1.- system->system->status Installation number is 0020225238
   2.- at service.sap.com for this customer this is the installation number that appears for this SAP system.
At Solution Manager VAR SAP(VAR site):
   1.- smsy->systems at the header data tab this installation number appears 0020225238
   2.- ib52 for this SAP system I've defined this system with one entry to the correct client:
              BWP 0020225238 100
   3.- I've filled for this SAP System and the other two SAP systems for this customer partner so I select BPW SAP system->goto->partner.The business partner with function sold-to party has these roles: business partner and sold-to party. At the identification tab it has 3 entries(one per SAP system):
    BWP 0020225238 100 SANTI
If I execute steps to create a support message:
1.- from satellite SAP system(customer site) help->create support message I create and send successfully the support message
2.- from Solution Manager VAR SAP(VAR site) crm_dno_monitor transaction I open the support message just created and :
           - sold-to party field is empty.
(this field is filled successfully to the other two SAP systems for this customer)
          - at transaction data buttton->SAP Attributes tab the installation number that appears is 0120009939 and not 0020225238.
Please could you help me?
Thanks and Regards.
Raul

Hi Sreedhar,
Thanks for your reply.
As I typed at my first description. The role sold-to party is working. This customer has three SAP systems: R/3 development, R/3 productive, BW productive. So when the customer sends a SAP message from his SAP satellite system to our SAP VAR solution manager, the sold-to party rol works only to R/3 development, R/3 productive but doesn't work to BW productive(Netweaver 04).
I've chequed that:
- ib52 transaction the SAP satellite system BW productive has the same installation number that you can view If you logon at the SAP satellite system BW productive->system->status. The client is correct too.
- bp transaction the sold-to party Business Partner has three lines( one per SAP system).
Please could you help me?
Thanks and Regards.
Raul

Delta Download from ISU BP to CRM BP doesn't work

Hi Experts,
We are currently new implementing a CRM7.0 system which is connected to an existing ISU system. We now have an issue about the BP delta download from ISU -> CRM.
Replication Scenario:
ISU BP -> CRM BP, NOT SD Customer -> CRM BP. As ISU is the leading system to create BPs and in ISU a MKK BP will be created first then a SD customer will be generated based on a template. So the change of a BP is via BP transaction for MKK role, not via XD02 SD Customer.
Issue:
The middleware setting is done and initial download from ISU BP -> CRM BP is done and successful. However when I trying to change a BP (change a MKK BP via BP transaction) in ISU, the change is not replicated to CRM (no queues, no BDOCs). It seems the delta download is not triggered at all.
However, I have maintained all the settings based on the ISU Specifics on the Set-Up-and-Load Guide for BP. So the followings are maintained:
- ISU: COM_BUPA_CALL_FU maintained based on the Guide
- CRM: CRMC_BUT_CALL_FU maintained based on the note 757955
- CRM: V_SMOFEVOB maintained based on the Guide
- ISU: BTE table (T-code: BF31) maintained based on the Guide
After setting above, the initial load is working (necessary table like CRMCONSUM, CRMRFCPAR etc. are maintained otherwise the initial download won't successful). However, the delta download from ISU BP (MKK) to CRM BP doesn't work.
The only uncertain thing for me is the setting for ISU : CRMC_BUT_CALL_FU. In the Guide only one sentence saying CRMC_BUT_CALL_FU needs to be maintained both in CRM and ISU and details refer to note 757955. However, the note 757955 only talks about FMs for CRM not for ISU/ECC. So in ISU/ECC the table CRMC_BUT_CALL_FU I activated for the following entries:
BPOUT BUPA 0100000 COM_BUPA_MWX_CREATE_MAIN
X
BPOUT BUPA 1000000 BUPA_OUTBOUND_MAIN
X
BPOUT BUPA 2000000 BUPA_CREATE_CHANGE_POINTER
X
BPOUT BUPA 3000000 BUPA_OUTBOUND_ALE_MAIN
X
BPOUT BUPX 1000000 MDS_BUPA_OUTBOUND
X
CLEAR BUPA 0100000 COM_BUPA_MWX_CLEAR_FLAGS
X
CLEAR BUPA 1000000 BUPA_OUTBOUND_CLEAR_FLAGS
X
CRMIN BUPA 1000000 BUPA_INBOUND_MAIN_CENTRAL
X
CRMIN BUPA 2000000 ABA_FSBP_INBOUND_MAIN
X
CRMOU BUPA 1000000 BUPA_OUTBOUND_BPS_FILL_CENTRAL X
CRMOU BUPA 1000010 ABA_FSBP_OUTBOUND_BPS_FILL
X
CRMOU BUPA 2000000 ABA_FSBP_OUTBOUND_BPS_FILL
X
MERGE BUPA 1000000 MERGE_BUPA_CENTRAL
X
MERGE BUPA 2000000 MERGE_BUPA_FINSERV
X
MERGE BUPR 1000000 MERGE_BUPR_CENTRAL
X
PXYIN BUPA 1000000 BUPA_INBOUND
X
XIIN BUPA 1000000 ABA_BUPA_MAP_PROXY_TO_DDIC
X
XIIN BUPA 2000000 ABA_FSBP_MAP_PROXY_TO_DDIC
X
XIIN BUPA 2100000 ABA_FSBP_MAP_PROXY_TO_DDIC_1   X
XIIN BUPA 3000000 ABA_FSBP_MAP_PROXY_TO_DDIC_1   X
XIIN BUPR 1000000 ABA_BUPR_MAP_PROXY_TO_DDIC
X
XIOUT BUPA 1000000 ABA_BUPA_MAP_DDIC_TO_PROXY
X
XIOUT BUPA 9000000 ABA_FSBP_MAP_DDIC_TO_PROXY
X
XIOUT BUPA 9000010 ABA_FSBP_MAP_DDIC_TO_PROXY_1   X
XIOUT BUPR 1000000 ABA_BUPR_MAP_DDIC_TO_PROXY
X
Not sure if the above setting is correct or not (some of the setting may not necessary, is that will impact the delta download from ISU to CRM)
Also what's the purpose of maintain two tables in ISU/ECC (COM_BUPA_CALL_FU and CRMC_BUT_CALL_FU)?
Also I have read some notes that the ISU BP -> CRM BP delta download is not triggered by above tables, it is triggered by BADI PARTNET_UPDATE, is this true, a bit confused.
I am looking forward a solution from you experts.
Thanks,
Laurence

Any inputs experts?

Exchange Failover - Outlook Doesn't Work with 1 Server

Hi,
Wondering if someone could help.
We have 3 Exchange 2010 servers with all roles installed. All at SP3 RU6. DAG set up between all 3 servers for all mailbox databases. Manual failover is enabled. MB1 holds all copies. Outlook 2010 with all latest updates being
used by end clients.
MB1 - Main Physical Server – All Active Copies – No Issues
MB2 – Secondary Physical server – Passive – Problem Server
MB3 – VM for use in the worst case scenario – Passive – No issues
We simulated MB1 failing. We can get MB2 to take ownership of the databases manually. OWA works fine, mail flow works fine but whenever we open Outlook it either fails to connect and continues to say “Server is unavailable, Retry, Work Offline,
Cancel” or the inbox loads but it loads old mail from a month+ ago (I actually this this may be a cached mode setting that’s being taken from somewhere even though cached mode is disabled) and sits at “Offline”. If I do the “Test E-mail Auto configuration”
then everything passes fine but we can’t get the client to go online at all.
If I fail everything over to MB3 then it all connects up ok and works fine. I stuck MB1 back online with mailboxes being active on MB2 and Outlook pointing to MB1 and it works fine. The only thing that appears to be broken is when Outlook points
to MB2 only.
Thanks

We don't have a CAS array set up. We want the fail over to be fully manual and only fail over to another server when mb1 is in a completely failed state and won't be back up and running withing a set time frame. We can get everything working
on MB3 and only Outlook doesn't work when everything is on MB2. Outlook also doesn't work if databases are on another server and DNS is pointing Outlook to MB2 (again MB3 works fine).

ABAP WebDynpro work item in uwl doesn't work

Hi,
an ABAP WebDynpro by itself works. But using it in a uwl work item doesn't work:
After clicking the button to start the WebDynpro in a uwl work item a browser opens but the site could not be load.
So something is wrong with the url:
http://<host>:<port>/irj/servlet/prt/portal/prteventname/Navigate/prtroot/pcd!3aportal_content!2fevery_user!2fgeneral!2fdefaultDesktop!2fframeworkPages!2fframeworkpage!2fcom.sap.portal.innerpage!2fcom.sap.portal.contentarea?NavigationTarget=ROLES%3A%2F%2Fportal_content%2Fevery_user%2Fgeneral%2Fuwl%2Fcom.sap.netweaver.bc.uwl.uwlLaunchWebdynproABAP&System=T70CLNT100&WebDynproNamespace=sap&WebDynproApplication=zwps_bspobj_Ship_set&DynamicParameter=wi_id%3D000000004020%26WI_ID%3D000000004020&CurrentWindowId=WID1181552609217&NavMode=1
This is the uwl configuration part:
[code]
<ItemType name="uwl.task.webflow.TS97300003.T70CLNT100" connector="WebFlowConnector"
          defaultView="DefaultView" defaultAction="launchWebDynPro" executionMode="default">
      <ItemTypeCriteria systemId="T70CLNT100" externalType="TS97300003" connector="WebFlowConnector"/>
      <Actions>
        <Action name="launchWebDynPro" groupAction="" handler="SAPWebDynproABAPLauncher"
                returnToDetailViewAllowed="yes" launchInNewWindow="yes"
                launchNewWindowFeatures="resizable=yes,scrollbars=yes,status=yes,toolbar=yes,
                                         menubar=yes,location=yes,directories=yes">
          <Properties>
            <Property name="WebDynproApplication" value="zwps_bspobj_Ship_set"/>
            <Property name="newWindowFeatures" value="resizable=yes,scrollbars=yes,status=yes,
                                     toolbar=yes,menubar=yes,location=yes,directories=yes"/>
            <Property name="DynamicParameter" value="WI_ID=${item.externalId}"/>
            <Property name="openInNewWindow" value="yes"/>
            <Property name="WebDynproNamespace" value="sap"/>
            <Property name="display_order_priority" value="5"/>
          </Properties>
          <Descriptions default=""/>
        </Action>
      </Actions>
</ItemType>[/code]
What's wrong? Any idea?
Thanks,
Susanne

Hi,
Your settings seems alright, Can you look at the default trace and UWL log?
U can find UWL log here
\usr\sap\<SID>\JC<instance number>\j2ee\cluster\server0\log\applications\sap.com\uwl
and default trace in \server0\log .. please check the current default trace.
Cheers!!
Ashutosh

Change user's OU with punctuation mark doesn't work by Rename User View

Hi,
I have problem with moving user between OU by Rename User View when punctuation mark in name of OU is used.
I have own WF that assign user to specific OU depending on value of Select component. When value of this component is changed (against previous value) I call Rename View, that assign user to new OU. For OU without punctuation mark Rename View works OK.
After finishing WF with punctuation mark in OU this Error appers:
java.lang.RuntimeException: There is no such object on the server.
But creating new AD account (by role assignment) in OU with punctuation work OK. In select component is rule that replace puctional character in correct form.
Select component:
<Field name='slctOrganizationalUnitUzivatele'>
                <Display class='Select' action='true'>
                    <Property name='title' value='Nastavte organizacni jednotku:'/>
                    <Property name='allowedValues'>
                        <block>
                            <dolist name='zmena'>
                                <invoke name='listResourceObjects' class='com.waveset.ui.FormUtil'>
                                    <invoke class='com.waveset.session.SessionFactory' name='getServerInternalContext' />
                                    <s>OrganizationalUnit</s>
                                    <s>AD</s>
                                    <null/>
                                    <s>false</s>
                                </invoke>
                                 <rule name="RUL nahrada znaku">
                                    <argument name="inputString">
                                        <ref>zmena</ref>
                                    </argument>
                                    <argument name='hledanyRetezec'>
                                        <s>\,</s>
                                    </argument>
                                    <argument name='nahrazovaciRetezec'>
                                        <s>\, </s>
                                    </argument>
                                </rule>
                             </dolist>
                        </block>
                    </Property>
                    <Property name='sorted'>
                        <Boolean>true</Boolean>
                    </Property>
                </Display>
                <Default>
                    <upcase>
                        <ref>user.accounts[AD].ad_container</ref>
                    </upcase>
                </Default>
            </Field>
WF-Rename User
<Activity id='10' name='renameUzivatele'>
        <Action id='0' application='com.waveset.session.WorkflowServices'>
          <Argument name='op' value='checkoutView'/>
          <Argument name='type' value='RenameUser'/>
          <Argument name='id' value='$(user.waveset.accountId)'/>
          <Argument name='authorized' value='true'/>
          <Return from='WF_ACTION_ERROR' to='error'/>
          <Return from='view' to='renameView'/>
        </Action>
        <Action id='1'>
          <expression>
            <block>
              <set name='renameView.accounts[AD].identity'>
                <ref>newDNrecord</ref>
              </set>
              <set name='renameView.resourceAccounts.currentResourceAccounts[AD].identity'>
                <ref>newDNrecord</ref>
              </set>
              <set name='renameView.resourceAccounts.currentResourceAccounts[AD].selected'>
                <s>true</s>
              </set>
              <set name='user.global.OrganizationalUnit'>
                <ref>slctOrganizationalUnitUzivatele</ref>
              </set>
            </block>
          </expression>
        </Action>
        <Action id='2' application='com.waveset.session.WorkflowServices'>
          <Argument name='op' value='checkinView'/>
          <Argument name='view' value='$(renameView)'/>
          <Argument name='authorized' value='true'/>
        </Action>
        <Transition to='nastaveniPristupu-overeni'/>
        <WorkflowEditor x='193' y='343'/>
      </Activity>
<set name='newDNrecord'>
                <concat>
                  <s>CN=</s>
                  <ref>user.global.fullname</ref>
                  <s>,</s>
                  <ref>slctOrganizationalUnitUzivatele</ref>
                </concat>
              </set>Do you have any ideas?
Thanks Petr

Hi,
I discovered following:
- if name of OU in AD is without space (e.g. test,sample) so DN record is test\,sample and user is moved into this OU.
- if name of OU in AD is with space (e.g. test, sample) so DN record is still test\,sample and user isn't moved.
So problem is with empty space. How can I preserve space in DN name? I found something in documentation but I doesn't work for me.
+Special Characters in FieldValues
If you have a field value with a comma (,) or double quote (") character, or you want to preserve leading or trailing spaces, you must embed your field value within a pair of double quotes ("field_value"). You then need to replace double quotes in the field value with two double quote (") characters. For example, "John ""Johnny"" Smith" results in a field value of John "Johnny" Smith. +
(from IDM Business Administrator's Guide, p.77)
Guided this information I put value of slctOrganizationalUnitUzivatele into "". But this didn't work. Is good idea to have space in DN?
Thanks for help.
Petr
Edited by: petrklinkovsky on Sep 10, 2009 5:06 AM

"ignoreRecordsetName" doesn't work in sender file CC

Hi,
I set the Content Conversion Parameters in sender file CC as follow:
Document Name: ZFileDemo
Document NameSpace:http://hand-china.com/mm/po_01
Recordset Structure:Item,1
Recordset Sequence:Ascending
Parameters:
Item.fieldSeparator = ,
Item.fieldNames = ItemNo,Matnr,Text
ignoreRecordsetName = true
The content of csv file is as follow:
1,2,3
4,5,6
But the payload message in SXI_MONITOR as follow:
<?xml version="1.0" encoding="utf-8" ?>
- <ns:ZFileDemo xmlns:ns="http://hand-china.com/mm/po_01">
- <Recordset>
- <Item>
<ItemNo>1</ItemNo>
<Matnr>2</Matnr>
<Text>3</Text>
</Item>
</Recordset>
- <Recordset>
- <Item>
<ItemNo>4</ItemNo>
<Matnr>5</Matnr>
<Text>6</Text>
</Item>
</Recordset>
</ns:ZFileDemo>
Why does "</Recordset>" still exist?
I am confused "ignoreRecordsetName" doesn't work!!
Regards
Ming

Hi,
ignoreRecordsetName
A <Recordset> element is inserted in the XML structure for each recordset structure. This level is not always required, particularly if the recordset only contains one structure definition.
If you set the parameter to true, the <Recordset> element is not inserted.
See the below links to get more details about File Content Conversion,
http://help.sap.com/saphelp_erp2005vp/helpdata/en/2c/181077dd7d6b4ea6a8029b20bf7e55/content.htm
/people/michal.krawczyk2/blog/2004/12/15/how-to-send-a-flat-file-with-fixed-lengths-to-xi-30-using-a-central-file-adapter - FCC
/people/michal.krawczyk2/blog/2004/12/15/how-to-send-a-flat-file-with-fixed-lengths-to-xi-30-using-a-central-file-adapter - FCC
/people/jeyakumar.muthu2/blog/2005/11/29/file-content-conversion-for-unequal-number-of-columns - FCC
/people/anish.abraham2/blog/2005/06/08/content-conversion-patternrandom-content-in-input-file - FCC
/people/harrison.holland5/blog/2006/12/20/xi-configuration-for-mdm-integration--sample-scenario - FCC - MDM
/people/shabarish.vijayakumar/blog/2006/04/03/xi-in-the-role-of-a-ftp - FCC
/people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy - FCC
/people/mickael.huchet/blog/2006/09/18/xipi-how-to-exclude-files-in-a-sender-file-adapter - EOIO - File
Regards
Chilla

Impdp work with system but doesn't work with another user

Hi,
We have troubles with import of transportable tablespace, when i try to import it with system the import is done currectly, when i try to use another user we receive this message :
impdp bmcese/***** directory=TTS_DIR dumpfile=RMCCO_RMC_ANA_STS_ABB_CO121001.dmp TRANSPORT_DATAFILES=/data/TTS/RMCCO_RMC_ANA_STS_ABB_CO121001.dbf logfile=tts_imp_proc.log
ORA-31626: il job non esiste
ORA-31633: impossibile creare la tabella principale "BMCESE.SYS_IMPORT_TRANSPORTABLE_05"
ORA-06512: a "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: a "SYS.KUPV$FT", line 1020
ORA-00959: tablespace 'RMCCO_RMC_UTZ_PP080531' inesistente
this happens only on development server and it work into test server, so i don't think that the problem is in grants(i controlled that are the same and i have tried with DBA grant too and we received the error).
Another strange thing is that tablespace 'RMCCO_RMC_UTZ_PP080531' is not included into the dump that i try to import and it doesn't exist in the database.
Thx
Edited by: user11272630 on 10-ott-2012 8.40

I've extraced the role/privs granted to BMCESE using this query
select granted_role from DBA_ROLE_PRIVS where grantee='BMCESE'
union
select privilege from DBA_SYS_PRIVS where grantee='BMCESE';
Result on Server where the impdp doesn't work:
GRANTED_ROLE
CONNECT
CREATE ANY TABLE
CREATE PROCEDURE
CREATE SESSION
CREATE TABLE
CREATE TABLESPACE
CREATE TRIGGER
CREATE VIEW
DATAPUMP_IMP_FULL_DATABASE
DROP TABLESPACE
EXECUTE_CATALOG_ROLE
EXPORT FULL DATABASE
IMPORT FULL DATABASE
IMP_FULL_DATABASE
QUERY REWRITE
RESOURCE
UNLIMITED TABLESPACE
results on server where the impdp work:
GRANTED_ROLE
CONNECT
CREATE PROCEDURE
EXECUTE_CATALOG_ROLE
IMP_FULL_DATABASE
UNLIMITED TABLESPACE
BMCESE has more grant and privs on the server where the impdp doesn't work.
I've controlled the grant of read, write on the directory.
I've tried to give DBA priv too to the user.
So i don't think in a priv problem, i think that the problem is in the unexistent tablespace reported in the error.
Someone has another suggest to give.
Thx

Roles doesn't work

Similar Messages

Maybe you are looking for