Runtime Update of Communication Channel Password

I posted this question in the Security Forum as well as here since I was not sure which was appropriate.
We have a new application, Password Vault, where the company would like to change all passwords on a daily basis. Password Vault has a Java API that will allow me to obtain the password for a specific account. What I would like to know is whether there is a way in PI to create a module that will be called by the Communication Channle when it requires the password which will aloow me to dynamically pass the password to the Communication Channel.
In short, I would like to step in front of all runtime password requests and push the current password to the Communication Channel.
Is this possible and/or where can I go to find more information?

Ok, we have conceded that until SAP makes a change that allows some sort of hook into the Communication Channel so that we can handle the password we will not be able to implement a "pull" type of change.
We have code to extract and log Configuration Scenarios, Communications Channels and Interface Determinations. We also have some code modeled after what Bill Li has done to create a Change List and modify the Communication Channel.
Mostly we need to be able to set a Communication Channel Inactive/Active and change the password.
The part we are struggling with is the role of the Restricted Communication Channel and how to get the information from and existing Communication Channel into the Restricted Communication Channel which is the only thing we can add to the Change List.
It seems like there should be some relatively simple way to do the following:
1. Retrieve a Communication Channel using the API
2. Build a Restricted Communication Channel object with all of the information in the Communication Channel...we know the password is always returned as null and can handle that issue.
3. Modify whatever value we want modified
4. Create a Change List
5. Add the Restricted Communication Channel to the Change List
6. Activate the Change List.
We have no real problems with any of the above except for 2.. How do we build a complete Restricted Communication Channel from the retrieved Communication Channel?

Similar Messages

  • Runtime Communication Channel Password

    Hopefully, I am posting this in the correct Forum.
    We have a new application, Password Vault, where the company would like to change all passwords on a daily basis. Password Vault has a Java API that will allow me to obtain the password for a specific account. What I would like to know is whether there is a way in PI to create a module that will be called by the Communication Channle when it requires the password which will aloow me to dynamically pass the password to the Communication Channel.
    In short, I would like to step in front of all runtime password requests and push the current password to the Communication Channel.
    Is this possible and/or where can I go to find more information?

    >
    Larry Martin wrote:
    > I should have said that we will change all passwords used by PI...and some other applications...on a daily basis.
    >
    > Actually, it is a good idea because the passwords are managed by Password Vault so we would never have to worry about a password in PI. Everytime a Communication Channel needed a passwrod it would request it from Password Vault. We would not care if they changed them once a day or once a minute since we would no longer have any responsibility for managing passwords...we would simply use whatever password was the current one.
    >
    > It greatly improves our protection because the passwords would all be random, all have 15 characters (where possible) and would change so often that stealing a password would be of little value.
    >
    > The rules would not apply to user passwords in AD, in databases or to logon to PI or SAP because, as you mention, noone could keep track of a password that changes daily.
    Well, an even better approach is not to use passwords at all - but use SNC or X.509 Client Certificates (SSL) for authentication.
    As long as you are using passwords, there is the risk of password locks that will result from exceeding the number of permissible failed password logon attempts. Such failing attempts might not necessarily indicate a hacking attempt but could also result from a failure of your password provisioning solution. Especially in the case of inter-system communication the number of logon attempts per (small) time unit is fairly high. So, even if you run only shortly out of sync (regarding passwords) you might suffer from the resulting locks. So, better do not use passwords if it's avoidable.

  • Unsolicted update in communication channel

    I received a counter update in my communications channel for the following post: https://forums.oracle.com/thread/2569282
    I'm neither tracking or following the discussion or space and I have not been participating in that discussion. I also have not accepted (ignored) any friend requests. Thought I just let you know in case this might indicate a more general issue or bug.

    A very successful person once told me "Stop doing it if it is no fun any more."  This was after he sold his stable of Ferraris.
    There does not have to be a strong link between quality software and large organizations.  In fact, there might be some negative correlation.  There has to be a strong sales organization and strong marketing.   There is little feedback from the technically astute users to the decision makers.
    Linkedin, Facebook, and yes, Google all put out some garbage.  I think the "new development paradigms" turn programmers into amateurs.  (The google groups UI has some obvious goofs - favorited groups don't get bolded to indicate new messages until after you look at the group, the reply editor quoting adds a ridiculous amount of blank lines, search totally borked, and on and on.)  There's also a shininess factor - when something is new and shiny, people may give good feedback, developers crank out great stuff, but once the money's been shoveled in, bloat happens, as well as a push to mediocrity.

  • DNS Alias not Updating on Communication Channel

    Hi,
    We use DNS Aliases when connecting to some of our servers. One interface connects to a server using FTP with alias FTPServer.
    This FTPServer had a site switch over the weekend and the DNS Alias did not update in the communication channel. I had to ping the DNS Alias and put the server name into the CC to get the FTP to work.
    Is there any way of getting PI 7.1 to refresh the DNS?
    Thanks,
    Gareth

    Check out this intersting blog on aliasing.
    [Controlling DNS caching in the Java Virtual Machine (i.e. J2EE WAS)|Controlling DNS caching in the Java Virtual Machine (i.e. J2EE WAS)]
    I hope it might help
    Regards
    Ramesh

  • Issue with updation of communication  channel

    Hi Experts,
    I have configured a   JMS  to Proxy scenario in XI system. i  have changed  the  "Queue name" parameter   in  sender communication channel for the JMS adapter. the new Queue name is not  being used by the interface.
    when i monitor the messages  for the  this interface, i found that system is still using the Old  Queue name.
    can you please suggest  a way to resolve this issue.
    -Kaushik

    Hi,
    I am not sure if this resolves the issue.
    Stop the channel using RWB>Adapter Engine>Communication Channel Monitoring
    Identify your JMS sender Communication channel and stop it.
    Go to ID and reedit this channel and activate.
    Comeback to previous Communication Channel Monitoring check the status of activated Communication Channel (start it if it is still in stopped mode)
    - Gujjeti.

  • How to receive alert mails when communication channel fails

    Hi everybody,
    Today there were in the "Communication Channel Monitoring" of the Runtime Workbench some Communication Channels in a "red" status and I would like to know if it is possible to receive per mail any alerts about a failing communication channel?
    In SXMB_MONI the error is the following:
    <SAP:AdditionalText>com.sap.aii.af.ra.ms.api.DeliveryException: RfcAdapter: receiver channel has static errors: can not instantiate RfcPool caused by: com.sap.aii.af.rfc.RfcAdapterException: error initializing RfcClientPool:com.sap.aii.af.rfc.core.repository.RfcRepositoryException: can not connect to destination system due to: com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to message server host failed Connect_PM TYPE=B MSHOST=ECPOPR1.corp GROUP=PRODUCCION_SANTANDER R3NAME=PR1 MSSERV=sapmsPR1 PCS=1 ERROR partner not reached (host ECPOPR1.corp, service sapmsPR1) TIME Mon Apr 20 03:25:16 2009 RELEASE 640 COMPONENT NI (network interface) VERSION 37 RC -10 MODULE nixxi_r_mt.cpp LINE 8688 DETAIL NiPConnect2 SYSTEM CALL SiPeekPendConn ERRNO 79 ERRNO TEXT A remote host refused an attempted connect operation. COUNTER 1</SAP:AdditionalText>
    Usually, I receive mail alerts when messages failed since I have CCMS configurated but in the CCMS I don´t see any entries for this kind of errors with a Communication Channel...
    Thanks in advance,
    Regards,
    Olivier

    Hi!
    You can receive Alerts even though you are configured CCBPM. Through Control Step you can throw alerts but only difference between PI7.1 and XI is in 7.1 you can easily create Alert categoy in ESR itself at java stack but in XI you can't create it in Java stack you need to create this ALert category though ALRTCATDEF   t code  in ABAP Stack even though in 7.1 you created in Java Stack it will be reflecting in ABAP Stack.
    Next thing is later you need to Configure ALert Rules in RWB and in ABAP Stack at Alert Category you need to Add your XI SAP ID;s at FIxed Receipients and before adding this Ask your Basis people to link your company mail ID or any mail ID with SAP ID so that you can receive Alerts both in RWB ALert Inbox as well as your Mail Server.
    Since the above experts given diff blogs you can easily configure...
    I hope u understand the flow....right ?
    Regards::
    Amar Srinivas Eli

  • File Structure - Sender Communication Channel

    Hi All,
    My Sender flat file structure is below like this
    Filed1|Field2|Field3|Field4|Field5|Field6
    Filed1|Field2|Field3|Field4|Field5|Field6
    Filed1|Field2|Field3|Field4|Field5|Field6
    Filed1|Field2|Field3|Field4|Field5|Field6
    Filed1|Field2|Field3|Field4|Field5|Field6
    Filed1|Field2|Field3|Field4|Field5|Field6
    I did the Sender Communication Channel configuration  - Content Conversion
    Document Name : XXX
    Document NameSpace: XXXX
    Recordset Structure: MT_Test,*
    Recordset Sequence: Ascending
    Key field Type: String Case-Sensitvie
    MT_Test.fieldNames: Filed1,Field2,Field3,Field4,Field5,Field6
    MT_Test.fieldSeparator: '|'
    MT_Test.additionalLastFileds: ignore
    MT_Test.endSeparator : 'nl'
    ignoreRecordsetName: true.
    But its pick the file, In SXMB_Moni show Currect...
    But in Runtime workbench, in Communication Channel moni, it show below like this,
    <?xml version="1.0" encoding="UTF-8" ?>
    - <ns0:MT_Test xmlns:ns0="http://XXXXX">
    <JOBS />
    </ns0:MT_Test>
    What is the Issue, where i missed some thing, In message mapping, its correct..
    Thanks.
    SR

    SR,
    I am still little confused with your below statement.
    But its pick the file, In SXMB_Moni show Currect...
    But in Runtime workbench, in Communication Channel moni, it show below like this,
    >
    > <?xml version="1.0" encoding="UTF-8" ?>
    > - <ns0:MT_Test xmlns:ns0="http://XXXXX">
    > <JOBS />
    > </ns0:MT_Test>
    You mean to say that in MONI, the mapping output is fine, but when you check the output at RWB -> CC Monitoring for the Sender Channel, then you get the above mentioned XML?
    This means that there is nothing wrong with your source CC settings. If the entry in RWB -> Sender CC is wrong, your MONI entry will never be right. So, this is really weird.
    What is the source structure that you have defined in DT?
    Regards,
    Neetesh
    Edited by: Neetesh Raj on Sep 29, 2009 2:31 PM

  • XI communication channel missing in communication channel monitoring

    Hello partners,
    I have a problem with communication channel monitoring.
    I have defined a communication channel of Adapter Type = "XI" in the integration directory.
    I have also sent messages successfully via this communication channel.
    But the communication does not appear in the list of available channels in the selection list of the communication channel monitoring.
    Can someone tell me how I can get monitoring info of an "XI" communication channel?

    Hi,
    From SP17, you have a new feature
    http://help.sap.com/saphelp_nw04/helpdata/en/44/46d1a56faf52d3e10000000a1553f6/content.htm
    <i>The Runtime Workbench has the following new functions:
    &#9679; Component monitoring: Communication channel monitor
    In component monitoring, you can use the new communication channel monitor to call information about the status of your communication channels and the corresponding adapters. You can also administrate your communication channels.
    Unlike the adapter monitor, the communication channel monitor also provides current runtime information about the communication channels of individual adapters, as long as they are registered for communication channel monitoring.
    To monitor adapters that do not provide runtime information to communication channel monitoring, continue to use the adapter monitor.</i>
    Regards,
    Bhavesh

  • Communication channels are not exist in Runtime workbench

    Hi gurus,
    I did one file to file scenario. I have two problems.
    1. I have created communication channel in the configuration step. I have activated my scenerio too. But when i check the communication channels in the runtime workbench im unable to see my communication channel. My communication channel doesnotexist.
    2. How can i create the source directory and target directory
    Kindly help me solve this problem.
    Regards,
    Ramalakshmi.G

    Hi
    Cache refresh : SXI_CACHE
    Creating Source / Target Directory : U can use folder within XI landscape for (NFS)
    If u r using FTP create folder in the FTP Server and use those : but select FTP as transport protocol
    u will be asked for ftp ip / username / password
    rgds
    srini

  • Communication channels error during update

    Hello,
    All the Communication channels of the XI QA system are showing a status "Error during Update"  Checked status of components in Runtime Workbench --> Component Monitoring. Red Alert on Adapter Engine The details of the Communication channel error below is:
    com.sap.aii.af.service.administration.api.AdminException: Unable to
    retrieve channel runtime status: EventException:
    com.sap.engine.frame.cluster.message.PartialResponseException: One or
    more of the destinations did not return a response. Response status:
    [303228750-RTOE,303228751-RTOE,303981451-OK].
    Has anyone encountered this before? Do you have any suggestions on where to look at to investigate on the cause of the problem?
    Thanks in advance.
    Regina

    Hi Regina,
    ask your basis guys to see the startup log of XI QA...see if there is any error in it.. if there is any error in it, then restart your XI server.......go to SMICM....see if the ICM monitor is running fine.......If ICM is not running fine, then go to Administration->j2ee server->restart->yes and restart your j2ee engine of your XI server......
    Thanks,
    Rajeev Gupta

  • Time stamp is not getting updated for File Adapter in communication channel

    Hi All,
    Since yesterday, I am observing that the time stamp of communication channel for File adapter is not gettingupdated some times.
    I had to stop and start the communication channel to update the time stamp.Please let me know if anyone has come across such issue or any useful notes on this.I could not find any related notes on Market place.
    Regards,
    Dinakar

    Hi,
    This is happening only with one communication channel which is sender in derection.Any reason why it is happening like this?since the restart of the communication channel it is getting update now.I really do not know how to delete/create the communication channels as this was done our PI consultants.Pls guide me.
    Regards,
    Dinakar

  • Communication channel: error during update

    Hi,gurus:
    We are doring a soap2rfc scenario.
    After reactivating relavant object in ID,I found that the status of sender communication channel was "error during update" in RWB.Have you ever dealed with the problem?Any help will be appreciated!

    hii
    ask your basis guys to see the startup log of XI server...see if there is any error in it.. if there is any error in it, then restart your XI server.......go to SMICM....see if the ICM monitor is running fine.......If ICM is not running fine, then go to Administration->j2ee server->restart->yes and restart your j2ee engine of your XI server......
    VisualAdmin-Server-services- Tracelogs. Also can restart your adapter engine and can you exact error you can getin RWB.
    Regards

  • Password visibility in communication channel

    Dear experts,
    is it possible to show the passwords stored in the communication channels?
    As the XI access is limited to employees who have the right to see the access data for the other systems, it would be useful to see the passwords in the communication channels instead of ******.
    Best regards,
    David

    is it possible to show the passwords stored in the communication channels?
    Where you want to show the passwords?
    You can write ABAP program to retrieve the password as it is stored in the PI DB. I am not too sure if you can use the Directory API to retrieve passwords, although I have used it to retrieve configuration data from the channels but never tried for passwords

  • Communication channel doesn't show in runtime workbench

    Hi,
    In Integration monitoring Runtime Workbench does not show communication channel list in communication channel monitoring. It shows empty but we have created lot of communication channels. This is problem in XI adapter or any other problem? Please can anyone tell the solution for that.
    Regards
    Vijay

    Hi,
    If ur searching for Xi and Receiver IDOC adapter in RWB.U cant find them in RWB then run in IS.try to check ur sender adapter and u can find the complete flow of it.
    Thanks and Regards,
    Phani Kumar

  • Party communication channel for multiple stores with multiple user id and passwords in sap pi

    Hi Exeperts,
    I have a scenario proxy to SAOP . where i am sending some information from my stores to third party company   with single user id and password in communication channel.
    but requirement  is changed now  i have 20 stores  with 20 user id and password for communication channel.how can i achieve this requirement?
    Can i create 20 communication channels  for 20 stores  or can handle through the party based communication ?
    Please  help us achieve the requirement.
    Regards
    Ravinder.s

    Hi,
    In the SOAP Receiver adapter, you can only store 10 userid/password combinations via Authorization Keys. These are called via Dynamic Configuration via technical name TAuthKey. In your case, for it to work, you need:
    1. 2 business components/2 SOAP receiver communication channels.
    2. 1 receiver determination with xPath for username to determine correct business component
    3. 1 interface determination
    4. 2 receiver agreements (one for each cc)
    Hope this helps,
    Mark

Maybe you are looking for

  • Create a .jar with a database in mysql????

    Hi !!!! I create a script in .java, and I have none error. My script use a database, to read and to save some data. I create a Manifest.mf Manifest-Version: 1.0 Main-Class: AutoPlanning Class-Path: DriverJava/mm.mysql-2.04/mysql.jar What are the comm

  • Behaviour of thread in multicore processor

    hiii i want to know how thread behave in the multicore processor. wt i know is that at a time only one thread is running in case of single processor. but wt happen if i hv multicore processor means can 2 threads run at a time in multicore proccessor.

  • Basic Authentication with Web Service

    Hello, I am running S1AS7 on window XP. I have deployed the sample/jaxrpc/simple with basic authentication enabled. I have also changed to Client.java to set the USERNAME and PASSWORD (ie: stub._setProperty(javax.xml.rpc.Stub.USERNAME_PROPERTY, "j2ee

  • 10.5.8 mirror face G4 won't reboot.

    I've had some recent issues with this computer that has caused me to reset PRAM and even while plugging in the power cord and pushing the button at the same time, the computer sounds like it wants to start then stops after 1-2 seconds it stops.  Any

  • After installing adobe there is no size Need help!

    Specify your operating system (including 32bit or 64bit); Operating system :window vista home perium(6.0.Build 6002) System manufacturer: gigabyte technology co.ltd Ststem model: G31m_es2L Processor:intel core 2 duo cpu [email protected] 2GB Ram dire