SAP Crypto SNC PSE SSO from AIX daemon
Summary
We're trying to setup SNC with the SAP Crypto library on AIX, but we're getting inconsistent SSO access to the PSE depending on whether we run from the command line or from a daemon process that runs with the exact same user account. Put differently, SNC connectivity works from the command line and fails when run from the daemon (both from the same machine and same user).
Environment
We have only one [NIS] user account on the AIX client machine and the
sapgenpse seclogin -l
indicates that there is only one SSO mapping performed and it's the correct one for that user as the JCO demo client VeriClient can connect without errors using trusted system SNC (EXTIDTYPE and EXTIDDATA).
Initial assessment
The problem seems to be that it's the PSE SSO check that fails after monitoring the two processes using truss.
When run from the JCO client, it's easy to see it opening cred_v2, reading it and continuing on to the PSE file. The daemon however, after attaching truss to that process, we can see that it opens cred_v2, reads it and closes immediately and then proceeds to open dev_rfc.trc and writes the following error:
Error
Unable to connect to SAP BW server. Connect to SAP gateway failed
Connect_PM GWHOST=host.domain.com, GWSERV=sapgw01, ASHOST=host.domain.com, SYSNR=01
LOCATION CPIC (TCP/IP) on local host
ERROR SNCERR_GSSAPI
An operation failed at the GSS-API level
sec_avail="false"
TIME Fri Feb 22 10:06:07 2008
RELEASE 640
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxx_mt.c
DETAIL SncInit
COUNTER 2
We saw this on Windows as well and the solution there was to either change the service to run under the NT AUTHORITY\SYSTEM account and make a corresponding PSE association with SYSTEM, like so:
sapgenpse seclogin -p <mypse> -O SYSTEM
or, keep the service to run under the domain account and add the fully qualified domain user name to the PSE SSO, like so:
sapgenpse seclogin -p <mypse> -O "DOMAIN\Username"
Question
Back to AIX though, does anyone know why a daemon process that runs under the same user and has the same environment settings as when on the console would fail the PSE SSO check. Could it be related to the unix user not being a local host user?
Does the SAP crypto library assume a different name (some sort of FQUN) when running as a daemon and NIS'd user. I know it sounds very far-fetched, but I can't otherwise justify why it would simply error out after reading the cred_v2 file when all else appear equal.
Many thanks,
/Henrik
Heard back from some great guys at Secude and I thought I should share the finding that led to the resolution of this problem.
Setting the CPIC_TRACE=3 environment variable, generated a trace with enough detail that it was possible, even easy, to discern which user was being used to access the PSE.
In particular the following line was of interest:
GSS-API(min): No credentials found for this name (not logged on) (USER=user)
For the record, there is no such account with name user either locally or in our NIS, and naturally ps was making no references to such an account in the process list. Nonetheless, after
sapgenpse seclogin -p <mypse> -O user
I could access the PSE from the daemon process.
Without fully understanding the rationale for this behaviour, my thanks go out to the folks at Secude.
/Henrik
Similar Messages
-
SSO from Portal EP 6 SP14 to SAP R/3 PRD System.
I have installed Poryal EP 6 SP14 with SID name as PRD.
We have SAP R/3 also with the SID name as PRD.
After the installation of the Portal we were testing SSO with SAP R/3 PRD after I imported certificate to sap R/3 PRD using STRUSTSSO2.
SSO is not working.
When I validate the certificate in sap R/3 PRD using SSO2 it gives following error.
Three red dots followed by following text.
This is the Certificate of the issuing system for logon ticket. But not the corresponding system.
I tried all option and it did not work.
I also installed SAP Crypto libraries. Is there any thing I need to do special when I install SAP Crypto libraries.
We have the same setup working in DEV, UTS & QAS environments. I am puzzled.
I was also suspecting the name of the Portal matching with SAP R/3 name. But the clients are different any way.
Portal PRD client is 000.
SAP R/3 PRD client is 600.
My understanding is that combination should be unique.
Please help me. This is impacting our project.Hello Portland,
please verify the PSE using transaction PSEMAINT in R/3.
Then come back with the results. Also have a look to this:
perhaps there are some configuration issues missing.
http://help.sap.com/saphelp_nw2004s/helpdata/en/8d/903d41b77ba52fe10000000a155106/frameset.htm
Wolfgang -
SSO from Microsoft wabsite to SAP Portal
Hi
My client wants SSO from .net based Microsoft website to SAP Portals. Requirement is that when customer enters the website e.g. www.mysite.com , he will be automatically gain access (SSO) to SAP Portal .
How it can be done ?
Please help
Thanks in advanceHi Ananda,
This link answers your query.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/interoperability/dotnet/_web%20services%20and%20a2a%20interoperability%20center/sample%20application%3a%20sso%20with%20a%20.net-based%20web%20service%20client%20using%20sap%20logon%20tickets.pdf
Reward points if handy!
Regards,
Sandeep Tudumu -
SSO from Microsoft ISA to SAP enterprise Portal
Hi Gurus,
Our vendors access the Internal network using MS-ISA as proxy.The first point of authentication is MS-ISA where the Vendor needs to give his User id and Password.After that he hits the Internal Portal and is prompted for a Login again.Is there a way to set up SSO from MS-ISA to SAP EP7.0 so that there is no need for second Logon.
Thanks in Advance!The easiest, and common way to solve this, l but not the only way is to use ISA as a proxy and use the fact that the ID of the authenticated user can be stored in an http header variable (e.g. REMOTE_USER). This HTTP header variable can then be used by the back-end SAP system (internal portal) to authenticate the user and issue an SSO2 ticket so that the authentication only needs to occur first time they access a page on the SAP system.
The use of HTTP Header variables in SAP J2ee engine is widely documented on SDN and in SAP help library.
Thanks,
Tim -
Hi.
We need SSO from Non-SAP portal to EP.
The Non-SAP Portal has publish Form-based authentification.
I mean userid&password set to URL.
Then the EP can generate SAP Logon ticket to backend system?
regards,How to Enable Single Sign-on with Non-SAP Web Application
I have very good material coollected for the same implement this.
http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a7b5ba90-0201-0010-4dbc-8f999dcd2798
Cheers!!
SJ. -
SAP Printer migration from AIX to windows
Dear Experts,
We migrated our ECC from AIX to Windows.
We want to migrate printers from AIX to windows.
Do we have to create queues from scratch in SPAD?
Can we use existing queues in SPAD?
Please guide what all steps are required.
Your help will be highly appreciated!
Thanks,
HarryHi Hary,
For windows environment you need to change the spool server hostname in SPAD and activate all the relevant printers.
Please check whether you had any network printers configured on AIX host. You can use command
smitty spooler or
lpstat -W -p<queuename>
If there are any spoolers configured for SAP system, you need to recreate them on windows.
Hope this helps.
Regards,
Deepak Kori -
Difference - ORDERS05 sent from SAP to Supplier and SAP to SNC to supplier
Hi Friends,
Want to know the Difference between two scenario - detail level analysis,
1. ORDERS05 IDoc (Purchase Order) sent directly from SAP to Supplier.
2. ORDERS05 IDoc (Purchase Order) sent from SAP to SNC and then to Supplier.
Is there any difference based on technical or functional level, are there fields provided by the Idoc transfer different in both the cases, why exactly SNC is used at 2nd place - only for the central place for Supplier to have access to all the details and as a interface for supplier to deal with the requirement from customer or there are some other benefits of it.
Mainly need to know Difference between the Purchase order sent by both the scenario to supplier.
Any details on the same will be highly appreciated.
Regards,
Nitin PatilHi Guangwei,
Unfortunaly I cannot use the wizard because the services that I'm mapping are not available on a SAP server, they are in a complex C# class. The proxies I'm generating make these class methods available for SAP users.
So I'm making a generator that acts like the wizard, it builds code so that persons can access it.
About the offset, shouldn't this be offset = offset + length of last parameter?
The first parameter is a string with a length = 20, so the offset of the next parameter (in this case a float) will be 20, right? The size of the F type if 8, right?
I used your wizard to create a proxy for a BAPI that has a float parameter in one of the used tables, and I noticed that it had an extra attribute Decimals = 16, I added this attribute but I've got no improvement.
(I also tried to put a offset = 24 with no good results) -
SSO from non-SAP J2EE to NW04 ABAP WebService
Hello,
I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
I must stress that username/password is not a solution.
Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
Best regards,
Thomas Mouritsen>
Thomas Mouritsen wrote:
> Hello,
>
> I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
>
> I must stress that username/password is not a solution.
>
> Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
>
> Best regards,
> Thomas Mouritsen
Well, the best solution would be using message-based authentication (WS-Security) - either "X.509 Token" (digitally signed message) or "SAML (1.1) Token". Unfortenately you are using an older ABAP system where this feature is not available.
Especially regarding Web Services it is definetly worth to consider upgrading to NWAS 7.0 Enhancement Pack 1 (or at least: NWAS 7.0 with SP14 or higher).
But it also depends on the capabilities of "your" J2EE server. Does it support WS-Security and SAML Tokens? Can it servce as SAML Source Site?
Transport-level security (e.g. SSL with X.509 client certificates) will not help in your scenario (system-to-system calls). It would only be an option if the WS Consumer is an User Agent (-> SSL client represents a single user); only then X.509 client certificates can be used for SSO.
Best regards, Wolfgang -
SSO from Solution Manager to Wily Enterprise Manager issue
Hi,
We are facing problem in SSO from Solution Manager to Wily Enterprise Manager. We have done the configuration as per the Wily Enterprise Guide- "Introscope Version 8 Installation Guide For SAP" Page 38.
Our Solution Manager system is running on AIX platform and Wily Enterprise Manager is on Windows 2008.
This is what we are trying
SOLMAN Production Client --> SOLMAN_WORKCENTER --> INTROSCOPE WORKSTATION --> this opens a new browser page and from there we click on Start Introscope -->
Result --> SSO doesn't work, still we get login window.
Introscope Enterprise Manager logs says -->
9/12/11 10:47:17 PM BST [WARN] [Manager] Single sign on failed: No SAP single sign on ticket was found in the request header.
Note: Another Solution Manager system in our landscape (on windows 2008 platform) is connected to same Wily Enterprise Manager (windows 2008) and from this solution manager SSO to Wily Enterprise Manager is working.
Please help me with your expertise to solve this problem.
Best Regards
DavinderHello Singh,
Could you check if you have maintained these parameters in instacne profile ?
From SCN post -> http://scn.sap.com/thread/969538
Hi Hector,
To configure SSO as per initial setup guide, please check your profile parameters in your Solution Manager as below:
You have set up SSO, see also:
SAP Note 817529: Checking the SSO Configuration
Installation Guide and Security Guide for SAP Solution Manager
Create the following profile parameters in the instance profile:
login/create_sso2_ticket = 2
login/accept_sso2_ticket = 1
icm/host_name_full = fully qualified server name
This parameter must be attributed to the fully qualified server name (for example wdfd002568.wdf.sap). The name must contain at least two periods. See also SAP Note 434918.
Hope this helps,
Regards,
-Rohan
BR,
kamil -
SSO from Web Application to EP
Hi,
We have a requirement where we have to provide SSO from some web application to Portal (EP6 SP15).
This web application will be having link to portal on its pages.
User store for Web Application and Portal is different.
This Web Application can be accessed from Internet.
We have not yet decided about accessing Portal from internet.
Is there any solution to this? Is this doable??
I have looked at thread
SSO from .Net application to SAP Portal
can anyone provide more information??
Thanks in advanceHi Santosh,
there is not much to explain. It your web app side, you must have some matching table between webAppUser and the portal users and their passwords, like:
webAppUser1 portalUserA xy56123
webAppUser2 portalUserB g6324s3
Your own "integration" checks which user is logged on, takes the portal user name and password and calls the portal with the parameters "j_user" and "j_password" (and "login_submit=true"); for example via the client and a form where these values are put in and the target is requested per POST. And that's it. For the form (including the pwd) would be send to the client from your webApp server, you definitely should use https at least, as already stated.
Hope it helps
Detlev -
SSO from portal to Java based web application not happening
Hi,
We are trying to configure SSO from SAP Enterprise portal with Java based
web application(Solaris on SPARC 64 bit).
Then we downloaded library files for "Solaris on SPARC 64 bit" from
service market place from the path "Support Packages and Patches"
Additional Components" SAPSSOEXT".
We are successful in sending the portal side cookie to the application.
But while loading the library files we get the following error
INFO | jvm 1 | 2009/04/13 04:47:00 | java.lang.UnsatisfiedLinkError:
/usr/local/blackboard/apps/tomcat/lib/libsapssoext.so: ld.so.1: java:
fatal: /usr/local/blackboard/apps/tomcat/lib/libsapssoext.so: wrong ELF
class: ELFCLASS64 (Possible cause: endianness mismatch)
Can you please suggest us what went wrong in this whole process.
But when i tried with the 32 bit library files i was able to load libsapssoext.so file but when I
tried to initialize libsapsecu.so i got the below message
java.lang.Exception: MySapInitialize failed: rc= 14
Also do we require to take"SAPSECULIB" from Support Packages and Patches" ...>Additional Components" ...>SAPSECULIB" ...>SAPSECULIB 5.4 for this SSO activity.
Please get back on this ASAP as we are nearing the golive date.
regards
Bharathhi,
am facing similar issue... i.e.
java.lang.Exception: MySapInitialize failed: rc= 14
at com.mysap.sso.SSO2Ticket.init(Native Method)
at com.mysap.sso.SSO2Ticket.<clinit>(SSO2Ticket.java:27)
at org.apache.jsp.index_jsp._jspService(index_jsp.java:92)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:390)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:619)
static beendet.
java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0
CustomeSSO: Object is null.
pls. help me in resolving it.
rgds,
santosh malavade -
Issue with Memory in SAP(R/3 3.1I )/OS (AIX 5.2)
Hi
<p>
We have problem with the memory settings in SAP(R/3 3.1I )/OS (AIX 5.2). One of the customizing ABAP program failing at background but works fine when we run with same variant in forgeground.
</p>
<p>
Below are the current parameters values in system
</p>
em/initial_size_MB 1024 <br>
ztta/roll_first 1024<br>
ztta/roll_area 7000064<br>
rdisp/ROLL_SHM 6528<br>
rdisp/ROLL_MAXFS 23040<br>
rdisp/PG_SHM 5120<br>
rdisp/PG_MAXFS 34560<br>
abap/heap_area_dia 188743680<br>
abap/heap_area_nondia 400556032<br>
abap/heap_area_total 838860800<br>
abap/heaplimit 52428800<br>
abap/swap_reserve 20971520<br>
ztta/roll_extension 200068300<br>
em/blocksize_KB 1024<br>
em/stat_log_size_MB 40<br>
em/stat_log_timeout 600<br>
ipc/shm_psize_01 -10<br>
ipc/shm_psize_02 -40<br>
ipc/shm_psize_03 -10<br>
ipc/shm_psize_04 -10<br>
ipc/shm_psize_06 -40<br>
ipc/shm_psize_07 -10<br>
ipc/shm_psize_08 -10<br>
ipc/shm_psize_09 -10<br>
ipc/shm_psize_10 276000000<br>
ipc/shm_psize_31 -10<br>
ipc/shm_psize_33 -10<br>
ipc/shm_psize_34 -10<br>
ipc/shm_psize_40 688000000<br>
ipc/shm_psize_51 -10<br>
ipc/shm_psize_52 -10<br>
ipc/shm_psize_54 -10<br>
<p>
I have checked at os level with below command, Its shows there is problem at ipc/shm_psize_10 :276000000
ipc/shm_psize_40 : 688000000 but the current values are higher then what the below recomands. Can you plz suggest me the correct values for the above parameters. If any problems with above parameters.
</P>
<p>
witco-12:ncpadm 1> sappfpar check pf=NCP_DVEBMGS00_WITCO-12
</p>
<p><p>sapparam(2): fopen("NCP_DVEBMGS00_WITCO-12","r"): No such file or directory</p>
<p>No Profile used.</p>
<p>sapparam: SAPSYSTEMNAME neither in Profile nor in Commandline</p>
<p>================================================================================
==<p/> <p>Checking profile:</p>
<p>================================================================================</p>
<p>
***ERROR: Size of shared memory pool 10 too small</p>
<p>================================================================================</p>
SOLUTION: Increase size of shared memory pool 10<br>
with parameter: ipc/shm_psize_10 =36000000<br>
***ERROR: Size of shared memory pool 40 too small
<p>================================================================================</p>
SOLUTION: Increase size of shared memory pool 40<br>
with parameter: ipc/shm_psize_40 =50000000<br>
Shared memory disposition overview<br>
<p>================================================================================</p>
Shared memory pools<br>
Key: 10 Pool<br>
Size configured.....: 12000000 ( 11.4 MB)<br>
Size min. estimated.: 31988070 ( 30.5 MB)<br>
Advised Size........: 36000000 ( 34.3 MB)<br>
Key: 40 Pool for database buffers<br>
Size configured.....: 14250000 ( 13.6 MB)<br>
Size min. estimated.: 47166184 ( 45.0 MB)<br>
Advised Size........: 50000000 ( 47.7 MB)<br>
Shared memories inside of pool 10<br>
Key: 1 Size: 2000 ( 0.0 MB) System administration<br>
Key: 3 Size: 13100000 ( 12.5 MB) Disp. communication areas<br>
Key: 4 Size: 100000 ( 0.1 MB) statistic area<br>
Key: 7 Size: 14838 ( 0.0 MB) Update task administration<br>
Key: 11 Size: 500000 ( 0.5 MB) Factory calender buffer<br>
Key: 12 Size: 120000 ( 0.1 MB) TemSe Char-Code convert Buf.<br>
Key: 13 Size: 500000 ( 0.5 MB) Alert Area<br>
Key: 14 Size: 4400000 ( 4.2 MB) Presentation buffer<br>
Key: 16 Size: 22400 ( 0.0 MB) Semaphore activity monitoring<br>
Key: 17 Size: 65636 ( 0.1 MB) Roll administration<br>
Key: 18 Size: 65636 ( 0.1 MB) Paging adminitration<br>
Key: 19 Size: 6000000 ( 5.7 MB) Table-buffer<br>
Key: 31 Size: 1806000 ( 1.7 MB) Dispatcher request queue<br>
Key: 33 Size: 2048000 ( 2.0 MB) Table buffer, part.buffering<br>
Key: 51 Size: 3200000 ( 3.1 MB) Extended memory admin.<br>
Key: 52 Size: 20000 ( 0.0 MB) Message Server buffer<br>
Key: 54 Size: 16384 ( 0.0 MB) Export/Import buffer<br>
<br>
Shared memories inside of pool 40<br>
Key: 2 Size: 961296 ( 0.9 MB) Disp. administration tables<br>
Key: 6 Size: 26112000 ( 24.9 MB) ABAP program buffer<br>
Key: 41 Size: 6010000 ( 5.7 MB) DB statistics buffer<br>
Key: 42 Size: 596968 ( 0.6 MB) DB TTAB buffer<br>
Key: 43 Size: 3898344 ( 3.7 MB) DB FTAB buffer<br>
Key: 44 Size: 1850344 ( 1.8 MB) DB IREC buffer<br>
Key: 45 Size: 1338344 ( 1.3 MB) DB short nametab buffer<br>
Key: 46 Size: 20480 ( 0.0 MB) DB sync table<br>
Key: 47 Size: 3072000 ( 2.9 MB) DB CUA buffer<br>
Key: 48 Size: 300000 ( 0.3 MB) Number range buffer<br>
Key: 49 Size: 3000000 ( 2.9 MB) Spool admin (SpoolWP+DiaWP)<br>
<br>
Shared memories outside of pools<br>
Key: 1002 Size: 400000 ( 0.4 MB) Performance monitoring V01.0<br>
Key: 58900100 Size: 4096 ( 0.0 MB) SCSA area<br>
Nr of operating system shared memory segments: 4<br>
Shared memory resource requirements estimated<br>
================================================================<br>
Nr of shared memory descriptors required for<br>
Extended Memory Management (unnamed mapped file).: 1<br>
<br>
Total Nr of shared segments required.....: 5<br>
System-imposed number of shared memories.: 11<br>
Shared memory segment size required min..: 36000000 ( 34.3 MB)<br>
System-imposed maximum segment size......: 3489660928 (3328.0 MB)<br>
R/3-imposed maximum segment size.........: 2147483647 (2048.0 MB)<br>
<br>
Swap space requirements estimated<br>
================================================<br>
Shared memory....................: 86.2 MB<br>
..in pool 10 11.4 MB, 266% used !!<br>
..in pool 40 13.6 MB, 330% used !!<br>
..not in pool 0.4 MB<br>
Processes........................: 30.9 MB<br>
Extended Memory .................: 128.0 MB<br>
<br>
Total, minimum requirement.......: 245.1 MB<br>
Process local heaps, worst case..: 762.9 MB<br>
Total, worst case requirement....: 1008.1 MB<br>
<br>
Errors detected..................: 2<br>
Warnings detected................: 0<br>
</p>
Edited by: Sambireddy Authu on Jan 19, 2011 1:47 PM
Edited by: Sambireddy Authu on Jan 19, 2011 1:49 PMHi APR,<br>
I have checked sm21, St22 and dev_wp<no> file at OS level but I am not finding the exact error .<br>
Tue Jan 18 15:15:29 2011<br>
A WP has reached abap/heaplimit = 52428800 bytes<br>
Tue Jan 18 15:15:37 2011<br>
M -
C-STACK -
<br>
NONAME at 0x103804cc<br>
NONAME at 0x103806e4<br>
NONAME at 0x1046a02c<br>
Signal 0 in M -
<br>
M ***LOG Q0E=> DpSigGenHandler, signal ( 4) [dpuxtool 0501]<br>
M ThSigHandler: signal (step 4)<br>
M Modeinfo for User T17/M0<br>
M tm state = 2<br>
M uid = 18<br>
M term type = 0x0<br>
M display = 0x0<br>
M cpic_no = 0<br>
M cpic_idx = -1<br>
M usr = >GONUGRA <<br>
M terminal = > <<br>
M client = >088<<br>
M convid = > <<br>
M appc_tm_conv_idx = -1<br>
M imode = 2<br>
M mode state = 0x42<br>
M th_errno = 0<br>
M async_receives = 0<br>
M cpic_receive = 0<br>
M em handle = 4<br>
M roll state = 2<br>
M abap state = 2<br>
M em state = 3<br>
M eg state = 1<br>
M spa state = 3<br>
M enq state = 0<br>
M next hook = T-1/U-1/M255<br>
M master hook = T-1/U-1/M255<br>
M slave hook = T-1/U-1/M255<br>
M debug_tid = -1<br>
M mode type = 0x1<br><br>
M debug = 0<br>
M tcode = > <<br>
M client convid = > <<br>
M server convid = > <<br>
M lock = 0<br>
M max enq infos = 0<br>
M act enq infos = 0<br>
M
M *****************************************************************************<br>
M *<br>
M * LOCATION SAP-Server witco-10_NCQ_00 on host witco-10 (wp 17)<br>
M * ERROR ThSigHandler: signal<br>
M *
M * TIME Tue Jan 18 15:15:37 2011<br>
M * RELEASE 31I<br>
M * COMPONENT Taskhandler<br>
M * VERSION 1<br>
M * RC 11<br>
M * MODULE thxxhead.c<br>
M * LINE 7209<br>
M * COUNTER 103<br>
M *
M *****************************************************************************<br>
M
M ***LOG R68=> ThIRollBack, roll back () [thxxhead 9123]<br>
M ***LOG R68=> ThIRollBack, roll back () [thxxhead 9123]<br>
X <ES> RecoverAll<br><br>
X <ES> RecoverFreeList<br>
X <ES> RecoverAll<br><br>
X <ES> RecoverFreeList<br>
A<br>
A ** RABAX: could not save part LEV_SN_DATA_ENV of dump.<br>
A<br>
A Tue Jan 18 15:15:38 2011<br>
A<br>
A ** RABAX: could not save part LEV_SN_ITABS of dump.<br>
M ***LOG Q02=> wp_halt, WPStop (Workproc17 60272) [dpuxtool 0773]<br>
<br>
trc file: "dev_w17", trc level: 1, release: "31I"<br>
<br>
*<br>
ACTIVE TRACE LEVEL 1<br>
ACTIVE TRACE COMPONENTS all, M<br>
*<br>
M ***LOG Q01=> tskh_init, WPStart (Workproc17 2 19746) [thxxhead 0898]<br>
M calling db_connect ...<br>
B Try to connect as default user<br>
B Using SQL-Net V2 with tnsname = 'NCQ'<br>
B No TNS_ADMIN in environment<br>
B Setting TNS_ADMIN to '/usr/sap/trans' (profile-parameter DIR_TRANS)<br>
B Got 'NCQ' for SID from profile-parameter 'rsdb/oracle_sid'<br>
B Connecting via TNS_ADMIN=/usr/sap/trans, tnsname=NCQ<br>
B Got NLS_LANG=AMERICAN_AMERICA.US7ASCII from environment<br>
B<br>
B Tue Jan 18 15:15:40 2011<br>
B Now I'm connected to ORACLE<br>
B Database instance NCQ is running on witco-10 with ORACLE version 8.1.7.4.0<br>
M db_connect o.k.<br>
X <ES> client 17 initializing ....<br>
X ES initialized.<br><br>
A Attached to PXA (address 63026e00, size 621972496)<br>
S frontend print server enabled<br>
S Form-Textpool enabled (TSP06T has 4 fields)<br>
S OMS support enabled (TSPLOMS has 13 fields, TSPROMS has 8 field)<br>
M ThCheckPrevUser: clean previous user T17/U18/M0<br>
M Modeinfo for User T17/M0<br>
M tm state = 2<br>
M uid = 18<br>
M term type = 0x0<br>
M display = 0x0<br>
M cpic_no = 0<br>
M cpic_idx = -1<br>
M usr = >GONUGRA <<br>
M terminal = > <<br>
M client = >088<<br>
M convid = > <<br>
M appc_tm_conv_idx = -1<br>
M imode = 2<br>
M mode state = 0x42<br>
M th_errno = 11<br>
M async_receives = 0<br>
M cpic_receive = 0<br>
M em handle = 4<br>
M roll state = 2<br>
M abap state = 2<br>
M em state = 3<br>
M eg state = 1<br>
M spa state = 3<br>
M enq state = 0<br>
M next hook = T-1/U-1/M255<br>
M master hook = T-1/U-1/M255<br>
M slave hook = T-1/U-1/M255<br>
M debug_tid = -1<br>
M mode type = 0x1<br>
M debug = 0<br>
M tcode = > <<br>
M client convid = > <<br>
M server convid = > <<br>
M lock = 0<br>
M max enq infos = 0<br>
M act enq infos = 0<br>
M ***LOG R47=> ThResFree, delete (001023) [thxxmode 0780]<br>
B
B Tue Jan 18 15:22:09 2011<br>
B dbtran INFO (initialize_tran):<br>
B maxblocking_factor = 25,<br>
B minblocking_factor = 10,<br>
B maxin_blocking_factor = 254,<br>
B minin_blocking_factor = 10,<br>
B preferunion_all = 0,<br>
B preferunion_for_views = 0,<br>
B preferin_itab_opt = 0,<br>
B preferfix_blocking = 0,<br>
B usehints = 0,<br>
B optgele_to_between = 0,<br>
B convafter_aggregat = 0,<br>
B allowNULL_for_agg = 0,<br>
B rownumfor_count = 1<br> -
DMS Migration from AIX to windows
Dear All,
We are in process of migrating of SAP landscape from AIX to windows.
We have idea of migrating ECC and BI from AIX to windows. But we are confuse, how to migrate SAP DMS from AIX to windows.
Need you suggestion how to proceed futhure for moving DMS from AIX to windows.
Thanks
AnilHi,
1) Does oracle support this kind of migration?Yes.
2) Is this achievable, without involving any functional consultants? You do not need any functional consultants for this migration.
3) Can anyone help with some metalink notes or document on this migration?Please see these documents.
Note: 369693.1 - Using Oracle Applications with a Split Configuration Database Tier on Oracle 10g Release 2
Note: 304489.1 - Using Oracle Applications with a Split Configuration Database Tier on Oracle 9i Release 2
4) Is it a good idea to move from AIX to windows?Windows? Hmmm :)
Regards,
Hussein -
SAP crypto Library for PI 7.1
Hi Experts,
Could you please tell me, from where we can get SAP crypto Library and how to do the installation for PI 7.1?
If already installed then where to check it?
Please share your suggestions.
Thanks & Regards
SaraHi,
>As far as I know we can get the crypto library in the market place http://sevice.sap.com/swdc
>Here you got to download you will find sap crypto library software, Just download from there.
When you click on the link, you get this message :
>The software products offered here for downloading are subject to export control regulation in >Germany as the country of origin and import regulation of your own country. SAP may not yet >have a corresponding export license for your user / company. Please contact the contract >department of your local SAP company. Please note that to download the SAP Cryptographic >Software from the SAP Service Marketplace, you need a customer user-id.
Olivier -
Run SGEN in linux while Importing transports from AIX app serevrs
Hi
We have multiple AIX and Linux app servers for SAP NW 2004s/SCM 5.0 systems. We completed SGEN in AIX app servers. We need to import more than 300 transports. Can we run SGEN on Linux app servers (we will remove LINUX app servers from SMLG to prevent user logon from LINUX app servers) while we importing transports from AIX app servers? Will it be any impact with REPOSRC/REPOLOAD or Object locking?
Thanks
DilipYes We do run SGEN both servers. and it takes double the time. My question is can we run SGEN on Linux while importing transports using AIX app servers. So this way we can gain sometime durinng our Mock Cutover timeline.
Maybe you are looking for
-
Print Size different than what is on screen
I use Elements 9 and print to an Epson 7900, when I have an image 12 1/2" x 18" the actual print size is coming out 12 1/4" x18 any suggestions, It's getting really frustrating......
-
Is this normal in 'Normal Redundancy' ?
GI version: 11.2.0.4 (3-Node RAC) OS : Oracle Linux 6.4 Storage from EMC Symmetrix VMAX I created a diskgroup with normal redundancy as shown below. 10 LUNs of 500GB each = 5000GB CREATE DISKGROUP DATA_DG1 NORMAL REDUNDANCY DISK 'ORCL:DATA_D1', 'ORCL
-
Hey all I have made a few custom JS scripts that modify default behavior of a few RoboHelp functions, this works nicely however I have to manually include the JS file on every page. So my question is this; how do I programmatically append my script t
-
Please help me to format my laptop hp pavilion dv6 Windows 7 Home premium 64 bit?
Please help me to format my laptop hp pavilion dv6 Windows 7 Home premium 64 bit?
-
My tower is an inferno of shut downs. usually after a few minutes more when I try and use Adobe apps (photo shop CS5 and Bridge). I have reinstalled all adobe software. all updates are current. Running OS 10.6.8 I have pulled the Ram cards for a few