SAP_J2EE_ADMIN, no systems available for user mapping

Hello,
We are using EP 7.0 to run CRM applications (client 100).
We are creating portal users in 001 client of CRM server.
When I try to map users of portal to users of crm through user administration, it says that, "There are no systems available for user mapping for the selected principal".
I discovered that this warning disappears if I give the user has SAP_J2EE_ADMIN role in 001 client. But this time the user has the content adminstrator, user administrator and system administrator tabs as well. I don't want to give administrator rights to everyone.
What can I do?
Any recommendations?

I maintained the permissions like Administrator:None, End User:X, Role Assigner:X.
I removed the J2EE_ADMIN role from the user.
But unfortunately the result did not change. The user can not access the CRM system.
Here is the error:
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/com.sap.pct/specialist/com.sap.pct.crm/com.sap.pct.crm.roles/com.sap.pct.crm.crm_user/com.sap.pct.crm.ckm.home/com.sap.pct.crm.ckm.work/com.sap.pct.crm.act.activities
Component Name : com.sap.portal.appintegrator.sap.BSP
Exception in SAP Application Integrator occured: Cannot retrieve system object for this alias. System Alias: 'SAP_CRM', System ID: 'pcd:portal_content/j2eeadmin/systems/com.arr.SAP_CRM'. User: 'ILKNURY', Reason: Access denied (Object(s): portal_content/j2eeadmin/systems/com.arr.SAP_CRM).
Exception id: 04:32_24/04/07_0038_5660850
See the details for the exception ID in the log file

Similar Messages

No system available for user mapping in create new group.

Hi Experts,
I faced this problem when i create a new group
"There are no systems available for user mapping for the selected principal."
i checked that my server is running well with other groups.
i would just like to ask what determines the "selected principal"? is it because i select the wrong roles or the roles does not need the system?
i'm confused as some previous groups i created works well until this new group, i've tried to create a new 1 but the problem still exsist.
Thanks.

hi,
Define permission to the system that you have created.
right click on hte system that you have ccreated - > in properties dropdown go to permissions -> search the group/ user for which you want to map this system - > and give permission as enduser.
this will make your system accessible while user mapping.
regards,
Sujay

User mapping error: NO systems available for the selected principal

I have a problem related to User mapping. After creating system alias, I mapped my j2ee_admin user successfully. Then I created 15 more users and when I click usermapping for all of them, it is not displaying the system alias. It is giving error "There are no systems available for user mapping for the selected principal"
I cannot understand that when I click connection test, it is successful. The user mapping for j2ee_admin user is working. But when I try to do the same for other users, it is not displaying the system alias and giving me the above error.
Can anybody guide me through the error. I have given "Everyone" role to all the 15 users. Any kind of help will be appreciated and points will be rewarded.

Hello Abdul,
This is a permission problem. Open the permission editor of the system and assign any role/group in the permission editor and select the checkbox corresponding to end-user.
Now assign this role/group to all the users.
It will solve ur problem.
Regards
Deb
[Reward Points for helpful answers]

How can i use exisitng user data(Id, password) for user mapping

Hi All,
For User mapping , we can import user mapping data for many users from user administration. and for each user
we can maintain mapping data in the standard format.
eg:
[User]
uid=user2
$usermapping$:BCE:user=ext_user2
$usermapping$:BCE:mappedpassword=password
i am clear till this point.
this all works if we know the userid and passowrd on the system 'BCE'.the passwords on the system 'BCE', are encrypted . so there is no chance for me to know the passwords.
so how can i use the existed userid/passowrd on the system 'BCE' for the mapped user and mapped password on the portal while doing usermapping.
Thanks in Advance,
Lakshmi

Hi,
I think this should work.
1. Setup SSO with SAP logon tickets first. How to do this is described many places, e.g. http://help.sap.com/saphelp_nw04/helpdata/en/d3/41c8ecb31d11d5993800508b6b8b11/content.htm
This SSO will not work at first, because the username is different in the back-end system. So what you need to do is to get the back-end username into the ticket (don't need a password because that is done by the SAP logon ticket)
2. Create a portal component which uses the usermanagement API to create a usermapping which only consists of the username and a blank password. You can do this manually I think if you have no reference system defined.
IUserMappingService umap =(IUserMappingService)PortalRuntime.getRuntimeResources().getService(IUserMappingService.KEY);
//this is the currently logged in user. You might another user
IUserContext user = request.getUser();
//Get the existing data (think it can be null)
IUserMappingData userMapping=umap.getMappingData(systemAlias, user);
HashMap map = new HashMap();
                         map.put(IUserMappingService.UMAP_KEY_USER, backEndUserName);
//add blank password               map.put(IUserMappingService.UMAP_KEY_PASSWORD, "");
//store the values                    userMapping.storeLogonData(map);
Voila, this should allow you to do SSO using SAP logon tickets, but with another name that you use against the portal. I am uncertain if this will work if you have multiple usermappings in the sap logon ticket
PS since the sap logon ticket is issued at logon time, you need to relogon to get the changes done by the code
Regards
Dagfinn

SPNego for user mapping

Hi All,
How to use SPNego for user mapping?
Please tell me how to configure SPNego for USer Mapping?
Kumar

Update User Mapping ID api
i followed the above thread and wrote the code in a java file as below
IPortalComponentRequest req = (IPortalComponentRequest) this.getRequest();
IUserMappingService umapser = (IUserMappingService)
PortalRuntime.getRuntimeResources().getService(IUserMappingService.KEY);
IUser userid = req.getUser();
IUserMappingData iumdata = umapser.getMappingData ("System Alias", userid);
Map map = new HashMap ();
try {
map.put("user","userid");
map.put("mappedpassword","password");
iumdata.storeLogonData(map);
} catch (Exception e) {response.write(e.getMessage());}
but problem is it is throwing compilation error for IPortalComponentRequest req = (IPortalComponentRequest) this.getRequest();(getReques() cannot be used for the type classname)
please help me in resolving this issue
points will be rewarded for sure.

Where can I find Firefox 7.0 to install? Is there a link maintained where all the firefox releases are available for users

Hello Team,
Is there a link maintained where all the firefox release and its patch are available for users to download & install

You can get Firefox 7 here
* http://releases.mozilla.org/pub/mozilla.org/firefox/releases/7.0.1/
buit its reccomend to use Firefox 8

What is the operating system available for Macbook Dual core Intel processor system

what is the operating system available for Macbook Dual core Intel processor system

Exactly what model? Do you really mean the old MacBook with the dual core processor or do you mean one using a Core 2 Duo processor?
The last OS X that runs on a dual core Mac would be:
Upgrading to Snow Leopard
You can purchase Snow Leopard through the Apple Store: Mac OS X 10.6 Snow Leopard - Apple Store (U.S.). The price is $19.99 plus tax. You will be sent physical media by mail after placing your order.
After you install Snow Leopard you will have to download and install the Mac OS X 10.6.8 Update Combo v1.1 to update Snow Leopard to 10.6.8 and give you access to the App Store. Access to the App Store enables you to download Mountain Lion if your computer meets the requirements.
     Snow Leopard General Requirements
       1. Mac computer with an Intel processor
       2. 1GB of memory
       3. 5GB of available disk space
       4. DVD drive for installation
       5. Some features require a compatible Internet service provider;
           fees may apply.
       6. Some features require Apple’s iCloud services; fees and
           terms apply.

Is Azure File Service available for User who have MSDN subscritpion

is Azure File Service available for User who have MSDN subscritpion

Hi Mohit,
I responded to your other post as well, please see the approach there:
https://social.msdn.microsoft.com/Forums/azure/en-US/f789cbeb-b01b-4cf8-ac97-513340ae7a5c/azure-file-services-not-available-in-preview?forum=windowsazuredata
Thanks,

How to set/get the values thru Wedbynpro coding for User mapping fields

Hi All
In system object we have the user mapping fields like District,city,plant,Salesmanager.
now we want to set/get the values of these usermapping fields of system object thru webdynpro coding...
if anybody have sample codes of the same then it would be great help to me
Thanks in advance
Thanks
Trisha Rani

Hi Kavitha
Thanks for your reply
My requirement is exactly as follows.
1) i have created one portal system object in system administration and also i created usermapping fields in the system object from the usermanagement in system object.
i created the user mapping fields like Plant,SalesManager,District etc.
i also created the system alias name for the same system object
2) Now i came to persoanlize link and mapped the system object to the portal user.
while mapping to the system object we need to enter Mapping userId, Password , once we enter these values and we can also enter the values of usermapping fields which we defined while creating the system object ( for example District,Salesmanager,Plant etc)
once we enter all the values and click on save then these usermapping values to be mapped to the portal user.
3) Now my requirement is , i want to control the usermapping field values thru webdynpro coding for setting/getting the values.
I need sample code of the same.
Please let me know if u need more details on the same.
Thanks
Trisha Rani

Rule based monitors (RZ20) - Show system availability for selected systems

Hi experts,
I'm new with CCMS monitoring and need an advice for rule based monitors.
I want to create three alert monitors (RZ20). One for our developing systems, one for our quality assurance systems and one to monitor our production systems.
For the start, I want to show data in each of this monitor for free space of the filesytems (MTE class: "FilesystemFreeSpace"), for users which are locked out (MTE class "R3SyslogSecurity") and for the availabilty of the ABAP systems (MTE class "Availability_SysPercent_ABAP").
I started to create the monitor for our developing system and got a problem. I started with the rule "CCMS_DEFINE_R3_SYSTEMS" to select our developing systems "HRT", "CRT" and so on. Under this nodes, I defined the mte classes ("CCMS_GET_MTE_BY_CLASS") which needs to be shown: "FilesystemFreeSpace", "R3SyslogSecurity" and "Availability_SysPercent_ABAP".
When I checked the results, I was able to see the free space of the filesystems and whether a user has been locked out. Unfortunately, I recognized that the availability is not shown. Instead there is the message "No MTEs currently available".
I'm aware, the availability cannot be shown on this way, since the agents are part of the central monitoring system and hence i need to choose the central system for "CCMS_DEFINE_R3_SYSTEMS". However I'd like to show the availability separated for each system under "HRT", "CRT" and so on. That means for example, there should me a node "HRT", which contains the free space of the filesystems, whether users are locked out, and the availability for the system.
It's not a problem to get a solution with a static monitor. I simply create a virtual node "HRT" and tick the checkbox under "<central system>, ..., <availability>, <hrt> ..."
However, I'd like to use rule based monitor to keep the effort at a minimum by not ticking thousand of check-boxes when I expand the monitored objects.
I also tried to use the rule "CCMS_GET_AVAILABILITY_FOR_SYSTEM", but it doesn't work and SAP documentations say "This rule is reserved by SAP for later use".
Does anybody know a solution for my problem?
In addition, I've got one more question concerning rule based monitors: If I want to create a monitor for my developing systems, I'll not be able to choose "<all>" for "CCMS_DEFINE_R3_SYSTEMS". Do I need to create "CCMS_DEFINE_R3_SYSTEMS" for each system separately? Or is there another possible way?
Thanks for your help in advance.
Bob
Edited by: Bob Norwich on Oct 17, 2010 12:04 PM
I read something about logical MTE classes: http://help.sap.com/saphelp_nw04s/helpdata/en/31/5462405c910272e10000000a155106/frameset.htm --> Does I need to use this?

Sorry Sean for my very late anwser.
I was very busy in my company.
Yes, I had tried you suggestion but it didn't work for me.
The problem is, that the Agent "CCMSPING" is part of the central monitoring system by definition.
Furthermore I tried to copy the default availabiliy monitor to look how it is definied. It didn't help.
I made the decision to define my monitor differently (an extra monitor for the availability for all system) and replace this temporalily solution when ""CCMS_GET_AVAILABILITY_FOR_SYSTEM" will be available.
The situation is not so bad after all.
Thx for your help. I appreciate it!!
Bob

Sequential read in sm66 - Database size 550GB - system slow for users

Hello,
Currently when we use any standard transactions or custom program, it is going to sequential read in sm66.
We are getting slowness in system due to this issue for users.
Sm66 log:
sapXX01_XXX_00 0 DIA     12873 Running            Yes                  6 XIRFC    ZCL_WM_S Sequential Read MARD
sapXX01_XXX_00 20 BTC     16155 Running            Yes                 15 Zuser1 ZCL_SD_D Sequential Read LTAP
sapXX01_XXX_00 29 SPO     12018 Running            Yes                 12 Zuser1   print 35
sapXX01_XXX_00 30 SPO     12037 Running            Yes                 12 Zuser1   print 35
sapXX01_XXX_00 31 SPO     12041 Running            Yes                 12 SAPSYS   querying
sapXX02_XXX_02 3 DIA     15098 Running            Yes                714 Zuser2 ZCL_IM_B
sapXX02_XXX_02 4 DIA      8158 Running            Yes                 38 Zuser2 RWRPLPRO Sequential Read WRPL
sapXX02_XXX_02 6 DIA      8160 Running            Yes                555 Zuser3 ZCL_IM_B
sapXX03_XXX_03 0 DIA      1969 Running            Yes               2390 Zuser5 SAPLFAGL Sequential Read BSIS
sapXX03_XXX_04 0 BTC     10811 Running            Yes                209 Zuser6   ZCL_SD_D Sequential Read LTA
Database: Maxdb
OS: Linux
I understand that if you create Index on these table ( whichever it shows as sequential read ), it will improve the report performance.
Most of the time, system process shows that sequential read on VBAP, VKPA (sales tables), purchase tables, Finance tables and etc.
If sm66 shows as sequential read for few table, that means that corresponding user will get slowness on getting report/transaction output. I agree on that.
Is there any reason other user will get slowness ie if i run Va03 transaction, WE02 transaction which is not relevant to sm66 process over view.
I appreciate, if you give some recommendations reg. this performance improvement and to avoid this kind of sequential read.
I posted the Same question in DB forum also.
I want to get some more idea from this forum also. That is reason, i posted here again.
Thanks
Praba

Hi Volker,
Thanks for your reply.
We have three application server instance ie 00, 02, 03,   -
04 (enque server)
1) This parameter value on 00 instance ie : rdisp/wp_no_spo - Number of spool work processes
Dflt value - 0
ProfileVa - 1
Current value - 1
Minimum - Nothing
Maximum - 100
2) his parameter value on 02 instance ie : rdisp/wp_no_spo - Number of spool work processes
Dflt value - 0
ProfileVa - 1
Current value - 1
Minimum - Nothing
Maximum - 100
3) his parameter value on 03 instance ie : rdisp/wp_no_spo - Number of spool work processes
Dflt value - 0
ProfileVa - 1
Current value - 1
Minimum - Nothing
Maximum - 100

How do set the system parameter for user defaults?

When we are creating new users they are getting the European default for date format and decimal format. I have found is there is a structure BAPIDEFAUL that contains these values. However, I have not found the configuration for changing these values. Does anyone have the answer to this problem?

Ronald,
with USERS_GEN, users are created with BBP_USER_CREATECP.
This function uses DEFAULTS to pass parameters.
But those parameters are not available in interface or file upload
USERS_GEN will take default values in system parameters:
Set date format and decimal format like in system parameters
data: defaults   type bapidefaul.
clear defaults.
CALL 'C_SAPGPARAM'
       ID 'NAME' FIELD 'zcsa/moddatfm'
       ID 'VALUE' FIELD DEFAULTS-DATFM.
CALL 'C_SAPGPARAM'
       ID 'NAME' FIELD 'zcsa/moddcpfm'
       ID 'VALUE' FIELD DEFAULTS-DCPFM.
So, this is the only way to "customize" it: define system parameters zcsa/moddatfm & zcsa/moddcpfm in RZ10.
Rgds
Christophe

"Always Available off line" menu item not available for user on computer where another does see it. This is on Active Directory Computer

I have a lap top that I want to add files via Always available off line.
When I logon and right click on a folder share I can see the menu item all was available offline. When the user logs on this option is not available. I have turned the feature on and off, rebooted, I have deleted the cache folder but I cannot
see how to get this menu item to show up. It's odd that it shows up for one user but not another on the same computer. I have searched the web and tried the above things and others but cannot seem to resolve this problem. It seems pretty
common and their. This computer is on a domain.
thanks.

Hi,
So as we edited the group policy settings in the default domain policy, the menu item is now available?
And as we are in a domain environment and the settings is configured under the default domain policy, how the domain users behave different from each other? Which someone could see and the other not？
Could we please generate a
GPO report to take a check?
And regarding group policy issue, it is recommended to seek help in the group policy forum, experts there may share some insights:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP
Best regards
Michael Shao
TechNet Community Support

Migrating a two ssd macbook pro to newer model (1ssd for system, 1ssd for user home folder)

I want to migrate / transfer the two fast SSDs I have now in an end 2008 macbook pro into a newer mid 2012 macbook pro that is empty and could not find any good instructions on how to do such a move. Both are running the latest version of Mavericks.
On one SSD (265 gig) is the system and applications and on the other 1TB SSD in the optical drive slot are the user accounts - except one safety user account with admin priviledges on the system SSD.
My understanding is that it is not recommended to just swap the system drive from the old macbook to the newer one since there might be complications with drivers etc building up.
My current guess for the best process is to
1. migrate with migration assistant the system from the current SSD to the new slower spinning hard drive on the new macbook pro.
2. swap the two (putting the SSD from the old one to the new macbook, starting in recovery mode and installing mavericks and migrating the migrated system back to the new macbook pro)
3. put the 1TB user folder SSD into the optibay on the new macbook pro, create a new user account with the same name as the one used on the old macbook pro and it should find the user directory with the same name on the second harddrive, ask me if I want to use it and do so ...
Is this was the geniouses out here would recommend also?
My secondary problem is that I have already 5 computers associated to my apple ID and thus am wondering how I can do this transfer without running into problems caused by this - all hints and tips most welcome.

I have done what you suggested. However, I have to disagree with you about the 'third party' comment. Although those minor issues were on there which I picked up on shortly afterwards, they were easily removed. It hasn't CHANGED the symptoms I described about my mac. Both items are removed (growl only tends to make your mac 'lag' and that's not the problem I'm having)
I am still having all the above issues, regardless of my mac being fully minus third party items. This mac hasn't had any heavy use, or had many applications installed on it ect, there is really no reason for it to be failing. I'd understand if it was old, but it's literally only just passed being 3 years old.
If you can provide any more help that would be appreciated, thank you!

Hiding System etc. for users?

Hello,
As suggested at various places, I've created an administrator account for system maintainance and installations and a user account for daily use. Now, what I find odd, is that you still can see all folders (different users) and other stuff (system for example) even though you have no priviledges for those. Also, Software Update seems to function when logged in as a user, even though you are not supposed to install software as a user.
I couldn't find anything related in the Mac help files, so I hope you know why this is, and is there a setting somewhere so those folders don't show up? I like to keep things clean and tidy

I do documentaries...broadcast ones. And no network has cleared DSLRs for use as cameras. In fact, many actually but them on their DO NOT USE list, along with HDV cameras.
Anyway, I have a tutorial that covers pretty much every tapeless format. Going from when you first put the card from the camera into the computer. Backup, import...labelling. And it mentions Canon DSLR.
Tapeless Workflow for FCP 7 Tutorial
Shane

SAP_J2EE_ADMIN, no systems available for user mapping

Similar Messages

Maybe you are looking for