Secure communication R/3 to XI

Hi
We want to secure the communication from SAP R/3 to XI, what do we use? SNC or SSL? Are both possible?
We are running SAP R/3 4.7 ext.2 and XI 3.0.
We have set up an ALE link from SAP R/3 to XI.
Comments are welcome.
Thanks in advance.
-Kenneth

Hi,
Applications based on SAP WEB AS version 6.20 or higher can communiate with the XI in the native XI-SOAP format via proxies. All other applications, including "legacy" SAP systems (those on the Basis releases lower than version 6.20), communicate with the XI via Adapters.
ABAP Proxy Scenarios:
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
--Archana

Similar Messages

Can't get Google CAL to work with iCAL "Server with a secure communication unavailable"

I can't add my google account to iCal...
Error message:
"Server with a secure communication unavailable"
"Your calendar acct isn't on a server that can receive your calendar information securely.."
I have had this work just fine in the past, had to remove my accounts a while back, decided to add them back, and this error keeps popping up...
Can anyone help??
Googled and Searched this forum with no success. Found some suggestions but nothing worked.
Thanks,

I have used the CalDAV option from the pop list and the server option is : https://www.google.com/calendar/dav/[email protected]/user , replace with your email the underlined
I've found this here .

Server with secure communication unavailable?

When I try to sync my iCal with my Gmail account, iCal gives me an error that says "Server with secure communication unavailable"
My accounts were linked just fine before and this just started up one day.
Any thoughts?

I get the same error except when I try to add my MobileMe account. I just upgraded my Air with Lion 10.7.2. Anyone know how to pull my MobileMe calendars back onto Lion?

Setup crypto for secure communication with other switches

What kind of code can be used to setup crypto for secure communication with other switches.

ok but is there any special code i need to write if i need to create a crypto secure communication between some particular switches.

Secure Communication between SharePoint and SQL

What are the options of securing the communication between the SharePoint Server and SQL Server?
Is the Kerberos one of the options? Any instructions on how to set it up?

Kerberos isn't a way of securing communication. It is a way to authenticate.
If you want to communicate securely then you need to use something like IPSec, see here for a guide:
http://technet.microsoft.com/en-us/library/ms189067%28v=sql.105%29.aspx
Have a look here for guidance on how to harden SQL for SharePoint:
http://technet.microsoft.com/en-us/library/ff607733%28v=office.15%29.aspx

2: error while reading configuration for secure communication

Hello,
Getting the error while opening sxmb_ifr
2: error while reading configuration for secure communication
Please suggest

Check the business system defined for your XI/PI in SLD --> Integration tab and check the URL
The URL should be http://<PI host>: <ABAPport>/sap/xi/engine?type=entry
Hope this helps
Edited by: William Lee on Nov 26, 2009 12:32 AM

Error "server with secure communication unavailable" when adding iCloud account to iCal

I have set up iCloud and activated the Calendars option, but can see iCloud in iCal. Whenever I try to manually add an iCloud account from the iCal preferences I get an error "Server with secure communication unavailable" and it won't add the iCloud account.
Does anybody have a soluton for this issue?

Hi I think I have tried this correctly but it just doesn't work for me I am replacing with:
https://www.google.com/calendar/dav/[email protected]/user//www.google.com/calendar/dav/[email protected]/user
my company email address and I have tried with /user at the end and without and am not using gmail but still no go, I have just upgraded to Air and its driving me crackers that this no longer works.
Any other suggestions welcome :/

Enable Secure communication for RFC destinations by using sm59 transaction

Dear friends,
We would like to enable secure communications for RFC destinations by using the sm59 transaction in our systems.
We need to do this manually, by changing the internal communication settings in a way they can communicate securely.
Any idea or advice on the way it can be done ?
We need to take each RFC, manually check it and secure it.
Thanks in advance,
Jordan

In SM59 open up a RFC destination and go to Logon & Security. There you can enable Trusted relashionship and activate status of secure protocol.
And yes you have to do it manually for the desired RFC's

Best practices for securing communication to internet based SCCM clients ?

What type of SSL certs does the community think should be used to secure traffic from internet based SCCM clients ? should 3rd party SSL certs be used ? When doing an inventory for example of the clients configuration in order to run reports
later how the data be protected during transit ?

From a technical perspective, it doesn't matter where the certs come from as there is no difference whatsoever. A cert is a cert is a cert. The certs are *not* what provide the protection, they simply enable the use of SSL to protect the data in transit
and also provide an authentication mechanism.
From a logistics and cost perspective though, there is a huge difference. You may not be aware, but *every* client in IBCM requires its own unique client authentication certificate. This will get very expensive very quickly and is a recurring cost because
certs expire (most commercial cert vendors rarely offer certs valid for more than 3 years). Also, deploying certs from a 3rd party is not a trivial endeavor -- you more less run into chicken and egg issues here. With an internal Microsoft PKI, if designed
properly, there is zero recurring cost and deployment to internal systems is trivial. There is still certainly some cost and overhead involved, but it is dwarfed by that that comes with using with a third party CA for IBCM certs.
Jason | http://blog.configmgrftw.com | @jasonsandys

LDAP and Security Communications

Hello everybody !
we're using SunOne DirSer 5.2 and we're thinking to restrict security policies. Our LDAP accept bind connections and uid/pwd are transmitted clearly on the net. We would like to code this info.
Sorry for question but I'm a novice...
Is there a simple way to enable LDAP SSL communication WITHOUT certificates installation ( server+clients ) ??
If I choose to install certificate on server only, must I store clear password inside ldap tree ( DIGEST-MD5 force to store clear pwd in ldap tree ) ??
Thank you very much,
Silvio

Hello everybody !
we're using SunOne DirSer 5.2 and we're thinking to
restrict security policies. Our LDAP accept bind
connections and uid/pwd are transmitted clearly on
the net. We would like to code this info.
orry for question but I'm a novice...
Is there a simple way to enable LDAP SSL
communication WITHOUT certificates installation (
server+clients ) ??No there is no way - you need to have a server certificate installed!!
There are dozens of free tools (openSSL, ...) which can be used to generate such certificate. Of course, you may also obtain/buy one from an official CA.
There is an excellent and extensive documentation about that topic available online @
http://docs.sun.com/source/816-6698-10/ssl.html (Sun Dir Server Admin Guide Implementing Security)
and
http://docs.sun.com/source/816-6704-10/ssl.html (Using SSL and TLS with Sun ONE Servers)
So if you have some spare time - go read it!
If I choose to install certificate on server only,
must I store clear password inside ldap tree (
DIGEST-MD5 force to store clear pwd in ldap tree )
??Which password do you mean???
By default, user (BIND) passwords are stored according to your passwordStorageScheme setting of the global password policy (dn: cn=Password Policy,cn=config), which is SSHA. So they are stored hashed by default!
>
Thank you very much,
Silvio

Is it the right way for a secure communication?

Hi,
i'm trying to implement secure comunication between sockets.
At the moment i have an object Message that has a member object "content" that is the information to transmit.
I use the socket.writeObject method to send the Message object.
Once receiver get the Message, use getContent() to retrieve the information.
I encrypt content with prv key of sender and public key of receiver (RSA). Receiver then use his prv key and the sender pub key.
The comunication works.
Now i wish to put the digital signature verification too. But i can't get the benefits of using it. I mean, if i try to modify some byte of the encrypted content, when receiver try to decrypt it, it already throws errors...
Plus, if i decide to implement it, should i put it inside the content? or setting it in another member object of Message would do the job too? Moreover, should the sign be encrypted with sender prv and receiver pub keys?
I read articles and implementation, but they are all quite different and i'm quite lost.
Any help would be appreciated. Thanks

SSL uses RSA. You are trying to re-invent the SSL wheel and would do better to use SSL because it's security has been fully analysed. If you really do need to re-invent SSL then Google for the SSL/TLS specification so you can see how it should be done. Be aware - making the communication secure without using SSL is not trivial.

Secure Communication between SAP R/3 and SAP portal(WAS Java)

Hi All,
We have a requirement where client says ,there needs to be a SSL tunnel established between SAP R/3 and Portal(through ITS) to access R/3 through portal
Do we have to use SSL for that or SNC?I heard SNC is a mechanism which have to be used here since it uses DIAG protocol to connect but not Http.Is it true?Kindly give some more ideas on this.
Other thing is to do this they need to open a port between for using Firewall.Can you guide which SAP port has to be open for this connection?
Thanks In Advance
Regards
Rani A

Hi Rani,
what the ITS Admin is, is explained in the docs to the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/28611e0bd26493e10000000a1553f7/frameset.htm">ITS Admin Tool</a>. This also includes how to access it.
Usually specifiying the ABAP backend is done by maintaining the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2b67fe369b060ae10000000a155369/frameset.htm">Global Service File Parameters</a>.
The <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2aa8081a3a060ae10000000a155369/frameset.htm">SNC configuration</a> is part of the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2a95a61a3a060ae10000000a155369/frameset.htm">Security Configuration</a> and also done in the ADM instance of the ITS.
Regards,
Patrick

Question: Securing Communications in Web Services: A Tutorial

Hi all,
I have been following this tutorial:
http://developers.sun.com/prodtech/identserver/reference/techart/secure-ws.html
And it was a pissed-off experience. I have only spent 5 mins on it and I am already stuck.
Anyway, when I try to deploy the StockServer project, I get the following error:
am-init:
am-deploy:
/home/bwoo/Creator/Projects/webservicessecurity/samples/StockServer/nbproject/am-deploy.xml:46: Could not create task or type of type: amdeploy.
Ant could not find the task or a class this task relies upon.
This is common and has a number of causes; the usual
solutions are to read the manual pages then download and
install needed JAR files, or fix the build file:
- You have misspelt 'amdeploy'.
Fix: check your spelling.
- The task needs an external JAR file to execute
and this is not found at the right place in the classpath.
Fix: check the documentation for dependencies.
Fix: declare the task.
- The task is an Ant optional task and the JAR file and/or libraries
implementing the functionality were not found at the time you
yourself built your installation of Ant from the Ant sources.
Fix: Look in the ANT_HOME/lib for the 'ant-' JAR corresponding to the
task and make sure it contains more than merely a META-INF/MANIFEST.MF.
If all it contains is the manifest, then rebuild Ant with the needed
libraries present in ${ant.home}/lib/optional/ , or alternatively,
download a pre-built release version from apache.org
- The build file was written for a later version of Ant
Fix: upgrade to at least the latest release version of Ant
- The task is not an Ant core or optional task
and needs to be declared using <taskdef>.
- You are attempting to use a task defined using
<presetdef> or <macrodef> but have spelt wrong or not
defined it at the point of use
Remember that for JAR files to be visible to Ant tasks implemented
in ANT_HOME/lib, the files must be in the same directory or on the
classpath
Please neither file bug reports on this problem, nor email the
Ant mailing lists, until all of these causes have been explored,
as this is not an Ant bug.
BUILD FAILED (total time: 5 seconds)
Have any of you had the same problem? I know there is a similar tutorial on NetBeans website but it's even more poorly written.

No i have not really worked on it these last days...
I wonder why so few answers to this post. Would we the only two people who want to do this (be able to access OCS fron a web app, reusing SSO session)
My main problem, for these web services, is to pass a password. As we do actually, we should keep a password in clear text in the User session.. and i'm not fond of this.

Secure Communication between Weblogic 5.1 and IIS

I have WL5.1 and IIS running on two separate machines. I've installed
SSL certificates on IIS. So the traffic between the browser and IIS is
encrypted.
When the "iisforward" filter is used to forward servlet execute to
Weblogic I get a message on the browser which says "You're about to be
redirected to a connection which is not secure. The information you're
sending to the current site might be retransmitted to a non-secure site. Do
you wish to continue?"
This makes sense as IIS does not know where the filter is forwarding this
data. But how do I get rid of that message? There does not seem to be a way
in 5.1 for the plugin/filter on IIS to communicate securely over SSL to the
Weblogic server.
Thanks,
- Ayush

Can you give more details on how you configured credentials on jboss end.
post this on jboss forumn as the solution lies in jboss configuration not that of wls.

Secure communication for JMS

How to enable secure transfer of JMS Messages possibly using SSL ?
a. JMS messages from client to Queue/Topic
b. Queue/Topic to MDB
One options seems to be using t3s instead of t3 ? Is this correct ?
If we use EJB3 resource injections for initializing JMS connection factories and Destinations, then how can we configure the app to use t3s protocol instead of t3.
Thanks
-Siva

In SM59 open up a RFC destination and go to Logon & Security. There you can enable Trusted relashionship and activate status of secure protocol.
And yes you have to do it manually for the desired RFC's

Secure communication R/3 to XI

Similar Messages

Maybe you are looking for