Session handling missmatch - Integrated ITS

Hi,
we use integrated ITS (ERP 2005, Web dispatcher 7.00.11 Patch Number 167) and have problems with the session handling. Sometimes (Probability 1 to 1000) one user receives information of other sessions (other user).
The problems occurs even with standard services like PZ02.
Are there any service parameters in SICF to avoid this?
Who had similar problems with session handling?
Did anybody solve this problems?
Best regards
Thomas

Similar Messages

Integrated ITS : Session killed but memory still reserved

Hi,
I'm a basis guy, new to portal technology.
Our users launch webdynpro from EP6 Portal, the HTTP request our SAP ECC6 system (web as kernel 700) with integrated ITS. One of the user session has been lauchned yesterday, and was still running this morning that lead to a memory bottleneck. Because of that no more HTTP user was able to logon to the application server.
The user session has therefore been killed using transaction sm04, now the users ara able to reach again the server.
BUT, in transaction SITSPMON I can see that the memory session has not been entirely released, the ITS session still appear (without hte user name)
same thing in transaction ST02, where 80% of the extended memory is used with ... 3 users connected.
I have already checked sap note Note 742048 (- Integrated ITS, memory requirement in application server), our memory parameters doesn't seem to be the problem (em/global_area_MB =1024 ).
My question : Is there an other way to kill an ITS session ?
How can I retrieve the used memory ?
Any useful help would be highly appreciated.
Best Regards.

Hi,
I'm a basis guy, new to portal technology.
Our users launch webdynpro from EP6 Portal, the HTTP request our SAP ECC6 system (web as kernel 700) with integrated ITS. One of the user session has been lauchned yesterday, and was still running this morning that lead to a memory bottleneck. Because of that no more HTTP user was able to logon to the application server.
The user session has therefore been killed using transaction sm04, now the users ara able to reach again the server.
BUT, in transaction SITSPMON I can see that the memory session has not been entirely released, the ITS session still appear (without hte user name)
same thing in transaction ST02, where 80% of the extended memory is used with ... 3 users connected.
I have already checked sap note Note 742048 (- Integrated ITS, memory requirement in application server), our memory parameters doesn't seem to be the problem (em/global_area_MB =1024 ).
My question : Is there an other way to kill an ITS session ?
How can I retrieve the used memory ?
Any useful help would be highly appreciated.
Best Regards.

Session does not logoff on integrated ITS 700

We have upgraded from 46C / ITS 620 to ERP2005 (ECC60) and are using the integrated ITS.
When you log off the ITS webgui session, if you leave the browser open and enter the webgui URL once more (http://<host>/sap/bc/gui/sap/its/webgui), the logon screen is bypassed and another person could pick up the original users session.
The ~usertimeout parameter from ITS 620 does not have any effect.
Does anyone know the correct parameter to set to overcome this?

Hello John
There seems to be some sort of SSO involved.
~usertimeout only helps with the original ITS SSO cookie named MYSAPSSO.
With ticket logon ~usertimeout already did not have any effect.
With the Integrated ITS the MYSAPSSO cookie is not available anymore.
In your case the problem is either with the SSO Logon Ticket or with HTTP Basic Authentication. If it is the ticket logon (e.g. via EP) then the user would have to log off from EP to delete the SSO Logon ticket.
If it is the HTTP Basic Authentication then the browser has to be closed as there is no other way to remove the authentication otherwise.
<b>Possible Solution</b>:
You might want to check and change the Logon Procedure in SICF for the webgui service. You should be able to make SAP Authentication the standard:
you find more details at <a href="http://help.sap.com/saphelp_nw04/helpdata/en/e0/73f34026d70b06e10000000a155106/frameset.htm">SAP Online Help</a>
best regards
Gerd

Integrated ITS: multiple sessions and locking issue

We are upgrading to ECC 6.0 from 4.6C and have Integrated ITS turned on. We have built a custom PZM3 as one entry and exit point for our ESS services. But we have issues with session management when navigating between some services like PZ14 and PZ02. The PZ14 session and the corresponding lock are not released upon going to the PZ02 service directly. But this happens for only some services. If you navigate between PZ02 and PZ12 it works fine. I followed the instructions of note# 959417, but it didn't work. Not only it is causing locking issues, but also memory usage issues as multiple user sessions are being created on the server. I did check some of posts similar to this one, but the issue still persists.
Our WAS release: 7.00; ABAP support package: SAPKB70009; Patch level: 75.
I would appreciate if anyone could shed some light on this issue. Thank you for your time and consideration.
Kshitij

Our Basis admin found out that using a parameter ~DISCONNECTONCLOSE = 1 would resolve most of this issues -- and it did. But now we are having issues with some users having popup blockers turned on. We referred to SAP notes 892250/596698-- followed it -- implemented it-- but some users
still have issues -- like today while working from home via VPN, I am having issues with session management. But working from office yesterday,
the sessions worked just fine.

Regarding session handling in BSP

hi all,
    we have integrated our BSP application to EP 5.o, we have used 'existbspapplication'(used buffered page) function in our default page to handle the sessions.
   and its working fine, but now we have to integrate it to the EP 6.0 and we find the sessions are not terminated, and tend to remain after closing the application manually.
   my question is does portal handle sessions if yes, tried the same(by removing session handling code from default page) but could not get the desired result. is there any other way to handle sessions in EP 6.0
thanks,
raju
Message was edited by: krishnam raju

Hi,
Did you set the checkbox for portal integration on in the properties of the BSP page?
Check also
http://help.sap.com/saphelp_nw2004s/helpdata/en/83/132197c3564643af326a5ebccb604f/frameset.htm
Furthermore, check things like
/people/eddy.declercq/blog/2005/11/15/enemy-of-the-state
/people/eddy.declercq/blog/2006/03/20/wake-me-up-before-you-go-go
Eddy

Again Session-Handling

Hi there, one question about session-handling in JSP.
I'm trying to set attributes in the JSP and afterwards get them back.
No chance! They always vanish! Here is the code:
<%@page contentType="text/html"%>
<%@page import="java.util.*"%>
<html>
<head><title>JSP Page</title></head>
<body>
<%
// Output of Session-Attributes
for (Enumeration enum=session.getAttributeNames();enum.hasMoreElements();)
String name2 = (String)enum.nextElement();
String value2 = (String)session.getAttribute(name2);
out.println(name2+":"+value2);
// Set Attributes that I get from Form!
String name = request.getParameter("name");
String value = request.getParameter("value");
if (name!=null)
session.setAttribute(name,value);
%>
<form action="SessionTest.jsp" method=get>
<input type=text name=name>
<input type=text name=value>
<input type=submit>
</form>
</body>
</html>
Really dont have a clue!
Thx, ToM

Works ok for me:
Couple of suggestions: put the setting code, before the display code.
That way you will see the pair that you just set in session ;-)
Also try this:
Session id = <%= session.getId() %> and see if it stays the same.
If you are getting a different session every time, then its not maintaining the session.
Common cause of session problem is: cookies are turned off.
Either turn cookies on, or use URL rewriting:
<form action="<%= response.encodeURL("SessionTest.jsp") %>">
<%@page contentType="text/html"%>
<%@page import="java.util.*"%>
<html>
<head><title>JSP Page</title></head>
<body>
<%
// Set Attributes that I get from Form!
String name = request.getParameter("name");
String value = request.getParameter("value");
if (name!=null)
session.setAttribute(name,value);
// Output of Session-Attributes
for (Enumeration enum=session.getAttributeNames();enum.hasMoreElements();)
String name2 = (String)enum.nextElement();
String value2 = (String)session.getAttribute(name2);
out.println(name2+":"+value2 + "<br>");
%>
<form action="SessionTest.jsp" method=get>
<input type=text name=name>
<input type=text name=value>
<input type=submit>
</form>
</body>
</html>Cheers,
evnafets

Implementation of session handling for using web services

Hi,
I would like to use session handling in web services using ABAP stack in order to start the session with an user login function followed by other RFC calls till a user logout. So far, I found only the following help note in the SAP online help:
Interface Profile
In the interface profile, choose the required processing type: Stateful or Stateless.
A stateful service retains its status within the framework of a HTTP session throughout several calls form the same service consumer. The standard value for services is Stateless.If you require stateful communication, you can choose this instead.
[http://help.sap.com/saphelp_nwpi71/helpdata/de/45/25291b5a2657c0e10000000a1553f7/content.htm |http://help.sap.com/saphelp_nwpi71/helpdata/en/45/25291b5a2657c0e10000000a1553f7/content.htm]
Please, could someone explain me the further required steps of SAPs session handling idea cause just settting the status to stateful is still not the solution itself...
Regards,
Jens

Now, I found the possible scenarios, suggest by SAP Help, regarding security for Web Services ([http://help.sap.com/saphelp_nw73/helpdata/en/48/8ebbba66be06b2e10000000a42189b/content.htm|http://help.sap.com/saphelp_nw73/helpdata/en/48/8ebbba66be06b2e10000000a42189b/content.htm]):
- SAML & WS SecureConversation -> SSO
- WS Security UsernameToken & WS SecureConversation
- User ID and Password in HTTP Header & HTTPS
- SAP Authentication Assertion Ticket & HTTPS -> SSO
- X.509 SSL Client Certificate through HTTPS
- WS Security: X.509 Certificate Authentication at Message Level
Are scenarios with SSO the solution for creating sessions!?

Session handling in Flex

I am using remote object for the flex and service communication. After multiple time log in and log out , which is done by remote object call also, I am getting different session id for browser and from the client side. Is there any way to restrict this session id conflict

I think you are getting confused by comparing flex
development with jsp serverside development, its completely
different thing,
1. How to pass hidden variables using flex.(In jsp we pass it
throuth hidden field, is there any mechanism similar to that one)
-- honestly, where do you really want to pass hidden field to
? (hidden fields is a hack implemented to overcome the way http
protocol works , in flex you don't need that hack) .
2) you can implement exception routine same way (even easier
in flex) if error occures show this and this page(for example error
canvas. with error mesage thats it,
3) How to do session handling in Flex.
-- question is too vague, do you ave concrete problem that
you think of?

Logoff error with Integrated ITS

We are receiving the following error message (on a new web page) when trying to logoff of SRM using the Integrated ITS.
Service Unavailable
The proxy is currently unable to handle the request due to a (possibly) temporary error. Extended error information is:
Failed to forward the request to the web server at sap.corp:1000000. This may be due to a firewall configuration error or a DNS failure.
If this situation persists, please contact your firewall administrator.
Any idea on how to resolve this issue?

Hi Shannon
Check if You have an '~exiturl' parameter provided for this page.
~exiturl should be look like this:
"~exiturl http://<your_host>/scripts/wgate/bbpstart!"
Regards,
Marcin Gajewski

Trouble with session handle???

Hi everybody, its me again... i solve part of my problem but now i have another problem thats bothers me....my scenario is the follow: i have an app running in a portal, then i have a link in the portal who bring me a pop up of the active page of that app, that is shown on the portal in that moment. when i call the pop up, some class attributes change its values for do something, when i close the pop up, those class attribute refresh and take its initial values (values necessary to run correctly in the portal) BUT, when i minimize the window (no close it) and start to manipulate the app in the portal (the app is statefull), the values stay the same as if i was operating the app in the pop up and obvious do something that it should'nt do. My question is: there is some way...may be with session handler like sap-sessioncmd (i test it but it doesnt work), that help me to manage diferent session for the pop up and the app running in the portal...or may be some parameter (that is pass it via url) that help me to create another object of the class when i calls the pop up

thanks for the help. I thought Id tell you more about what I
am doing and see if you have comments - we use google to market our
company so clicks are costing us big bucks. currently, our sites
rely on session management to operate, so I realize that folks
having cookies off is really hurting us. All the references I can
find tote passing the session.URLToken around the site to make it
cookie independent. I havent done this yet, first im trying to get
a handle on how many people have cookies off (like you are), and
where people are coming from to see if we are having click fraud
(which we are very suspicious of).
Is this what you would do (passing the URLToken around)? Any
other comments you have would be very much appreciated.

ABORT_MESSAGE_STATE when calling transaction via integrated ITS

Hello experts,
we use ECC 6.0 (and therefore Netweaver 7).
I try to start a customer transaction via integrated ITS on our consolidation system with the following link.
http:// ...   :8080/sap/bc/gui/sap/its/webgui/!?~transaction=ZCO16&sap-client=200
In our dev system all works fine so far. But in consoloidation I get errors showing in the browser after logon:
Error when processing your request
What has happened?
The URL http:// ...   :8080/sap/bc/gui/sap/its/webgui/! was not called due to an error.
Note
The following error text was processed in the system Q01 : System error
The error occurred on the application server asapt02sv1_Q01_00 and in the work process 1 .
The termination type was: ABORT_MESSAGE_STATE
The ABAP call stack was:
SYSTEM-EXIT of program SAPMZCO002
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system Q01 in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server asapt02sv1_Q01_00 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 1 in transaction ST11 on the application server asapt02sv1_Q01_00 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Error code: ICF-IE-http -c: 200 -u: IE121 -l: E -s: Q01 -i: asapt02sv1_Q01_00 -w: 1 -d: 20080111 -t: 165033 -v: ABORT_MESSAGE_STATE -e: System error
HTTP 500 - Internal Server Error
SM21 says:
16:37:04 DIA 001 200 IE121   ZCO1           W0 1 ITS, User session terminated
long message:
ocumentation for system log message W0 1 :
he user session has been terminated after an error in the log
onversion from SAPdiag to HTML. Look in the preceding syslog entries to
ind the cause of the error. For more error details, refer to the trace
iles.
16:37:04 DIA 001 200 IE121   ZCO1           D0 1 Transaction Canceled ITS_P 001 ( )
long message:
The transaction has been terminated. This may be caused by a
termination message from the application (MESSAGE Axxx) or by an
error detected by the SAP System due to which it makes no sense to
proceed with the transaction. The actual reason for the termination
is indicated by the T100 message and the parameters.
The tracefile of the work process says:
========================================
W Fri Jan 11 16:37:04 2008
W      *** ERROR => julep: PpioCreateParseTree: IRepRetrieve(templates/system/header.html) failed. [w3xxppio.cpp 1184]
W      *** ERROR => julep: PpioCreateHtmlPP: PpioCreateParseTree(templates/system/header.html) failed, rc=0x10c [w3xxppio.cpp 985]
W      *** ERROR => julep: XIntInterpret: PpioCreateHtmlPP(templates/system/header.html) failed, rc=0x10c [w3xxjuce.cpp 529]
W      *** ERROR => xgdk: MsgtBuildHtmlBlock: IntpDoInterpret (templates/system/header.html) failed, rc=0x2101 [w3xxmsgt.c   220]
W      *** WARNING => diag: SemgXGHandleResponse: Returning rc=0xffffffcc [w3xxsemg.cpp 1490]
W      *** ERROR => plugin: XKrnHandleResponse failed rc= -52 [itspxkrn.cpp 764]
W      *** ERROR => plugin: ItspXKrn_HandleResponse failed. 700000840333ba0 rc: 0 [itspxkrn.cpp 391]
W    *** ERROR => ipl_ConvertOut failed rc = 1, send icf error page [itsplxx.c    1526]
M    ***LOG W01=> [itsplxx.c    1527]
W    *** ERROR => ipl_ConvertOut returns 1(ITSPE_FAILURE) [itsplxx.c    1529]
W    *** ERROR => Raise Last error:[1 from: itspxx.cpp :817] [itsplxx.c    1216]
W    *** ERROR => RaiseError(sapdext) ITS_P:01 [itspxx.cpp   817]
==========================================
I don't have any dumps.
Please help. Thanks in advance.
Frank

Hello Ruchit,
> Publishing is done via SE80 but may be it may not be needed. But you can try that out as well.
Please advise. How do I this precisely?
> Try this. Deactivate your SICF completely in consolidation system and then reactivate
> it. After that give this a try.
All services have been activated now (after deactivating first) but I have still the same symptom.
> Also when you are trying to execute this customer transaction just compare the urls you
> are getting in development and consolidation. I guess there is an issue with the
> url you are getting.
I get exact the same URL after (except the hostname of course):
http:// ... 8080/sap/bc/gui/sap/its/webgui/!?sap-system-login-basic_auth=X&sap-client=200&sap-language=EN&%7Etransaction=ZCO16
Regards.
Frank

To logoff from integrated ITS (NW 7.0)

Hello all:
Is there an equivalent url for the integrated ITS (running on NW 7.0) for the following command that works for standalone ITS (6.20)?
https://<host>/scripts/wgate?~command=logoff
In standalone ITS, the above command was able to remove the logon information from user's browser and the sessions in the backend R/3.
Thanks in advance.
Regards,
Danny.

Hi Danny,
Check out SAP note 959417.
Cheers,
Julius

Exit URL for Integrated ITS

What is the ~EXITURL for the Integrated ITS that calls the screen "End of Session"?
The ~EXITURL is defined on the BBPSTART in SICF.

Hi Shannon, we had a custom html screen in ITS 6.20. This screen was the entry and exit point to related ITS transactions. We recently upgraded to ECC6.0 and the internal ITS. During this upgrade it we discovered that this capability was no longer possible. SAP acknowledged this and created patch level 83 for kernel 700. We were unable to return to a custom screen as a start/exit screen without this patch level installed. This is slightly different then a logoff screen though.
Kevin

Debugging Integrated ITS

Does anyone know how to debug on an integrated ITS?
I've developed an internet service which is linked to one of my programs, just a simple set of screens to capture some data. This is the first one I've done using an integrated ITS, before I've done several using an external ITS and to activate debugging in that you would log onto the debugging client and put '/h' in the command bar before doing something on the web page.
I've tried setting a breakpoint in the program using the syntax
BREAK userid.
And also tried setting a program breakpoint (both user and session) but nothing works. Can someone point me in the right direction?
Thanks.

I set a user break point in the client the ITS logs onto, but I had to log onto SAP as the ITS user.

Integrated ITS 6.40 - Connect to SAP R/3 4.6 C

Hi,
here first the tecnical details as required :
SAP-BW 3.5 SP 15
SAP R/3 46C
Web browser IE 6
Integrated ITS release 6.40 Kernel patch level 105
I am trying to establish the ITS connection in order to be able to jump from Web reports to a specific CO transaction in SAP R/3. Given my poor technical knowledge, it is not working but I have already made the following check and settings.
- in SICF, I have activated the service 'WEbgui' following the path SAP/BC/GUI/SAP/ITS.
- I have made sure in the profile of the instance that both parameters 'itsp/enable' & 'em/global_area_MB' were properly maintained.
But it is unclear to me how to maintain the entry in table TWPURLSVR. What I have done so far is the following :
- logical system corresponding to the target client in SAP R/3
- Web server of the BW instance /sap/bc/gui/sap/its/webgui
- Web protocol : HTTP
- GUI start server of the target client in SAP R/3
When trying to make the jump from a Web report, I get the following error message stating :"http://host:port/scripts/wgate/webgui/! call was terminated because corresponding service not available."
Any help would be appreciated (and rewarded)
Thx
Stéphane Beguin

you can call a transaction of BW system using the integrated ITS.
for ex. for Txn SE38 it will be
http://host.domain.com:port/sap/bc/gui/sap/its/webgui/!?~transaction=se38
but from BW system's integrated ITS you cannot call a transaction of your R/3 system (which is on 4.6C)
if you want to call a transaction of R/3 system from your BW query you have to have a standalone ITS installed. (yes separate server).
also check out this link.
http://help.sap.com/saphelp_nw04/helpdata/en/4f/2e6a52c3cdc44d83169b181a9c62ba/frameset.htm
Regards
Raja

Session handling missmatch - Integrated ITS

Similar Messages

Maybe you are looking for