Single Host for netweaver/xi & Idoc settings in ale

HI,
In the case of a single system which is the R/3 system as well as the xi system...what settings are to be done from ALE to enable idoc processing...is this the same as a dual system configuration..or ?
I am pasting some of the steps suggested for the ale configuration.
Can anyone re-organize this or format this so that it applies for a single system that is the db host, Xi Host, and r/3 host.
There are several ways of doing it, all eventually leading to the same conclusion..but in the case of a non-distrubuted system, there are some differences..<b>Can someone put some clarity here</b>...as i have tried the steps and not all of them clearly apply in the case of a single host.
link1) https://www.sdn.sap.com/irj/sdn/wiki?path=/display/xi/sapR3%28Idocs%29ToXI--Steps+Summarized&
Link 2) /people/swaroopa.vishwanath/blog/2007/01/22/ale-configuration-for-pushing-idocs-from-sap-to-xi
3) ALE settings.==> Author( Raghavesh Reddy  )
SAP XI1) RFC Destination (SM59)
a) Choose create.
b) Specify the name of the RFC destination
c) Select connection type as 3 and save
d) In the technical settings tab enter the details SAP SID/URL and system number#.
e) Enter the Gateway host as same details above SID/URL.
f) Gateway service is 3300+system number#.
g) In the Logon /Security tab, enter the client user & Password details of Destination system.
h) Test the connection and remote logon.
2) Create Port (IDX1)
a) Select create new button
b) Enter the port name as SAP+SID (The starting char should be SAP)
c) Enter the destination client.
d) Enter the RFC Destination created in SAP XI towards other system.
e) Save
3) Load Meta Data for IDOC (IDX2)
a) Create new
b) IDOC Message Type
c) Enter port created in IDX1.
SAP R/3
1) RFC Destination (SM59)
a) Choose create.
b) Specify the name of the RFC destination
c) Select connection type as 3 and save
d) In the technical settings tab enter the details SAP SID/URL and system number#.
e) Enter the Gateway host as same details above SID/URL.
f) Gateway service is 3300+system number#.
g) In the Logon /Security tab, enter the client user & Password details of Destination system.
h) Test the connection and remote logon.
2) Create Port (We21)
a) First Select Transactional RFC and then click create button
b) Enter the destination port name as SAP+SID (The starting char should be SAP)
c) Enter the destination client.
d) Enter the RFC Destination created in SAP R/3 towards other system.
e) Save
3) Create Partner Profile (WE20)
a) Create New
b) Create the Partner no. name as same the logical system name of the destination system.
c) Select Partner type LS
d) Enter details for Type: US/USER, Agent, and Lang.
e) Click on the + button to select the message type.
f) Select Partner no. and LS which ever create above.
g) Select Message type
h) Select Process code related to the Message type.
I) save.
In SLD – System Landscape Directory
TS for R/3 (Logical system):-Assign the client name created in R/3 as Logical system Name.
Ts for Third Party (Logical system):-
BS for SAP R/3 (Logical system):- Assign the client name created in R/3 as Logical system Name.
BS for Third Party (Logical system):-Enter the XI logical system name.
In Transaction SALE
Define and Assign the logical system name.

If you want to configure your R/3 system to send IDocs to XI the first thing you have to do is configure the basic ALE:
<b>Logical System</b>
-Representation of a system R/3 will communicate with
-Every R/3 client used in ALE must have a logical system associated
-BD54 – change logical systems (add), SCC4 – change clients (attach logical system)
-Stored in tables TBDLS and TBDLST
<b>Ports</b>
-Logical representation of a communication channel
-How you refer tie together RFC destinations with partner system
-WE21 or WEDI
<b>Partner Profile</b>
-Ties together many pieces of the ALE puzzle
-Message types, IDoc types, process codes, partner functions, application identifiers, message function, output type, and port
-Maintain inbound and outbound parameters (partner type, port, transfer immediately or collect IDocs)
-WE20, WEDI, or SALE
-Viewed as a gateway, routes a particular message of a specific IDoc type to the given port and invoking the appropriate function modules
The next thing you have to do is configure the IDoc adapter in XI to prepare the system to accept IDoc's into the integration builder from other SAP systems.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/d19fe210-0d01-0010-4094-a6fba344e098

Similar Messages

  • 9.0.2 portal on NT/Win2k - single host for infrastructure and midtier

    We're having myriad problems/bugs with a 9.0.2 portal implementation on Windows 2000. We've implemented both the infrastructure and mid-tier on the same host, a hefty new Compaq.
    Has anybody had any luck with this type of OS/single host deployment of portal 9.0.2?

    I have managed to get it to "work" - though not on that OS. We are using Solaris 8 for this and it took me a little over three weeks to get it to a "workable" state.
    I found a couple of things that may help though:
    order of install is very important. As the documentations says install the infrastructure first then the mid-tier. What it doesn't mention (at least not where I was reading) was to configrue the oem reporting website after the infrastructure install and BEFORE the mid-tier install. I overcame a number of problems doing it this way.
    Also, after each install exit OUI. It's strange but it works. Oracle makes some mention that they do not support multiple installs in the same session. It's in only one of the many documents I read on this website.
    Edit the httpd.conf to auto start Jserv and hard code the ports for the sucker. Don't depend on it doing itself manually.
    Also, make sure the jserv.conf line in httpd.conf is uncommented.
    Also, under unix before each install explicitly indicate which ORACLE_HOME you are installing into (I guess this may mean to manually enter the ORACLE_HOME values in the Windows registry). Do not unset the ORACLE_HOME value as the Oracle documentation states when doing the second install - hard code it yourself.
    Check on the DISPLAY value in jserv.properties (for both mid-tier and infrastructure - I am guessing that you may not need to do this but for Unix it's a big thing and causes a huge number of errors).
    Uncomment the following line in jserv.properties if your version of the jdk is higher than 1.2.2a:
    #wrapper.env=JAVA_COMPILER=NONE
    verify that the cgi-bin virtual directory is set properly in oem.conf found in /db/d01/oracle/ora9ias/oem_webstage if the following sections is found in oem.conf (it points to the Apache cgi-bin directory):
    DirectoryIndex emwebsite.html
    ScriptAlias /cgi-bin/ "/db/d01/oracle/ora9ias/Apache/cgi-bin/"
    ScriptAlias /oem_webstage/cgi-bin/ "/db/d01/oracle/ora9ias/Apache/cgi-bin/"
    Alias /oem_webstage/ "/db/d01/oracle/ora9ias/oem_webstage/"
    Change it to reflect the cgi-bin of the oem website
    DirectoryIndex emwebsite.html
    ScriptAlias /cgi-bin/ "/db/d01/oracle/ora9ias/oem_webstage/cgi-bin/"
    ScriptAlias /oem_webstage/cgi-bin/ "/db/d01/oracle/ora9ias/oem_webstage/cgi-bin/"
    Alias /oem_webstage/ "/db/d01/oracle/ora9ias/oem_webstage/"
    When the infrastructure in installed always, always start dcmctl (the Oracle http server) before starting the Enterprise manager during the startup of the server else you will get passwords that are not synced. Same for when you need to restart the httd server - shutdown the enterprise manager website down first, make your changes, shutdown the httd server, start it up and then restart the enterprise manager.
    Just some things that I can think of off the top of my head right now.
    Now if only the mid-tier would have installed the Portal to the default port rather than one I did not choose. That's a whole nuther story.
    Good luck.

  • Reason for errors in IDOCS ? pls tell small scenarios

    hi pls tell practical scenarios reason for errors in idocs? all ale configuration are done.

    goto se16 and look at table EDIDS....in that look at field status text...you will see different reasons when something goes wrong in idoc generation...
    there should be a lot of practical scenario examples for you inside it...

  • Managing multiple Postfix instances on a single host

    We have quite a few sites on our Xserve. Each site should be able to relay email out the respective unique IP on a single host; however, by default email goes out the default website of the server or which IP is the current gateway.
    NOTE: this is not a Postfix Virtual Domain Hosting > mail forwarding domains issue. Mail routes just fine to the correct email boxes. This is and issue where email going out to other mail servers originates from the box and not the respective domains and IP space.
    The solution for this is Multiple PostFix Instances. One for each website (each website has a respective IP due to SSL and DNS is correct along with MX records).
    For the outbound mail relay for our corporate network it seems there are no fields to enable a new postfix instance for each hosted or virtually hosted domain. Nor is there a way to enable SMTP to relay outgoing mail through another host unless you use a generic setting for every website on the server.
    So for a enterprise level business how do we Managing multiple Postfix instances on a single host?

    Fully on the same page with you. 110%
    Here is why I am under the impression of why each domain name needs to be as if it needs its own MTA (mail transfer agent). No matter how big or small the business.
    Just like a domain using SSL in Apache needs a dedicated IP when doing the packets . . .
    Yahoo the big dog (for small to medium online businesses 70% of their customers make purchases with Yahoo emails; which most of them are temp emails or known as aliases.) states:
    From: help.yahoo.com/l/us/yahoo/mail/postmaster/basics/postmaster-02.html
    Many mail providers follow the same guidelines:
    {quote}Segregate your lists to different IP addresses. If you maintain several lists (or clients, especially for an ASP), you may want to segregate your lists to ensure that users are marking each list on its own merits. If user sees both spam and legitimate mail from the same IP, their notifications to us will be hazy and will likely result in the spam overiding the legitimate mail.{quote}
    So why not segregate websites to email out their own dedicated IPs?
    Understandably sites that share IP space can go out the default MTA or better yet the MTA of that IP.
    This way host providers can segment groups of clients and further prevent issues with out going email.
    When email goes out a single MTA there are checks and rate limitations not just on the hops involved but from the "originating" IP address. So if site "A" has one IP and site "B" has another . . . well they both send email out the same default gateway. Take 100's of domains going out the same IP and customers (websites) start having issues getting customer communications delivered.
    {quote}Maintain accurate reverse-DNS information for your mail servers. Yahoo! Mail makes extensive DNS checks for each connection, and an accurate reverse DNS will ensure prompt processing of your connection and email.{quote}
    One mistake by one client out of 1,000 sites (or now Apple letting tens of thousands of sites able to be hosted) can get all 1,000 websites deferred and have what is called "reputation" issues.
    In the past, as companies grow, sure they get more boxes or can cluster mail servers. With economic times beyond using Parallels . . . a single Mac Xserve can handle tens of thousands of websites doing a few thousand emails a day or more. It is more of a software/setting/configuration issue than just capability.
    I remember Intel board meetings in the 90's where I (as a customer) stated put two nic cards on the mother board, standardize those rails, put twisted pair on those hard drive cables. Some things just take practical experience to see yes there is a real need and the business people are not getting it because they are focussing on the business or chasing their tail.
    Also Note the IP address has to be STATIC:
    From: help.yahoo.com/l/us/yahoo/mail/postmaster/errors/550-bl21.html;ylt=AsNxnjlX971dwy743e7j.olJHdG
    {quote}In our continuing efforts to protect our users from unsolicited email, Yahoo! Mail does not accept SMTP connections from dynamic or residential IP addresses . . .{quote}
    From: help.yahoo.com/l/us/yahoo/mail/postmaster/basics/postmaster-15.html
    {quote}Segregate your mail streams by IP addresses, domains and/or DKIM selectors since Yahoo! Mail keeps reputation data about each IP address and domain you send from. For example, by segmenting the mail stream that delivers marketing mail from another that sends transactional messages, you make it easier for Yahoo! Mail to determine and assign each mail stream's reputation. {quote}
    {quote} Use common-sense settings. While we have not published guidelines for numbers of connections you can concurrently use, we ask that you treat our resources with respect. The more you take, the fewer there are for others, which may force us to defer your connections. {quote}
    From: help.yahoo.com/l/us/yahoo/mail/postmaster//basics/postmaster-38.html
    {quote}To facilitate the smooth flow of messages between legitimate senders and Yahoo! Mail, we offer the following recommendations:
    Limit the messages you send per connection
    Yahoo! Mail accepts a maximum of 5 messages per SMTP connection. We encourage you to cap the number of messages you send to Yahoo! Mail to fall within this per-connection limit.
    When this limit is reached, no further messages will be accepted for delivery as our server automatically terminates the connection (without giving an error code). If you are sending messages to a significant number of Yahoo! Mail users, the suggestions below will help ensure uninterrupted delivery for your messages.
    Reestablish connections if you do not get an error code
    When our server terminates your connection after 5 messages have been accepted, you may try to reconnect to our MX servers immediately thereafter.
    Open concurrent connections
    You may open concurrent connections from the same server to facilitate efficient transmission of your messages. However, while we do not publish specific guidelines for the numbers of connections you can concurrently use, we ask that you treat our resources with respect. The more you take, the fewer there are for others, which may force us to deprioritize connections from your server(s).{quote}
    In the Server Admin under General one can enable IMAP with a maximum number of connections. However, for normal SMTP there is no connections cap. Unless I am wrong here.
    Domain throttling by domain is another way, but the real solution is just dedicated IPs for each website or each website to have a separate MTA. In the past this has meant a dedicated server or a physical gateway.
    Technically there should be a Virtual solution. If I can virtually host many sites and many incoming emails on dedicated IP space respective to each domain. There should be virtual MTAs on dedicated or the same respective IP space as the incoming; hence, why I gave the example of how SSL works in Apache with web servers.
    Totally get what you are saying on how currently mail works just out the default gateway since there is only one "default" MTA for the "xserve".
    Everything is good coming in, but did something somewhere miss the mark on the outgoing? Should be one for one.
    Yahoo is the big player putting the foot down or the glass half full people would say setting the mark on how outgoing mail should work when they are accepting emails.
    I am not trying to innovate, but rather just follow the rules.
    Sure mail out one MTA works no matter how many website you put on the box and it is "good enough for government work" or "looks good from my house".
    There are many people struggling with corporate communications (even the concept of corporate communications and marketing) and I think Apple could step up to the plate and help follow the standard of best practices.
    I have done research for 10 years and over the past two tested what I know to be true. Then spoke with many businesses that did not understand but had the same issue. . .
    Yahoo customers not getting their email communications and email simply not being as good as the old fashion phone call.
    So back to your question (fabulous question since every tech asks me the same thing):
    {quote}So my question to you is this: why can't you run all your domains on a single server/IP address?{quote}
    Because it is no longer 1996 and I want Apple stock to triple!
    . . . and that it no longer works for sites conducting a profitable business. We are really underachieving what America could do!
    Yahoo! is clearly saying to each business to do business communications or even marketing on separate IPs. Gmail, Hotmail, and the list goes on and on. They all follow the same thing. Yahoo! just happens to be more aggressive and has more good consumers (buyers) using their free email service. Gmail started aliases and could gain market share of buyers.
    I need to get Xserve to have one dedicated IP in and out for each independent website whether it is an Apache transaction on port 80 (443 SSL) or an email going out the postfix MTA on port 25 SMTP or any other standard alternative port (587 or 465 SSL) for that matter.
    So far everything works as expected, but the SMTP MTA out. One big default gateway per hardware.
    We missed the 1% mark. That club that gets it! I would like to see every business owner that buys an Xserve to be in that one percent club out of the box!
    Why Rob? Well because it works! Dedicated IPs work. Think about this, if you gave the postman your address and did not include your suite number more than likely your lucky if you get your mail. WORKS the same way for email.
    If your business grows you can get a few more until something once again gets abused and they start tracking MAC addresses. By then will have virtual MAC addresses like most routers can already do.
    To prevent SPAM you just set the MTA defaults to one IP per website. Let's keep it simple. This way you keep a clean reputation and one reputation per website or business. Most businesses just need one IP and cannot afford a whole server for each website/business. THINK GREEN!!! The email filtering systems (RBLs and filtering rules) already out there will weed abusers out. Let's not hurt the small to medium businesses in the process.
    Your not going to get RDNS and dedicated IP space anyhow unless your a real business.

  • Multiple Oracle 9ias instances on single host

    hi all
    i tried installing more than 1 instances on a single host, under different oracle home......but i am facing certaing strange errors. Can anyone tell me what are the things that we have to specifically take care of while installing multiple instances on single host, i mean any port issues or anything else??
    please help
    thanks

    hi all,
    i have almost the same prolem here.
    i have created two instances other then OC4J home. i have also deployed two different applications on the two different instances. but when i try to run the application it gives Page not found exception! for both the applications.
    now when i stop one instance then the other instance runs properly and doesnt throw any error!
    there is definately no problem with the ports as internally the ports allocated to both the applications are different!
    if anybody has got any idea what might be the problem then it will be very helpful for me!
    thanks in advance!!
    Piyush

  • Multiple Oracle databases on Single host

    Hi Gurus,
    I am new to SAP World. We are planning to install multiple SAP systems (ECC/BW/SRM/XI) on a single host with Oracle 11.2.0.2. As per SAP instguide, the Oracle RDBMS software should be owned by ora<SID>:dba. So we are planning to install the oracle software for the first dev system ERD under 'oraerd:dba' id. And the next will be under 'orabwd:dba' and the third under 'orasrd:dba'.
    My questions is, instead of having multiple ORACLE_HOME's owned by individual id's, can I have one consolidated Oracle_Home owned by 'oracle:dba' which then controls all the oracle db's and its datafiles.
    I know there is a SAP Note to do this for Oracle RAC (prd is being planned this way), but can we do the same for Single instance also.
    Best Regards
    Shiv

    Shivaspo wrote:
    Hi Orkun,
    > Thanks for your reply. Its a must or its just better to have under individual O_H. The reason we were looking to out all under 'oracle' was that our DR site for the prod is going to be single instance physical standby using DG. SAP recommends to have the OS user on the DR host to be oracle, so that there are no issues with permissios for log shipping.
    > So we will end up having multiple db's system running under 'oracl' on the DR site.
    >
    > -Shiv
    Hi Shiv,
    Technically, there's no restriction to configure your system, by this way. But from SAP point of view; at the first step, because the the installation is not completed as referred by SAP installation guide, you will not able to get support by SAP. For the instance, if you face with a problem during the productive, SAP may not support your installation.
    Secondly, you may face with the problems at the database upgrades and applying patches. For example, you need to stop all the databases when you decided to patch one of them.
    I can count many restrictions about this issue. As a summary, from technical way, it is possible to have one Oracle home, but it is strongly recommended to have different Oracle home folders for each Oracle installation.
    Best regards,
    Orkun Gedik

  • Dynamic creation of single reports for characteristic value combinations

    Dear Experts,
    We have a report showing the monthly sales from one reporting unit (RU) to another u2013 see example below:
    RU 1, RU 2, Sales 100
    RU 1, RU 3, Sales 60
    RU 2, RU 1, Sales 20
    RU 2, RU 3, Sales 40
    There is a requirement to automatically generate single reports for each combination of RUs selling to each other and broadcast these reports automatically by mail:
    Report 1:
    RU 1, RU 2, Sales 100
    Report 2:
    RU 1, RU 3, Sales 60
    Report 3:
    RU 2, RU 1, Sales 20
    Report 4:
    RU 2, RU 3, Sales 40
    Of course it would be possible to create single reports for each combination using fixed filter values. But we need a dynamic calculation because there are not always sales for each combination.  Moreover this would be difficult to maintain, because each time a new reporting unit has been created, new reports have to be created as well. We are looking for a completely dynamic solution,
    Maybe there is a way to solve it with the BEx Broadcaster function u201Cprecalculation of value setsu201D or u201Cburstingu201D. But we unfortunately do not have any experience with this.
    Thanks a lot in advance for your help!
    Best regards
    Marco

    Hi,
    Using the bursting functionality in the broadcaster this is possible. I think you would want to send the reports from RU1 to RU2 and RU1 to RU3 to a recipient linked to RU1 or somehting. In that case you need to add an attribute email to the RU infoObject. In the bursting settings you can use that value to determine the recipient of the email. Furthermore, you can automatically split the resultset to receiving reporting unit.
    If you have any specific questions regarding this subject, let me know.
    Kind regards,
    Alex

  • Issue with the configuration of http xml port for sending the idoc

    Hello,
          I am planning to send multiple idocs in a single file using http xml port.
    Presently I am trying to send a single idoc, but am having the issue.
    I am trying to create a RFC for HTTP XML port of type H i.e. HTTP Connection to ABAP System
    In the how to guide for - How Tou2026 Send Multiple IDocs Within One XI Message
    ( https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/30ea2fdf-f047-2a10-d3a2-955a634bde6b )
    the following parameters are defined for the path prefix -
    RFC destination of type H (HTTP Connection to R/3 System).
    Specify the path prefix as follows:
    /sap/xi/adapter_plain/
    ?namespace=< your namespace>
    &interface=<IDoc_Type>
    &service=<Sender System>
    &qos=EO (or EOIO).
    I am trying to use the following prefix -
    /sap/xi/adapter_plain/
    ?namespace=urn:sap-com:document:sap:idoc:messages ( this is the standard namespace of SAP for all the idocs)
    &interface=DEBMAS05 (Idoc type )
    &service=SNDLS100 ( ECC system name )
    &qos=EOIO
    On testing the RFC connection, I am getting the error of page not found.
    Can anyone please give me pointers for the issue.
    Regards,
    Mayank

    Thanks Barry!!!
    Now I am getting a different message.
    In RFC...it is giving me the following message ->
    Status HTTP Response     204
    Status Text     Body is empty
    In case of Idoc, the status is till 02...
    the error description for the idoc is --
    "When transferring the IDoc by HTTP, the return code with the message '500<SAP:Error><SAP:Category>XIServer</SAP:Category><S' has occurred.
    The target address was: http://emgeccsnd1:8001/sap/xi/adapter_plain/?namespace=urn:sap-com:document:sap:idoc:messages&interf
    Check whether the IDoc can be sent again.
    It is unfortunately not possible to determine automatically whether the IDoc has in fact arrived in the target system and the error occurred afterwards"
    I am still not able to resolve the issue.
    Regards,
    Mayank

  • Using my MacBook Pro as the host for projection to my TV via AppleTV?

    Can I subscribe to HBOGO thru Apple TV and avoid cable service using my MacBook Pro as the host for projecting to my TV via AppleTV?S

    Possibly.
    Some sites such as TMN GO which is similar will not allow mirroring to take place.
    It works for about a minute then shuts down... Security settings from the site.

  • How to make a single payment for different open  items with same due date

    Hi,
    I have created a payment method  and selected "Payment per due day " option in payment method company code settings.
    Even I have selected that option, Payment will not happen grouping for the items with same due date
    for ex : I have two open items with one due date and another open item with another due date so when I am trying performing F110 system should make a single payment for the item with same due date and seperate payment for another item.
    But system making single payment for all items
    Could you please suggest anything how to make a seperate payment with due date.
    Regards
    VK GUPTA

    Hi,
    Please check Vendor Master data: FK02 ->company code data -> Payment transaction accounting: unflag 'individual payment'.
    Make a test and let me know if it's okay.
    regards

  • Single-signon for multiple sites or sub sites

    Does anyone know of some good articles/publications or suggestions for
    implementing a single signon for multiple very secure internet sites in
    weblogic type environments.
    For example, bank1 has a internet site and bank 2 has an internet site.
    Bank 2 has some cool features they want to offer bank1's customers. They
    agree but, bank1 wants to present bank2 as a tab or part of bank1 site.
    IN order to do this there are lots of fun things, but the things Im
    interested in are how to authenticate between them and handle timeouts.
    timeouts seem particularly tricky in that if I dont hit a page on bank2
    for a while, it could time out its session for the guy on bank1. Also if
    im in the bank2 section of the site, then bank1 could time me out as
    well.
    any ideas let me know.
    thanks
    Joel

    I've been informed ;-) that a pure Java solution is also available from
    Entegrity. So here are a couple of URLs for you to research
    anagrammatically:
    http://www.netegrity.com
    http://www.entegrity.com
    Cameron Purdy
    Tangosol, Inc.
    http://www.tangosol.com
    Tangosol: How Weblogic applications are customized
    "Cameron Purdy" <[email protected]> wrote in message
    news:[email protected]...
    Netegrity?
    Cameron Purdy
    Tangosol, Inc.
    http://www.tangosol.com
    Tangosol: How Weblogic applications are customized
    "Tim Funk" <[email protected]> wrote in message
    news:[email protected]...
    This is long winded and I tried to have this make sense, if it doesn't
    just mark this as read ...
    I am running into the same issue. Out of need, different applications
    need to be hosted on different boxes/JVM's/web applications. I am
    experimenting with a customer single sign on process which is
    independent of Java but lends itself nicely to it. Here is my thoughts:
    1) All applications need to run under the same domain. For example:
    foo.redrose.net, www.redrose.net, bar.redrose.net, app1.redrose.net
    all reside under redose.net.
    2) You have a database table (secure) that contains the following:
    user id, password, session id, last access time.
    3) This database table contains all of the valid sessions across the
    domain (in this exmaple .redrose.net)
    4) There is a daemon running which runs every ?? seconds that deletes
    any records older than ?? seconds/(or minutes/hours) in the
    database.
    5) There exist a cookie which is set to the domain level that contains
    the session id.
    6) The session id provides a way to obtain the id and password for the
    user to authenticate to the container. For example in WL5.1SP8 there
    exists: weblogic.servlet.security.ServletAuthentication.weak(...) to
    authenticate to your container. By using this you will get the
    capability of setting up your roles and ACLS etc in you web.xml and
    weblogic.xml to handle authorization.
    7) All requests to any applications participating in this philosophy
    must do the following for EVERY request (or appropriate):
    Even if you are logged authenticated to the container and authorized,
    you may have timed out or logged out of another application. So the
    database table must be checked to see if the session id exists. At the
    same time, you must also update the last access time to prevent timeout.
    8) If the user tries to access a different application which he has not
    authenticated to yet - the user will be forwarded to a servlet whichwill:
    a) Look for the cookie at the domain level
    b) If the cookie is found - get the UID and PWD from database
    b2) Present login form if cookie is invalid/not exists
    c) Authenticate to container
    d) Forward back to original page and let the container handle
    authorization since you have already authenticated.
    I use have encapsulated the database activity into 3 stored functions:
    1) isValidSession(session_id) - Returns null or the user id and pwd
    concatentated which will need split apart if needed
    2) makeSession(user_id, password) - Returns a new unique session id and
    creates the appropriate record
    3) cleanUpSessions() - Arguements not yet determined. This will delete
    any records older than a certain time. I would like to have the proc
    know what to delete without being given a parameter but time to the
    second level can be tricky for some DBMS's.
    There is a concern of storing the user id and password in the database
    but this can be eliminated with a good design to restrict access to the
    database table and using encrypted connections.
    Hope this helps. Hopefully - a similar philosphy will be adopted by an
    application container so I may not have to worry about this and I can go
    back programming business functionality.
    -Tim
    Joel Nylund wrote:
    Does anyone know of some good articles/publications or suggestions for
    implementing a single signon for multiple very secure internet sites
    in
    weblogic type environments.
    For example, bank1 has a internet site and bank 2 has an internetsite.
    Bank 2 has some cool features they want to offer bank1's customers.They
    agree but, bank1 wants to present bank2 as a tab or part of bank1site.
    IN order to do this there are lots of fun things, but the things Im
    interested in are how to authenticate between them and handletimeouts.
    >>>
    timeouts seem particularly tricky in that if I dont hit a page onbank2
    for a while, it could time out its session for the guy on bank1. Alsoif
    im in the bank2 section of the site, then bank1 could time me out as
    well.
    any ideas let me know.
    thanks
    Joel

  • Having multiple Node manger process in a single host machine.

    I am using weblogic server(portal)10.2.
    I am running the Node Manager to start the admin server.I have installed Java based Node manager in the host machine .Created a unix id ND1 and started the Node Manager utiliy with this id.
    I keep on creating domain for my new applicaitons and add this ND1 in each new domain group,so that ND1 will access the new domain's admin folder.
    Now when I add this ND1 in more than 16 domain groups,I got trouble in accessing the domain folder.In unix OS there is group membership limitation where a unix id cannot be in more than 16 groups.
    Anyone came acroos this issue?
    Possible options.
    1) Can we have multiple node manager ids(ND1,ND2,ND3..etc) for a single Node manager utility in single host?
    2) While starting the server,will node manager look only the nm_password.properties file in domain folder?

    You can boot multiple Node Managers if you change the NodeManager home. To do that, create a directory for each NodeManager and copy the startNodeManager script to it. Then edit the NODEMGR_HOME, LISTEN_ADDRESS, and LISTEN_PORT

  • Db2 multiple instances in a single host

    Hi,
    os - windows 2008 db - db2 9.1 fp7
    if i want to install 2 sap instances in a single machine in windows how to proceed?
    1) I have read the documents where installation doc saying default db s/w path is /db2/db2sid/db2_software.is this the s/w path in windows? some where i read it saying default path is drive:/program files/IBM/sqllib.what is actually the difference?
    2) and also read in the forum and also in the note 978555 and 930487,it says multiple instance is not possible in db2 ie we can have only 1 defalut copy of db2 so we cant have multiple instances with the different copies of db2(up to kernel version 7.0) .is this correct? for 1st instance it is /db2/db2sid1/db2_software and for 2nd instance it is /db2/db2sid2/db2_software right?so how we cant have 2 instances with 2 different db2 copies?
    pls expain me.
    Thanks

    Hi Rajesh,
    if i want to install 2 sap instances in a single machine in windows how to proceed?
    1) I have read the documents where installation doc saying default db s/w path is /db2/db2sid/db2_software.is this the s/w path in windows? some where i read it saying default path is drive:/program files/IBM/sqllib.what is actually the difference?
    sqllib is only the links. The actual database is not this path.
    2) and also read in the forum and also in the note 978555 and 930487,it says multiple instance is not possible in db2 ie we can have only 1 defalut copy of db2 so we cant have multiple instances with the different copies of db2(up to kernel version 7.0) .is this correct? for 1st instance it is /db2/db2sid1/db2_software and for 2nd instance it is /db2/db2sid2/db2_software right?so how we cant have 2 instances with 2 different db2 copies?
    Multiple instances on a single host is only supported as of 9.7 you would have to upgrade to that release.
    You can technically have two instances as of 9.1 but as per the sap note s you have mentioned, this is not supported by SAP
    For more information on 9.7 see:
    http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/901b4314-9851-2c10-1c8f-b0ddd38d6e75
    SAP note: 1351160 DB6: Using DB2 9.7 with SAP Software
    Hope this answers your query,
    Paul

  • IDoc settings

    Hello Guru's
    Can any one send methe link where i can find the Idoc settings related material or screenshots.
    regards
    aryan

    Hi,
    check the following links:-
    /people/prateek.shah/blog/2005/06/08/introduction-to-idoc-xi-file-scenario-and-complete-walk-through-for-starters
    http://help.sap.com/saphelp_nw2004s/helpdata/en/ab/bdb13b00ae793be10000000a11402f/content.htm
    /people/sriram.vasudevan3/blog/2005/09/01/mdm-55-data-distribution-using-sap-xi
    http://help.sap.com/saphelp_erp2004/helpdata/en/dc/6b835943d711d1893e0000e8323c4f/content.htm
    http://www.netweaverguru.com/EDI/HTML/IDocBook.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/0b/2a65ec507d11d18ee90000e8366fc2/frameset.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/02/265c3cf311070ae10000000a114084/content.htm
    http://help.sap.com/saphelp_erp2004/helpdata/en/dc/6b835943d711d1893e0000e8323c4f/content.htm
    Regards,
    Archit

  • 802.1X single-host; workstation attached to non-cisco IP Phone

    Hello everyone,
    I am doing some design piece of work and I need to understand (because I couldn't find it clearly written anywhere) the following thing:
    If I am using LLDP-MED in order to assign the VVID (Voice Vlan), instead of Cisco's CDP,  will that be just fine with the Single-Host mode? I want to bypass phone authentication, if it is recognized by the LLDP-MED, but to keep authenticating the workstation that is attached physically to the phone.
    If that has any mater - the phones will be Avaya.
    Cheers & thanks in advance!
    Dani

    Hi Danail,
    In addition to the private message I replied to you, I think MAB is more feasible way to depoly VOIP in dot1x network environment than LLDP-MED for the following reason:
    1. MAB complies with dot1x framework, it works in very simliar way as dot1x.
    2. MAB has been widely deployed on Cisco switches and works fine.
    3. MAB can be deployed for any kind of endpoints which doesn't support dot1x supplicant function in dot1x network environment.
    While LLDP-MED IMO is a revision of LLDP, you may have the capablity to bypass the phone on switches of some vendors with LLDP-MED, but it will be higher risk on deployment than MAB on Cisco switches.
    BTW, generate 2000 MAC for VOIP phone is not biggy as normally you can ask the vendor send you the list of MAC. The OUI check with wildcard is definitely doable but it is Radius software related. IMO these two questions actually are not design questions, they are more likely deployment questions which should be considered after your high level design.
    Which can win the race: increasing bandwidth with new technologies VS QoS?

Maybe you are looking for