Siteminder authentication on j2ee Dialog Instances only but not on C.I

I am doing an Siteminder external authentication implementation on SAP
Enterprise Portal 6.40 SP16.I have a configuration that want somehow to
validate.
The issue is that the J2EE Dialog Instances should be protected by SM
Agent (they are the load-balanced nodes with the Apache web agent) but
the Central Instance (which will run on a separate node) protected just
with the default basic authentication supported by SAP and not with the
SM Agent. The idea is to be able to access the CI without going through
the Front Web Instances for troubleshooting purposes.
Can we support them on this & in what form of configuration?
I appreciate your comments on this.
Thanks
Tagore

ok I will try to add BasicPasswordLoginModule and check it out .after that as you said when I access url http://server:50000/irj -> it should directly go to portal with default authentication (not siteminder).
I'm still wondering without customizing authscheme.xml how the siteminder is doing authentication as per your scenario explained in ur previous mail.
we have customized the in httpd.conf file in apache server like below..
<VirtualHost server:80>
 ServerName xxxxxx
Alias /siteminderagent/pwcgi/ /usr/netegrity/webagent/pw/
 <Directory /usr/netegrity/webagent/pw/>
 Options Indexes MultiViews ExecCGI
 AllowOverride None
 Order allow,deny
 Allow from all
 </Directory>
xxxxxx
xxxxx
 ProxyPass /irj/ http://server:50000/irj/
 ProxyPassReverse /irj/ http://server:50000/irj/
</VirtualHost>
APACHE deafult port 80 will listen ur portal url access http://server/irj -> pass this resource request to webagent and check if or not resource proteced in siteminder policy server and does authentication .Once its autheticatated sitmeinder provide user id in the form header to j2ee.
if you try to access the portal by giving following url http://server:50000/irj will not work .
could you tell me the
Note: in our scenario whe have installed both webserver (IBM HTTP APACHE 6.X)and web agent & ERP AGENT & PORTAL SERVER installed on same box.
Can you send me doc how you custmozed ur webserver for proxy & reverse proxy to my e-mail id :[email protected]
anyhow may I know your e-mail id ?
Thanks
Tagore

Similar Messages

Adapter engine on a J2EE dialog instance?

Can you install an adapter engine on a J2EE dialog instance, or by nature if you add DI's to the central adapter engine they already have adapters?
Thanks

hay Jeremy,
2 instances = 2 adapter engine.
(you can also look at engine adapter problem after I start dialog instance)
Happy trails,
Uri.

Dialog Instances Java are not up after System Copy NW2004s SR2 ABAP+JAVA

Hello guys,
I have just performed a system copy of our BW system (douple stack NW2004s) wich consists from CI and 2 DIs. First I made an export using SAPINST (Software from SAP_BUSINESS_SUITE_2005_SR2 for sparc solaris), where I choosed in SAP Installation Master->SAp Netweaver 2004s Support Release 2->Additional Software Life-cycle Tasks->System Copy->Oracle->Source System->Central System->Based on ABAP and Java->Database and Central Instance Export. I couldn't find any special task for export java from my dialog instances, so I thought it would be ok like that. Then I used the same software on my target system, choosed ...Additional Software Life-cycle Tasks->System Copy->Oracle->Target System->Central System->Based on ABAP and Java->Central System Installation. In the Dialog input phase of SAPINST I indicated that use db specific tools to copy your database. So I made the database restore+recovery with our DB tools and continued withthe SAPINST and Import.
Afterwards the ABAP part and Java on the central Instance run perfect, but Java Stack is not up by both of Dialog Instances. I have checked the configtool on the server where the CI is running (the DIs are running on different linux servers) and couldn't see any entries for my dialog instances, only the CI was seable there. I tried to start configtool from the application server, but there I could find only the file config.properties in the directory /usr/sap/<SID>/.../j2ee/configtool/, others were simply not there, so it was impossible to start it. Have i forgotten something by EXPORT/IMPORT or I should just use other software for coping a System with douple stack on a CI and DIs? Or should I get configtools for Linux platform ( have searched but not found yet) and try to make the same changes wich i have done by the CI before i started Java on the CI? The most irritated point is that i can't see the dialog instanes in Configtool from the CI.
Any other suggestions and good advices?
Thanks a lot in advance.
Regards, Polina

Hi Manoj, 
I have founded following information in the work directory of one of my dialog instances ( where the java stack doesn't want to start after the copy): /usr/sap/SID/instance/work/ 
1) std_server0.out is in the condition before the system copy, no new data was written there. 
2)dev_disp 
DpJ2eeStart: j2ee state = STARTED 
DpJ2eeLogin: j2ee state = CONNECTED 
Fri Feb 26 12:58:04 2010 
ERROR => DpJ2eeMsgProcess: NiRead failed (NIECONN_BROKEN) [dpxxj2ee.c 1212] 
DpJ2eeMsgProcess: j2ee state = CONNECTED (NIECONN_BROKEN)
Fri Feb 26 12:58:20 2010 
DpJ2eeEmergencyShutdown: j2ee state = SHUTDOWN 
Fri Feb 26 12:57:20 2010 
***LOG Q0I=> NiIBindSocket: could not delete file '/tmp/.sapstream64984' for hdl 2: unlink (1: Operation not permitted) [nixxi.cpp 3207] 
ERROR => NiIBindSocket: could not delete file '/tmp/.sapstream64984' (hdl 2; errno=0) [nixxi.cpp 3214] 
WARNING => NiIBind: Could not bind local domain socket, only listening on internet socket [nixxi.cpp 3491]
It seems that java is trying to start but something goes wrong and it have to shut down
3)dev_bootstrap 
[Thr 1086335296] JLaunchIExitJava: exit hook is called (rc = 66) 
[Thr 1086335296] ********************************************************************** 
ERROR => The Java VM terminated with a non-zero exit code. 
Please see SAP Note 943602 , section 'J2EE Engine exit codes' 
for additional information and trouble shooting. 
********************************************************************** 
[Thr 1086335296] SigISetIgnoreAction : SIG_IGN for signal 17 
[Thr 1086335296] JLaunchCloseProgram: good bye (exitcode = 66)
4) jvm_bootstrap.out 
... 
Exception occurred: 
com.sap.engine.frame.core.configuration.NameNotFoundException: A configuration with the path "cluster_data/dispatcher/ID264509300" does not exist.
.. 
Exception occurred: 
com.sap.engine.bootstrap.SynchronizationException: Database initialization failed! Check database properties! 
 at com.sap.engine.bootstrap.Bootstrap.initDatabaseConnection(Bootstrap.java:476) 
 at com.sap.engine.bootstrap.Bootstrap.<init>(Bootstrap.java:146) 
com.sap.engine.bootstrap.SynchronizationException: No such Dialog Instance (ID264509300) in the database! Check database consistency or local Bootstrap properties! 
[Bootstrap module]> Problem occurred while performing synchronization.
j2ee/instance_id = ID2645093 <--- that is the ID of those DI where i took these traces from. So it seems that this ID is not in the database at all. Probably the infromation about the java stack of my DIs was not exported at all...
Thanks in advance. 
Regards, 
Polina

Uninstall J2ee Dialog instance on UNIX environment

HI Everyone,
I am trying to uninstall J2ee Engingine Dialog instance. I saw the procedure on the install document and it talks about deleting the files manually and also i have this not 871523 which says removing dialog instance from database after uninstallation.
I am searching for unistall tool. uninstsap script in Unix. Can someone guide me where i can find it. I am using Was 640 sp 12. Thanks for your help in advance.
Regards
Harish

You should have an Unix user for each version Why do you mean that?
You can have all oracle home with the same user.
$ id -Gn
dba ...
$ export ORACLE_HOME=/u01/app/oracle/product/7.3.4.0
$ export ORACLE_SID=DB1
$ svrmgrl
connect internal
startup$ export ORACLE_HOME=/u01/app/oracle/product/8-9-10
$ export ORACLE_SID=DB2
$ sqlplus "/ as sysdba"
startup$

Dialog Instance Java is not up after restoring the DB from Stand alone

Dear Gurus,
We are migrating our Stand alone Production (Dual Stack) system to Cluster hardware and we donu2019t have any dialog instances for Standalone Production system.In the process we have taken the backup from the stand alone system and restored in cluster.
After that, the dialog instance Java in is not coming up but central instance java was working fine
As per our analysis, due to only one entry is there for java in the stand alone database and the same database backup is restored in the cluster, the DI instance java is not coming up. Please any body give us the solution to resolve this issue.
Your earliest reply is very much appreciated.
Regards
Kali

Dear Manoj,
Thanks for your reply.
My Problem was solved.
As per SAP , it won't suggest or support the DB refresh. so did export and import then it was working fine.

Wireless video link example works with antenna only but not with SMA to SMA cable

I am trying to run wireless video link example https://decibel.ni.com/content/docs/DOC-22728 . It works fine if I use install antennas on my Tx and Rx USRPs. But it does not work if I use SMA to SMA cable to connect Tx and Rx USRPs. Can somebody guide me what is the reason why it is only workng with antennas but not with SMA to SMA cable.
Thanks
JK

I connect the 30 dB attenuator at RF input port of Rx USRP. But it does not work completely.
Without connecting attenuator i was not able to receive any thing on my Rx VI although it shows waveform. But after connecting attenuator receiver some times receive text messages and some times not. Also it does not work at all for images and for video it works partially but gives some error related to memory full after few mins.
I want to know why this example works completely without any problem if I use antennas, and why it does not work perfectly if i use sma to sma cable for connecting transmit and receive usrps.
Please guide
Thanks
JK

Review: Arch: Pros Only, But Not Bad

Saw this on Tux Machines. A very simple review.
distrogue.blogspot: Arch Linux is one of the few distributions to be optimized for an i686 processor- in other words, it's really fast without having to compile anything. It uses a custom package manager called Pacman.
Overall: 3.2/5- A solid distribution, but not recommended for newbies.

fflarex wrote:
I think it was a pretty bad review. It seemed to me like he was trying to review Arch using the same criteria as he would if he were reviewing other distros, without taking into account the different goals that Arch is built on. He acknowledged that Arch was only for "pros," but continued to review it as if it were not. Arch may only be suitable for competent linux users, but as far as similar distros go, Arch still greatly simplifies most administration tasks. I really don't understand how he only gave a 3.5/5 for package management, citing "too many options" and a lack of a GUI. Last I checked, a GUI was not an integral part of package management, but is handled by separate programs (and isn't there a packagekit backend being developed by someone around here?).
Off topic, but I also just have to say that xabbott: you have the coolest avatar ever!
Yea, he reviewed it as a Ubuntu user would review it, not reviewing it compared to EVERY distro or reviewing it on it's own merit. For example:
Slackware = MUCH harder to install, but he didn't mention that
Gentoo = Source-based distro...He said it's harder to install, but i always found it just as easy, perhaps easier if you don't count the time you wait around for it to compile

How can I allow send referrers in site (same domain) only but not between sites?

I don't want other sites to know from which site I went there. (Sending referrer between sites.) However, some sites only function when referrer is sent on site (same domain).
Is there a way to accomplish this? No sending referrers between sites but in sites: yes? If not Firefox, Chrome?
Thanks.

Hi , I think this addon is what you need [https://addons.mozilla.org/en-US/firefox/addon/refcontrol RefControl]
About this Add-on:
You create a list of sites, and the referrer that should be sent for each site. You can choose to send that referrer unconditionally or only for third-party requests. Additionally, you can specify the default behavior for any site not in the list.

EPP for K9N2 Platinum/Diamond only but not for K9N2G?

Can K9N2G NEO-FD read SLI-READY DRAM's EPP data and set to run EPP enabled 1066 automatically just like nVidia 750a or 780a boards, without causing overheat or durability problems? According to Newegg and NextWarehouse, K9N2G NEO-FD runs 1066 in overclock fashion while K9N2 SLI platinum's and Diamond's spec showing 1066 is naturally supported. But, in MSI's web site, there is no difference shown on 1066 support.

It should, but I would still call it overclock settings. An overclock situation (FSB-wise) is the only chance you really have any benefit from 1066 memory.
http://global.msi.com.tw/uploads/test_report/TR10_1460.pdf
Oh, about EPP I don't know.

Jdev11 complains about public instance variables, but not Jdev10

Hi all, if I fire up Jdeveloper10 I can declare a public instance variable. (OK, stylistically maybe not a good thing, but nothing in the java 'rules' that says I shouldn't be able to do this.) However in Jdeveloper11 it complains, it underlines it in red and grumbles "should not have greater than protected access."
Anyone know where to turn off this compiler hint?
thanks.
public class Thing() {
public String bob; // complains in jdev11, ok in jdev10.

Hi Kevin, thanks for the tip. It's taken me years just to remember where to turn on the line numbers in 'preferences' , so I would never have found that one about the instance variable checks ! Frank, thanks for the update, I agree it's useful as a stylistic hint, but I think that the Jdev floating code assist, rather than just hinting "declare this field protected" (as this will obviously fix it) would be more user-friendly if it also said "or disable under preferences - code assists." But Jdev11 is growing on me, tons of cool stuff :-)
thanks all.

HT204053 I have two apple ID's and it's causing problems in my contacts. It repeats the same address and sometimes displays email address only but not the full contact details? How do I get my contact list the same in all my devices (iMac, iPhone & iPad (

I have two Apple ID's and it's casing problems on my contact list as it repeats the address in somecases and in others it only displays email address for a contact. I want to have the same contact list and details on all my devices (iMac, iPhone 4S & iPad Mini)? Is it possible?

By using 1 of the 2 ID's instead of both, choose one, move everything in the other one to the one you chose and stop using it.

Attempting to use certreq -enroll to enroll to a client authentication certificate works with Windows 8, but not with Windows 7...

This has been an issue for a while now. Trying to use certreq -enroll -machine [Template Name] on Windows 7 machines fails with not implemented. When I run this command with the -q flag I see that the certificate I want is unavailable and displays:
A valid certification authority (CA) configured to issue certificates based on this template cannot be located, or the CA does not support this operation, or the CA is not trusted.
When I go into the properties of this certificate and goto the Certification Authority tab and check the "Show all enrollment servers" it shows my server greyed out with this message:
The system could not determine if you can access this certificate. Not implemented.
The template sits on a enterprise 2003 server CA and this process works with Windows 8.1 machines. Which means that the template has the correct permissions and is issued correctly.
Is this a known issue with Windows 7 or am I missing something in the config? Help is greatly appreciated.
Thanks,

Hi
I have done some tests on a Windows 7 Enterprise machine and a Windows 8.1 Enterprise machine, it turns out that I have the same issue with you.
On the Windows 7 machines, I cannot use Certreq.exe to request machine certificates, but I can successfully request user certificates, and there is no issue with the Windows 8.1 machine.
Best Regards,
Amy
Interesting. From what I can tell, there are no patches that fix this issue either...

TS4148 I am from India. i was updating my iphone 3gs but in between got an error(6) and then my phone was not able to do anything. hence i restored my phone and now its being started only but not accepting SIM card hence can't proceed further.

SIM card not accepting, hence can't process fruther

Hi @imobl,
You sound like an Apple support guy who hasn't been able to answer my questions.
To respond to some of the points you made,
- I did not ignore Ocean20's suggestion. If you has read my post, you would have known that I took my phone to the apple service centre where they tried this restore on THEIR machines. I am assuming that Apple guys know how not to block iTunes. So I actually do not understand your point about me trying the hosts file changes on my machine. Do you not believe that apple tested this issue with the correct settings?
- you also give a flawed logic of why the issue is a hardware issue. You mentioned that If I thought that the issue was with the software, i should try a restore and getting it to work. The problem is that my error (23), and many others comes up when the restore fails. And you would be astonished to know that not all errors are hardware errors. Sometimes even software errors prevent restores. Funnily enough Apple itself mention that 'in rare cases, error 23 could be hardware related'.
- all Apple has done so far is replicate the issue. I don not know how anyone can conclude that the issue is a hardware issue.
And by the way, I am not certain that this is a software bug. Again if you read my Posts, you will notice I only want a confirmation,/proof that the issue is hardware related as they mention..
Please refrain do. Responding if there is nothing to add.

Youtube in opening in older firefox v10 only but not in newer one.

Using WINDOWS 7, when i updates my firefox from 10 to 23, youtube page stop loading ( page not found) in newer firefox.. at same time youtube was working on my cell phone and also on laptop having firefox v10,, i restore older version 10 and youtube start load and work fine..
NOTE: youtube still not loading on any other latest browser but just loading on firefox 10

Many site issues can be caused by corrupt cookies or cache.
* Clear the Cache
Press the '''<Alt>''' or '''<F10>''' key to bring up the tool bar.
Followed by;
Windows; '''Tools > Options'''
Linux; '''Edit > Preferences'''
Mac; ''application name'' '''> Preferences'''
Then '''Advanced > Network > Cached Web Content: Clear Now'''
and
* Remove Cookies
Press the '''<Alt>''' or '''<F10>''' key to bring up the tool bar.
Followed by;
Windows; '''Tools > Options'''
Linux; '''Edit > Preferences'''
Mac; ''application name'' '''> Preferences'''
Then '''Privacy.'''
Under '''History''', select Firefox will '''Use Custom Settings'''.
There is a button on the right side called '''Show Cookies'''.
If there is still a problem,
'''''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode]''''' {web link}
While you are in safe mode;
Press the '''<Alt>''' or '''<F10>''' key to bring up the tool bar.
Followed by;
Windows; '''Tools > Options'''
Linux; '''Edit > Preferences'''
Mac; ''application name'' '''> Preferences'''
Then '''Advanced > General.'''
Look for and turn off '''Use Hardware Acceleration'''.
Poke around safe web sites and see if there is still a problem. Then restart.

Cannot get mail, server unavailable error message n my Yahoo account only, but not on others

Although I have no problem getting hotmail and other yahoo account messages, my PRIMARY email account has been returning an error message "Cannot get mail, server unavailable". But my server is working just fine for everything else except my main yahoo account. Could anyone shed some light on this for me? Thank you all!!

iOS: Unable to send or receive email
http://support.apple.com/kb/TS3899
Can’t Send Emails on iPad – Troubleshooting Steps
http://ipadhelp.com/ipad-help/ipad-cant-send-emails-troubleshooting-steps/
Setting up and troubleshooting Mail
http://www.apple.com/support/ipad/assistant/mail/
Server does not allow relaying email error, fix
http://appletoolbox.com/2012/01/server-does-not-allow-relaying-email-error-fix/
Why Does My iPad Say "Cannot Connect to Server"?
http://www.ehow.co.uk/info_8693415_ipad-say-cannot-connect-server.html
iOS: 'Mailbox Locked', account is in use on another device, or prompt to re-enter POP3 password
http://support.apple.com/kb/ts2621
The iPad's Mail app has no provisions for creating groups. However, you can use a third party app that many users recommend.
MailShot - https://itunes.apple.com/us/app/mailshot-pro-group-email-done/id445996226?mt=8
Group Email - https://itunes.apple.com/us/app/group-email!-mail-client-attachments/id380690305 ?mt=8
iPad Mail
http://www.apple.com/support/ipad/mail/
Configuration problems with IMAP e-mail on iOS with a non-standard SSL port.
http://colinrobbins.me/2013/02/09/configuration-problems-with-imap-e-mail-on-ios -with-a-non-standard-ssl-port/
Try this first - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
Or this - Delete the account in Mail and then set it up again. Settings->Mail, Contacts, Calendars -> Accounts Tap on the Account, then on the red button that says Remove Account.
 Cheers, Tom

Siteminder authentication on j2ee Dialog Instances only but not on C.I

Similar Messages

Maybe you are looking for