SMD Configuration Error - SSO - for PI 1.1 Ehp1

Hi All,
When I am running the Managed System Configuration wizard for PI 7.1 Ehp1 system I am getting an error in SSO configuration step. My Solution Manager is on SP21. It says "sap.com/com.sap.xi.mdtmdt".I have checked for this. In PI 7.1 Ehp1, I think it has been renamed to sap.com/com.sap.xi.mdt2**mdt. So it is throughing the error. Can I do this manually.
The SSO ticket Certificate <OU=J2EE,CN=SMP> has been successfully imported into ticket Keystore
The ticket ACL has been updated with : sys=SMP,000 iss=OU=J2EE,CN=SMP dn=OU=J2EE,CN=SMP
The Authentication template for component sap.com/tcmonitoringsysteminfo*monitoring has been set to ticket
The Authentication template for component sap.com/tcmonitoringsysteminfo*sap_monitoring has been set to ticket
The Authentication template for component sap.com/com.sap.xi.directory*dir has been set to ticket
The Authentication template for component sap.com/com.sap.xi.rwb*rwb has been set to ticket
SSO Setup for XI apps failed : a problem occured while changing the authentication templates
SSO setup failed : error while updating login modules : No such policy configuration: sap.com/com.sap.xi.mdt*mdt
The SSO ticket Certificate <CN=SMP> has been successfully imported into ticket Keystore
The Login Modules for validating SSO tickets were already installed
I have one more question. In one of the host the SMD Agent is already installed on Java 1.4.2. I have installed PI 7.1 ehp1 on the same VM server (on different Host), So in PI the SAP JVM is of 5.0. When I try to do the managed system configuration, it is not completing the configuration. When I connect it to the SMD with sap JVVM 5.0, it is working fine.
Do I need to have 2 SMD agents on the same host as the java version is changed?
Thanks,
Ramu J

Hi
I resolve this issue changing the roles of the user what access the UME Backend...
In my case... SPML with role SPML_FULL_ACCESS.
Add the Role Administrator and run the step again.
Note 1647157 - How to Set up Access to the SPML Service on AS Java

Similar Messages

How to configure Oracle SSO for forms and apex

Hi All,
I am trying to configure oracle SSO for forms and apex using third party external authentication. Please help me how to configure. I a have tried all possible things
from web but I am not able to do it. Is there any doc or links are much appreciated.
Info: Some reason my oiddas web link is not working it used to work fine before and also the from /pls/orasso/ link I am not able to login may be because of my oiddas issue
Thanks

Hi Andreas,
Thanks you for your help. I am trying to implement third party external LDAP authentication for APEX and Forms.
So I started with OID and SSO setup to create external Partner Applications. Some reason my oid and sso web login links are not working. I didn't find any errors. I need some help in finding the problem and direction, I already read docs on web but no proper direction. I appreciate your help.
Thanks

How to configure Oracle SSO for OBIEE

Hi all
Can anyone help me saying how to configure Oracle Single Sign-on with OBIEE?
Basically I want to enable a common login for Dashboard and answers using SSO.
I am using OBIEE 10.1.3.4 on a Redhat Linux
thanks in advance

Hi...
See this, hope this what you want...??
If not .. ignore...
Thanks & Regards
Kishore Guggilla

Configure Error messages for PS

hi to all,
i would just like to ask where i can view (in the IMG) the list off error messages in PS and how to configure them.
i also tried searching for documents about error messages and how to configure or manipulate them but i haven found, can anyone direct me where i can find such documents?
thanks in advance..

Hi Ramesh,
As per my opinion, you cant configure messages in PS, similar to other modules like MM where can control whether a message has to be error or info etc.
You may need development to address ur requirmment, may be u can share ur exact req with forum.
Regards
Edited by: Shrikant Rakate on Aug 25, 2008 10:11 AM

Please help : "Configuring Windows SSO for Sun portal server 7.1"

Hello friends,
I have a problem when create Single Sign On ( SSO ) on the portal server 7.0
If you have configured successfully.Please give me the way you have used.
Thank you very much.
DungT
Related document and information :
http://docs.sun.com/app/docs/doc/819-4670/6n6qardtu?a=view#gbaqc
http://forum.java.sun.com/thread.jspa?threadID=5140689&messageID=9519196
Edited by: dungtran on Mar 13, 2008 4:35 AM

There is a ZIP Install available for Windows that bundles the Access Manager, Directory Server,and Portal Server in a pre-configured deployment. Try this download instead:
PS 7.1u1
[https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_us/-/USD/ViewProductDetail-Start?ProductRef=PortalSvr7.1U1-OTH-G-F@CDS-CDS_SMI]
PS 7.2
[https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=PortalSvr7.2-OTH-G-F@CDS-CDS_SMI]
- Jim

How to configure login modules for certificate logon

Hello,
perhaps someone of you has also tried to implement SSO via Client Certificates and is able to help me...
I have configured the login modules for rule based authentication with the option Rule1.getUserFrom = wholeCert and I have attached my certificate to my user in useradmin.
And also added the login module to the template ticket, as suggested by the documentation at help.sap.com
But when I logon to the portal or other application (for example useradmin) via https the authentication doesn't work (but I'm still able to logon via password).
I also tried auto. certifcate mapping and mapping by subject name but in every case the system ignores the configured login module. There are no errors in the log files.
Thank You,
Frank

Hi Frank,
did you configure the SSO for an individual policy configuration or did you edit and save the changes the ticket policy config? I ask, b/c if you applied the changes to the individual policy config then the SSO with certificates will be used <b>only</b> when you access the applications for that policy config.
You can also double check the login module flags - perhaps the authentication check doesn't reach the ClientCertLM at all.
Since you followed the help portal instruction I assume you've enabled strong crypto - it is required for client cert SSO. Ano easily committed mistake is to also not use the HTTPS port in the access URL.
Let me know if this helps...
Yonko

Configuration error 3, 6

Hi,
I was using Flash Builder for a while when suddenly it refused to run. When running it gave me the message below:
It was configuration error 6 for several times, but then it switched to error 3. I'm using Flash Builder 4.6 on Windows 7.
Adobe support didn't give any help, they suggested to use adobe forums. Does anyone know how to fix this?
Thanks,
George

Hi Borys,
Thanks for your kind reply,
I have installed java-8 on my Window 8 machine, before installation of Weblogic itself and the location of JDK is "C:\Java\jdk1.8.0_25"
And the 'C:\Middleware\SOASuite11gR1PS6\wlserver_10.3\common\bin\commEnv' (windows command script file) contains the correct JAVA_HOME location by default, i.e JAVA_HOME=C:\Java\jdk1.8.0_25
While installing the weblogic serv (64-bit) , I have Opened the command prompt, navigated to the directory containing the Weblogic jar and entered the below command,
C:\Java\jdk1.7.0_35\bin\java -Xmx1024m -jar wls1036_generic.jar And successfully got installed the same.
Now, Do I still need to set the JAVA_HOME parameter on my windows ?
( FYI: when I got my windows8.1 OS with the machine, it is having default jre7 location as "C:\Program Files\Java\jre7\bin")
Thanks,
Rajesh

Error 12 for sso token ID

Hello everybody,
Here is the configuration i am trying to deploy:
- Apache server 2.0.55 secured with ssl
- Tomcat 6.0.14 also secured with ssl
- An fam-samples.war configured as IdP on tomcat
- Web agent installed on apache server
Now if a non authenticated user tries to access a resource on apache, the web agent redirect him to IdP for authentication. After giving the write login and password he's redirected to the resource initially requested. Here i got an "Internal server error" and when i looked in the amAgent file for error i found this:
<--
2007-09-17 15:17:06.594 Error 6447:98a16d8 all: LineBuffer::findEndOfLine():
2007-09-17 15:17:06.608 Error 6447:98a16d8 all: LineBuffer::findEndOfLine():
2007-09-17 15:17:06.617 Error 6447:98a16d8 all: LineBuffer::findEndOfLine():
2007-09-17 15:17:06.618 Error 6447:98a16d8 AM_SSO_SERVICE: SSOTokenService::getSessionInfo(): Error 12 for sso token ID AQIC5wM2LY4SfcxUl+Qrr8Za5tjVgKq5XRocwCegb79ttmE=@AAJTSQACMDE=#.
2007-09-17 15:17:06.618 Error 6447:98a16d8 PolicyEngine: am_policy_evaluate: InternalException in Service::initialize() with error message:Session query failed during service creation. and code:12
-->
I tried to look in the web agent configuration file AmAgent.properties for some properties to change but i didn't found the solution!
Does anyone please have an idea about this problem?
Note: If tomcat is not secured all works perfectly.
THANKS

I think the problem is due to agent configuration...
What i did is to add the property (com.sun.am.ignore.naming_service = true) to the AMAgent.properties file to disable looking for the naming service url. The problem was solved but i am not sure if it's really the good solution or not.
Any suggestions?

Error 21 for SSO Token

Hi, I have Tomcat with opensso installed on the same machine with IIS 6 + agent.
While trying to browse any of pages in IIS pages get immediately that error after authentication:
2009-10-06 11:16:43.357   Error 3240:161bd38 AM_SSO_SERVICE: SSOTokenService::getSessionInfo(): Error 21 for sso token ID AQIC5wM2LY4SfczzPs5KzV6tcQMK0T1shHOpKmXvAr8vmSQ=@AAJTSQACMDE=#.
2009-10-06 11:16:43.357   Error 3240:161bd38 PolicyEngine: am_policy_evaluate: InternalException in Service::initialize() with error message:Session query failed during service creation. and code:21
2009-10-06 11:16:43.357   Error 3240:161bd38 PolicyAgent: HttpExtensionProc(): status: HTTP error (21)Any suggestion is welcome !
Thank You !
Edited by: AlexanderL on Oct 6, 2009 11:20 AM

I think the problem is due to agent configuration...
What i did is to add the property (com.sun.am.ignore.naming_service = true) to the AMAgent.properties file to disable looking for the naming service url. The problem was solved but i am not sure if it's really the good solution or not.
Any suggestions?

The report server has encountered a configuration error. Logon failed for the unattended execution account. (rsServerConfigurationError) Log on failed. Ensure the user name and password are correct. (rsLogonFailed) Logon failure: unknown user name or bad

The report server has encountered a configuration error. Logon failed for the unattended execution account. (rsServerConfigurationError)
Log on failed. Ensure the user name and password are correct. (rsLogonFailed)
Logon failure: unknown user name or bad password
am using Windows integrated security,version of my sql server 2008R2
I have go throgh the different articuls, they have given different answers,
So any one give me the exact soluction for this problem,
Using service account then i will get the soluction or what?
pls help me out it is urgent based.
Regards
Thanks!

Hi Ychinnari,
I have tested on my local environment and can reproduce the issue, as
Vaishu00547 mentioned that the issue can be caused by the Execution Account you have configured in the Reporting Services Configuration Manager is not correct, Please update the Username and Password and restart the reporting services.
Please also find more details information about when to use the execution account, if possible,please also not specify this account:
This account is used under special circumstances when other sources of credentials are not available:
When the report server connects to a data source that does not require credentials. Examples of data sources that might not require credentials include XML documents and some client-side database applications.
When the report server connects to another server to retrieve external image files or other resources that are referenced in a report.
Execution Account (SSRS Native Mode)
If you still have any problem, please feel free to ask.
Regards
Vicky Liu
Vicky Liu
TechNet Community Support

LDAP configuration error for SampleLiteApp in OBIEE 11g

Hi Experts,
I am trying to configure the LDAP for "SampleAppLite" application which comes with OBIEE 11g default installation in OBIEE11g. I followed the following steps in the oracle document,
http://download.oracle.com/docs/cd/E14571_01/bi.1111/e10543/privileges.htm#BABCDCFE
Unfortunately i am getting the following exception when i start my OBIEE server, not only that after this also i am getting same error when i try to login using the any of the user (User is LDAP).
(initially MyBISystemUser as <user_id> )
++java.security.PrivilegedActionException: oracle.bi.security.service.SecurityServiceException: SecurityService::authenticateUserWithLanguage - '<user_id>' was authenticated but could not located within the Identity Store.++
++at oracle.bi.security.service.SecurityWebService.authenticateWithLanguage(SecurityWebService.java:185)++
++at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)++
++at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)++
++at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)++
++at java.lang.reflect.Method.invoke(Method.java:597)++
++at weblogic.wsee.jaxws.WLSInstanceResolver$WLSInvoker.invoke(WLSInstanceResolver.java:92)++
++at weblogic.wsee.jaxws.WLSInstanceResolver$WLSInvoker.invoke(WLSInstanceResolver.java:74)++
++at com.sun.xml.ws.server.InvokerTube$2.invoke(InvokerTube.java:151)++
++at com.sun.xml.ws.server.sei.EndpointMethodHandlerImpl.invoke(EndpointMethodHandlerImpl.java:265)++
++at com.sun.xml.ws.server.sei.SEIInvokerTube.processRequest(SEIInvokerTube.java:100)++
++at weblogic.wsee.jaxws.tubeline.FlowControlTube$FlowControlAwareTube.processRequest(FlowControlTube.java:155)++
++at weblogic.wsee.jaxws.tubeline.FlowControlTube$1.run(FlowControlTube.java:94)++
++at weblogic.wsee.jaxws.tubeline.FlowControlTube$1.run(FlowControlTube.java:92)++
++at javax.security.auth.Subject.doAs(Subject.java:337)++
++at weblogic.wsee.jaxws.tubeline.FlowControlTube.processRequest(FlowControlTube.java:91)++
++at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:604)++
++at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:563)++
++at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:548)++
++at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:445)++
++at com.sun.xml.ws.server.WSEndpointImpl$2.process(WSEndpointImpl.java:373)++
++at com.sun.xml.ws.transport.http.HttpAdapter$HttpToolkit.handle(HttpAdapter.java:524)++
++at com.sun.xml.ws.transport.http.HttpAdapter.handle(HttpAdapter.java:255)++
++at com.sun.xml.ws.transport.http.servlet.ServletAdapter.handle(ServletAdapter.java:141)++
++at weblogic.wsee.jaxws.WLSServletAdapter.handle(WLSServletAdapter.java:210)++
++at weblogic.wsee.jaxws.HttpServletAdapter$AuthorizedInvoke.run(HttpServletAdapter.java:311)++
am i missing any configuration? Or is it a bug in oracle OBIEE 11g? Can anyone guide me to resolve this issue.
Much appreciate your answer

Though this is little late for you but may help others.
Check default authenticator and ensure that control flag is NOT set to REQUIRED
Check here http://onlineappsdba.com/index.php/2011/06/21/unable-to-login-to-obiee-anylytics-after-oid-integration-user-was-authenticated-but-could-not-be-located-within-the-identity-store/

Error while configuring talent profile for ESS

Dear Experts
I am having following error while configuring talent profile for ESS:
The URL http://pplkhidr05.ppl.com.pk:8000/sap/bc/webdynpro/sap/hrtmc_employee_profile was not called due to an error.
Note
The following error text was processed in the system TRG : Access via 'NULL' object reference not possible.
The error occurred on the application server PPLKHIDR05_TRG_00 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: GET_PLVAR of program /1BCWDY/81IYQOEI3SKMOOB9TXW5==CP
Method: IWCI_HRTMC_TP_SHARED_DATA~GET_PLVAR of program /1BCWDY/81IYQOEI3SKMOOB9TXW5==CP
Method: OVERRIDE_EVENT_OIF of program /1BCWDY/828X5HC99194NVUUKJ30==CP
Method: IWCI_IF_FPM_OIF_CONF_EXIT~OVERRIDE_EVENT_OIF of program /1BCWDY/828X5HC99194NVUUKJ30==CP
Method: GET_UIBBS_FOR_EVENT of program /1BCWDY/7V06LYNNPH3D2G2T1W0Z==CP
Method: IWCI_IF_FPM_FLOORPLAN_COMP~GET_UIBBS_FOR_EVENT of program /1BCWDY/7V06LYNNPH3D2G2T1W0Z==CP
Method: IF_FPM_FLOORPLAN~GET_UIBBS_FOR_EVENT of program CL_FPM_OIF_INTERNAL===========CP
Method: GET_NEXT_UIBBS of program CL_FPM========================CP
Method: PROCESS_EVENT of program CL_FPM========================CP
Method: RUN_EVENT_LOOP of program CL_FPM========================CP
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system TRG in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server PPLKHIDR05_TRG_00 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 0 in transaction ST11 on the application server PPLKHIDR05_TRG_00 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Any suggestions on how to resolve the error?
Regards
Imran

Imran,
check this thread
http://forums.sdn.sap.com/click.jspa?searchID=43957204&messageID=8996092
Thanks
Bala Duvvuri

How to configure a error queue for weblogic jms topic

Hi guys.
I want to configure a error queue for weblogic jms topic. Wanted: The message goes to error destination when messages have expired or reached their redelivery limit.
1. using jms transport configure proxy service:
Retry Count :3
Retry Interval:10
Error Destination: ErrorTopic
Expiration Policy: Redirect
I tried use the proxy service to consume message from the jms topic . and generation an error in the proxy message flow. But the message didn't goes into the error topic.
Any suggestions for this topic? Can anyone provide some helps or any useful links.
Thanks in advance.
Mingzhuang

Mingzhuang
I want to configure a error queue for weblogic jms topic. Wanted: The message goes to error destination when messages have expired or reached their redelivery limit.
1. using jms transport configure proxy service:
Retry Count :3
Retry Interval:10
Error Destination: ErrorTopic
Expiration olicy: RedirectUnlike File/SFTP, JMS proxy service definition does not have the concept of Error Destination. To accomplish similar functionality go to JMSQ on (for which proxy is configured) server console (http://localhost:7001/console) and configure the Error Destination. Following URL will help in how to configure JMS Q.
http://edocs.bea.com/wls/docs103/ConsoleHelp/taskhelp/jms_modules/queues/ConfigureQueues.html
http://edocs.bea.com/wls/docs103/ConsoleHelp/taskhelp/jms_modules/queues/ConfigureQueueDeliveryFailure.html
I tried use the proxy service to consume message from the jms topic . and generation an error in the proxy message flow. But the message didn't goes into the error topic.If every thing is configured as per above step, then the after retries, the weblogic server will put the message into JMS topic configured. Your proxy will receive from this topic.
Let me know if we are not on same page.
Cheers
Manoj

[svn] 3519: Fix typo in error string for situations where there are advanced messaging configuration settings from LCDS used in the configuration files but no AdvancedMessagingSupport service .

Revision: 3519
Author: [email protected]
Date: 2008-10-08 04:17:40 -0700 (Wed, 08 Oct 2008)
Log Message:
Fix typo in error string for situations where there are advanced messaging configuration settings from LCDS used in the configuration files but no AdvancedMessagingSupport service. The error string said that there was no flex.messaging.services.AdvancedMessagingService registered but it is the flex.messaging.services.AdvancedMessagingSupport service that needs to be registered.
Add configuration test that starts the server with a destination that has the reliable property set which is an advanced messaging feature but there is no AdvancedMessagingSupport service registered.
Modified Paths:
blazeds/trunk/modules/common/src/flex/messaging/errors.properties
Added Paths:
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/error.txt
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/services-config.xml

Hi,
Unfortunately I already tried all kinds of re-installs (the full list is in my original message). The only one remaining is the reinstall of Windows 8 itself, which I would really like to avoid.
What I find really strange is the time it takes for the above error message to appear. It's like one hour or even more (never measured exactly, I left the computer running).
What kind of a timeout is that? I would expect that, if ports are really used by some other application, I get the message in less than a minute (seconds, actually). To me this looks like the emulator itself for some reason believes there's a problem with
some port while in reality there isn't.
I'll eventually contact Microsoft Support, thanks for the suggestion.
▼
▲

NWDI for the 04s preview fails with 'SLD name-server configuration error'

After the installation, everything seems to work fine except that when I go to CMS, the links on the top seems to be hardcoded to point to http://pwdf3102:50100/dtr, even in the Domain Data. When I tried to change it to my local server, it keeps complaining about "Unexpected error; inform your system administrator: <Localization failed: ResourceBundle='com.sap.cms.util.exception.CMSExceptionMessages', ID='SLD name-server configuration error', Arguments: []> : Can't find resource for bundle java.util.PropertyResourceBundle, key SLD name-server configuration error"
Any suggestions on how to work around this? Thanks.

Brian,
Try to import the model file first by going to SLD->Administration->Import CIM Model. If the problem sticks, then try to remove the systems. The preview version has lots of pre-exist system name in the technical system, which you can find giving errors since they're not reachable. So you can remove them from SLD (Home->Technical Systems) if they are preventing you from procceeding.
You need to go to http://server:port/dtr/system-tools/administration/NameServerConfiguration to update the name server as well.
Hope this helps...
Message was edited by: Yujian Yan

SMD Configuration Error - SSO - for PI 1.1 Ehp1

Similar Messages

Maybe you are looking for