SNC on Clustered BOBJ 3.1
Hello --
We are taking advantage of SNC to schedule publications that can be used in Xcelsius dashboards via LiveOffice, but this seems to fail periodically due to our clustered environment. We have 3 nodes in the cluster, and the Publications succeed as long as (the correct) one Adaptive Job Server is enabled, and the other two are disabled. It has to be a specific one, and it has changed when the servers were rebooted....Publications then fail with the "Unable to reconnect to the CMS <SERVERNAME>:6400. The session has been logged off or has expired. (FWM 01002)" error until the right Adaptive Job Server is enabled and the others disabled.
This seems to be a problem with the combination of SNC and the cluster. Any ideas?
Thanks for any help!
Casey
Hi,
It looks that the problem is due to your email server. Maybe, for this publications, the email address are different and your server is changing the attachment.
Try to send this publication to only one person and see if the behaviour is the same.
Another test is to send it to destination: FTP or file and see if that works.
Ask your mail administrator if there is some information in the logs for this particular mail.
Regards,
Julian
Similar Messages
-
Hi
I've connected server-side trust for BOBJ and SAP BI from documentation and generated .crt and .pse files.
Does anyone know how to verify that it works ok?
Is it from web intelligent? Like Single sign on directly to SAP?
regards JacobHi,
configuring the SAP authentication in the CMC with SNC does not validate it as you are only configuring Server side trust.
if you are able to schedule a Web Intelligence report with SSO configured in the Universe and it works - then it is correct.
You can also trace the details and you should see something like this in the trace:
ASHOST=<server> SYSNR=XX CLIENT=XXX LANG=EN SNC_MODE=1 SNC_QOP=9 SNC_LIB=<path> SNC_PARTNERNAME=<snc name> SNC_MYNAME=<SNC Name> EXTIDTYPE=UN EXTIDDATA=<user name>
Ingo -
BO SSO (SNC) is not working in InfoView
Hi Gurus,
We are facing a very strange scenario in our Production environment.
The BO SSO (SNC) is working fine in Dev and QA. The problem is in Production (clustered environment).
The details are following:
The SIA is running in 3 different servers (for load balance): Server1 (our CORE server), Server2, and Server3
CMS is running only in Server1, it has been stopped in Server2 and Server3.
Also we have 4 WebI Processing Servers in each server (4 x 3 = 12). Like below:
Server1.WebI Processing Server
Server1.WebI Processing Server1
Server2.WebI Processing Server
Server2.WebI Processing Server1
Server3.WebI Processing Server
Server3.WebI Processing Server1
The TOMCAT is running in a separate server (Server4). It is pointing to Server1 since CMS is in Server1.
SNC configuration steps are following:
1. Generated BO certificate (BO.crt) in all three BO servers. Ie., BO.crt is available in all 3 servers.
2. Imported the BO certificate in SAP. Then generated SAP certificate (SAP.crt).
3. Imported the SAP certificate in all 3 BO servers.
4. Provided SSO credential for domain user in all 3 servers. [Domain user is same in all 3 servers]
5. In CMC SAP filled the Entitlement system, SNC, Options.
6. Imported the SAP users.
7. Aliased the WindowsAD users to SAP Roles.
Scenario 1:
1. Logged in to Designer via SAP Authentication with user id USER1. Created a new test universe (Universe1) with option u2018Use single sign-on...u2019
Universe is working fine. Exported it to repository.
2. Logged into InfoView via WindowsAD with user id USER1.
Created a test report (Report1) from the SSO universe. Report is working fine.
Saved the report into the public folder.
3. Logged into InfoView via WindowsAD with user id USER2.
Refreshed the saved report. But itu2019s throwing the error message u201CUnable to connect to SAP BW server Incomplete logon datau201D
Created a new report from the SSO universe, but same above error message.
Scenario 2:
1. Logged in to Designer via SAP Authentication with user id USER2. Created a new test universe (Universe2) with option u2018Use single sign-on...u2019
Universe is working fine. Exported to repository.
2. Logged into InfoView via WindowsAD with user id USER2.
Created a test report (Report2) from the SSO universe. Report is working fine.
Saved the report in the public folder.
3. Logged into InfoView via WindowsAD with user id USER1.
Refreshed the saved report. But it is throwing error message u201CUnable to logon to BW logon data imcompleteu201D
Created a new report from the SSO Universe, but same above error message.
Note:
- I donu2019t have Xcelsius in my machine. BOE and Integration kit both are in same version (XI 3.1 sp3).
- We used IP address as Application server in CMC SAP and Universe Connection Parameter.
Sofa log detail is following:
Wed Jun 08 01:51:31.414 ThreadID<7180> SAPMODULE : Calling m_pRfcWrapper->RfcOpenEx() ...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : RfcOpenEx(...) returned 0
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Unable to connect to SAP BW server connection closed without message (CM_NO_DATA_RECEIVED)Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Call to m_pRfcWrapper->RfcOpenEx() took 0.047 seconds
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Unable to authenticate using SNC because the URI does not meet the minimum connection requirements.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Warning: SNC was enable and failed. The authentication process is falling back to secondary Credentials...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Determining if we can connect using SSO. Calling CanAuthenticate...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Authentication model for SAP connectivity is SSO
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Serialized session exists, try deserializing it.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : The SAP SSO authentication process will fail because the SAP secondary credential are not properly updated and the password is blank.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : SAPSSOAuthenticationService::~SAPSSOAuthenticationService
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : SAPSNCAuthenticationService::~SAPSNCAuthenticationService
Why it is behaving like that?
Thanks for your help.
regards,
Kiruba v.r.Hi,
Server side trust configuration is well documented as part of the installation guide for the SAP Integration Kit.
Server side trust does NOT require a SNC user on the entitlement system page.
Ingo -
SAP SNC Server Side Trust Setup Problems
Single Server BOE instalation of BOE 3.1 SP4 to Windows 2008 R2 machine
Sap version 720 Patch level 7
We have used kbase article 1500150 and 1396213 to run thorugh the configuration and testing and all has checked out.
We are unable to have the "roles" returned when any "DN" value is entered in the SNC name entry in the entitlement systems tab.
We have turned on RFC tracing and have run the JCO test The RFC trace file is below followed by the JCO test information. JCO test was run twice, once with each DN just to make sure.
Please help
=======================RFC TRACE===========================
ERROR file opened at 20111116 174146 Eastern Standard Time, SAP-REL 720,0,93 RFC-VER 3 MT-SL
T:3988 Error in program 'CMS': ======> SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed
Connect_PM GWHOST=torsbid01.cpr.ca, GWSERV=sapgw00, SYSNR=00
LOCATION CPIC (TCP/IP) on local host with Unicode
ERROR GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged
on) (USER
name="p:CN=BOEDEV, OU=BOBJ, O=CPR, C=CA"
TIME Wed Nov 16 17:41:46 2011
RELEASE 720
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxxall.c
LINE 1439
DETAIL SncPAcquireCred
SYSTEM CALL gss_acquire_cred
COUNTER 55
T:2800 Error in program 'CMS': ======> SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed
Connect_PM GWHOST=torsbid01.cpr.ca, GWSERV=sapgw00, SYSNR=00
LOCATION CPIC (TCP/IP) on local host with Unicode
ERROR GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged
on) (USER
name="p:CN=BOEDEV, OU=BOBJ, O=CPR, C=CA"
TIME Wed Nov 16 17:41:46 2011
RELEASE 720
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxxall.c
LINE 1439
DETAIL SncPAcquireCred
SYSTEM CALL gss_acquire_cred
COUNTER 4
T:4760 Error in program 'CMS': ======> SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed
Connect_PM GWHOST=torsbid01.cpr.ca, GWSERV=sapgw00, SYSNR=00
LOCATION CPIC (TCP/IP) on local host with Unicode
ERROR GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged
on) (USER
name="p:CN=BOEDEV, OU=BOBJ, O=CPR, C=CA"
TIME Wed Nov 16 17:41:46 2011
RELEASE 720
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxxall.c
LINE 1439
DETAIL SncPAcquireCred
SYSTEM CALL gss_acquire_cred
COUNTER 3
========================JCO TEST=======================
E:\BusinessObjects\javasdk\bin>java -classpath E:\BusinessObjects\Tomcat55\share
d\lib\sapjco.jar com.sap.mw.jco.support.JRfcTest
SAP JCo Client Test *
Possible SAP JCo-Tests
1. RFC_SYSTEM_INFO
2. CONNECTION
3. PERFORMANCE
4. INHOMOGENEOUS STRUCTURE/TABLE
15. TRANSACTIONAL RFC
99. Exit
Your Choice....... :2
SAP JCo TEST - CONNECTION TEST
Send message and wait for ECHO/INFO
CONNECTION PARAMETERS:
Server is R/2, R/3 or External (2/3/F/E): 3
Use load balancing (Y/N)Y...............: Y
R/3 system name.........................: BIN
Message server..........................: binmain
Selected group..........................: PUBLIC
Working with SNC (Y/N)N.................: N
RFC-SPECIFIC PARAMETERS:
Working with ABAP debugger (Y/N)N.......: N
Use SAPGUI (Y/N)N.......................: N
RFC trace (Y/N)N........................: N
JCo trace level (0-10)..................: 0
SAP LOGON DATA:
Client..................................: 000
UserID..................................: SAPCPIC
Password................................: XXXXXX
Language (E)............................: E
#Calls of this JCo Test...................: 1
Do You Want To Test With These Parameters (Y/N).. :N
CONNECTION PARAMETERS:
Server is R/2, R/3 or External (2/3/F/E): [3] :3
Use load balancing (Y/N)Y...............: [Y] :N
Host name of an application server......: [binmain] :torsbid01.
cpr.ca
System number...........................: [53] :00
Working with SNC (Y/N)N.................: [N] :Y
SNC Library Name........................: [C:\Program Files\SEC
UDE\SECUDE for R3\secude.dll] :E:\SAP\Crypto\sapcrypto.dll
SNC name of partner program.............: [s:sample@hs0335] :p:
CN=BOEDEV, OU=BOBJ, O=CPR, C=CA
RFC-SPECIFIC PARAMETERS:
Working with ABAP debugger (Y/N)N.......: [N] :N
Use SAPGUI (Y/N)N.......................: [N] :Y
Automatically invisible SAPGUI (Y/N)N...: [N] :Y
RFC trace (Y/N)N........................: [N] :Y
JCo trace level (0-10)..................: [0] :10
SAP LOGON DATA:
Client..................................: [000] :200
UserID..................................: [SAPCPIC] :Crystal
Password................................: [******] :Welcome1
Language (E)............................: [E] :
#Calls of this JCo Test...................: [1] :
Do You Want To Test With These Parameters (Y/N).. :y
>>>>>>>>>>>>>>>> SAP JCo TEST - CONNECTION TEST >>>>>>>>>>>>>>>>
main [18:02:41:758]: [JAV-LAYER] INFO: JCo version is 2.1.10 (2011-05-10)
main [18:02:41:758]: [JAV-LAYER] JCO.setProperty("jco.trace_level", "10")
main [18:02:41:758]: [JNI-LAYER] RFC.nativeSetTraceLevel() with r
c = RFC_OK leave, [SUCCESS]
main [18:02:41:758]: [JAV-LAYER] JCO.setProperty("jco.trace_path", ".")
Stack trace of call to JCO.setProperty("jco.trace_path", ".")
at com.sap.mw.jco.JCO.setProperty(JCO.java:554)
at com.sap.mw.jco.JCO.setTracePath(JCO.java:791)
at com.sap.mw.jco.support.JRfcTest.correctProperties(JRfcTest.java:1047)
at com.sap.mw.jco.support.JRfcTest.initCall(JRfcTest.java:1074)
at com.sap.mw.jco.support.JRfcTest.runConnectionTest(JRfcTest.java:737)
at com.sap.mw.jco.support.JRfcTest.main(JRfcTest.java:203)
E:\BusinessObjects\javasdk\bin>java -classpath E:\BusinessObjects\Tomcat55\share
d\lib\sapjco.jar com.sap.mw.jco.support.JRfcTest
SAP JCo Client Test *
Possible SAP JCo-Tests
1. RFC_SYSTEM_INFO
2. CONNECTION
3. PERFORMANCE
4. INHOMOGENEOUS STRUCTURE/TABLE
15. TRANSACTIONAL RFC
99. Exit
Your Choice....... :2
SAP JCo TEST - CONNECTION TEST
Send message and wait for ECHO/INFO
CONNECTION PARAMETERS:
Server is R/2, R/3 or External (2/3/F/E): 3
Use load balancing (Y/N)Y...............: Y
R/3 system name.........................: BIN
Message server..........................: binmain
Selected group..........................: PUBLIC
Working with SNC (Y/N)N.................: N
RFC-SPECIFIC PARAMETERS:
Working with ABAP debugger (Y/N)N.......: N
Use SAPGUI (Y/N)N.......................: N
RFC trace (Y/N)N........................: N
JCo trace level (0-10)..................: 0
SAP LOGON DATA:
Client..................................: 000
UserID..................................: SAPCPIC
Password................................: XXXXXX
Language (E)............................: E
#Calls of this JCo Test...................: 1
Do You Want To Test With These Parameters (Y/N).. :n
CONNECTION PARAMETERS:
Server is R/2, R/3 or External (2/3/F/E): [3] :3
Use load balancing (Y/N)Y...............: [Y] :N
Host name of an application server......: [binmain] :torsbid01.
cpr.ca
System number...........................: [53] :00
Working with SNC (Y/N)N.................: [N] :Y
SNC Library Name........................: [C:\Program Files\SEC
UDE\SECUDE for R3\secude.dll] :E:\SAP\Crypto\sapcrypto.dll
SNC name of partner program.............: [s:sample@hs0335] :p:
CN=BOEDEVSERVER, OU=BOBJ, O=CPR, C=CA
RFC-SPECIFIC PARAMETERS:
Working with ABAP debugger (Y/N)N.......: [N] :N
Use SAPGUI (Y/N)N.......................: [N] :Y
Automatically invisible SAPGUI (Y/N)N...: [N] :Y
RFC trace (Y/N)N........................: [N] :Y
JCo trace level (0-10)..................: [0] :10
SAP LOGON DATA:
Client..................................: [000] :200
UserID..................................: [SAPCPIC] :Crystal
Password................................: [******] :Welcome1
Language (E)............................: [E] :
#Calls of this JCo Test...................: [1] :
Do You Want To Test With These Parameters (Y/N).. :y
>>>>>>>>>>>>>>>> SAP JCo TEST - CONNECTION TEST >>>>>>>>>>>>>>>>
main [18:04:58:041]: [JAV-LAYER] INFO: JCo version is 2.1.10 (2011-05-10)
main [18:04:58:041]: [JAV-LAYER] JCO.setProperty("jco.trace_level", "10")
main [18:04:58:041]: [JNI-LAYER] RFC.nativeSetTraceLevel() with r
c = RFC_OK leave, [SUCCESS]
main [18:04:58:041]: [JAV-LAYER] JCO.setProperty("jco.trace_path", ".")
Stack trace of call to JCO.setProperty("jco.trace_path", ".")
at com.sap.mw.jco.JCO.setProperty(JCO.java:554)
at com.sap.mw.jco.JCO.setTracePath(JCO.java:791)
at com.sap.mw.jco.support.JRfcTest.correctProperties(JRfcTest.java:1047)
at com.sap.mw.jco.support.JRfcTest.initCall(JRfcTest.java:1074)
at com.sap.mw.jco.support.JRfcTest.runConnectionTest(JRfcTest.java:737)
at com.sap.mw.jco.support.JRfcTest.main(JRfcTest.java:203)
E:\BusinessObjects\javasdk\bin>
Edited by: Joseph Borojevic on Nov 17, 2011 12:07 AMThe error in the logs: u201CNo credentials found for this name (not logged on)u201Du201D usually is a problem with case.
We used the sapgenpse get_my_name command and found that the id being referenced was being pulled incorrectly with wrong case.
The problem was the ID we logged into the remote sesison into the windows server with.
That ID is the ID that the commands are run under.
The sapgenpse seclogin u2013p BOESERVER.pse command takes the ID of the user you are logged into the session with.
We re-ran the command when logged in with the user with the correct case and it worked -
Problem with SNC logon to Analyzer
Hi friends
We configure SNC for BW system logon. It works fine for GUI. But when we use Analyzer the problem occurs:
Ｍｉｓｓｉｎｇ ＳＮＣ＿ＬＩＢ＝IN CONNECT_PARAM IN RfcOpenEx
Why this happen?
we have done the checking:
existence of Kerberos dll in /windows/system32
active directory settings for a SAPServiceSID user
advance setting in saplogon
It looks fine. Do we miss sth? Maybe there's some configuration for Analyzer? Thank you very much.We were attempting standard publishing configuration but it would not work until SNC was installed. Once installed the publishing worked. But that's when the authentication issues started.
We can login to infoview with SAP credientials no problem. But with the SNC turned on in BOBJ, its as if that first login means nothing. If you attempt to execute a report it shows cached paramaters and is apparently not authenticating against our SAP backend system. When you turn the SNC off via the CMC in BOBJ, the reports execute correctly authenticating against SAP backend.
With SNC on, if you try to execute a report, nothing happens. As mentioned above, it's as if it's not communicating with the backend data source. With SNC off, all works well but we just can't do the publishing/bursting.
Thanks again,
Sage -
Hi Ingo and others,
I have two situations and need your input
I have configured the SNC between BOBJ and SAP by exchange of certificates.
I am able to create Universe thru a connection as u201Cuse SSO when refreshing the report on runtimeu201D Or by a u201Cusing mapped credentials in BOEu201D
When I am creating a WebI report using this universe It fails with an error, Logon failure connecting to the SAP BW system.
Can you please let me know what I am missingu2026
Thanks
GopiWe have Configured SAP for SNC Connectivity and added certificate for BOBJ Server
We have configured BOBJ for SNC and added certificate for SAP Server
In CMC we set up the SNC and Entitled systems and that authentication works. The roles are downloaded and we know that the SNC connection is working by removing the certificate in SAP and the connection will fail.
We have configured Webseal to athenticate using LDAP and connect to InfoViewApp.
We have configured Tomcat's web.xml file to enable single sign on.
When we launch url for InfoViewApp using Webseal junction, are connected to BOBJ are can navigate through a list of reports.
BUT
When we select a webi report to display, we get:
CSecSAPR3Binding::XRFCCnxBroker::BorrowConnection() failed. See
following log entries for details. Failed while trying to log on to SAP
system. The following RFC error was returned: [Group, Key, Message]:
[102, ""RFC_ERROR_COMMUNICATION"", ""Connect to SAP gateway failed
Connect_PM GWHOST=vb05cs01, GWSERV=sapgw00, ASHOST=vb05cs01, SYSNR=00
LOCATION CPIC (TCP/IP) on local host ERROR Unable to load the GSS-API
Shared Library named "/apps/bobjxi31/sapcrypto/libsapcrypto.so" TIME
Thu Dec 16 11:38:27 2010 RELEASE 640 COMPONENT SNC (Secure Network
Communication) VERSION 5 RC -1 MODULE sncxxdl_mt.c LINE 342 DETAIL
SncPDLInit SYSTEM CALL dlopen COUNTER 10 ""].
Does anyone know what we are missing? -
BOE-XI 3.1 SP2
Cluster with Two (2) physical servers (Win 2008) hosting all services.
Tomcat is installed on both physical servers.
We have cluster named as @boprd and all the web.xml files have been adjusted as per install guide. (Noticed that the registry doesn't get automatically updated after updating the SIA with cluster name boprd, we manually edited).
CMS clustering seems to be working fine, we tested by stoping SIA on one node. But if you stop tomcat also, it doesn't.
Anywhere the cluster name with IP need to defined?!
We would like our end user to connect to InfoView or anyother client tools using the clustername instead of physical server name.
Don't want the end-users of InfoView to see/know the underlying server names (eg. boe1 and boe2) in the URL for the CMC / InfoView - or in the CMS
Name on the login screens for those applications.
For Example: http://boe1:8080/CmcApp/logon.faces
http://boe2:8080/InfoViewApp/logon.jsp
Any suggestions to achieve this would really be appreciated.
Thanks!You cannot use the Bobj cluster name to access the web applications for a couple of reasons: the syntax is illegal (ignoring username/password embedding) and your DNS server doesn't know anything about a Bobj cluster.
The preferred approach is to implement a software or hardware load balancer, cluster (or just load balance) your Tomcat instances and assign it a domain name of your choosing (e.g. boprod.company.com). Once in place, your users would go to http://boprod.company.com/InfoViewApp/logon.jsp and do not have to be exposed to the encapsulated server names. You also get high availability (and possibly fail over) for "free". -
HOW-TO CLUSTER BOBJ XI 3.1 on HP-UX with MySQL
Hello,
I need to understand how to perform an installation of BOBJ XI 3.1 on HP-UX in a cluster.
The official documentation it's a bit weird.
Someone can give more hints on the steps to follow? what should be installed on the first node , what in the second and what is clustered?
I think MySQL should be clustered before that.
any suggestion?So, you have 2 HP-UX boxes and you want to install BOE on both using default mysql DB and cluster those nodes together - correct ?
1. you don't need to cluster mysql, you should probably not even use mysql and use another DB located on a separate box.
2. You install BOE on server 1, make sure all is working.
3. You install BOE on server 2 and select expanded install scenario in the wizard, when asked for CMS server - give name of the server 1 install. follow the prompts.
#2 and 3 assume you have setup a DB to host CMS DB for BOE on a third server.
If you want to use mysql on server 1 as the CMS DB for the cluster (which is a bad idea) , then you have to connect to mysql DB and enable remote access to it.
you can google the steps fro that. -
Giving BOBJ access to SAP User IDs
Hi,
We have implemented SAP BI with Integration to BOXI 3.1.
We want to decide on access strategy on BOBJ.
We have noticed that once SAP Users log in to BOBJ they start appearing in BO user list as <SID>~<CLNT>/UserName
We are also able to assign BO access rights to these user IDs.
I want to know if there are any drawbacks in using the above approach for assigning BO permissions.
Please let me know if there is any document with pros and cons for this approach or is it mandatory that we always assign permission using SAP Imported Roles
Thanks
Imtiazhello Raghu,
Thank you for your suggestion
I have a Premium "BusinessObjects Enterprise Premium Version License Key Information ".The expiry is on 2010.
In the authentication there are the following option
1)Entitlement Systems 2) Role Import 3) SNC Settings 4) Options
I do not find any license option in any of these tabs.
Kindly let me know as i am not getting errors .All the roles are visible but not the users.
Thanks and Regards,
Jacob -
How to configure SingleSignOn between GRC and BOBJ 4.1
How to configure SingleSignOn between GRC and BOBJ 4.1?
We have configured the System entitlement in BOBJ CMC. But didn't do anything on the GRC system.
User can login from BOBJ to GRC with password but not with SSO.
We haven't configured SNC . I don't this for this simple flow, we need to have SNC.
We haven't set up the Trust certificate exchange as well between BOBJ and GRC.
Please help us to know what are the mandatory settings need to be done to create a Relational connection for a ERP/GRC system from BOBJ client tool IDT?
thanks,
TilakHow to configure SingleSignOn between GRC and BOBJ 4.1?
We have configured the System entitlement in BOBJ CMC. But didn't do anything on the GRC system.
User can login from BOBJ to GRC with password but not with SSO.
We haven't configured SNC . I don't this for this simple flow, we need to have SNC.
We haven't set up the Trust certificate exchange as well between BOBJ and GRC.
Please help us to know what are the mandatory settings need to be done to create a Relational connection for a ERP/GRC system from BOBJ client tool IDT?
thanks,
Tilak -
Set up Secure Network Communication for report publishing in BOBJ. Set up the SNC in SAP BI and the CMC - all seemed to work.
We noticed that with SNC turned on in BOBJ it impacted the use of infoviews. A user can no longer select paramaters and execute a report via the infoview. It's as if it stopped the communication with SAP BI.
Does anyone have an idea why SNC would stop end user report execution via the infoviews?
Many ThanksHi,
The screenshot on page 8 says p:tomsgroupsso-botest. (Our first try was without p:)
´This is what provides the error.
Anyway, what we want to do is exactly what you describe in:
/people/ingo.hilgefort/blog/2009/07/03/businessobjects-enterprise-and-client-side-snc-part-1-of-2
Namely: "Most customers use SNC to combine the user authentication of for example Windows AD with the SAP credentials"
You write the following:
To configure BusinessObjects Enterprise to use SNC you the following tasks are needed:
- Configuring BusinessObjects Enterprise servers to start and run under an appropriate user account
- Configure the SAP system to trust your BusinessObjects Enterprise system
- Configure the SNC settings in the Central Management Console of BusinessObjects Enterprise
- Map SAP users as aliases to Windows AD users.
So we are trying our best to do as described, but after having enabled SNC as desribed in the blog we are no longer able to import roles and therefore we can't complete the last point on above list.
/Thomas -
Hi,
Any advice with the below design would be helpful.
For a 3000 users and 1000 concurrent users splitting the BOBJ design on a 2 nodes:
on Node 1 - TOMCAT and BOBJ enterprise and
on Node 2 - SQL DB
Both are MS clustered - total 4 servers
Would this be able to handle the load on tomcat when 1000 concurrent.
Any recommendation would be really helpful.
ThanksHi,
where is the BW system located ? you have only one BW system I would assume.
Ans: BW system is located at west coast and the BOBJ system is located at east coast. Yes, we have only 1 BW system.
Will the second BOE Server be a completely separate system or are you just looking to put the processing tier closer to the actual data source ?
Ans: We want to have only one Enterprise BOBJ system to house both SAP and non-SAP data. Yes, you are right we are looking to put the processing tier closer to the SAP data source.
Thank you for all your time.
Regards,
Abhijit -
Importing reports from CRM to BOBJ
Hi All,
My back end system is SAP CRM. I want to import the sales orders from SAP CRM system & generate report in BOBJ. Please do let me know how to do this..?
Regards,
Archana.
Edited by: archu_sap on Jun 8, 2009 3:13 PMHi,
the documentation you refer to relates to a pre-configured report package which is available for SAP ERP systems. Some of the connectivity instructions there apply generally to the connectivity between SAP and BOBJ but not all.
Please note that you do not have to move data anywhere if you want to access your CRM table with Crystal reports.
I would suggest to take a look at this blog:
[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f]
Although Ingo describes the connectivity with SAP BW, connecting to an SAP CRM system should be similar. Please refer also to the administration and configuration guide of the integration Kit for SAP solutions.
You can use the SAP Tables, Clusters and Functions driver in the Crystal Reports Designer in order to access the R/3 tables in your CRM system directly.
Regards,
Stratos -
Hi Experts,
I have a question on Authentication.
Currently I have SSO configured bewteen BOBJ and BW , so the users will use their BW id to login into Infoview using SAP authenticatin and can refresh reports,they need to reset initial password by loging into BW.(how to avoid this,since some users wont be having SAP GUI installed,they just use infoview link)
If req needs to access some reports on top of relational univeres and some on OLAP universes,looks like we need to implement SNC or is Aliasing AD users with SAP users will help?.
How the security is impacted,since we importd BW roles and they become groups on BOBJ side.
Any input really appereciated.
Thanks,
KrishA lot of customers use the solution in KB 1500150. It involves the following
1) login to BOE with another alias other than SAP (this is usually for SSO with AD but can be used to avoid your password issue as well)
2) the login alias will need to be mapped to the SAP alias
3) then SNC server trust would be setup with sapcrypto
At this point the sap alias would be used to refresh reports with the snc trust then there would not be a need to login with SAP aliases to infoview. However if you use client tools like desiger then those users would still need to login with SAP aliases and their passwords changed in BW (if policy requires that)
Regards,
Tim -
BW hierarchies issue with BOBJ Reporting tools
Hi All,
Brief about the requirement:
Our client was using Mainframe and other tools for their reporting. Now as they have planned to go for SAP, purchased SAP BW 7 and SAP BOBJ XI 3.1 for warehouse and reporting purposes.
Initial Road map planned for implementation was
o to use Crystal for operational and formatted reporting
o to use WebI for Ad hoc and interactive reporting
o to use Xcelsius for Dashboards
Once we started analysing the requirements, we observed that client requires hierarchies extensively for reporting and they donu2019t want to compromise in that for reporting. At this situation we have explored the options and came to know from the SAP sites that BO got limitations in case of BW hierarchies. But we not able to articulate the what is the exact issue. Is it with only WebI or Crystal also?
What we have articulated is we cannot report the hierarchies in BO in terms of nodes - > Sub nodes -> sub nodes instead we can do as fixed columns. Please add me if i am missing anything else.
And also please let us know options. Options that we were thinking are Implement with BO XI 3.1 considering Advanced analysis tool then upgrade to BO XI 4.1.
Please suggest us, what is the BW & BO hierarchy issue and right tools to use.
Thanks & Regards,
BalaOur client uses XI 3.2 but is experiencing issues with Hierarchical BEX queries returning blanks - the mdx is fine - just webi that seems to have a problem and I'm also trying to determine in exactly which instances this occurs.
XI 4.x supposedly resolves mots issues but here again details are not known.
I.e. hopefully someone can point to an info source that describes in more detail what issues are likely to occur re hierarchies and webi.
Maybe you are looking for
-
Qosmio X70-B-10T - VGA output supports only 1920x1080
I'm trying to set two HP Compaq LA2405wg monitors on my Qosmio X70-B-10T, one via HDMI and the other via VGA. The monitors run @ 1920x1200. Unfortunately, whilst the HDMI screen comes out okay, the screen connected via VGA only goes up to 1920x1080.
-
Please tell me The Procedure to open apple reseller store
Hiii, I am a post graduate in Inetrnational Business And Marketing From Amity university (india) . I want to open apple reseller store or a service center. please tell me the procedure and investment Thanx Ankit Sharma <Email Edited by Host>
-
Code ceases working after months, PC only
Hi, Apologies for the cross post. We have a project that is running on Mac and PC, swf's that are loaded into a Director player. They were published November/December 2005 in Flash MX. All Director Xtras are packaged and installed with the project, a
-
HI Friends Is this landscape possible MM-RFX-SUS. Is this a std scenario for supplier enablement. Need of integrating RFx with MDM. Regards Ian
-
Are there versions of Photoshop that aren't compatible?
I'm not a professional designer, I want to buy an older (cheaper) version of Indesign to do some fun stuff on. I found a version of Indesign CS (the first CS version) which I want to buy. Only thing is, my version of Photoshop is little older as well