SOAP Sender Adpater Authentication issue with Siebel

Hello PI experts,
I have developed scenario in which,
SAP PI version: 7.31
Sender : Siebel
Sender Adapter: SOAP
Receiver: SAP ECC
Receiver Adapter: Proxy
Scenario has been configured and wsdl is generated properly. I tested scenario using SOAP UI which gave me proper response.
But when scenario has been tested through Siebel UI, its giving Authorization 401 error.
HTTP/1.1 401 Unauthorized
server: SAP NetWeaver Application Server 7.20 / AS Java 7.31
date: Wed, 20 Aug 2014 05:54:58 GMT
We have tried following approaches:
1. Appending Credentials in URL
2. Siebel team tried sending credentials in their workflow
Referred blog:
http://scn.sap.com/community/pi-and-soa-middleware/blog/2012/03/07/a-closer-look-at-soap-sender-authentication
But in all cases we got same error.
Also, is there any possibility to turn of sender authentication for SOAP adapter ?. I tried approach of removing tags in web.xml but that also dint work.
Please suggest some way
Thanks,
Gaurav Khandelwal

Hi Gaurav,
Can you please check with your basis is that firewall will be open to send data  through soap to PI.
Thanks,
Sreenivas

Similar Messages

  • ACS 5.2 Authentication Issue with Local & Global ADs

    Hi I am facing authentication issue with ACS 5.2. Below is AAA flow (EAP-TLS),
    - Wireless Users >> Cisco WLC >> ADs <-- everything OK
    - Wireless Users >> Cisco WLC >> ACS 5.2 >> ADs <-- problem
    Last time I tested with ACS, it worked but didn't do migration as there'll be changes from ADs.
    Now my customer wants ACS migration by creating new Group in AD, I also update ACS config.
    For the user from the old group, authentication is ok.
    For the user from the new group, authentication fails. With subject not found error, showing the user is from the old group.
    Seems like ACS is querying from old records (own cache or database). Already restared the ACS but still the same error.
    Can anyone advice to troubleshoot the issue?
    Note: My customer can only access their local ADs (trusted by Global ADs). Local ADs & ACS are in the same network, ACS should go to local AD first.
    How can we check or make sure it?
    Thanks ahead,
    Ye

    Hello,
    There is an enhacement request open already:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCte92062
    ACS should be able to query only desired DCs
    Symptom:
    Currently on 5.0 and 5.1, the ACS queries the  DNS with the domain, in order to get a list of all the DCs in the domain  and then tries to communicate with all of them.If the connection to even one DC fails, then the ACS connection to the domain is declared as failed.A lot of customers are asking for a change on this behavior.
    It  should be possible to define which DCs to contact and/or make ACS to  interpret  DNS Resource Records Registered by the Active Directory  Domain Controller to facilitate the location of domain controllers.  Active Directory uses service locator, or SRV, records. An SRV record is  a new type of DNS record described in RFC 2782, and is used to identify  services located on a Transmission Control Protocol/Internet Protocol  (TCP/IP) network.
    Conditions:
    Domain with multiple DCs were some are not accessible from the ACS due to security/geographic constraints.
    Workaround:
    Make sure ALL DCs are UP and reachable from the ACS.
    At the moment, we cannot determine which Domain Controller on the AD the ACS will contact. The enhacement request will include a feature on which we can specify the appropriate the Domain Controllers the ACS should contact on a AD Domain.
    Hope this clarifies it.
    Regards.

  • Issue with SIEBEL - XI Integration with SOAP

    Hi,
    I have an issue with the integration of SIEBEL and XI via SOAP.
    In the scenario Siebel calls a synch Web Service on XI. The provided WSDL was implemented on Siebel and when Siebel calls the Web Service the message is received correctly by the XI SOAP Sender Adapter and I can see the message in the Message Monitoring (SXMB_MONI).
    The issue is during the mapping as the payload does not seem to comply with the structure XI expects in the message interface. When I load the payload of the SOAP Request send by Siebel into the Message Mapping Test Tool, all fields below the Message Type are in red. I found out that the problem lies in the way the namespace is addressed.
    The payload I receive from Siebel that is not working in the mapping looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <MT_KUNDE_CRM xmlns="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </MT_KUNDE_CRM>
    The structure that works looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <kun:MT_KUNDE_CRM xmlns:kun="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </kun:MT_KUNDE_CRM>
    The ony difference between the two is that the second messages uses a prefix (kun) for the namespace while the first does not use it, although it is correct from an XML syntax perspective.
    Can anybody help?
    Thanks in advance.
    Alex

    Hi
    Why don't you try and create a schema (XSD) which will prefix kun to the input, instead of using the message type created by XI.
    Just a suggestion.
    regards
    Sameer

  • Soap sender adpater issue missing sender interface and namespace in the msg

    Hi Expert,
    I got a problem when try to using soap sender adapter.
    Here is the sceanrio:
    Http web service client call ---PI soap sender adapter -some routing data-business system inbound.
    Sytem information:
    SAP_ABA     700     0019     SAPKA70019     Cross-Application Component
    SAP_BASIS     700     0019     SAPKB70019     SAP Basis Component
    PI_BASIS     2005_1_700     0019     SAPKIPYJ7J     PI_BASIS 2005_1_700
    ST-PI     2008_1_700     0001     SAPKITLRD1     SAP Solution Tools Plug-In
    SAP_BW     700     0021     SAPKW70021     SAP NetWeaver BI 7.0
    ST-A/PI     01L_BCO700     0000          -     Servicetools for other App./Netweaver 04
    Here is my problem. I use soapui trigger a test msg to PI system. But in the sxmb_moni, only sender service is there.
    The sender interface and sender namespace is missing. And the msg has error called: :INTERFACE_REGISTRATION_ERROR.
    Which means I do not have a inbound interface to process the msg.
    But I suppose to redirect the msg to business system.
    Here is the configuration:
    reciever determination: soap sender service, soap outbound interface, soap interface namespace --> reciever business sytem.
    Interface ditermination: soap sender service, soap interface --> receiver interface, receiver namespace.
    Sender agreement: soap service, soap itnerface --- soap communication channel
    receiver agreement, soap service---> receiver sevice, receiver interface, reciever namespace  and reciever cummunication channel
    define of soap sender adapter:
    soap sernder, with use encoded header and use query string checked and qos as exactly once.
    Anyone has any idea here? Many thanks! And most strange thing is yesterday it works and today it failed.
    Please kindly help here.
    Thanks a lot,
    Leon

    Hi guys,
    thanks for the input.
    Hi Sven,
    I have input default interface and namespace.
    Hi sivasakthi,
    Regarding mistype, it may happen, I will do it again right away.
    And the URL is generated by the wsdl toolkit in the directory.
    I marked use encoded header and query string in the communication channel.
    I will generate the wsdl again and test it again.
    Regarding URL(endpoint of web service):
    http://hostname:50000/XISOAPAdapter/MessageServlet?channel=:AGSSAL_SOAP:AGSSAL_SOAP_CC&version=3.0&Sender.Service=AGSSAL_SOAP&Interface=urn:a1s_saplivelinkcontent.service.sap.com^MI_O_AS_DELIVERNOTIFY_SOAP
    Again thanks for you guys help.
    Best regards,
    Leon

  • Disabling SOAP sender adapter authentication

    How can I disable user/password authentication in a SOAP sender adapter?

    The question was answered by Sam Raju / Hans Dumbrajs in thread Exposing anonymous WS.
    Hereafter is an even more radical method that I used with a Netweaver 2004 SP12.
    But BEWARE! this is VERY bad practice, because authentication becomes disabled for ALL web services. It must only be used on a development system. Moreover, from SP14, there are many more options that would allow to turn this on/off per web service. I used it once, just to sort out service design issues from authentication burdens and then I quickly restored a proper config as we fought with WS-security settings in a remote system that had to call a service hosted on XI.
    Here is: locate the web.xml deployment descriptor for the server at stake. You should find it on a path like:
    /usr/sap/<systemID>/DVEBMGS00/j2ee/cluster\server0/apps/sap.com
    /com.sap.aii.af.soapadapter/servlet_jsp/XISOAPAdapter/root/WEB-INF
    Then SAVE A COPY of the web.xml file.
    Edit the web.xml and remove the three sections:
    <security-constraint>, <login-config>, and <security-role>
    Login to the J2EE visual Admin console go to cluster tab, Server 0... and right-click REBOOT.
    There you are.
    Strongly recommended: learn about WS-security and upgrade to SP14 or above to get back in control of security issues.
    (the truth is that integration systems are ever-ever-ever more complex year after year...)

  • SMTP relay authentication issue with DynDNS MailHop Outbound

    Hi,
    I'm trying to use the SMTP relay functionality of my OS X Server but I get following log message:
    Apr 4 21:40:21 mydomain postfix/smtp[7629]: 4EE3686F529: to=<xxxx@xxxxx>, relay=outbound.mailhop.org[204.13.248.71]:465, delay=140731, delays=140130/0.06/600/0, dsn=4.4.2, status=deferred (conversation with outbound.mailhop.org[204.13.248.71] timed out while receiving the initial server greeting)
    I configured the relay settings in Server-Admin for host: outbound.mailhop.org:465 and added my dyndns username and password.
    I would appreciate if someone could help me to figure out what I'm missing.
    Thanks

    If you're getting a 550 error then it indicates an issue with the SMTP server you're using / how you're connecting to it. Either the mail server you've got configured for SMTP isn't setup to handle email for you, or in addition to setting the server address
    in the SMTP settings, you also need to configure it to configure authentication on the email accounts. In the account settings you need to select More settings (I think, I don't have an Outlook 2007 copy to check on), then you'll see an Outgoing
    Server tab, within which you can configure the required authentication. It will either be the same as the POP3 login, in which case you can select "Use same settings as my incoming mail server", or if they're different you can enter the specific details that
    are required to send.

  • Authentication issue with Xcelsius/Portal integration

    I am facing an issue with the way we have integrated our Xcelsius dashboard with our corporate portal. I know this probably is more of a SDK question than Administration, but I figured I will ask it here anyway since Tim and some others are diverse enough in their knowledge base. This might be LONG post but please advise if anyone has any good pointers.
    We have an Xcelsius dashboard that needs to be served up via our corporate intranet (based on MS Sharepoint 2007). Now we are NOT using the MS Sharepoint Portal Integration Kit, but just doing a basic integration of the SWF call within a web part on Sharepoint. All this means is that within a portlet (web-part) on Sharepoint, I am making a HTTP call to the openDocument URL to invoke the SWF file. So the SWF is actually served up from our Tomcat App Server, and displayed onto this frame within the portal. That is the basic idea.
    To achieve this, what I did was write some custom code using the Java SDK to modify the openDocument a little bit. By doing so, I was able to insert some behind-the-scenes-login code wherein no matter who the portal user (Win AD-based) is, he is logged in to BOE as a generic "dashboard-user" and the dashboard is served up. This worked fine for the first dashboard where all we had was SWF and some WebI linking using openDocument (no full-InfoView access).
    But in this second dashboard now, what we also have is a hyperlink for users to get to InfoView to do Ad-hoc reporting. What this does is open a child browser window from within the portal (dashboard) --- and it remembers the BOE session for the generic user id "dashboard-user" and logs the end-user in to InfoView using that. But what I actually want is that the end-users, on this new window, should only be prompted at the traditional InfoView logon screen where they can manually enter their Windows AD password and get in. Thus, I would like to keep the dashboard SWF page session separate from the InfoView ad-hoc session, which I cannot seem to do because of the browser relationship and session maintenance.
    I am trying to find a way where I can simulate a single sign-on for dashboard viewers on the portal, but at the same time let them jump off to InfoView as themselves.
    Any thoughts on how I can do this?
    Notes:
    We DO NOT have Single Sign-On enabled for InfoView
    We are using Windows AD authentication (manual, no SSO)
    We are on Tomcat

    Sarang Deshpande wrote:
    1) If the InfoView app on Tomcat (desktoplaunch) is configured with Vintela, openDocument calls from the portal with automatically work using behind the scenes SSO, correct?
    in XIR2 everything that falls under infoview should SSO when infoview is setup for SSO (not the case in XI 3.x)
    Sarang Deshpande wrote:
    2) What is the best practice when it comes to the service accounts needed? I have implemented Windows AD manual auth already so I have a service account that use for that. Should I be using the same on and making vintela/SSO-specific changes to it...or should I have a separate vintela service account and deal with two different ones..each for a diff purpose?
    There is no best practice per se but the less service account the lower your chances to duplicate an SPN, functionally everything seems to work just as well with multiple as it does with 1 (of course with 1 there is less management work) If you click the SSO link in my forum sticky post I have a section explaining this with some suggested methods of deploying a service account(s)
    Sarang Deshpande wrote:
    3) Other than some minor browser configurations that might be required, is there anything else that I should communicate to the team about what might be required to be "pushed" to users' PCs?
    Using the default config nothing should be required on the client machine (unless SSO has been disabled in the browser or you intend to use a url that contains a period ..... (i.e. FQDN or IP) with hostname URL (the default) it should just work.
    To note if you have XP SP2 or older there is a microsoft spnego bug you may need to apply a fix if you aren't patched to SP3 (about 5% of our customers run into this).
    Regards,
    Tim

  • Custom Authentication Issue with Policy Agent

    Hi,
    I have a custom authentication module which is hosted on the BEA application server and I am trying to access through the policy agent on apache.
    I have set the following property in AMAgent.properties file
    com.sun.am.policy.am.loginURL= http://host:port/amserver/UI/Login
    So When the user requests a protected resource, the policy agent forwards the user to Identity Server with the module as CustomLoginModule. However, after this, authentication is succeed, user sesion is being created and I get the following error message in the agent log file.
    2004-10-19 16:20:26.908 Error 27620:e1140 PolicyEngine: am_policy_evaluate: InternalException in Service::construct_auth_svc with error message:Application authentication failed during service creation. and code:3
    2004-10-19 16:20:26.908 128 27620:e1140 RemoteLog: User unknown was denied access to http://hostname:port/weblogic/protapp/protected/a.html.
    2004-10-19 16:20:26.908 Error 27620:e1140 LogService: LogService::logMessage() loggedBy SSOTokenID is invalid.
    2004-10-19 16:20:26.909 Error 27620:e1140 all: am_log_vlog() failed with status AM_REMOTE_LOG_FAILURE.
    2004-10-19 16:20:26.909 -1 27620:e1140 PolicyAgent: URL Access Agent: access denied to unknown user
    The necessary policy object is already created in Identity Server. Please send your suggestions to fix this problem.
    Thanks
    Neeraj

    Hi Neeraj,
    I still have not been able to resolve that issue. Let me know If you find a solution for the same.
    Thanks,
    Srinivas

  • Issue with Siebel Inbound Web Service

    Hi pals,
    I have to make an Inbound Web Service that accept one Service Request, Insert the record in siebel's database and return the SR Number.
    I did an Integration Objects with the fields that I need, but I'm stuck with the workflow's steps, I did the next Workflow.
    Start-- EAI DATA MAPPING ENGINE---EAI SIEBEL ADAPTER (Insert)--END
    But I'm not sure if this will work.
    Anybody could you help me telling me if this steps are ok or If I need some more steps. Which are the arguments that have to be involved in the steps.
    Another issue is that I don't know if is it possible do the test since its a web service and I don't have the consumer system.
    Thanks for the help.
    Edited by: user8035855 on 16/11/2009 11:43 AM

    Hi Manohar
    You have posted the same question with two different subject text
    anyway follow these SAP notes your problem will be short out
    Note 856597 - FAQ: XI 3.0 / PI 7.0 / PI 7.1 SOAP Adapter
    https://websmp102.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=856597&_NLANG=E
    Note 856599 - FAQ: XI 3.0 / PI 7.0 / PI 7.1 Mail Adapter
    https://websmp102.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=856599&_NLANG=E
    Note 870845 - XI 3.0 SOAP adapter SSL client certificate problem
    https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=916664&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
    https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=870845&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
    check the OSS Note 554174 & see if it helps
    Note 645357 - SAPHTTP: SSL error
    https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=645357&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
    https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1150980&nlang=EN&smpsrv=https%3a%2f%2fwebsmp102%2esap-ag%2ede
    one alternative may be Restart ICM (Internet Communication Manager) .This will solve your HTTP issue
    Cheers!!!!
    Regards
    sandeep
    if helpful kindly reward points

  • Authentication issue with 4.1

    We are using a custom authentication scheme. It calls the authenticatin api to authenticate agains active directory.
    It is working in multiple apex aplications in apex version 3.2. We created a new install of 4.1 and imported the apps from 3.2
    I can't get this authentication to work in 4.1. Here is the code that works in 3.2 but not in 4.1
    This code is in the login process of page 101.
    The error msg I get is Invalid Login Credentials
    I have created the application at the oracle hosted site. id/wd id guest/Lock01$
    Off course for simplicty, all the code does is emualte how I am logging in at the 3.2 install. All other code has not been copied over. This application works on our 3.2 install but not 4.1! Help!
    {declare
    b_result boolean := false;
    c_result boolean := false;
    d_result boolean := false;
    begin
    -- :IS_ADMIN_USER := 0;
    -- :IS_IE_USER := 0;
    :USERNAME := :P101_USERNAME;
    :PASSWORD := :P101_PASSWORD;
    -- for security reasons I commented out the server and base domain info. in this call.
    b_result := LDAP2.AUTHENTICATE_ADUSER(:P101_USERNAME, :P101_PASSWORD, :P101_DOMAIN, '#####.####.com', 'DC=####,DC=####,DC=com');
    if (b_result = true) then
    -- I know that session is valid as i displayed a mesg if it was valid to be sure.
    If APEX_CUSTOM_AUTH.IS_SESSION_VALID
    --this was the old way in 3.2 that worked but doesn't in 4.1
    -- wwv_flow_custom_auth_std.post_login(
    -- P_UNAME => :USERNAME,
    -- P_PASSWORD => :PASSWORD,
    -- P_SESSION_ID => v('APP_SESSION'),
    -- P_FLOW_PAGE => :APP_ID||':1'
    -- I tried this in 4.1 but still doesn't work
    APEX_CUSTOM_AUTH.POST_LOGIN (
    p_uname => :USERNAME,
    p_session_id => V('APP_SESSION'),
    p_app_page => :APP_ID||':1');
    End if;
    else
    owa_util.redirect_url('f?p=&APP_ID.:&LOGIN_PAGE.:&SESSION.');
    apex_util.set_session_state('LOGIN_MESSAGE', 'Your ID or PASSWORD is incorrect. Please try again.');
    end if;
    -- :PASSWORD := null;
    end;
    Edited by: ashalon on Mar 16, 2012 11:23 AM
    Edited by: ashalon on Mar 16, 2012 11:25 AM
    Edited by: ashalon on Mar 16, 2012 12:20 PM
    Edited by: ashalon on Mar 16, 2012 3:46 PM                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

    Hi ashalon,
    login processing normally calls the authentication scheme's login handler (aka authentication function). In many cases, this is done in a submit process on an Apex login page, that calls
    apex_authentication.login (
        p_username => :P101_USERNAME,
        p_password => :P101_PASSWORD );This procedure (and it's variants, like wwv_flow_custom_auth_std.login) cause the Apex engine to
    1. run the authentication scheme's pre-authentication procedure
    2. pass username and password to the authentication scheme's authentication function, which should return true or false, depending on whether the credentials are valid
    3. if true: run the post-authentication procedure
    4. if true: save the username in session state
    5. if true: prepare a redirect URL to the deep link (i.e. the page that triggered login)
    6. if false: prepare a redirect URL to the login page with a notification_msg that contains the error
    7. log success/failure of the login attempt
    8. generate a new session cookie
    9. perform the redirect
    The exact order and technical details of these steps may vary from Apex version to version.
    The authenentication function (2.) can check against the workspace users table (Apex authentication), the database, an LDAP repository or you can build your own.
    Some authentication schemes rely on external mechanisms to check the credentials and a defined way for these to pass the username back to the authentication scheme. SSO does this in a very special way, the header-based authentication scheme simply relies on a HTTP header variable to transport the username. These authentication schemes never run 1. and 2. from above, but simply accept the username and run 3. - 9. This behaviour is exposed with the post_login procedure.
    Your authentication scheme is interesting. It piggybacks on the Apex authentication scheme, but de facto uses nothing of it. The submit process on the login page checks LDAP credentials and then runs post_login, if the check was successful. You could surely rewrite this as a custom authentication, although the authentication function had to rely on v('P101_DOMAIN') in addition to the username and password that get passed to it by default. Whether the rewrite makes sense is up to you, of course. If you are comfortable with this authentication, stick to it. But it probably would be much easier to understand for others and also easier to reuse in other apps if the LDAP credentials checking was in the authentication scheme.
    Regards,
    Christian

  • WCS Radius Authentication issue with 2008 R2 NPS

    OK, so I have my MPS working. I am  authenticating all sorts of Cisco devices and I can even authenticate  the admin login from the WCS server.  UNLESS I add more than 27 of the  custom settings in the Cisco-AV-Pair that the WCS uses to define the  logged in user rights.  Anything after the 27th setting the login times  out and the WCS denies access. I go back to 27 and it logs in fine.   There are 73 settings for the default admin user.
    Anyone have any ideas why this is happening or better yet, how to get around it?
    I  have been searching through the MS technet to see if there is a  limitation built in to the NPS, but I have yet to find anything.
    Thanks,
    Rod

    I have not gotten any other feedback and I have not been ablet to identify anything on technet about it.  It will happen with any role that requires more than 27 of the Cisco-AV-Pair settings.  It is working fine for stuff like the Lobby administrator logins, that require less than 5 access rules to be passed from the NPS, but that just goes to show that it is working as long as I do ot hit the 27 "line-item" limit.

  • Authentication Issue with BPM work space

    Hi
    I have created a sample BPM process using JDeveloper and deployed as well
    but when i tried to login to verify created process in workspace it shows the      
    "Invalid ID or password. Please try again" , i tried using weblogic user id and password (weblogic/Welcome1)
    and also tried using existing users in weblogic (ex:cooper/welcome1) but no luck . so could you please let me know what may be issue
    and how to resolve this issue, it will great help if you can help
    Regards
    Noor

    Hi Noor
    By any chance for this SOA/BPM domain, have you configured any other External Authenticator also like LDAP, AD etc. If so, is that the first in the list. And if yes, then your error is valid. You need to do some extra settings. I can give more details, once you confirm above points.
    BUT if you just created a BPM domain and created those test users like jcooper/welcome1 etc, then you should not get these errors. I hope you used the demo community seed war file, deploy and run that servlet. And also, make sure that you are using correct username/passwords. So first try weblogic user on your console, em etc. Then try bpm/workspace. You should be able to login, even though you may not see links on left side to create new taks,
    Thanks
    Hi Ravi Jegga,
    Thanks for your reply, i have not configured to any external authenticator and i have not created any test users while creating domains i hope this test users will created automatically , i am able to login both weblogic console and em as well when i try login for work space it shows the Invalid user name or password
    I am trying very basic sample process model given by Oracle (http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/obpm/11g/r1/firstProcess/firstprocess_obpm11g.htm)
    so could you please let me know if i miss some thing
    Thanks & Regards
    Noor

  • OS X Server + Active Directory Authentication Issue with Wikis

    Hello,
    I recently purchased an Apple XServe with Snow Leopard installed. The purpose of this server is to enable students and teachers to create Wikis and Blogs.
    The majority of my environment is MS, with Active Directory as our LDAP provider.
    I have joined the server to my domain and can add domain accounts to the Wiki creation access list without issue, but whenever I try to login to the server's web interface with one of those accounts the login screen shakes and prompts for another set of credinitals.
    What am I doing wrong? Open Directory seems to be setup properly and has been kerberitized as it requested when I joined the box to the domain.
    Thank you all for your help,
    David
    Message was edited by: DHeath_WJCC

    please ask in the Snow leopard server forum
    http://discussions.apple.com/category.jspa?categoryID=96

  • Issue with siebel 7.5 dashboard prompt and grandtotals

    Hi Group
    We are having a weird issue on a dashboard page in 7.5 version.On our dashboard there is report with columns like area,area values and area values column is being filtered with a dashboard prompt.
    The dashboard prompt is working fine by applying the selected filter value but we are doing subtotals by area and grand total at the end.The subtotal and grandtotal are not changing with the filter value selected.
    Say we want to see area only having area values >=40000 the report is showing right areas applying this filter to areavalues,but the subtotals and grand totals still showing up for all areas and not for selected areas as per the filter.But when we run this report individually in Answers we are getting right subtotals and grandtotals by applying filters.
    I know description may not be very clear for you guys but can give you any kind of clarification you want in detail.
    I believe this is somekind of bug in this version.
    Please let me know.
    Thanks a lot.

    Quit the applications that you are not using. Monitor RAM usage with your Activity Monitor. Add more RAM, 6 Gigs is the max on your model.
    When your Mac runs out of RAM, it starts using swap files on your hard drive, shown as page outs in Activity monitor. Your hard drive's speed performance will be noticeably slower than your RAM's speed.
    Activity Monitor will also allow you to identify which apps are using the most RAM. The app is in your Application's Utilities folder.
    Plus, Mid 2007 iMacs's (iMac 7.1) can run Mavericks, it's free, and will make better use of your RAM than Lion, IMHO.
    P.S., If you actually have an iMac 6.1, it's a Late 2006 iMac and is limited to Lion.

  • Error in SOAP Sender Adpater

    hi
    I am SOAP to RFC scenario.. when i am testingthe WSDl from Altova it giving me the follwing error
    com.sap.engine.interfaces.messaging.api.exception.MessagingException: com.sap.engine.interfaces.messaging.api.exception.MessageExpiredException: Message bb9025d0-14a1-11de-bd25-001a4b0aa09f(OUTBOUND) expired.
    do i have to change any settings
    SV

    Hi SV,
       I am also getting the same error.
       Did you get any solution for this?
      I will be grateful to you if you can help me.
      Please help!
    Thanks & Regards
    Gopal

Maybe you are looking for