SSO fails from EP6 to R/3 4.6C

Hi,
I am trying to replace a Workplace 2.11 system (and standalone ITS 6.10) with Enterprise Portal 6.0 Web AS 6.40 system (and standalone ITS 6.20).
The R/3 backend is 4.6C.
I've performed th following steps:
- installed and patched the Portal and ITS
- upgraded the WP-PI in R/3 4.6C system to 600_46C
- downloaded the verify.der file from the Portal and imported it into the R/3 backend, adding it to the PSE and ACL
- added ~mysapcomusesso2cookie = 1 to global.srvc file and restarted ITS
- implemented SSO from EP6 using SAPLOGONTICKET (using FQDN for all servers)
However, I am getting the errors below in the R/3 dev trace file for the work process.
I have checked table TWPSSO2ACL which had a valid entry for DMO client 000 (Portal system), and output from transactions PSEMAINT and SSO2 look OK.
RZ10 SSO parameters were already set:
- login/accept_sso2_ticket = 1
- login/create_sso2_ticket = 2
Y Thu Feb 15 15:23:53 2007
Y *** ERROR => multiple DiagSetGuiConnectData call [diagext.c    584]
N *** ERROR => dy_set_sso_ticket: client="" (will NOT be defaulted)! [sign.c       9076]
N conv_lang_iso2sap : no conversion necessary
N dy_set_sso_ticket: SSO logon data stored
N syssigni: SSO logon data retrieved
N dy_signi_ext: SSO TICKET logon (client    )
N mySAPUnwrapCookie was called.
N RunningCompatibly said: I'm >= 46C.
N mySAP: Got the following SSF Params:
N         DN     =CN=WPP, OU=<.....>, OU=<.....>, O=mySAP.com Workplace, C=DE
N         EncrAlg=DES-CBC
N         Format =PKCS7
N         Toolkit =
N         HashAlg =SHA1
N         Profile =/usr/sap/SP2/DVEBMGS91/sec/SAPSYS.pse
N         PAB =/usr/sap/SP2/DVEBMGS91/sec/SAPSYS.pse
N Got the codepage 1100.
N Got ticket (head) AjExMDAgABFwb3J0YWw6SjJFRV9BRE1JTogAE2Jh. Length = 476.
N Got content client = 000.
N Got content sysid = DMO     .
N *** ERROR => No entry in TWPSSO2ACL for SYS DMO      and CLI 000. [ssoxxkrn.c   1101]
N *** ERROR => CheckSubject failed. [ssoxxkrn.c   501]
N dy_signi_ext: issuer not trusted
Any advice would be appreciated.
Thanks,
Sharyn

Hi Sharyn,
There is a lot of confusion regarding use of EP60 with R/3 4.6C
Your thread seems to indicate that you have successfully installed EP60 with R/3 4.6C using ITS 6.2 and Web AS 6.40 Is that correct?
We intend to go for the same architecture. Can you please tell me if there is a guide(document) on setting this up? Also, where can i find the above software components to install? I don't find the SDC on marketplace very intutive (especially for old releases).
Thanks and regards,
Zubair

Similar Messages

Problem accessing R/3 with SSO ticket from the EP6.0

Hi all,
I have seen this thread: Problem accessing R/3 with SSO ticket from the EP6.0
I know that it is possible to read SSO ticket from the Cookie in WebDynpro application.
Now we are at the first step, we don't know how to read SSO ticket from the Cookie in WebDynpro application with java code.
So anyone can help us?

Hi,
This has been discussed in a previous forum.Check this link.A code snippet is also there to read a cookie in webdynpro with this question
How to implement SSO between Portal, Webdypro and ABAP system?
I am not able to send the link exactly.
Regards,
Sowjanya.
Message was edited by: Sowjanya Chintala

OC4J_SECURITY is down. SSO: FAILED TO START SSO SERVER

In our Application Server 10.1.2.3.0, OC4J_SECURITY is down.
Log entries in opmn log of OC4J_SECURITY:
09/08/20 11:13:37 Start process
09/08/20 11:13:43 Warning: Error reading transaction-log file (/export/home/oracle/AS_HOME/infra/j2ee/OC4J_SECURITY/persisten
ce/OC4J_SECURITY_default_island_1/transaction.state) for recovery: premature end of file
09/08/20 11:13:43 Forced or abrupt (crash etc) server shutdown detected, starting recovery process...
09/08/20 11:13:43 Recovery completed, 0 connections committed and 0 rolled back...
09/08/20 11:13:47 DAS servlet init enter
09/08/20 11:13:47 oiddas: Release 10.1.2.2.0 Production Started
09/08/20 11:13:51 DAS servlet init exit
09/08/20 11:13:52 SSOLoginServlet.init: Starting up SSO server ...
09/08/20 11:13:52 Initilize NLS utility...
09/08/20 11:13:52 Reading SSO server policy....
09/08/20 11:13:52 SSO: Entered FilePolicyManager constructor ...
09/08/20 11:13:52 SSO: FilePolicyManager: done loading the /export/home/oracle/AS_HOME/infra/sso/conf/policy.properties file
09/08/20 11:13:52 SSO: Leaving FilePolicyManager constructor ...
09/08/20 11:13:52 SSODebug: Done loading the debug file, /export/home/oracle/AS_HOME/infra/sso/log/ssoServer.log
09/08/20 11:13:54 SSO: Initializing the encryption objects failed
09/08/20 11:13:54 oracle.security.sso.server.conf.ConfigurationException: Missing SSO server configuration
09/08/20 11:13:54 at oracle.security.sso.server.conf.DatabaseConfigReader.init(DatabaseConfigReader.java:286)
09/08/20 11:13:54 at oracle.security.sso.server.auth.AuthUtil.init(AuthUtil.java:172)
09/08/20 11:13:54 at oracle.security.sso.server.ui.SSOLoginServlet.init(SSOLoginServlet.java:259)
09/08/20 11:13:54 at javax.servlet.GenericServlet.init(GenericServlet.java:258)
09/08/20 11:13:54 at com.evermind.server.http.HttpApplication.loadServlet(HttpApplication.java:2358)
09/08/20 11:13:54 at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4800)
09/08/20 11:13:54 at com.evermind.server.http.HttpApplication.initPreloadServlets(HttpApplication.java:4894)
09/08/20 11:13:54 at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:1026)
09/08/20 11:13:54 at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:560)
09/08/20 11:13:54 at com.evermind.server.Application.getHttpApplication(Application.java:915)
09/08/20 11:13:54 at com.evermind.server.http.HttpServer.getHttpApplication(HttpServer.java:707)
09/08/20 11:13:54 at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:637)
09/08/20 11:13:54 at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:278)
09/08/20 11:13:54 at com.evermind.server.http.HttpServer.setSites(HttpServer.java:278)
09/08/20 11:13:54 at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:179)
09/08/20 11:13:54 at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2435)
09/08/20 11:13:54 at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1592)
09/08/20 11:13:54 at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:92)
09/08/20 11:13:54 at java.lang.Thread.run(Thread.java:534)
09/08/20 11:13:54 SSO: FAILED TO START SSO SERVER!
Log entries of <Infra_home>/sso/log/ssoServer.log
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Done loading Policy Configurations
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Login Page Value: /sso/jsp/login.jsp
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Change password Page location: /sso/jsp/password.jsp
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Wireless Login Page location: /wirelesssso/wirelesslogin.jsp
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Wireless Change password Page location: /wirelesssso/wirelesscpwd.jsp
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Calling Initialization Methods ...
Thu Aug 20 11:13:52 AST 2009 [INFO] Orion Launcher Entered DBConnectionPool.init method ...
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Repository API returned - DB conn string: ldap://webportaldev.bh.zain.com
:389/ptldev,cn=oraclecontext
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Setting max number of connections to 150 in the DB cache pool
Thu Aug 20 11:13:52 AST 2009 [DEBUG] Orion Launcher Setting minimum number of connections to 5 in the DB cache pool
Thu Aug 20 11:13:53 AST 2009 [INFO] Orion Launcher Leaving DBConnectionPool.init method ...
Thu Aug 20 11:13:53 AST 2009 [INFO] Orion Launcher Entered DBConnectionPool.getConnection method ...
Thu Aug 20 11:13:53 AST 2009 [INFO] Orion Launcher Leaving DBConnectionPool.getConnection method ...
Thu Aug 20 11:13:54 AST 2009 [DEBUG] Orion Launcher DatabaseConfigReader: Setting LDAP configurations
Thu Aug 20 11:13:54 AST 2009 [DEBUG] Orion Launcher DatabaseConfigReader: Setting Customizable configurations
Thu Aug 20 11:13:54 AST 2009 [DEBUG] Orion Launcher SQL Exception received: java.sql.SQLException: ORA-04063: package body "O
RASSO.WWSSO_LS_PRIVATE" has errors
ORA-06508: PL/SQL: could not find program unit being called
ORA-06512: at line 1
Thu Aug 20 11:13:54 AST 2009 [DEBUG] Orion Launcher DBConnectionPool: Checking for DB connection errors..
Thu Aug 20 11:13:54 AST 2009 [ERROR] Orion Launcher SSO Server initialization failed. Check the DB availability and restart S
SO Server
Thu Aug 20 11:13:54 AST 2009 [ERROR] Orion Launcher Initializing the encryption/decryption objects failed
oracle.security.sso.server.conf.ConfigurationException: Missing SSO server configuration
at oracle.security.sso.server.conf.DatabaseConfigReader.init(DatabaseConfigReader.java:286)
at oracle.security.sso.server.auth.AuthUtil.init(AuthUtil.java:172)
at oracle.security.sso.server.ui.SSOLoginServlet.init(SSOLoginServlet.java:259)
at javax.servlet.GenericServlet.init(GenericServlet.java:258)
at com.evermind.server.http.HttpApplication.loadServlet(HttpApplication.java:2358)
at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4800)
at com.evermind.server.http.HttpApplication.initPreloadServlets(HttpApplication.java:4894)
at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:1026)
at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:560)
at com.evermind.server.Application.getHttpApplication(Application.java:915)
at com.evermind.server.http.HttpServer.getHttpApplication(HttpServer.java:707)
at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:637)
at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:278)
at com.evermind.server.http.HttpServer.setSites(HttpServer.java:278)
at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:179)
at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2435) at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1592)
at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:92)
at java.lang.Thread.run(Thread.java:534)
Can anyone help us to fix this issue?

Hi,
Apparently, there is a problem in package “*wwsso_ls_private*”. I got below error while trying to compile this package. When I was trying to compile ORASSO.WWSSO_LS_PRIVATE, I got the below errors about parameters
SQL> alter package ORASSO.WWSSO_LS_PRIVATE compile body;
Warning: Package Body altered with compilation errors.
SQL> show error
Errors for PACKAGE BODY ORASSO.WWSSO_LS_PRIVATE:
LINE/COL ERROR
484/4 PL/SQL: SQL Statement ignored
484/16 PL/SQL: ORA-00947: not enough values
628/6 PL/SQL: SQL Statement ignored
628/20 PL/SQL: ORA-00904: "LSCI": invalid identifier
681/4 PL/SQL: SQL Statement ignored
684/10 PL/SQL: ORA-00904: "LSCONFIG": invalid identifier
Cause:
The possible cause this issue is some problem that occured when
applying the latest patchset. The patchset does include updates of ODS and ORASSO schemas and their objects. If parts of objects were not updated with the new version and the old version is still in DB, errors may occur (for example when I was trying to compile ORASSO.WWSSO_LS_PRIVATE I got the errors
about parameters, which indicate version mismatch).
To fix this problem, I have re defined the problem giving package.
This package wwsso_ls_private is defined in
$ORACLE_HOME/sso/admin/plsql/sso/ssolsprv.pks
Solution:
I have fixed the problem by following the below steps.
1. Login sqlplus as orasso user of MR
2. Recreate the view wwsso_ls_configuration_info$ by issuing the below DDL statement.
SQL> CREATE OR replace VIEW wwsso_ls_configuration_info$ OF ls_config_type WITH object oid(config_name) as select * from wwsso_ls_configuration_info_t;
3. Now compile the problem giving package.
SQL> alter package wwsso_ls_private compile body;
Compilation of this package was done without any error.
4. Now all the OC4J container including OC4J_SECURITY in our Infra tier are up and running.
-Thanks,
Padmanaban G

Unable to connect to BW3.5(IDES) from EP6.0

Hi All,
I am trying to establish connection to our BW system (IDES, BW3.5 NW04) from EP6.0.9. I have done the following as per procedure.
- Creating BW system
- Setting Usermgmt (UIDPW and admin, user)
- User mapping also done
Connection tests for connector works fine but fails for WAS.
Test Details:
The test consists of the following steps:
1. Check that the system object defines an SAP system
2. Validate the following parameters: wap.WAS.protocol; wap.WAS.hostname
3. Check the HTTP/S connection to the defined backend application
Results
1. The system object represents an SAP system.
2. The following parameters are valid: wap.WAS.protocol (http) ; wap.WAS.hostname
(bwserver.<xxx>.com:8001)
3. HTTP/S connection failed. Make sure the protocol, host name, and user mapping are correctly defined.
P.S: I have verified the WAS hostname and port from the 'sicm' tcode.
WAS PATH: /sap/bw/bex
Can someone please tell me where it went wrong?
Thanks
Sathish

Hi Sathish
when u perform WAS Connection test than it's perform both
http and http/s connection to WAS it's only give u that
HTTP/S connection failed. Make sure the protocol, host name, and user mapping are correctly defined
becoz u did not use HTTPS protocol for WAS
don't worry about that. if the connection test perform HTTP/S connection than it's always failed. ( u don't use HTTPS protocol for WAS)
further look at following.
http://help.sap.com/saphelp_nw04/helpdata/en/aa/a11a39391f4f11b54e33bc92476686/frameset.htm
regards,
kaushal

SSO Validation from OAF custom page.

Hi All,
We have 11.5.10Cu2 configured with Single Sign On.
Both are running in different servers.
I have a custom OAF Page(Approval Page) from that page I want to validate
a Single Sign on user id.
ie, I don't want to set any session value or cookies just want to validate a SSO username from my OAF Controller or from my AMImpl.
Like giving a request to SSO Server with username/password and get true or false according to the validation and return to my custom page.
Thanks.
With Regards,
Kali.
OSSI.

Yes Tapash,
Here is the sample code,
Spec:
CREATE OR REPLACE PACKAGE APPS.xxpo_oa_pdt_ordering_pkg AS
PROCEDURE authenticate_user
(p_username IN VARCHAR2
,p_password IN VARCHAR2
,p_validation_type IN VARCHAR2 DEFAULT 'SSO'-- FND or SSO
,p_check_approver IN VARCHAR2 DEFAULT 'Y'
,x_return_status IN OUT NOCOPY VARCHAR2
,x_msg_data IN OUT NOCOPY VARCHAR2
,x_msg_count IN OUT NOCOPY NUMBER
Body:
PROCEDURE authenticate_user
(p_username IN VARCHAR2
,p_password IN VARCHAR2
,p_validation_type IN VARCHAR2 DEFAULT 'SSO' -- FND or SSO
,p_check_approver IN VARCHAR2 DEFAULT 'Y'
,x_return_status IN OUT NOCOPY VARCHAR2
,x_msg_data IN OUT NOCOPY VARCHAR2
,x_msg_count IN OUT NOCOPY NUMBER
AS
l_return PLS_INTEGER;
ldap_host VARCHAR2(256);
ldap_port PLS_INTEGER;
ldap_user VARCHAR2(256);
ldap_passwd VARCHAR2(256);
ldap_base VARCHAR2(256);
retval PLS_INTEGER;
my_session DBMS_LDAP.SESSION;
subscriber_handle DBMS_LDAP_UTL.HANDLE;
sub_type PLS_INTEGER;
subscriber_id VARCHAR2(2000);
my_pset_coll DBMS_LDAP_UTL.PROPERTY_SET_COLLECTION;
my_property_names DBMS_LDAP.STRING_COLLECTION;
my_property_values DBMS_LDAP.STRING_COLLECTION;
user_handle DBMS_LDAP_UTL.HANDLE;
user_id VARCHAR2(2000);
user_type PLS_INTEGER;
user_password VARCHAR2(2000);
my_mod_pset DBMS_LDAP_UTL.MOD_PROPERTY_SET;
my_attrs DBMS_LDAP.STRING_COLLECTION;
user_dn VARCHAR2(256);
BEGIN
write_to_log(FND_LOG.LEVEL_PROCEDURE,'Start of authenticate_user');
write_to_log(FND_LOG.LEVEL_STATEMENT,'Parameters: p_username='||p_username||' p_validation_type='||p_validation_type||' p_check_approver= '||p_check_approver);
x_return_status := FND_API.G_RET_STS_SUCCESS;
x_msg_data := NULL;
x_msg_count:= NULL;
IF p_check_approver = 'Y' THEN
IF xxpo_oa_pdt_util_pkg.is_valid_approver(xxpo_oa_pdt_util_pkg.get_fnd_user_id(p_username)) <> 'Y' THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: User is not a valid approver.');
x_return_status := FND_API.G_RET_STS_ERROR;
x_msg_data := 'XXPO_OA_PDT_INVALID_APPR';
x_msg_count:= 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
END IF;
IF p_validation_type = 'FND' THEN
l_return := FND_SSO.authenticate_user
(p_user => p_username
,p_password => p_password
IF l_return <> 0 THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: Invalid FND user name and password.');
x_return_status := FND_API.G_RET_STS_ERROR;
x_msg_data := 'XXPO_OA_PDT_INVALID_USER';
x_msg_count:= 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
ELSE
--verify that the XXPO%LDAP% profiles are set
IF FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_HOST') IS NULL OR
FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_PORT') IS NULL OR
FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_ADMIN_USER') IS NULL OR
FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_ADMIN_PWD') IS NULL OR
FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_BASE') IS NULL OR
FND_PROFILE.VALUE('XXPO_OA_PDT_LDAP_USER_TYPE') IS NULL THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: One or more of XXPO%LDAP% Profiles are not set.');
x_msg_data := 'XXPO_OA_PDT_LDAP_PROF_MISSING';
x_msg_count := 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
-- Please customize the following variables as needed
ldap_user := gc_ldap_user;
ldap_passwd := gc_ldap_passwd;
sub_type := DBMS_LDAP_UTL.TYPE_DEFAULT;
subscriber_id := NULL;
user_type := gc_ldap_user_type;
user_id := p_username;
user_password := p_password;
-- Choosing exceptions to be raised by DBMS_LDAP library.
DBMS_LDAP.USE_EXCEPTION := TRUE;
write_to_log(FND_LOG.LEVEL_STATEMENT,'Input Parameters: ');
write_to_log(FND_LOG.LEVEL_STATEMENT,'LDAP HOST: ' || gc_ldap_host );
write_to_log(FND_LOG.LEVEL_STATEMENT,'LDAP PORT: ' || gc_ldap_port);
write_to_log(FND_LOG.LEVEL_STATEMENT,'LDAP BIND USER: ' || ldap_user);
write_to_log(FND_LOG.LEVEL_STATEMENT,'USER ID : ' || user_id);
write_to_log(FND_LOG.LEVEL_STATEMENT,'----------------------------------');
-- Connect to the LDAP server
-- and obtain and ld session.
write_to_log(FND_LOG.LEVEL_STATEMENT,'Connecting to ' || gc_ldap_host || ' ...');
my_session := DBMS_LDAP.init(gc_ldap_host, gc_ldap_port);
write_to_log(FND_LOG.LEVEL_STATEMENT,': Connected.');
-- Bind to the directory
write_to_log(FND_LOG.LEVEL_STATEMENT,'Binding to directory as ' || ldap_user || ' ... ');
retval := DBMS_LDAP.simple_bind_s(my_session, ldap_user, ldap_passwd);
write_to_log(FND_LOG.LEVEL_STATEMENT,': Successful.');
-- Create Subscriber Handle
write_to_log(FND_LOG.LEVEL_STATEMENT,'Creating Subscriber Handle ... ');
retval := DBMS_LDAP_UTL.create_subscriber_handle(subscriber_handle,
sub_type,
subscriber_id);
IF retval != DBMS_LDAP_UTL.SUCCESS THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: create_subscriber_handle returns : ' || TO_CHAR(retval));
x_msg_data := 'XXPO_OA_PDT_SUBS_HANDLE_ERROR';
x_msg_count:= 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
write_to_log(FND_LOG.LEVEL_STATEMENT,': Successful.');
-- Create User Handle
write_to_log(FND_LOG.LEVEL_STATEMENT,'Creating user handle for ' || user_id || ' ... ');
retval := DBMS_LDAP_UTL.create_user_handle(user_handle,user_type,user_id);
IF retval != DBMS_LDAP_UTL.SUCCESS THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: create_user_handle returns : ' || TO_CHAR(retval));
x_msg_data := 'XXPO_OA_PDT_USER_HANDLE_ERROR';
x_msg_count:= 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
write_to_log(FND_LOG.LEVEL_STATEMENT,': Successful.');
-- Set user handle properties
-- (link subscriber to user )
retval := DBMS_LDAP_UTL.set_user_handle_properties(user_handle,
DBMS_LDAP_UTL.SUBSCRIBER_HANDLE,
subscriber_handle);
IF retval != DBMS_LDAP_UTL.SUCCESS THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error: set_user_handle_properties returns : ' || TO_CHAR(retval));
x_msg_data := 'XXPO_OA_PDT_USER_SUBS_ERROR';
x_msg_count:= 1;
RAISE FND_API.G_EXC_ERROR;
END IF;
-- Authenticate User
write_to_log(FND_LOG.LEVEL_STATEMENT,'Authenticating user ' || user_id || ' ... ');
retval := DBMS_LDAP_UTL.authenticate_user(my_session,
user_handle,
DBMS_LDAP_UTL.AUTH_SIMPLE,
user_password,
NULL);
IF retval != DBMS_LDAP_UTL.SUCCESS THEN
-- Handle Errors
write_to_log(FND_LOG.LEVEL_ERROR,'Authentification error : ' || TO_CHAR(retval));
x_msg_data := 'XXPO_OA_PDT_INVALID_USER';
x_msg_count:= 1;
-- below only for debugging purpose
IF retval = -5 THEN
write_to_log(FND_LOG.LEVEL_ERROR,'User unknown');
ELSIF retval = -16 THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Incorrect password');
ELSIF retval = DBMS_LDAP_UTL.PARAM_ERROR THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Invalid input parameters.');
ELSIF retval = DBMS_LDAP_UTL.GENERAL_ERROR THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Authentication failed.');
ELSIF retval = DBMS_LDAP_UTL.NO_SUCH_USER THEN
write_to_log(FND_LOG.LEVEL_ERROR,'USER doesn''t exist.');
ELSIF retval = DBMS_LDAP_UTL.MULTIPLE_USER_ENTRIES THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Multiple NUMBER OF USER DN entries exist IN the DIRECTORY FOR the given USER.');
ELSIF retval = DBMS_LDAP_UTL.INVALID_SUBSCRIBER_ORCL_CTX THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Invalid Subscriber Oracle Context.');
ELSIF retval = DBMS_LDAP_UTL.NO_SUCH_SUBSCRIBER THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Subscriber doesn''t exist.');
ELSIF retval = DBMS_LDAP_UTL.MULTIPLE_SUBSCRIBER_ENTRIES THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Multiple NUMBER OF subscriber DN entries exist IN the DIRECTORY FOR the given subscriber.');
ELSIF retval = DBMS_LDAP_UTL.INVALID_ROOT_ORCL_CTX THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Invalid Root Oracle Context.');
ELSIF retval = DBMS_LDAP_UTL.AUTH_PASSWD_CHANGE_WARN THEN
write_to_log(FND_LOG.LEVEL_ERROR,'PASSWORD should be changed.');
ELSIF retval = DBMS_LDAP_UTL.ACCT_TOTALLY_LOCKED_EXCEPTION THEN
write_to_log(FND_LOG.LEVEL_ERROR,'USER account IS locked.');
ELSIF retval = DBMS_LDAP_UTL.PWD_EXPIRED_EXCEPTION THEN
write_to_log(FND_LOG.LEVEL_ERROR,'USER PASSWORD has expired.');
ELSIF retval = DBMS_LDAP_UTL.PWD_GRACELOGIN_WARN THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Grace login FOR USER.');
ELSE
write_to_log(FND_LOG.LEVEL_ERROR,'Authentification error : ' || TO_CHAR(retval));
END IF ;
RAISE FND_API.G_EXC_ERROR;
ELSE
write_to_log(FND_LOG.LEVEL_STATEMENT,'Authentication: Successful.');
END IF;
-- Free Mod Propertyset
DBMS_LDAP_UTL.free_mod_propertyset(my_mod_pset);
-- Free handles
DBMS_LDAP_UTL.free_handle(subscriber_handle);
DBMS_LDAP_UTL.free_handle(user_handle);
-- unbind from the directory
write_to_log(FND_LOG.LEVEL_STATEMENT,'Unbinding from directory ... ');
retval := DBMS_LDAP.unbind_s(my_session);
IF retval != DBMS_LDAP_UTL.SUCCESS THEN
write_to_log(FND_LOG.LEVEL_ERROR,'unbind_s returns : ' || TO_CHAR(retval));
x_msg_data := 'XXPO_OA_PDT_UNBIND_ERROR';
x_msg_count:= 1;
ELSE
write_to_log(FND_LOG.LEVEL_STATEMENT,': Successful.');
END IF;
write_to_log(FND_LOG.LEVEL_STATEMENT,'OK' ) ;
END IF;
write_to_log(FND_LOG.LEVEL_PROCEDURE,'End of authenticate_user');
EXCEPTION
WHEN FND_API.G_EXC_ERROR THEN
x_return_status := FND_API.G_RET_STS_ERROR;
--message already set
WHEN OTHERS THEN
write_to_log(FND_LOG.LEVEL_ERROR,'Error code : ' || TO_CHAR(SQLCODE));
write_to_log(FND_LOG.LEVEL_ERROR,'Error Message : ' || SQLERRM);
write_to_log(FND_LOG.LEVEL_ERROR,'Exception encountered .. returning');
x_return_status := FND_API.G_RET_STS_ERROR;
x_msg_data := 'XXPO_OA_PDT_INVALID_USER';
x_msg_count:= 1;
END authenticate_user;
Hope this help others.
Thanks.
With Regards,
Kali.
OSSI.

How to check SSO user from database?

Hi:
I've posted this topic in Forms forum:
How to check SSO user from database?
then as I've been told, it's better to post it here, so ...... here is the question:
I'm writing a "before delete trigger" to insert into log table before delete. Is there a way that I know from database the current SSO user when SSO users share one database user?
Just like in Oracle Application Express there is v('APP_USER') to know the current user.
Saad,

End users are manipulating data through Oracle Forms(and SSO through portal) and the thing I need is to trace the SSO username from database without modifying forms, I mean purely from database taking into consideration that SSO users are sharing one database user. Is it possible?
Saad,

Reducer error occurs - copy file fails from D to C while running recovery cd in windows 8,64 bit.

Sir I bought a new hp envy 15 j049tx on 25 October 2013 and it stopped working on 29 october 2013.Whrn I opened the laptop a blue screen appears written that "Your pc ran into an error and we are restarting for you. The laptop restarts and the same process keeps going on.
I told the Hp customer support, they asked me to run hard drive and memory tests. Both hard drive and memory test came out PASSED(both quick and extensive tests). Then they ordered hp recovery discs. When i received it while running the 1st cd an error came with label REDUCER-copy file failed from D... to C.... They then sent a technician who said that the recovery cd are faulty. Its Been a month and the problem still persists. They have ordered a new set of recovery cd. I hope to receive them by 22.I am very much worried. Its windows 8,64 bits os. Please reply. Is it recovery cd problem? Please tell what to do?

anyone found the fix for this?

Portal Upgrade from EP6.0sp10 to EP6.0sp18

Hi All,
I am totally new to portal upgrade.we have current version of portal as follows:
portal version is: 6.0.10.2.0
KMC version is : 6.0.10.1.0 (NW04 SPS10 Patch 1)
Trex Version : 6.1.10.01
1. I am little confuse about whats the difference between Upgrading from EP6.0sp10 to "<b>EP6.0sp18/ NW04sp18</b>".Is the process for doing above is same or different.
2. I heard from SAP that TREX must be upgraded first before KMC and Portal.Is it true? whats is reason for that
?what should be latest SP and patch for TREX?any documents?
3. Is there any specific sequence to upgrade like TREX->WAS>portal>KMC?
4. What about customisations objects,will that be seriously affected after upgrade?How to prevent that?
can anybody give the Basic knowledge of upgrade and process flow.
Thanks in Advance.Help will be greatly appreciated.
Amit

Hi Amit,
EP6 SP18 ist the actual Service Pack for Enterprise Portal. NW04 SPS(!) 18 is the complete Service Pack Stack for the NetWeaver platform. So if you want SP18 for your portal installation, you should get the whole NetWeaver platform in use for that to SPS18 (as you wrote, for EP this is normally WAS, EP, KM, TREX, eventually NWDS).
TREX normally has the same counting as the rest, but in fact at the moment there is no SP18 for TREX, but it is renumbered again. The actual version reads TREX 6.1 Patch 26.
Sequence is WAS -> portal -> KMC -> TREX. Anyhow, you should not await a stable version if using mixed SPs, especially if mixing 10 with 18 So get all in line and then restart working with your installation.
As you normally shouldn't have customized standard objects but copied them into your own namespace and worked on these, there shouldn't be a problem. If you haven't gone this way, with such an update you will learn how urgent it is to keep this in mind --- never change standard objects...
Hope it helps
Detlev

Hello. I keep my IPhoto library (about 90GB) on an external HD and am trying to back it up to another external drive. Both are formatted Mac OS Extended (Case-sensitive, Journaled). Recently, backup has failed from the start due to error 36. Howtoresolve?

Hello. I keep my iPhoto library (about 90GB) on an external HD and am trying to back it up to another external drive. Both are formatted Mac OS Extended (Case-sensitive, Journaled) and both check out when scanned with Disk Utility. Recently, backup has failed from the start due to error 36. Any ideas how to resolve? Also, what's the maximum recommended size for an iPhoto library file? Thx!

Since you can't drag the library to the other EHD for the backup see if you can duplicate it (if you have enough room on the drive) by selecting it and typing Command+d (duplicate).
If you do rebuild the library without a backup and it goes awry you won't lose your photos but you may lose your orgnaizational efforts. So try the following:
Fix #1
Launch iPhoto with the Command+Option keys held down and rebuild the library.
Select the options identified in the screenshot.
Fix #2
Using iPhoto Library Manager to Rebuild Your iPhoto Library
Download iPhoto Library Manager and launch.
Click on the Add Library button, navigate to your Home/Pictures folder and select your iPhoto Library folder.
Now that the library is listed in the left hand pane of iPLM, click on your library and go to the File ➙ Rebuild Library menu option
In the next window name the new library and select the location you want it to be placed.
Click on the Create button.
Note: This creates a new library in the location of your choosing based on the LIbraryData.xml file in the library and will recover Events, Albums, keywords, titles and comments but not books, calendars or slideshows. The original library will be left untouched for further attempts at fixing the problem or in case the rebuilt library is not satisfactory.
NOTE: Fix 2 above might be the method you might want to try first with iPLM creating the new library on your second EHD. If it works that would get your backup copy on the second EHD at the same time as repairing it. If it does'nt work then go back to Fix 1.
OT

Export/import content from EP6 into NW04

We are upgrading from SRM3.0/EP6 SP2 (source) to SRM5.0/Portal NW2004s (target).
The only thing we need to preserve from the source portal are the users and roles. We plan to re-apply the business package for SRM 5.0 after the migration is completed. We are not using any Collaboration Rooms.
I know there is a migration path from EP6 SP2->EP6 SP9(NW04), followed by an upgrade from NW04->NW04s.
My question is:
- is it possible to export content from EP6SP2 and import it into NW04/MW04s? this will eliminate the complicated migration path from EP6 SP2 to NW04.

Hi,
As long as you only need to transport PCD content, I would recommend using normal PCD transport (just did an upgrade from EP6 SP2 to NW04 SP13 and used normal PCD transport without any problems. Will do the same for another upgrade to NW04s). Only if you have KM content you are forced to use the migration tools.
I am not quite sure about users and role migration since I've only use LDAP as a user store (we manually repeated the AD group to portal role mapping since there were very few)
There was a conf call on this, but the only reference I can find now is https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/supplemental_docs/prtl204.pdf
Dagfinn

Cwallet.sso failed even after changes made to cwallet security properties

WARNING: Opening of wallet based credential store failed. Reason java.io.IOExcep
tion: F:\oracle\middleware\user_projects\domains\obiee_domain\config\fmwconfig\b
ootstrap\cwallet.sso (Access is denied)
Oct 19, 2011 6:20:12 PM oracle.security.jps.internal.keystore.file.FileKeyStoreM
anager openKeyStore
WARNING: Opening of file based farm keystore failed.
cwallet.sso failed even after changes made to cwallet security properties in bootstrap

The user you logged in does not have permissions to access cwallet.sso file and hence, it says access denied. Try to check the permissions and add the user, who is trying to start weblogic server.
-Vamsi

Adobe premiere cs6 installation keeps failing from cloud

adobe premiere cs6 installation keeps failing from cloud, any ideas?

We can't have any ideas, because you're not telling us anything. What system? What specific error messages do your get? What do the install logs say about the matter?
Mylenium

Tnsping failed from client

platform: Oracle 10.2.0.1.0 on RHEL5.
Issue: tnsping failed from client (successful from the server itself)
Brief: I can tnsping and sqlplus to the test1 db from the RHEL5 db server itself, no issue. But when I tried to tnsping from a client, I get the error.
** In both db selver and the client, I am using same tnsnames.ora.
** checked etc/hosts , /etc/sysconfig/network , /proc/sys/net/ipv4/ip_local_port_range - all OK.
Pl help.
=======listener file======
LISTENER_TEST1 =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = abc.com)(PORT = 1523))
SID_LIST_LISTENER_TEST1 =
(SID_LIST =
(SID_DESC =
(GLOBAL_DBNAME = test1)
(ORACLE_HOME = /app/oracle/product/10.2.0/db_1)
(SID_NAME = test1)
====================
=====tnsnames.ora=====
TEST1.ABC.COM =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = dbserver.abc.com)(PORT = 1523))
(CONNECT_DATA =
(SERVICE_NAME = test1)
====================
====================
----following is a tnsping test (SUCCESSFUL) from the db server itself----
dbserver> tnsping TEST1.ABC.COM
TNS Ping Utility for Linux: Version 10.2.0.1.0 - Production on 19-APR-2008 00:13:24
Copyright (c) 1997, 2005, Oracle. All rights reserved.
Used parameter files:
/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = dbserver.abc.com)(PORT = 1523))) (CONNECT_DATA = (SERVICE_NAME = test1)))
OK (0 msec)
====================
====================
~~~~~Followin g is a tnsping test (FAILED) from a client~~~~~~~~~~
clientbox> tnsping test1.abc.com
TNS Ping Utility for Linux: Version 10.2.0.4.0 - Production on 19-APR-2008 00:22:09
Copyright (c) 1997, 2007, Oracle. All rights reserved.
Used parameter files:
/u01/app/oracle/product/10.2.0/network/admin/sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = dbserver.abc.com)(PORT = 1523))) (CONNECT_DATA = (SERVICE_NAME = test1)))
TNS-12560: TNS:protocol adapter error
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
====================

Duplicate thread.
Re: tnsping failed in 10g@RHEL5
It's always advisable to open one post instead of multiple with the same contents on different forums.
Regards,
Sabdar Syed.

Export Customized Information Attributes from EP6 to EP7

Hi Everyone,
Is it possible to migrate User Admin customized information fields from EP6 SP17 to 7 EhP1 SP7? The standard portal user export functionality only collects the standard fields and ignores the custom attributes.
Does anyone have an idea on how this task can be achieved???
Thanks,
Bim.

No longer a requirement, thanks.

Upgrade from EP6.0SP2 to Netweaver 04

Hi,
Currently we have EP6.0Sp2 Patch3 installed and running. Recently we have got Netweaver 04. Kindly let me know what is the procedure for upgrading from EP6.0SP2 to Netwearver 04. DO we need to build a new system? or can old system be upgraded.
Thanks,
Maya.

Hi Maya,
in addtion To Dagfinn, some details:
- The migration tools are planned for Q1/2005. See /thread/25021 [original link is broken] where it is said they are planned for 2005-02-16, but I don't know how official this is.
- For WAS migration, there is a forum, with one thread at the moment, saying "J2EE Migration Kit available!!!", with one answer ("Where?"), with no reply... See SAP NetWeaver Application Server
- Anyhow, there are different SAP notes concerning migration issues, in detail:
Note 804876 for a KMC issue
Note 778977 for a PCD issue
And last but not least: The "EP 6 SP2 Migration to NW04 (EP6 SR1) Troubleshooting Guide": http://service.sap.com/~sapidb/012003146900000023012005E/Migration_Troubleshooting_Guide.htm
Hope it helps
Detlev

SSO fails from EP6 to R/3 4.6C

Similar Messages

Maybe you are looking for