SSO not working in ESS/MSS in ERP 2004

I have installed the Business Packages ESS 60.2 and MSS 60.1.2 on EP6 SP9. Another server has the Web AS ABAP 6.40 system and J2EE running the ESS and MSS Web Dynpro apps. It all works fine without SSO. When I change the JCO Destinations for the application data to ticket instead of username/password I get the following error on testing:
com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: The system is unable to interpret the SSO ticket received
This error also occurs when accessing the webdynpro app directly or through the portal. NB. The portal SSO does work in the case of calling an R/3 transaction or calling webdynpro app iview that does not in turn make an RFC call to the ABAP system. I have followed the SAP help on "Scenario: SSO Between Portal, Web Dynpro, and ABAP Systems".
Any ideas appreciated
Fergus

Hi Prakash
This is the end of the dev_jrfc.trc from the abap/j2ee webdynpro server:
Error file opened at 20050608 101523 British Summer Time Rel 6.40
Error> occured >Wed Jun 08 10:15:23,406< >RfcGetException rc (7) message: The system is unable to interpret the SSO ticket received
<RfcGetException
Error> occured >Wed Jun 08 10:17:28,544< >RfcGetException rc (7) message: The system is unable to interpret the SSO ticket received
<RfcGetException
The portal dev_jrfc.trc does not report any errors.
Other information I should have mentioned: EP uses LDAP for user directory, the ABAP system uses its own user management, the J2EE on the ABAP server uses its own user management. The user I am testing with is the same name in all 3 systems and has full admin permissions in each.
Thanks, Fergus

Similar Messages

Approve link not working in ESS/MSS UWL portal

Hi experts,
we are using portal 7.3 with ess/mss.
in mss when user is approving a leave request, he is not ale to proceed
after few steps as one link "pprove another request" is not working.
this i a standrd portal scren in UWL. please suggest.
Thanks a lot in advance.

Hello,
This should be possible with some UWL configuration. Please check the following forum post: http://forums.sdn.sap.com/thread.jspa?threadID=1677777
Kr,
Julien

Web Dynpro, ESS/MSS and ERP 2004

Hi
Where may I locate information regarding developing/changing of the new Web Dynpro application for ESS/MSS Business Packages for ERP 2004?
Have anyone had a look in how to change the applications?
Regards
Kay-Arne

Post your question in the "Integration with mySAP ERP 2004" forum.
Armin

Appraisal template standard buttons not working via ESS/MSS

Hi experts,
The error which I am facing in appraisal template is as follows
When I click on any button on appraisal template no action takes place.
Kindly let me know how can I resolve this error.
we are using BSP application HAP_DOCUMENT.
according to me page fragment 'document_buttons.htm' (Method CONVERT_BUTTON_TO_UI) contains the code for button creation and button handling
the page fragment 'document_buttons.htm' is getting triggered when page is initialized but it is not triggering when button is clicked.
Additional info that might be useful to resolve the issue:
1) While viewing appraisal template's web layout in t-code PHAP_CATALOG_PA.
I am facing following script error.
This error reappears when I click on any standard button For eg SAVE
2) We are currently using IE 8
3) We recently upgraded ECC system from ECC 6.0 to ECC 6.0 / EHP 6 (ECC 6.6)
4) I checked SICF and corresponding services are active
Thanks in advance

Hi Adrian,
Design2008 service is inactive in my system.when activated temporarily I was not able to see previous page (Blank page was displayed) in my appraisal application.
For BSP application HAP_document, i checked SICF->default host->SAP->BC->BSP->SAP->HAP_document.This service is active.
The image which I have attached with my question is appraisal template's web layout in t-code PHAP_CATALOG_PA.
regards
Ninad

Configuration guide for ESS/MSS mySAP ERP 2005

Hi
Can you please send me configuration guide for ESS/MSS mySAP ERP 2005.
Thanks in advance
Regards
Gauri

http://service.sap.com/instguides
--> SAP Business Suite Applications
--> SAP ERP
--> mySAP ERP 2005
--> Upgrade
--> Upgrade Documentation - mySAP ERP 2005 SR2
There choose your database and operating system.
If you're looking for functional details check
http://service.sap.com/releasenotes

UserExit not working on ESS

Hi,
I have added a Check on Infotype 0006 and its working on R/3, but not working on ESS. We are on ECC 6.0. Any ideas?

Hi,
Instead of finding the user exit why dont you try to use the BADI.
Just use below 2 methods to find the appropriate BADI and you will get hte solution by your own.
Method 1:
Go to Tranaction: SE24.
open class CL_EXITHANDLER
Open the method " GetInstance"
Put Break point in the statement
call method cl_exithandler=>get_class_name_by_interface
Now execute the Transaction which you need teh BDC it will automatically stops at the the method. In debugging mode double click on the variable: " exit_name" It will return the BADI Name.
Method 2:
find the Package name and go to the tranaction SE84.
Enter the package name
inside the left navaigaiton panel there is one option " Enhancements" click on this enhancement and then enter the package name and execute it. you will get hte number of enhancement.
Thanks,
Chidanand

Web Dynpro Screen in ESS for mySAP ERP 2004

I have uploaded the Business Package for ESS for mySAP ERP 2004 and I am expecting the Webdynpro screen to be seen, but unfortunately I am able to see only the typical R/3 screens ...
our
R/3 ver ECC 5.0
EP 6.0
Any suggestions ?

If you are using ESS for ERP2004 BP, have you deployed the XSS WebDynpro Components (PCUI100, ESS, MSS .SDAs) to your J2EE Engine?
Cheers,
Steve

MSS mySAP ERP 2004 - PCRs

Hi,
Has anybody used JSP PCRs in MSS version ERP 2004, instead of Adobe forms? We'd like to keep the same webdynpro screens to select forms but after form selection instead of opening adobe forms, it opens JSP forms. I am wondering if this is possible with configuration or we need to do some customization in web dynpro.

Hi Santhosh,
while MSS supports different UI technologies, one of the novelties of ERP 2004 is the use of an interactive PDF form as part of the PCR applications. If you wish to use and extend the processes and forms shipped by SAP, you need to install the NetWeaver infrastructure of Interactive Forms, in particular the server component 'Adobe document services'. Check the MSS/PCR installation documentation in Service Marketplace at http://service.sap.com/mss -> Documentation -> Personnel Change Requests.
Hope this helps.
Markus Meisl
SAP NetWeaver Product Management

RPTARQEMAIL not working in ESS

Hi,
In ESS RPTARQEMAIL is not working for leave request.
The entries is shown when i send leave request but when i run it the email doesnt get sent.
Regards
Priya

Hi Prakash
This is the end of the dev_jrfc.trc from the abap/j2ee webdynpro server:
Error file opened at 20050608 101523 British Summer Time Rel 6.40
Error> occured >Wed Jun 08 10:15:23,406< >RfcGetException rc (7) message: The system is unable to interpret the SSO ticket received
<RfcGetException
Error> occured >Wed Jun 08 10:17:28,544< >RfcGetException rc (7) message: The system is unable to interpret the SSO ticket received
<RfcGetException
The portal dev_jrfc.trc does not report any errors.
Other information I should have mentioned: EP uses LDAP for user directory, the ABAP system uses its own user management, the J2EE on the ABAP server uses its own user management. The user I am testing with is the same name in all 3 systems and has full admin permissions in each.
Thanks, Fergus

Modify code for MSS/ESS in MySAP ERP 2004

Hi,
I have ECC, mySAP ERP 2004, NW 2004 and need to modify standard MSS in compensation management. I imported the MSS sca into the development track but unable to get the code of ecm. Isnt this migrated in NW2004? If not how do I get the par files or source code for editting the ecm of MSS.
Please help,
Dhanya

1 - Is it par files or WD in ERP 2004 for compensation Management ? Can you tell me where can I download the standard par file ?
In ERP2004, we had par files. You can download the business package from - https://www.sdn.sap.com/irj/sdn/developerareas/contentportfolio. When you unzip the zip file, you can see the par files there.
2 - whether it is a right approach to download the standard par file, change and export it to reflect the changes liek normal portal projects?
You shouldn't be changing the standard code. Once changed, support from SAP becomes difficult. But anyways, once changed it can surely be exported like any other object.
3 - I have new WD ESS and MSS also so can I do a SCA for both the WD components and pars of portal applications into the same SCA? What is the best practise ?
Ideally, WD applications and Portal Applications should be bundled in different SCA files. The reason being, WD can be stand-alone applications running on J2EE engine (though in your case it is not) but Portal applications are meant to run in the Portal Runtime.
Regards,
Sunil

SSO not working when launching the InfoView application

We are so close to implementing SSO for BO Edge 3.0 using AD and Kerberos. We can logon to InfoView and CMC using AD authenication and it works fine. When turning on SSO:
    <context-param>
        <param-name>sso.enabled</param-name>
        <param-value>true</param-value>
    </context-param>
in the InfoViewApp web.xml it fails with an error message in the Tomcat stdout.log
Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
+          [Krb5LoginModule] user entered username: "at"MYCOMPANY.COM+
User name is missing.
When done through the application logon screen and able to logon it is
Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
+          [Krb5LoginModule] user entered username: dennis"at"MYCOMPANY.COM+
The username appears in the log file followed by the debug message for Kerberos key being created.
I am so close, does anyone have an idea?

Hi Tim,
The Vintela SSO document for BOE XI 3.1 is very comprehensive, but it has not resolved my issue.
Under NTLM option I SSO works great with .NET InfoView as long as I have the web site authentication set to Windows Authentication and ASP .NET Authentication enabled. Once the ASP .NET is disabled, SSO does not work.
When using the Kerberos option, .NET InfoView SSO does not work due to the error 'propagating the security context between the security server and the client'.
The Java InfoView SSO does not work either, but I can enter my user credentials and logon fine.
std.out error:
Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
          [Krb5LoginModule] user entered username: @OR.PROVIDENCE.ORG
Acquire TGT using AS Exchange
          [Krb5LoginModule] authentication failed
Generic error (description in e-text) (60)
No user name is being passed. I've been through a multitude of documents and forums ensuring settings are correct and I believe they are including no duplicate SPN's.
The only issue on the server is that I cannot open the tomcat confi app. due to it not able to start service BOE120Tomcat. I was able to update the registry with the info for the bsclogin.config and krb5.ini. I was not able to find anything on getting that service started.
Any ideas? Need more info? I have a bunch.
Thanks and have fun,
Phil

F4 help key does not work in ESS on ITS in Portal

Hello All,
F4 help key is not working in all iviews in ESS in Portal.When i try to press it nothing happens and no pop up appears,kindly please suggest wt might be the cause of this error? Iam tired struggling with this issue and not able to trace out reason for the same.My Email Id is [email protected] .Plz revert at earliest.
regards,
Saumya

Hi,
This kind of problem is known when webgui is being started from an IAC, e.g. HRWPC_FC_EXEC
You have to set parameter ~webgui_popups 1 in the service file of this IAC.
BR,
Disha.
Pls reward points for helpful answers.

BADI HRPAD00INFTY is not working in ESS

Hi Gurus,
I have a requirement for Infotype 0006 at the time of saving or updating or deleting the infotype record. I used BADI HRPAD00INFTY for this. It is working fine if we go through PA30 T-code.
If I enter the records into infotype 0006 through ESS then this BADI is not triggering. Tried in SDN and found that for ESS we need to use BADI HRPAD00INFTYBL. In this my problem is how can we get whether it is updation or deletion or creation mode?
Otherwise can any one provide me another BADI is available for this scenario which will work through ESS.
Thanks,
SC

If you are trying to use this BADI and you don't have access to the current operation being executed (INS, MOD, DEL etc), you can always have access by using the PSYST structure used on the main program of the infotype you are working with.
You just have to use a field-symbol to get access.
FIELD-SYMBOLS: <FS> TYPE PSYST.
ASSIGN('(MP000100)PSYST') TO <FS>.
CASE <FS>-IOPER.
WHEN 'MOD'.
ENDCASE.

Exit Button not working in ESS

Hi All,
We have configured ESS in our landscape. When I go to any Overview/Edit/Review Page (in W-4 Tax, Add/Change dependents etc..), the Exit button which is present is not working. When I click the Exit button, it doesn't exit the current view, but instead stays at the current location.
Can anyone tell me the reason for this strange behaviour? Also, where should I make the code level changes for the Exit button work.
Any kind of help would be greatly appreciated.
Regards,
Adren

Hi Apparo,
In onAction method of the Exit button, a call is made to the TargetExitApplication as follows:
fpm.navigate(wdThis
.wdGetFcNavigationInterface()
.getNavigationTargetExitApplication());
Also, the Exit button does work in the Address Overview/Edit/Review Page, but not in W-4 Tax and Benefits Enrollment.
Any help on this problem !!!
Regards,
Adren

CAS SSO not working for VPN Group

Hello,
I am trying to get SSO working for a CAS/CAM in a inband virtual gateway for VPN users coming in off a ASA5520. There are two VPN groups each with its own group policy and tunnel group. One group uses a Windows IAS Radius Server and the other a token based RADIUS RSA device.
Users use the AnyConnect client to connect to the ASA where they are dumped into a vlan. SSO works for the group that uses the Winodws radius server. On the CAS the Cisco VPN Auth server has the Unauthenticated Group as the default group, and then I use mapping rules (Framed_IP_Address) to get the different vpn groups into the right roles. This works for the one group, but since SSO is not working on the second group the CAS never gets the chance to assign them into the correct role.
The only thing I got is this from the ASA:
AAA Marking RADIUS server billybob in aaa-server group cas_accounting as ACTIVE
AAA Marking RADIUS server billybob in aaa-server group cas_accounting as FAILED
I am so close but cant call this done yet....

Hey Faisel,
Thanks for the question.
This is the stange thing. For days Group A (Windows Radius Server) was working and Group B (RSA Radius Server) would not work. Then for some reason I had to reboot the CAS and BOOM...Group B started working and Group A STOPPED working.
So on the ASA I now get these:
AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as ACTIVE
AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as FAILED
Where cas_accounting2 is the AAA server group for Group A
On the ASA I can see that the FW sends a packet to the cas:
"send pkt cas2-hvn-3515/1813"
but the FW never gets an answer back from the CAS for Group A whereas with Group B I can see the response from the CAS.
"rad_vrfy() : response message verified"
What can I look for in the CAS logs to see where the problem is. I will try and setup a packet capture on the CAS and debug it too.

SSO not working in ESS/MSS in ERP 2004

Similar Messages

Maybe you are looking for