Trusted Connections in 8.8 PL16

Hi,
I have upgraded a site to PL16 and am trying to cinfigure to use trusted connections. The SQL Sever & the license server are on separate boxes
The site's IT provider have created a user code for us which has "log on as a service" rights and is a member of the user group that has DB Owner rights to the SAP databases and SBO-Common.
The License server will not accept the user with the message User credentials are not valid. Can anyone help with the minimum requirements for thos user in order to get it configured?
They are currently unable to use any lauots as these are all set up to use trusted & I don't want to have to edit them all!
Thanks

Hi,
you may try to apply the solution from this link:
http://www.sqldev.org/sql-server-data-access/integrated-securitywindows-authentication-does-not-work-in-windows-7-vista-59375.shtml
JimM

Similar Messages

Trusted Connection Problem while creating a project in MDM WD Confg.Manager

Hi Experts,
We have the Netweaver instance (CE7.2) and MDM instance (MDM7.1SP07) installed in the same machine.
In our current scenario we are trying to create a projects in the MDM WD Configuration Manager for displaying the MDM records.
Things Done:-
1) Created allow.ip file and added the IP address of the server and also added the IP address of the Local Host (127.0.0.1).
2) Same user exists in the Netweaver and as well as in the MDM repository with same case.
3) Created a necessary MDM Destination.
4) After adding the entry in the allow.ip file, i have restarted the MDM server too.
Now when i create a project in the Config. Manager, after selecting the MDM destination i get a Trusted Connection error.
Cannot retrieve language list from repository [null] on server [null]. UserConnectionException: Can not connect with UserSessionContext to repository 'Inbox' on the server 'ctsinsapnw7'., Can not connect with UserSessionContext to repository 'Inbox' on the server 10.239.31.178'., Can not resolve JCA connection. Cause exception: Connection Failed: Cannot create JCA connection. Cause exception: Failed to create trusted connection to MDM server '10.239.31.178' for user 'mdmuser' because server is not defined as trusted, error code: ConnectionNotTrusted, com.sap.mdm.internal.protocol.manual.ServerException: The connection is not trusted
Is there anything to be done. Any help on resolving this will be very much appreciated.
Regards,
Prasanna Kumar R Y

Please make sure of below things...
1. Location of allow.ip file.
         Default location is exe folder where your MDM server executable are available.
2. If not using default location,
         Then check the entry of 'TrustedFiles Dir" property in mds.ini file.
3. Is server stops completely?
         Its very important to restart the server.
         Sometime console may show that the server is stopped but server might be running.
         If possible please check whether server stopped, using Console on different machines.
4. Check the log of MDM server while starting and stopping the MDM server.
         Please pest the log messages in this thread to help you better.

How do I add a trusted connection one time in firefox?

I have a user who is trying to access my department's external site. The pages that she is trying to access pulls data from a different domain (One in our DMZ) than the external host domain. This DMZ domain is a trusted domain and pulling data from this domain has worked well for years on multiple browsers without incident. Now for every other page that hits this internal DMZ server the user is getting "This connection is not trusted" and has to go through the manual exception dance to see her data. We host hundreds of pages and having to do this for each one is going to drive people to grab another browser quickly. I got this user working on Chrome without a problem and have tested it in IE without problem.
I have recreated the cert8.db file in her profile and run into the same problem after reboot.
How do I add a trusted connection for this domain one time?

This should add the permanent exception:
[https://support.mozilla.org/en-US/kb/connection-untrusted-error-message#w_bypassing-the-warning Connection Untrusted Error Message: Bypassing the Warning]
However if it is not staying until the next time that the user opens up Firefox, is it possible that they are in permanent private browsing? [[Private Browsing - Browse the web without saving information about the sites you visit]] - that should have instructions to get in and out of it.

How to establish a trusted connection with JDBC for SQL SERVER 2000

Hi!I am using jdk 1.4 and eclipse 3.3.
I create a servlet in eclipse with in-build tomcat.
When I run it ,it was working perfectlly has it was suppose to work.
In this servlet I connect to a sql 2000 database using jdbc-odbc bridge driver.
But when I tried to deploy the servlet on tomcat 5.5 manully on the same machine ,it gave me error saying
[Microsoft][SQLServer JDBC Driver][SQLServer]Login failed
for user 'sa'
I searched around some post and found that ok ,I need trusted connection
But I have 2 Questions
1). Why was in eclipse I was able to connect to the SQL server and why not in the servlet which I deployed manully on tomcat.
2). How do I create a trusted connection with JDBC for SQL server 2000
Thnaks for your help in advance.

Hi! duffymo ,QussayNajjar ,dvohra09 .
Thank for help.
The ideas are really great.
I am trying generate reports for my company.
When I used eclipse the code worked perfectly.
below is code which I used
out.println("Calling For Class Name ");
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
out.println("Calling For Class Name success Now calling database ");
1). jdbcConnection = DriverManager.getConnection("jdbc:odbc:SQLJasper");
2). jdbcConnection = DriverManager.getConnection("jdbc:odbc:Driver={SQL Server};Server=ServerName;Database=tempdb");
3). jdbcConnection = DriverManager.getConnection("jdbc:odbc:Driver={SQL Server};Server=ServerName;Database=tempdb","UID=UserName","Password=Password");
out.println("connecting to database success ");
I had tried to connect the database using this three way.
In 1st I tried using DSN name .
Next 2 self explainer for expert like you.
I used to 2nd variant to connect in eclipse and it worked fine.
I not an expert in java ,I just doing some research on jasperReport.
My best guest is that eclipse is using some library files of which I have no clue.
Thank's for your help,I appretiate it.
Once again thank a billion.
Sorry for the messy righting.

Trusted Connection - C# Console App

I have been developing a C# Console Application in VS2008, and am having trouble figuring out how to use a Trusted Connection when generating the report, rather than passing it my SQL Authentication username and password. It's connecting to SQL Server 2005. ODBC (RDO).
As of now, the application runs the report with two dates being passed, then exports it as a PDF. It works when passing it the connectioninfo, but how can I make it windows authenticated? I have used the following lines to get it to work using SQL authentication.
crConnectionInfo.ServerName = "server";
crConnectionInfo.DatabaseName = "db";
crConnectionInfo.UserID = "user";
crConnectionInfo.Password = "pass";
Edited by: djhorn on Feb 1, 2010 5:28 PM

Running CR XI with .NET 2008 gives me the ebee jeebes. All kinds of problems will come down eventually for you. Honest. (Reports created in CR XI and run with CR 10.5 are OK as long as you are not using features that are not present in CR 10.5 (dynamic parameters, LOVs, etc.)).
10.5 is OK, but integrated security is not handled by the report (or the CR APIs) as such. It is handled by the app / process which you will have to run under a system account that could validate the users. If the database is on a different server than the app, this constitutes a double hop and will not work. The Article I referenced (https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b021e47e-be1d-2b10-c6b2-efa9db3abd6b) applies to CR 11.5 as well as CR 2008 (v 12.x). So, for you going to CR 2008 may be the best option(?). An eval of CR 2008 is available from here:
http://www.sap.com/solutions/sapbusinessobjects/sme/freetrials/index.epx
Ludek

Hide a company to a windows group connect with trusted connection

I mean, how can I do, to create two groups in the windows active directory, and do users member of the first group and other to the second groups.
Now, when a user from the first group connect with client sap b1 with trusted connections doesn't see all companies (databases) but only those that I decide. The same thinks with the second group.
I don't want to use the 'sa' connections, because in the sap b1 8.8 the connections will be on server.

Not sure if understood correctly.
If you want to assign to each user only specific companies and you are using trusted connection to sql, you may modify
tmsp_getcomplist stored procedure in sbo_common for example as
USE [SBO-COMMON]
GO
/****** Object: StoredProcedure [dbo].[TmSp_GetCompList] Script Date: 09/04/2009 10:01:56 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
ALTER proc [dbo].[TmSp_GetCompList]
--With Encryption
as
begin
set nocount on
declare @comps int
set @comps = 0
select @comps = count(1) from SRGC
if (@comps <= 0)
begin
 exec TmSp_RefreshCompList
end
declare @user as nvarchar(100)
SELECT @user = SYSTEM_USER
select * from SRGC
 where dbUser = convert(varchar(50), CURRENT_USER)
and
(@user <> 'John' or (@user = 'John' and dbname = 'Demo') )
end
User John in this example will wee only demo company and the rest users will see all companies. Hope it helps.

MDM trusted connection

hi all,
i would like to know how trusted connection to manage the connectivity to MDM and perform MDM data manipulation.
for example,
i have an ID that can access to data manager with restriction, which this ID can only view record but not alter any record seen in Data manager.
If trusted connection is set based on this ID, can we still perform any update of MDM data?
Thanks!
Shanti

As sudhanshu mentioned, an MDM trust works on an IP address level. If an MDM server trusts an IP address then ALL logins from that IP adress are automatically authenticated without providing a password.
The trust is therefore something to setup between MDM and (for example) a portal server. It's not something to setup between MDM and each client / enduser.
If you setup the trust between MDM and the portal then you still have to maintain user mapping on the portal, but no passwords are required. The MDM username specified in the user mapping will still be used to log the user into MDM, so they will still be restricted to whatever MDM permissions they would have if they used (for example) the Data Manager and had to specify a username AND password to login.
HTH,
Mark

SAPGUI for JAVA - "pre"define a trusted connection in "trustClassification" file on Linux

Hello,
I would like to deploy a new version of SAPGUI 730 for JAVA (JAVAGUI or PlatinGUI). And this time, to prevent my user from choosing the wrong "trust level classification" for the productive system, I would like to deploy a "trustClassification" file with a predefined trusted connection.
In the help webpage called "Security policy", different configuration files are proposed :
- <system preferences>/trustClassification
- <user preferences>/trustClassification
I easily found the "<user preferences>" directory in "/home/<user>/.SAPGUI" but this is not relevant for a central deployment with hundreds of people.
And until now, I didn't find the "<system preferences>" directory. Can someone tell me what is it ?
I'm using Linux Ubuntu 12.
Regards,
Simon

Hello Simon,
when you open About dialog and press the "more info" button, you get a long list of information.
Beginning of the "Path Information", you will see a line starting with "SAP GUI system prefs".
The value should be what you are looking for.
Best regards
Rolf-Martin

Trusted Connection

Hi,
How to create trusted connections?

Steps:
1. First establish the RFC Connections between the systems.
2. Then in the trusting system register the system that the system wants to trust using
   the tcode SMT1
3. Then go to the system that has been registered as trusted in the trusting system and
   execute the tcode SMT2 to chk whether you have created the trusted connection
   successfully. Return code zero indicates your connection is successful.

Centralize/De-Centralize using Trusted connections

Hi experts,
I have a question regarding Trusted Connections for Centralized GRC implementation. According to some of the SAP guidelines we are using trusted connections (Note: 1701047 and several others). Now the problem that this is creating is that if I use trusted connections for all Connection Settings (AUTH, PROV, ROLMG and SUPMG) then all users need to be created locally (GRC) and in the target system. We have played with the config for S_RFCACL but independent of what we do since is trusted we haven’t found a way to bypass the user creation everywhere. Later we try just having 2 connections (one trusted and another non trusted) for each system but this is creating duplicate values (every data element on trusted and non-trusted version). Is there a way to go around this?

Did you read the file SSLNOTES.txt included with JavaMail?
If you're connecting to a server with a self-signed certificate, you'll need to
load that certificate into your trust store, or you'll need to provide your own
trust manager. The InstallCert program, referenced from the JavaMail FAQ,
might help.

Does Microsoft SQL Server 2k JDBC Driver SP3 support "trusted connections"?

I get the following error when attempting to connect to a SQL Server instance via JDBC :-
[Microsoft][SQLServer 2000 Driver for JDBC][SQLServer]Login failed for user '<username>'. Reason: Not associated with a trusted SQL Server connection.
Does Microsoft SQL Server 2000 JDBC SP3 Driver support "trusted connections"?

No, the MSDE instance I'm trying to connect to from my J2 application is configured as "Integrated Windows Authentication" ONLY (i.e not "mixed mode" and deliberately so) hence my search for a JDBC driver that supports o/s-based authentication.
I appear to have found one now however at it appears that DataDirect's JDBC driver supports NTLM and Kerberos authenicaiton on Windows (although I haven't got it working yet).
Thanks for your reply tho'

8.8 Connection Settings & Trusted Connections

Hi,
Has anyone managed to get 8.8 to use trusted connections from clients rather than a database user?
I have a customer who has two databases, and two groups of users, one that can access one database & one that can access the other, with a few users accessing both.
This has previously been managed using user groups.
We are now having issues as we cannot seem to get anything to save in the Trusted Connections username & password.
Ideally we would like to specify user groups.
I have seen a couple of related threads, but not found anyone who has a resolution?
Thanks

You're welcome Julie.
To know how to use SQL server authentication, pls read the solution in the note 677884. let me know if you can't open the note.
if you use trusted connection:
SQL Server will use WindowsAuthentication to validate your access to the SQL server instance. Depending
on how you are connecting you may use the Trusted_Connection or Integrated Security options in the connection string. It does not mean that you will have permissions to connect or permissions on any securables (although by default local administrators will be allocated System Administrator privileges). These will still need to be granted either directly or indirecty (e.g through a role or windows security group) to that user.
the sa user id login properties can use windows authentication or sql server authentication.
You may check these links to find out the differences between windows authentication and sql server authentication:
http://databases.about.com/od/sqlserver/a/authentication.htm
http://database.ittoolbox.com/documents/windows-authentication-vs-sql-server-authentication-18609
You could to try to create new login id in SQL server 2008 and select windows authentication. you will succeed to create if you have created valid window credential e.g. sboserver\julie_j. you use this new sql login id in the connection strings of license manager.
if the workstation user have had valid window credential to login to the sboserver, then the user is able to run SBO.
JimM

Trusted connection not supported within designer

Post Author: Jon80
CA Forum: General Feedback
It would be helpful if the windows trusted connection for SQL Server is supported when creating database connections.
Universe designer XI R2

Stupid question time. is the dll on the same box as the report?, if not, do you need to add a ODBC connection to
the box runnning the Dll.   I have found, "in my world anyway" that my reports server, and my development server, must
have the same ODBC connection. So, if my db connection on the CR servers name is    FoUrTh
I must create the same ODBC connection on the reports server, and it must also be named FoUrTh.   Fourth, would not work.
HTH

Trusted connectivity with different Clients

Hi all
I have the following problem: The Trusting System SRR (Server) has client 100 and 010 the
Trusted System CLL has client 010.
I tried to make a trusted connectivity with the SRR 100 Client, but Im only able to connect to the SRR 010 Client.
Where can declare to which Client of the Trusting System (Server) the Trusted System (client) Points?
Tnx for your help
Murat

Hi
I solved the problem.
if the Client is not the same you see in the trusted system in RFC menu trusting system an error. "authorization failed". (this was confusing)
You have to create in the Trusting system the authorization object S_RFCACL with the client information for the calling System. You verify the settings with the function module AUTHORITY_CHECK_TRUSTED_SYSTEM.
Once you created the trusted system in the Trusting system. You have to create a NEW RFC connection in the Trusted System for example <SID>_TRUST mark the trusted system and current user with the Client# information. Once saved, try to logon by the "Remote Logon" button. If this works, then you created successfully the trust relationship.
Thanks Wolfgang for the Note you mentioned. I checked that Note before.What I didn't know that the Message in RFC menu Trusting System authorization failed can be ignored since it tries to logon with the current logged on client.
Murat

Cant download adobe reader..... either time out or not trusted connection.... what do I do ?

Cant download adobe reader !!
always times out or not trusted connection.
no problem with flash download...
what can I do ?

You can try downloading the offline Reader installer from
http://get.adobe.com/reader/enterprise/

Trusted Connections in 8.8 PL16

Similar Messages

Maybe you are looking for