Two SAP production systems in a single physical server

Dear All,
Is SAP support installing two SAP production systems like SAP ECC 6.0 of one customer and ECC 6.0 with a different SID and instance no. for another customer in a single physical server? Would like to know from the experts is this possible? If yes , what are the things to take care of this design if any?
Thanks
Hany

Hi ,
check below blog
You can check the following blog https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/5124. [original link is broken]
It helps you to understand different logon pages for portal
Koti Reddy

Similar Messages

Switch over between two SAP PI systems for downtime minimization

Hello Colleagues,
with our interfaces over our SAP PI 7.31 (ABAP/Java) system we assume we will run in a 7x24 h runtime scenario in the future.
Regarding Business Continuity we have to think about solutions which help us to handle downtimes greater than 15 min. regarding Support Package upgrade, Kernel update, EHP, etc.
The first idea is to implement a second equal SAP PI productive system in parallel to the existing one.
On the sender side a switch over implementation like WebDispatcher, Load Balancer, etc.
For maintenance all Interface traffic can run over PI Nr. 1 and PI Nr. 2 can be updated.
Afterward all interfaces will switched to PI Nr. 2 and PI Nr. 1 can go in maintenance.
Could be this as suitable solution for SAP PI Business Continuity or do you know better solutions?
Many thanks in advance!
Regards,
Jochen

Hello Bernhard, Hello Holger,
many thanks for reply and providing these valuable information's.
The nZDM Concept is already known to me but it doesn’t answer all our questions.
Please let me explain a little more in detail.
Not currently but in the near future we assume some new interface over our SAP PI System will come with the requirement max. downtime lower thank 10 to 15 min. only allowed.
To be prepared regarding this possible scenario, we start thinking about possible different solutions.
First step was the nZDM Concept, of course. But it didn’t meet all our requirements regarding interface downtime.
Some points are:
possible min. downtime is 30 min. and thus is over our requirements for interfaces
only for Update (and planed for Upgrade) the SAP PI application
all operating system and database related maintenance tasks are not covered by nZDM
all Hardware (Server, Storage, etc.) as well not covered by nZDM
Among others, because of these facts we start thinking about a second equal SAP PI system beside to existing productive one.
Than line 1 will take over the whole interface traffic and in the meantime the line 2 can go in maintenance. After finalizing the maintenance for SAP PI Nr. 2 we can switch the interface traffic to SAP PI Nr. 2 to get SAP PI Nr. 1 free for maintenance.
Regarding the topic “PI Federation” I found here in these documentation's several hints regarding this scenario (two SAP PI systems in an switch over scenario).
PI Federation – An Overview
among others Page: 27
Business Continuity: Central PI integration Server with redundant Integration Server to be used in controlled switch over scenarios when upgrading or patching.
or
How to Fast-Switch Integration Scenarios between SAP PI Runtimes Part II: Web Dispatcher
But I didn’t found any further detail documentation's regarding this approach.
The solution should fit as well to our existing hardware infrastructure.
For production we use an IBM (AIX) failover-cluster switch between our both data center.
Regarding our hardware infrastructure prerequisites and downtime requirements, which solution(s) do you recommend? Is PI Federation still an option?
Many thanks in advance!
Regards,
Jochen

SAP Production Systems Database backup failed

Dear Guru,
I have been facing a problem with our SAP Production system's oracle database backup for last three days. Our back up goes through TSM server. At night 10 pm we have schedule backup for whole offline + redo log backup, 11 pm check and update optimizer statistic and at 11:30 pm Check Database. For last three days above mentioned backup getting failed and we are not able to get such a details log by which i can understand the issue. But Our Development server and Quality server's backup which are scheduled at 12 am and 2 am, the both backup schedules finish successfully. And in morning all schedule backups of Production systems finish without any errors. The issues is coming only with Whole database backup + redo log Backup which schedule at night 10 pm. I have mentioned the log whatever i have got in below:
07.02.2012     07:30:06     Job started
07.02.2012     07:30:06     Job has exceeded its latest start date
07.02.2012     07:30:06     Job cancelled after system exception ERROR_MESSAGE
Above mentioned logs are showing 1day advance log where i have mentioned yesterdays log. That means it should shows 06.02.2012 instead of 07.02.2012 and time should be 22:00:00 instead of 07:20:06.
Our Oracle version is 10.2.0.4.0/ kernel release 701/BRBACKUP 7.00 (40)
Please Guide me.
Regards,
Samrat Chakraborty

OK,
this has nothing to do with brbackup or TSM.
You batchjob starts at 07:30 !!!
Means before that, you do not have any action at all.
Then the job crosschecks it has passed its intended startdate and terminates,
which is correct, since you do not like brbackup to shut down your DB at 07:30!
No brbackup is started at all, which is why you get no log and no tsm connect takes place.
I assume, you misconfigured some operationmodes and at 07:30 an OP-modeconfiguration
with batchjobs switches back in place so that the jobs do start too late.
Check RZ04 and the OP mode timetable
If it is not this, it has to be something else with the batch scheduler causing delay
or may be all BTC processes are busy, but this seems unlikely with a start at 07:30 sharp..
Volker

Two R/3 Systems on one Windows NT Server

Hello SAP Guru ,
I have ECC6 on database DB2 for Development server and quality server as different client . Now i want to install quality server on same H/W . i go through sdn forum and market place but not found sufficient information for DB2 database , i go through
Note 28392 - Two R/3 Systems on one Windows NT Server also.
Please suggest some more information to keep in mind while doing this activity.
Thanks
Om....

Hi juan,
"When you run two systems in the same box you need to be aware that any mayor mantainance done in one system will have a detriment effect on the other one, specially if you're sharing the Database. During the installation you may find necesary to have some downtime in the system that is currently running as OS or DB restarts are potentially necesary."
I am agree with your post. but still my question is not answered . i am looking for information about what are the things need to modify in current system (either on OS , DB or SAP side) before start of new instance installation for Quality server.
let me explain bit more.
If current system having database name Dev now if i install new instance of SAP on same H/W with name QLT for SID as well as Database name. what are the things i need to change prior installation start so that not any conflict will happen (on OS , DB & SAP)
Or nothing is require to change i can just start installation as on fresh system.
Regards
OM.......

ADS+Terminal Services on a Single Physical Server running Windows Server 2008 R2

We have a Dual Processor Server (2 x Intel Xeon E5-2620v2 + 32GB RAM) running on Windows Server 2008 R2. This has ADS configured. We now wish to add a VDI Setup with NComputing Zero-Clients. We have to run Terminal Services with User RDS CAL + User
CAL for all VDI Clients.
Please confirm if we can have both the ADS & Terminal Services running on the same physical server ? Are there known issues or crashes due to this ? Or should both these run on two different servers ? Customer does not want to invest in one more server
& OS. Hence, we have to run both the services on a single physical server. Customer has just upgraded his server to a Dual Processor with 32GB RAM to accommodate both the services.
Please advice, if we can run both the ADS & TS on the same server. What is the best practice for this Solution ?
Thanks & Regards,
VR
([email protected])

Hi,
After referring your comment I can say that, you can able to use ADS and Terminal service on same physical server with server 2008 R2. But installing a terminal server on an Active Directory domain controller is not recommended. I suggest that it’s not a good
practice to manage the environment in that way. If possible, then try to run on two different machines for better result and to avoid any problem. Allowing users to run programs on a domain controller could create security risks and performance issues.
If the Terminal Server role service is installed on a domain controller, the security settings of the domain controller will need to be adjusted to allow user’s remote access to the server. This remote access is controlled by the "Allow log on through Terminal
Services" user rights assignment, which can be configured by using the Group Policy Management Console (GPMC).
You can refer below link for more information.
1. Installing RD Session Host on a Domain Controller
2. Best practices for setting up Remote Desktop Licensing (Terminal Server Licensing) across Active Directory Domains/Forests or Workgroup
Hope it helps!
Regards.

How to Implement DC and RDS on a single physical server

Can any one guide me that how to install DC and RDS on a single physical server. It would be highly great full.

Hi,
Whilst possible to do it isn't supported and you should have your DC as a dedicated DC and then a separate server(s) for the remote desktop session host.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
Blog: http://www.windows-support.co.uk
Twitter: LinkedIn:

Multiple SAP system on single physical server.

Hello Experts.
We are in process of implementaing SAP solution withLandscpe having systems ECC 6.0, SolMan 4.0, BI. We are planning to have 3 Sytem landscape for all.
Now but currently we are having only one Physical server
Is it possible to Install 6 SAP system on single server?(DEV and QAS for ECC, Solman, BI respectively). The server is having sufficient hardware for 6 system as per sap standered. Planne OS is RHEL and DB MaxDB. Initially we are having 16 GB RAM extendable.
Will SAP support such kind of landscape?

Hi Nikhil
Just my two cents:
Never put non-prod/prod systems on the same server, how would you test os patches, what if system wide components cause problems, what if - for example - you want to upgrade your database on the dev system, but you need a new library, which is not compatible to the version needed by the prod system.
Your single linux box will not be big enough to hold all these systems, trust me. And x86_64 hw is sooo cheap ))
Regards, Michael

SAP Production system - SDK Dev New licence key components

I like to request a new license key for SAP B1 production system. What should be the components along with SDK Development that i should select in the license key request information?
Is it mandatory to have at least one professional user license in the Development system?
Thanks
SV Reddy

Hi David, thanks for the reply
I heard that instead of using atleast one professional user license for development system we can also use a limited user license to access the internal objects in SAP Business One system. But I am not sure whether this will work and also the concept of limited user license is specific to each individual modules within the Business one system.i.e. limtied CRM user license, limited Finance user license. if we use these licenses obviously we have limited access to the objects in the Business One system. am i right? , please let me know that these limited user licenses will come along with the package of licensing or do we need to purchase them separately?
thanks
SV Reddy

Identify SAP Production Systems (from Business suite systems)

Hello,
We have these systems.
DEV, QAS, TRN, CMS and PRD
I received a message from SAP mentioning;
According to our records, you currently have 5 SAP Business Suite systems. 2 of these are production systems
pl, help me to identify what are the SAP Business Suite systems they are talking about.
Is it DEV,QAS,TRN,CMS and PRD ?
what are the 2 production systems? Since we have only 1 PRD
(Is CMS also treated as a production system )
Kindly guide me to clarify the above message
regards,
Zerandib

Hi,
Sunny Pahuja's reply maybe helpful to you for understand. Also you can check the details for your system in SAP service marketplace..
https://websmp107.sap-ag.de/support
Check the system ID and name there tn the field of " Your Recently Used Systems "
Regards

Apple Raid Card in a Macpro production system running 10.4.11 Server

We just recieved the Raid card for our main Intel Octo Core server After installing the card we realized said card was not recognized by 10.4.11 due to lack of drivers the drivers as stated by documentation should be part of 10.4.10 OR shipped with the card (we checked package time and again and nothing was there , are we having fun yet ??) to which we updated a long time ago since this is one of our production 10.4.10 Server is no longer an available install disk at the Apple store apple retailers etc and 10.5 Server is misery to install on our system upgrade path not working as of this time as in kernel panic crash on reboot. Apple does not put the drivers online for this card . I am looking for a kind soul that would have received the disk that should have shipped with the card that would be able to put it online so i can download the installer and recognize the card in 10.4.11 right now i am backing up my system and data to our xraids.
Current Setup is :
Raid Card in slot 1 fully charged battery (it has been way more than 72 hours).
4x1TB HD in internal setup.
1 Quad Channel FC Apple Fibre Channel Card
tied to Fibrenetix Qbex 1 Xraid fully populated with 500 GB HDs.
Total data size is about 500 GB total not including video feed that take about 1 TB and are already backed up to a networked drive. Sites while light occupy about 20 Gbs and WGM is about 300 users rich domains are in the 50 FDQN range . Upgrading manually to 10.5 on a clean install while a possibility would be a MAJOR pain where the sun rarely shines. 10.5.2 does not exist as a DVD yet so i would hope to avoid updating as of yet . Any help would be more than welcome.
Thanking you for your time and attention and waiting to read from you soon ,
Best Regards,

I have installed 10.4 server (from 10.4.7 UB DVD) on top of 10.4.10 (?) "user" on a 4 core MacPro (it came with the RAID-card installed (don't remember if it came with 10.4.10 "user" or earlier version).
You need to get at the "server.mpkg" install files from the 10.4.7 (10.4.8 or newer) server DVD and use that to install the server "bits".
After all upgrades the server now reports (In Server Admin overview):
System Version: Mac OS X 10.4.11 (Build 8S2169)
Server Version: Mac OS X Server 10.4.11 (Build 8S2169)
But the "user" version system that came with the 4-core machine reports something like:
Mac OS X 10.4.11 (Build 8S3169) (notice the 3 in 8S3xxx).
The driver for the RAID card is also on the user DVD but you need to do it like I did.
As I understand it this is an Apple supported way to do it.
This Server have been used a couple of months now.

Secure LDAP with Multiple DPS's on Single Physical Server

I am having an issue connecting to the directory server over SSL via the directory proxy server. I have enabled SSL and tested successfully in some situations, however this situation is unique.
DPS 5.2 patch 4
Directory Server patch 4
I have applied the neccessary hotfixes from sun to resolve the SSL issues.
There are 3 physical servers. 2 of those servers each have 2 instances of directory proxy server running. The 3rd server has 2 separate Directory Server instances running (1 for enterprise authentication, 1 for Access Manager). Each physical proxy server has 1 instance running for each Directory server instance (1 enterprise LDAP, 1 AM LDAP). All 4 proxy instances can connect successfully to the Directory Masters over the unsecure ports (389 for enterprise LDAP, 55389 for AM LDAP). On the proxy servers, only the initial proxy instance can connect to the secure port successfully. For instance, on server 1 first the DPS for enterprise LDAP was installed then a DPS for AM LDAP was added. Only the enterprise proxy instance can connect successfully over SSL. On server 2 initially the AM LDAP instance was installed and then an enterprise LDAP instance was added. In this case only the AM LDAP instance can connect successfully.
For both instances of the proxy the appropriate certificates have been installed and verified. I can use the dps-instance-cert8.db for the working and non working DPS instances and successfully connect to the Directory Master using ldapsearch from the directory proxy server.
When I do ldapsearch I receive the following error on the second instances:
ldap_simple_bind: Can't contact LDAP server
SSL error -12271 (SSL peer cannot verify your certificate.)
Certificates:
bash-2.05$ /jes/ds52/shared/bin/certutil -L -d /jes/ds52/alias -P dps-instance1-
LDAP Development Pu,u,u
CMS SUN CERTIFICATE AUTH 2023 CT,,
bash-2.05$ /jes/ds52/shared/bin/certutil -L -d /jes/ds52/alias -P dps-instance2-
LDAP Development Pu,u,u
CMS SUN CERTIFICATE AUTH 2023 CT,,
Each use the same server cert, the host is �*.test.com�, using the asterisk so the hostname shouldn�t matter.
DPS INSTANCE 1 � Success
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385609] TCP_NODELAY was set on socket 3
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   310200] Success with enabling socket 16 for blocking
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   323705] ( xxx.xx.xxx.xx+ 636) syncConnection success.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385609] TCP_NODELAY was set on socket 16
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [TRACE] [   520503] Connection established to condo101.cms.hhs.gov
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300771] Promoting socket 16 via socket 1.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300751] Socket 16, success with SSL_HANDSHAKE_AS_CLIENT
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385701] Success with sessionPromote to SSL for socket 16.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385704] Success with setting SSL_AuthCertificateHook callback
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385705] Success with setting SSL_BadCertHook callback
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385706] Success with setting SSL_HandshakeCallBack
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   302019] Success with SSL_SetPKCS11PinArg (socket 16)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385748] SSL_SetURL skipped on socket 16 (null url)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385803] Success with SSL_ResetHandshake as client (socket 16)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385739] Certificate possesses valid times on socket 16
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385745] For socket 16, pinArg does possess a value.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   302024] Success with CERT_VerifyCertNow (checking signature, usage: "certUsageSSLServer").
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385725] Certificate accepted on socket 16
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300754] Success with handshake on socket 16
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385746] SSL_ForceHandshake success on socket 16
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [TRACE] [   171210] [client(       xxx.xxx.xxx.xxx,   3)] [server( xxx.xx.xxx.xx+ 636, 16)] Connection via SSL session
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [STAT/CONN] [   171211] [client(       xxx.xxx.xxx.xxx,   3)] Accepting connection via network-group-1
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   310200] Success with enabling socket 3 for blocking
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300771] Promoting socket 3 via socket 0.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300750] Socket 3, success with SSL_HANDSHAKE_AS_SERVER
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385701] Success with sessionPromote to SSL for socket 3.
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385704] Success with setting SSL_AuthCertificateHook callback
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385705] Success with setting SSL_BadCertHook callback
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385706] Success with setting SSL_HandshakeCallBack
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300801] Success with setting SSL_REQUEST_CERTIFICATE (1)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300802] Success with setting SSL_REQUIRE_CERTIFICATE (0)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300405] Success with SSL configuration on socket 3
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385803] Success with SSL_ResetHandshake as server (socket 3)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300406] Success with SSL promotion on socket 3
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [TRACE] [   390307] [client(       xxx.xxx.xxx.xxx,   3)] [server( xxx.xx.xxx.xx+ 636, 16)] Success with OnSSLEstablished rule... continuing
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   300754] Success with handshake on socket 3
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385713] Read on socket 3. Received 42 byte(s)
May 10 2007 09:44:18 server123 SunONEDPS[ 24710]: [DETAIL_TRACE] [   385716] ber_get_next (socket 3) returned complete PDU
DPS INSTANCE 2 � FAILING
ldapsearch -h server123 -p 55636 -P /<serverroot>/alias/dps-server123-cert8.db -D "cn=directory manager" -s base -w adminjes -b dc=cms,dc=hhs,dc=gov objectclass=*
ldap_simple_bind: Can't contact LDAP server
SSL error -12271 (SSL peer cannot verify your certificate.)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   300901] Successful match of xxx.xxx.xxx.xxx+36383 against ALL
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   110999] In permit_connection_from_ip(), The counter for IP:xxx.xxx.xxx.xxx is now 2 and the limit is 0
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385609] TCP_NODELAY was set on socket 15
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   310200] Success with enabling socket 16 for blocking
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   323705] ( xxx.xx.xxx.xx+55636) syncConnection success.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385609] TCP_NODELAY was set on socket 16
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   520503] Connection established to condo101.cms.hhs.gov
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300771] Promoting socket 16 via socket 1.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300751] Socket 16, success with SSL_HANDSHAKE_AS_CLIENT
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385701] Success with sessionPromote to SSL for socket 16.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385704] Success with setting SSL_AuthCertificateHook callback
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385705] Success with setting SSL_BadCertHook callback
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385706] Success with setting SSL_HandshakeCallBack
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   302019] Success with SSL_SetPKCS11PinArg (socket 16)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385748] SSL_SetURL skipped on socket 16 (null url)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385803] Success with SSL_ResetHandshake as client (socket 16)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385739] Certificate possesses valid times on socket 16
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385745] For socket 16, pinArg does possess a value.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   302024] Success with CERT_VerifyCertNow (checking signature, usage: "certUsageSSLServer").
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385725] Certificate accepted on socket 16
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300754] Success with handshake on socket 16
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385746] SSL_ForceHandshake success on socket 16
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   171210] [client(       xxx.xxx.xxx.xxx, 15)] [server( xxx.xx.xxx.xx+55636, 16)] Connection via SSL session
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   310200] Success with enabling socket 15 for blocking
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300771] Promoting socket 15 via socket 0.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300750] Socket 15, success with SSL_HANDSHAKE_AS_SERVER
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385701] Success with sessionPromote to SSL for socket 15.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385704] Success with setting SSL_AuthCertificateHook callback
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385705] Success with setting SSL_BadCertHook callback
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385706] Success with setting SSL_HandshakeCallBack
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300801] Success with setting SSL_REQUEST_CERTIFICATE (1)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300802] Success with setting SSL_REQUIRE_CERTIFICATE (1)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300405] Success with SSL configuration on socket 15
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385803] Success with SSL_ResetHandshake as server (socket 15)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   300406] Success with SSL promotion on socket 15
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   390307] [client(       xxx.xxx.xxx.xxx, 15)] [server( xxx.xx.xxx.xx+55636, 16)] Success with OnSSLEstablished rule... continuing
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [NOTICE] [   385721] Read on socket 15 failed.
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [NOTICE] [   385721] SSL_ERROR_BASE + 3, NSPR error: -12285 (0xffffd003). Native errno is: 11
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385714] ber_get_next (socket 15) returned LBER_DEFAULT
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   385714] SSL_ERROR_BASE + 3, NSPR error: -12285 (0xffffd003). Native errno is: 11
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [EXCEPTION] [   301006] Unexpected error on socket 15. (Error: -12285).
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   190401] [server( xxx.xx.xxx.xx+55636, 16)] Input was not a BER encoding or connection closed: source( xxx.xxx.xxx.xxx, 15)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   190401] [server( xxx.xx.xxx.xx+55636, 16)] SSL_ERROR_BASE + 3, NSPR error: -12285 (0xffffd003). Native errno is: 11
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   171505] [server( xxx.xx.xxx.xx+55636, 16)] Entering recycle_inner_connection
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   301201] Closing connection to: xxx.xx.xxx.xx+55636 (socket 16)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [DETAIL_TRACE] [   301201] Closing connection to: xxx.xxx.xxx.xxx (socket 15)
May 10 2007 10:05:17 server123 SunONEDPS[ 26275]: [TRACE] [   110998] In done_connection_from_ip(), The counter for IP:xxx.xxx.xxx.xxx is now 1 and the limit is 0

In these situations it's important to separate SSL level issues from LDAP issues. I've had good results using "openssl s_client" to investigate and debug SSL/TLS level issues. I point it at the LDAP server and it sets up a connection handling the SSL layers and giving lots of diagnostics about SSL and the X.509 certificates in use.
Try looking for things like whether the SubjectAltName and/or Issuer's CN contain the same hostname you are using to connect.
After giving you the diagnostics it will be waiting with your stdin/stdout connected to the application via SSL (which could make you think it's hanging). Since you're probably not going to be typing the LDAP protocol by hand you want to abort s_client at this point (or type something that Directory Server will reject as a LDAP protocol error).
You can get openssl from the usual places: blastwave.org & sunfreeware.com.
Hopefuly this will help,
-Scott-

Same logical system name for two productive systems - BW, PI issues

Dear all,
we have a productive system which serves two companies (different company codes). This system is connected both to BW and PI for both companies.
There is a requirement that these two companies must use their own system, so the whole landscape (dev,qa,prd) will be copied to different systems (different server with different system id).
As a result of the above procedure we wll have two different productive systems, as required, but we wll have the same logical system name for the two productive systems, which must be both connect to bw and PI.
However as far as I know:
- we cannot connect systems with same logical system name to BW,PI
- we cannot convert logical system name of the one of the two productive systems as they are productive and so this is not supported.
How can we overcome the problem?
Please advice.

> However as far as I know:
> - we cannot connect systems with same logical system name to BW,PI
> - we cannot convert logical system name of the one of the two productive systems as they are productive and so this is not supported.
Right.
> How can we overcome the problem?
Since you split up systems (or plan to) I highly recommend booking an SLO service (http://service.sap.com/slo). Those people have to the tools and the knowlege to help you. I would not do this on my own.
Markus

Multiple SAP systems - Single Content Server

In a production landscape with multiple SAP systems and a single Content Server, would it be more efficient to allow each Web AS to access the Content Sever directly or should there be a single dedicated Web AS to access the single Content Server?
We do not have any load data; we are trying to find out if there are any heuristics for such a configuration.
Message was edited by: John Ryan

You may use the SAP Content server for data archiving. If you use content server, you may not be be able to satisfy the legal requirements as SAP content server cannot support a WORM devise.
SAP do not recomment using SAP CS for Data archiving as well. SAP CS could be best used as a temporary content stoarge for non legal document images.

Two R3 Systems on one Windows NT Server

Dear SDN Colleagues,
I'm starting an installation project (DEMO systems) of the Solman 4.0 and SAP ERP 2005 (ECC 6.0). I'm planning to install both systems on one Windows NT Server. About ABAP stack I know that it is possible, as such as describe in the SAP Note 28392 "Two R/3 Systems on one Windows NT Server", but wed like to know about JAVA Stack.
Is there any available SAP documentation about
installing several systems in one host?
Thanks in advanced and Best Regards,
Chacon

Hi,
you can install both Solman and ECC 6.0 on single NT host.
it is better to go for 64 bit windows installation. if you have 64 bit windows OS.
installation of java stack depands on your requirement.
download installation document from service.sap.com/instguides.
Guidelines: ( for example only)
1) first install SOLMAN 4.0 ABAP + JAVA stack on windows.
SID: SSM
instance number : 00
after sucessfull installation of solman perform post installation on that. and stop the SAP instance.
2) Now install ECC 6.0 ABAP instance , If you want to plan to use ESS/MSS like java based service than JAVA stack is required.
Either you can perform ABAP + JAVA stack or perform only ABAP installation and JAVA stack as separate instance.
SID: ECC
instance number : 10
if you going for JAVA stack as separate instance.
SID: J2E
instance number : 20
so as result you have total 3 System, for this more than 4GB RAM is required. ( for better perfomance)
regards,
kaushal

Allowing Multiple Login of users in Production system

Hello,
In my office there are total 4 employes which all use SAP but they all use one username and password so it isn't possible for them to work at same time. Only one employe can work, then after he completes his task he must log-off, and then other employe logs-in and so on... So Multiple Logon option is disabled. I would like to enable Multiple Logon option but as I read it somewhere Mult.logons in productions system of users musbe set to off?
I am not sure what do do because I need to have option for employes to lgoin at the same time with one username/password.
If this is not possible is there any other way to achieve this? Also is there any way that one employe can enter/view data and other three employes can login at same time only to view data?
Any help is appreciated and <removed_by_moderator> !
Greetings,
Adi
Edited by: Julius Bussche on May 30, 2011 4:28 PM

P1071191 wrote:
Hi,
>
> In the default parameter, set the paramater login/multi_login_users,
>
> Set the value of this paramater login/multi_login_users UID1, UID2, UID3, UID4.
>
> May this solve your problem.
>
> Regards,
> Vinod.
>
> Edited by: gvk1305 on May 31, 2011 8:36 AM
gvk1305 wrote:
Hi,
>
> In the default parameter, set the paramater login/multi_login_users,
>
> Set the value of this paramater login/multi_login_users UID1, UID2, UID3, UID4.
>
> May this solve your problem.
>
> Regards,
> Vinod.
>
> Edited by: gvk1305 on May 31, 2011 8:36 AM
@Jurjen Heeck
Hello Jurjen,
I have no intention to voilate any of license agreement, I had to do it once in emergency.
@David Berry
Hi David,
There are four users in my office but I am not sure of exact total number of SAP users in my company.
@R. Voerman
Thank you very much for this information. I will try this definetly. Could you tell when I enter this parameter, then
multi_login_users option is ON, right?
@Julius Bussche
You can also assign it selectively to more users than the length of the system parameter field allows...
Hello Julious,
how do I this in transaction SU01, what do I need to change?
It's no problem form me to change this parameter but I am not sure if this is good because of security issues?
http://sap-basis-security.blogspot.com/2009/01/how-to-restrict-multiple-logons-of.html
Note:
"Multiple logons of users must be set to 1 in sap production systems. This can be allowed in DEV systems. But in production it must be restricted."
Edited by: samnovice on May 31, 2011 10:27 AM

Two SAP production systems in a single physical server

Similar Messages

Maybe you are looking for