Unable to define a Java system in solman_workcenter

Question

Dear experts,
I am trying to define a Java system in our Solution Manager in order to be able to generate an .xml stack configuration file
for an upgrade. The diagnostics agent has been installed.
I am clicking on Configure System in solman_workcenter, a new web browser opens with a multi-step setup.
I am getting to step 6 to create users. My user store is an ABAP system. At this step, there are 2 users, that need to be
created automatically: SAPSUPPORT and SM_COLL_<SID>.
In the Action combobox, there are only 2 options - Do nothing and Provide Existing User, though no option to create those
users automatically...
The SAPSUPPORT user already exists, as it was created during defining the ABAP system. I have created the SM_COLL_<SID>
user manually in the useradmin panel of Java and I have assigned the suggested roles to it.
I have selected Provide Existing User, typed in the password and after clicking on Execute, the following error pops up:
User J2EE_ADMIN is not allowed to perform this request. Check SAP Note 1647157.
I have googled a little and found SAP Note 1647267 - Solution Manager adaptation to Java UME security, and downloaded
it on our Solution Manager, though it says "Cannot be implemented".
Though there is no way to say that this step is done and the point remains gray. Nevertheless, I decided to continue to the
next step 7, called Configure Automatically. When I click on Execute all, almost all the points are getting green, except for
WEB Services Logical Port Creation. It shows the following error: Java communication user is not operational. Activity aborted.
WHY ?? The user exists and is very well operational... !! Can I skip this point and go ahead ?
PLEASE help me !! Thanks :-)

Answer 1

Hello Symon,
Based on the error message , I assumed that you are running managed system setup using "j2ee_admin" since admin users are not allowed for running setup configuration.
Please check note    1612514  - Solution Manager 7.1 SP Stack 03: recommended corrections
Current NW security policy implies that the "Create users" setup in Solution Manager transaction SOLMAN_SETUP (scenario "Managed system configuration") is failing for Java or double stack managed systems (including the Solution Manager system itself) and (some) users won't be created. There are two cases:
You encounter this error message: "An error occurred while processing the UME command READ_USER : SPML service failed to process searchRequestreply : <xxx> is not allowed to perform search request".
Action:The managed system Java setup user provided in "Enter System Parameters"needs to have additional permissions even though it is already an user with administrator privileges (see SAP note 1647157).
You encounter the error message: "An error occured while processing the UME command READ_USER from agent xxxx : no protocol: /nwaErrorPage. Please check SMD agent application logs", or other kind of errors.
Action:
Given that the SPML service (on the managed system) is not accessible (see also SAP note 1616058), you need to double check manually whether the user has been already created with the requested type (dialog or technical user) and the appropriate roles (UME & J2EE security). Else create the user using the managed system UME for independent Java stack systems, or using transaction SU01 (or the Central User Administration system) in case an ABAP back-end is used. Be aware that the step "CreateUsers" might list some roles that do not exist on the managed system, as the available roles vary with the managed system releases. In such case, simply ignore the assignments for the none existing roles. Finally provide the username and password in the step "Create users" using for each user the "Provide existing user" action.
As per the case 1 , you need to have additional privileges ,which note 1647157 suggests to create.
Since you have manually created user in the system , I feel you can ignore this step.
Regards,
Archana