URGENT: Authorization Problem with SolMan 4.0

Hi all,
I'm still configuring the SolMan 4.0 . I did all the basic customizing but still have an authorization problem. If I want to create a new support message and want to choose the System/IBase, i get the message "no authorization". And the "KeyUser"-User or "FirstLevelSupport"-User even cannot open the transaction "notif_create".
I tried randomly some roles without any proper results:
SAP_OP_DSWP
SAP_RMMAIN_EXE
SAP_SCDT_ALL
SAP_SCDT_DIS
SAP_SCIDM_ALL
SAP_SCIDM_DIS
SAP_SCOUT_ALL
SAP_SETUP_DSWP
SAP_SMSY_ALL
SAP_SMSY_DIS
SAP_SOL_AC_COMP
SAP_SOL_KW_ALL
SAP_SOL_PM_COMP
SAP_SOL_PROJ_ADMIN_ALL
SAP_SOL_PROJ_ADMIN_DIS
SAP_SOL_SERVTRANS_CREATE
SAP_SOL_TRAINING_EDIT
SAP_SOL_TRANSPORT_DIS
SAP_SOL_TRANSPORT_EXE
SAP_SOLAR01_ALL
SAP_SOLAR02_ALL
SAP_STWB_2_ALL
SAP_STWB_INFO_ALL
SAP_STWB_SET_ALL
SAP_STWB_WORK_ALL
SAP_SUPPCF_ADMIN
SAP_SUPPCF_PROCESS
SAP_SUPPDESK_ADMIN
SAP_SUPPDESK_PROCESS
SAP_SV_FDB_NOTIF_BC_PROCESS
SAP_SV_SOLUTION_MANAGER
The "KeyUser" has the Roles:
SAP_SUPPCF_CREATE
SAP_SUPPDESK_CREATE
The "Processor" has the roles:
SAP_SUPPCF_PROCESS
SAP_SUPPDESK_PROCESS
Has anyone an idea??
Best Regards
Philipp

Hi Phillipp,
did you do the step 1.4 from service.sap.com/solutionmanager media library technical papers Service Desk: Additional Information ? You have to create the ibase ....
Lando
P>S> Don't forget the points if this answer is hepfull

Similar Messages

Authorization problem with VF01 "Create Billing Documents"

Dear All,
We face following problem with VF01 "Create Billing Documents".
Transaction: VF01
User: Joe
Authorization of Joe:
     VKORG Sales Organization: A, B (authorization object V_VBRK_VKO)
     FKART Billing Type: 1, 2 (authorization object V_VBRK_FKA)
The objective for Joe:
   Joe is qualified to create bills in
      sales org A only for billing type 1 and in
      sales org B only for billing type 2.
   Joe should not be able to create bills for
      sales org A with billing type 2 and in
      sales org B with billing type 1.
How can we solve this problem?
We already searched for userexits without any success.
Any help or ideas are very appreciated.
Regards
Markus Wilhelm
Project Manager ERP

Dear,
There are standard authority-checks based on Sales organization (authorisation object V_VBRK_VKO) and/or Billing type (V_VBRK_FKA).
An option would be to create a new billing type, define specific authorisations and use the new billing type for these documents.
The bad thing is that you would also need a special (new) sales order type, because the billing document type is unique per sales order.
So maybe it is easier to have a different sales organization.
Another option would be to create a new authorization object and check it in the billing documents.
If you wish, you could modify program LV60A005 & LV60A006.
Then you might check various user/customer exits.
Some functions to check: EXIT_SAPLV60A_001/002,
EXIT_SAPLV60B_001 - 008, EXIT_SAPLV60B_010 - 011.
Regards,
R.Brahmankar

Authorization problems with oranetb user

We have set up Apex in an oracle database, that are installed on unix operative. We have problem with the authorization
for the oranetb user. On the unix system we have one user that can call scripts with for example unix command like ls,
cp, etc.
Now we want this oranetb user to run unix commands in scripts, without change the user in unix environment. We have
been told that we can use something in the script, with PATH’s and authorization for oranetb user. Have you ever done
something like this? And can you help us with something that you think can help us?
We also have the same problem to run workflow (Informatica) from a script in unix, when apex is calling the script.
If you want more information, please send a mail to me.
Email: [[email protected]]

hunt3r,
iTunes Store menu -> View my account... Once you've logged in, there's a button to deauthorize all your current machines and start you back at zero machines authorized. Try that.

Authorization Problem with 9.2.. Please HELP!

I recently got a new laptop, only my second so I'm not at the max. I downloaded 9.2, which I didn't have before. I imported all of my "Purchased" CDs, and keep getting prompted to authorize my computer, which I already did. When I try it again, it tells me I already have the computer authorized. So I go to play the song, and it again prompts me to authorize...
I have gone through every troubleshooting tip, I emailed them (with no answer, even after 48 hours...) I stopped in teh local apple store where the man proceeded to smirk the entire time, and had the nerve to tell me if I had a MAC it would work fine.
I tried to get an apple "specialist" to call me, but while I was setting it up, I was informed I would need to PAY TO GET SERVICE!! What happened to the 1,000 songs that I PAID FOR??
Needless to say I'm livid. If anyone could help me here I would really appreciate it

I have in my room 2x usb keyboards and one ps/2 . I have also conenctor USB->PS/2 and the keyboard is not working at all when im using it to connect it to my PC. My friend told me that i should have no problems with getting into bios on usb keyboard. Probably i turned off an option in bios which is called USB Legacy Device Support and thats why i cannot get into bios with my usb keyb. But im worried, if I reset my bios settings, And that option will be on ? Will i be able to get into bios then ?
Could an owner of this board told me, what happens with this "USB Legacy Device Support" after bios reset ? Is EN or DIS ?
Regards

Authorization problem with iTunes 6.0 in iMovie

I just upgraded to iTunes 6.0. I am able to play my purchased music in iTunes. When I attempt to play iMovies (QT 7.0.1), I am asked to authorize the song in iTunes. The iTunes opens up but the computer hangs after I put in my authorization data. Is there a fix for this. If not, should I downgrade to a lower version of iTunes in which this problem did not occur?

Try the steps in this Apple document:
http://docs.info.apple.com/article.html?artnum=300456
I would also try in iTunes to de-authorize the computer (under Advanced menu) and then reauthorizing it. It almost sounds like there's a problem with the iTMS servers.

¡URGENT! Problems with OCX in "runtime mode"

Hello everyboy, I have a problem with OCX. When I am developing, I have no problem inserting the OCX, but when I run the application, the OCX disappears, not exists.
I am using the Forms Builder [32 bits] Versión 6.0.8.25.2 ...
Ah, in the previous version Forms [32 bits] Versión 6.0.5.35.3, it worked
Do I need any patch?
¡Thank you very much!

It's hard without seeing your specific application, but what
you need to do
is the following -
1. Add a recordset to the page
2. Place fields from this recordset into the cells of a table
as desired
3. Wrap the row with these cells in a looper/repeat region,
so that the
recordset is incremented from beginning to end as the records
are being
placed in the table and the page is built step by step
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.dreamweavermx-templates.com
- Template Triage!
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
==================
"Short_T" <[email protected]> wrote in
message
news:e8aafs$6gv$[email protected]..
> Hi everyone!
>
> Desparately need help in placing result of search from
MySQL database into
> individual cells of the table. If anyone can give me a
sample code/file,
> it
> would be most helpful! I have results from a display all
of the table, now
> I
> need to code so that particular results from fields are
displayed in
> assigned
> columns...
>
> Thank you in advance!
>
> Short_T
>

URGENT! Problem with reviewing in adobe pro 8.

Hi,
I have a problem with reviewing in adobe professional 8.
I map network drive and configure adobe pro 8 for reviewing, but when I restart the computer, the network drive appear in "My computer" but not in adobe professional 8, and everyday i reconfigure the adobe pro 8 for reviewing...
Any sugestion for solve this problem?
Thanks.

What Adobe product is it?
This is the Adobe Reader forum, please go to http://forums.adobe.com/index.jspa and find the right forum to post your question.

Urgent: Facing problem with restoration prosses

Good day,
I'm Facing problem with restoration process. During restoring my data from my PC to my Q10 phone using link app. the application reject my request & kept giving me following error:
Operation Cancelled.
Really need your help Gent’s & I'll be so much glad for anyone help me to solve this matter.
Thx.

Hello
Are you restoring from same device to same device or to different device?

Urgent:BiG Problem with accents.

Hi,
I have a problem with accents in IPlanet 4.0 sp4.
I have a form in a html page and a servlet that takes the words that i
put in the form.
The problem is if i put accents in the word iplanet don' t serve the
correct caracters..
Please i need help...
Manu

Try this
http://www.dhakamobile.com/nokia-fourth-generation-dct-4/9423-nokia-n97-hard-reset-keys.html
Good Luck
If I have helped at all, a click on the White Star is always appreciated :
you can also help others by marking 'accept as solution'

URGENT timout problems with bc4j

Hello Jdev Team,
We have a serious problem with the BC4J. The situation is as
follows:
We use BC4J with jsp pages an run the whole thing on a j2ee
Container.
We have written our own ApplicationPool class and
ApplicationModule datatag because the users have to login
using different credentials. The login users are db-users. The
application release mode is reserved.
The application crashes frequently. 2 errors occur.
First of all we get an JBO-30003: "The application pool, {AM
Name}, failed to checkout an application module instance."
after the BC4J Container timeout --> messages ("BC4J HTTP
Container was timed out" and "The binding listener for { AM
name} was timed out")
We haven't found a way to alter the BC4J container timeout.
Where do we customize the timeout?
We have tried to use the HttpSessionTimeOut variable but it
seems to have no effect.
I hope you can help us with this one.
Second problem is that the J2EE Container stops functioning
after a couple of requests.
Even if an other browser is started (on the same or different
machine) the Container does not respond to any request.
We have found a Thread on technet handling this kind of problem
but the solution doesn't work in our case.
(the solution on technet was to put synchronized(session) around
each JSP page)
Now we run the application under Apache/Jserv and with the same
Runtime packages as used in the Container and the problem
seems to have disappeared.
Here follows the code of the ApplicationPool class:
The class is based on an example posted on technet
* @author Juan Oropeza
package be.cronos.dbwise.jbo;
import oracle.jbo.common.ampool.ApplicationPoolImpl;
import oracle.jbo.ApplicationModule;
import java.util.Properties;
public class SeperateLoginApplicationPool extends
ApplicationPoolImpl
private String vConnectURL;
private String vUsername;
private String vPassword;
public SeperateLoginApplicationPool()
public void setConnectInfo(String pUsername, String pPassword,
String pConnectURL)
this.vUsername = pUsername;
this.vPassword = pPassword;
this.vConnectURL = pConnectURL;
protected void connect(ApplicationModule appModule)
if (!appModule.getTransaction().isConnected())
appModule.getTransaction().connect(vConnectURL ,
vUsername, vPassword);
//use Optimistic locking as default for all transactions
appModule.getTransaction().setLockingMode
(oracle.jbo.Transaction.LOCK_OPTIMISTIC);
* checkin
* @param appModule
public synchronized void checkin(ApplicationModule appModule)
// release the instance regardless of the release mode
// this is necessary since we need a fresh instance each
time.
this.releaseInstance(appModule);
this.releaseInstances();
public void disconnect(ApplicationModule pAppModule, boolean
pRetainState)
super.disconnect(pAppModule, pRetainState);
Here is the code of the applicationPool datatag:
     * @author Juan Oropeza
* @author Ief Cuynen
* @version 1.1
/* Modification history
package be.cronos.dbwise.datatags;
import be.cronos.dbwise.jbo.SeperateLoginApplicationPool;
import javax.servlet.jsp.tagext.TagSupport;
import javax.servlet.jsp.JspException;
import java.io.StringWriter;
import java.io.PrintWriter;
import oracle.jbo.html.jsp.ConnectionInfo;
import oracle.jbo.common.ampool.PoolMgr;
import oracle.jbo.common.ampool.ApplicationPool;
import oracle.jbo.ApplicationModule;
import oracle.jbo.html.jsp.JSPApplicationRegistry;
import java.util.Properties;
import java.util.Hashtable;
import java.util.Enumeration;
public class ApplicationModuleTag extends TagSupport
String fApplicationName;
String fConfigName;
String fUsername;
String fPassword;
String fConnectionURL;
String fIiopUserName;
String fIiopPassword;
JSPApplicationRegistry fAppRegistry;
public ApplicationModuleTag()
public void setId(String pAppName)
{ this.fApplicationName = pAppName; }
public void setConfigname(String pValue)
{ this.fConfigName = pValue; }
* doEndTag
* @return int
* @exception javax.servlet.jsp.JspException
public int doEndTag() throws JspException
try
SeperateLoginApplicationPool pool = null;
init();
// Get an application module resource.
fAppRegistry = JSPApplicationRegistry.getInstance();
// this step will access the custom pool from the property
file
appRegistry.registerApplicationFromPropertyFile
(fApplicationName);
               // Since we don't want to use a
PropertyFile per AM, we have written are own
registerApplicationModule method
this.registerApplicationModule();
// get an instance of the pool, which is already existing
               pool = (SeperateLoginApplicationPool)
PoolMgr.getInstance().getPool(fApplicationName);
// get an instance of the application module
synchronized(pool)
// Setup the connection information
pool.setConnectInfo(fUsername, fPassword,
fConnectionURL);
// This instance will be used by the rest of the
DataWebBeans since it’s part of the context.
                    try
                         //After the BC4J
container timeout, this method will raise an exception
     ApplicationModule am =
fAppRegistry.getAppModuleInstance(fApplicationName, pageContext);
                    catch(Exception e)
                         System.out.println
("JspRegistry has failed to get application module instance");
setPageContextValues();
catch(Exception ex)
StringWriter writer = new StringWriter();
PrintWriter prn = new PrintWriter(writer);
ex.printStackTrace(prn);
prn.flush();
throw new JspException(writer.toString());
return SKIP_BODY;
* for internal use only
private void init()
fUsername = (String)pageContext.getSession().getValue
("username");
fPassword = (String)pageContext.getSession().getValue
("password");
fConnectionURL = (String)pageContext.getSession().getValue
("connectionURL");
private void setPageContextValues()
// place default renderers into session, these will not be
exposed via config file
pageContext.getSession().putValue
("oracle_ord_im_OrdImageDomain_Renderer", "oracle.ord.html.OrdBui
ldURL");
pageContext.getSession().putValue
("oracle_ord_im_OrdAudioDomain_Renderer","oracle.ord.html.OrdBuil
dURL");
pageContext.getSession().putValue
("oracle_ord_im_OrdVideoDomain_Renderer","oracle.ord.html.OrdBuil
dURL");
pageContext.getSession().putValue
("oracle_ord_im_OrdVirDomain_Renderer", "oracle.ord.html.OrdBuild
URL");
pageContext.getSession().putValue
("oracle_ord_im_OrdImageDomain_EditRenderer", "oracle.ord.html.Fi
leUploadField");
pageContext.getSession().putValue
("oracle_ord_im_OrdAudioDomain_EditRenderer", "oracle.ord.html.Fi
leUploadField");
pageContext.getSession().putValue
("oracle_ord_im_OrdVideoDomain_EditRenderer", "oracle.ord.html.Fi
leUploadField");
pageContext.getSession().putValue
("oracle_ord_im_OrdVirDomain_EditRenderer", "oracle.ord.html.File
UploadField");
protected synchronized void registerApplicationModule()
PoolMgr vPoolMgr = PoolMgr.getInstance();
          try
if (!vPoolMgr.isPoolCreated(fApplicationName))
                    // Parse the ConfigName
                    String vConfigPackage =
fConfigName.substring(0, fConfigName.lastIndexOf('.'));
String vConfigSection = fConfigName.substring
(fConfigName.lastIndexOf('.') + 1);
                    //Strip out the AM Class
                    vConfigPackage =
vConfigPackage.substring(0, vConfigPackage.lastIndexOf('.'));
Properties vProps = new Properties();
vProps.put("ConfigName",fConfigName);
                    ApplicationPool vAppPool =
vPoolMgr.createPool(fApplicationName,vConfigPackage,
vConfigSection, vProps);
                    vAppPool.setUserName
(this.fUsername);
                    vAppPool.setPassword
(this.fPassword);
          catch (Exception ex)
               ex.printStackTrace();
               throw new RuntimeException(ex.toString
* release() called after doEndTag() to reset state
public void release()
          super.release();
          fApplicationName = null;
          fConfigName = null;
          fUsername = null;
          fPassword = null;
          fConnectionURL = null;
          fIiopUserName = null;
          fIiopPassword = null;
          JSPApplicationRegistry fAppRegistry = null;
Another thing is that the JSPApplicationRegistry contains a bug
(I think)
It doesn't use the HttpSessionTimeOut variable at all (see
following code)
this piece of code is a Method from the
JSPApplicationRegistry.java File taken from package
oracle.jbo.html.jsp;
static synchronized public void
registerApplicationFromPropertyFile(HttpSession session, String
sPropFileName)
if(!mPoolManager.isPoolCreated(sPropFileName))
registerApplicationFromPropertyFile(sPropFileName);
if (!PropertyConstants.TRUE.equals((String)session.getValue
(SESSION_INITIALIZED)))
Hashtable settings = getAppSettings(sPropFileName);
/* The timeout variable is declared here */
int nTimeOut = 300;
if (settings != null)
// see if we have a setting for the session timeout
String sTimeOut;
/* get the HttpSessionTimeOut variable */
if(settings.get("HttpSessionTimeOut") != null)
sTimeOut = (String)settings.get
("HttpSessionTimeOut");
if(sTimeOut != null)
/* Put the value in the variable... and that's the last thing it
does. nTimeOut isn't used anywhere in the class */
nTimeOut = Integer.parseInt(sTimeOut);
if(settings.get("ImageBase") != null)
session.putValue("ImageBase", settings.get
("ImageBase"));
else
settings.put("ImageBase", "/webapp/images");
session.putValue("ImageBase", "/webapp/images");
if(settings.get("CSSURL") != null)
session.putValue("CSSURL",settings.get("CSSURL"));
else
settings.put("CSSURL", "/webapp/css/oracle.css");
session.putValue
("CSSURL", "/webapp/css/oracle.css");
// place default renderers into session, these will not
be
// exposed via config file
session.putValue
("oracle_ord_im_OrdImageDomain_Renderer", "oracle.ord.html.OrdBui
ldURL");
session.putValue
("oracle_ord_im_OrdAudioDomain_Renderer","oracle.ord.html.OrdBuil
dURL");
session.putValue
("oracle_ord_im_OrdVideoDomain_Renderer","oracle.ord.html.OrdBuil
dURL");
session.putValue
("oracle_ord_im_OrdVirDomain_Renderer", "oracle.ord.html.OrdBuild
URL");
session.putValue
("oracle_ord_im_OrdImageDomain_EditRenderer", "oracle.ord.html.F
ileUploadField");
session.putValue
("oracle_ord_im_OrdAudioDomain_EditRenderer", "oracle.ord.html.F
ileUploadField");
session.putValue
("oracle_ord_im_OrdVideoDomain_EditRenderer", "oracle.ord.html.F
ileUploadField");
session.putValue
("oracle_ord_im_OrdVirDomain_EditRenderer", "oracle.ord.html.F
ileUploadField");
session.putValue(SESSION_INITIALIZED,
PropertyConstants.TRUE);
Am I mistaken or is it a bug?
Thank you for your fast response.
Greetings,
Ief Cuynen

First of all we get an JBO-30003: "The application pool, {AM Name}, failed to checkout an application module
instance."
The JBO-30003 exception is thrown whenever the pool cannot
properly create/recycle an application module. Please see the
exception details (scan the exception stack to find the exception
details) for more information regarding the "root" cause of the
exception.
We haven't found a way to alter the BC4J container timeout. Where do we customize the timeout?
The BC4J container is timed out when the HttpSession is timed
out. The session timeout is configurable via the web.xml file
for the J2EE application. Your servlet container may also
include another mechanism for setting a session timeout.
Second problem is that the J2EE Container stops functioning after a couple of requests. Even if an other browser
is started (on the same or different machine) the Container does
not respond to any request. We have found a Thread on technet
handling this kind of problem but the solution doesn't work in
our case.
The issue sounds like a deadlock. Please use kill -3 (Solaris)
or ctrl-break (NT) at the java server console to print the thread
stack trace to stdout. This will contain more information
regarding which threads are blocked and where. If you would like
you can send the stack trace to me via mail and I can take a look
at it.
The solution of synchronizing your pages with the HttpSession
context is required only if you are using the BC4J datatags with
HTML frames (i.e. have multi-threaded application module
access for a given session). Please note that this solution may
have a performance impact and should not be implemented unless
absolutely necessary.
Another thing is that the JSPApplicationRegistry contains a bug (I think). It doesn't use the HttpSessionTimeOut variable
at all (see following code)
This parameter was deprecated after 3.1. It looks like the code
which used the parameter may have been removed prematurely.
Sorry for the confusion. Please use the J2EE compliant
mechanisms mentioned above to configure the session timeout in
3.2.
Finally, please note that JDeveloper9i includes new integrated
features for the often requested feature of supporting different
db users with the same application pool! Please stay tuned.

URGENT! Problems with On-Commit and Key-Commit triggers!!

Hi there,
We are having a problem with our form actually saving a value to the database after the commit_form is given.
When we hit the Save Button (which triggers the Key-Commit, and that in turn triggers the On-Commit trigger) we want a populated global variable to save to the database. Now when we hit Save, we can see the field get populated properly with this Global Variable (Global.Last_Tckt_Read), BUT it doesn't save to the database.
Here is the code from the On-Commit trigger:
IF :cg$bf_meter.closing_ticket_issued = 'N'
THEN
:CG$bf_meter.opening_meter_reading := :GLOBAL.LAST_TCKT_READ;
:CG$bf_meter.opening_meter_reading_date := :GLOBAL.LAST_TCKT_DATE;
:CG$bf_meter.closing_meter_reading_date := :CG$bf_meter.last_ticket_date;
:GLOBAL.PREV_METER_READING := :CG$BF_METER.LAST_TICKET_READING;
:GLOBAL.WINDOW_ACTIVE_CHECK := 'true';
:GLOBAL.FTDAYCHM_SAVED := 'true';
commit_form;
ELSE
:GLOBAL.PREV_METER_READING := :CG$BF_METER.LAST_TICKET_READING;
:GLOBAL.WINDOW_ACTIVE_CHECK := 'true';
:GLOBAL.FTDAYCHM_SAVED := 'true';
commit_form;
END IF;
The code in the Key-Commit trigger is just commit_form;. Now, the code from the On-Commit seems to work fine if its in the Key-Commit trigger -- BUT we need to use the On-Commit in case the user exits the Form with the Exit Button on the toolbar or "X" on the title bar (Neither the Exit Button and the "X" will call the Key-Commit trigger).
Any ideas how we can get this data value to actually SAVE in the database??
Thanks for any help -- please respond, this deadline has already passed!
Mike

Well, I can't say I understand what you want, but:
1) if you have only commit_form in key-commit - then you do not need this trigger. key-commit will fire when F10 (commit) is pressed, but since it is doing the same - there is no need.
2) why don't you populate your block values to be saved right in SAVE button trigger and issue commit_form in the same trigger?
Then you can have key-commit to cover the same functionality for F10 with code:
go_item('save');
execute_trigger('when-button-pressed');
3) I cannot get the point of the "close" stuff - on close you want to check for changes or not? and to allow the user to exit with or without saving?

Authorization problem with computer and Nook

I am tryng to transfer an Overdrive book from my computer to my Nook.
I received a pop-up that said that I could only read the book on the computer because the Nook was not authorized.
However, when I went in to authorize my computer it said that that Adobe ID already existed.
This is the only computer that I have had and I have not exceeded the 8 device limit .
So, why cannot I get it to authorize my computer and Nook?

ADE often gets its authorization confused.
First return the library book ~ it is probably now authorized with the mixed-up id, and you might not be able to return it once your proper ID is registered.
Clear any old authorization using ctrl-shift-D to ADE (cmd-shift-D if on Mac).
Restart ADE.
Try again to authorize ADE with your Adobe ID.
Then you should be able to set the ID into the Nook as well; and borrow the book back again.
Good luck ~ what a rubbish implementation of DRM Adobe has produced....

Installation problem with SolMan on SUSE 9,0 / Oracle

Hi Experts,
I have just started to work with SAP environment. My first challenge is to install Solution Manager on SUSE 9.0 Linux. I have faced quite lot of error messages and managed to solve them with help of support and forum pages. But the last mile seems to be the hardest one. Installation stopped on phase 42 / 45 (Configure System Landscape Directory) with following errors:
WARNING 2007-02-08 09:18:13
Execution of the command "/usr/sap/HSM/DVEBMGS01/exe/jlaunch UserCheck.jlaunch com.sap.security.tools.UserCheck /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/lib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/sharedlib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install -c sysnr=01 -c ashost=haukka -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u SLDDSUSER -p XXXXXX -message_file UserCheck.message" finished with return code 4. Output:
Warning: tmpfs at /dev/shm is configured quite small with 1956 MB! Minimum value is 2048 MB.
Recommended size is 75 % of RAM + swap.
Warning: tmpfs at /dev/shm is configured quite small with 1956 MB! Minimum value is 2048 MB.
Recommended size is 75 % of RAM + swap.
Feb 8, 2007 9:18:10 AM   Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Feb 8, 2007 9:18:11 AM   Error: Exception during execution of the operation
[EXCEPTION]
com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to SAP gateway failed
Connect_PM TYPE=A ASHOST=haukka SYSNR=01 GWHOST=haukka GWSERV=sapgw01 PCS=1
LOCATION    CPIC (TCP/IP) on local host with Unicode
ERROR       partner 'haukka:sapgw01' not reached
TIME        Thu Feb 8 09:18:11 2007
RELEASE     700
COMPONENT   NI (network interface)
VERSION     38
RC          -10
MODULE      nixxi.cpp
LINE        2764
DETAIL      NiPConnect2
SYSTEM CALL connect
ERRNO       111
ERRNO TEXT Connection refused
COUNTER     2
     at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:456)
     at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:922)
     at com.sap.mw.jco.JCO$Client.connect(JCO.java:3171)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:172)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Feb 8, 2007 9:18:12 AM   Info: Leaving with return code 4
INFO 2007-02-08 09:18:13
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.
INFO 2007-02-08 09:18:13
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.clone.
ERROR 2007-02-08 09:18:13
CJS-30196 Connect to SAP gateway failed
Connect_PM TYPE=A ASHOST=haukka SYSNR=01 GWHOST=haukka GWSERV=sapgw01 PCS=1
LOCATION    CPIC (TCP/IP) on local host with Unicode
ERROR       partner 'haukka:sapgw01' not reached
TIME        Thu Feb 8 09:18:11 2007
RELEASE     700
COMPONENT   NI (network interface)
VERSION     38
RC          -10
MODULE      nixxi.cpp
LINE        2764
DETAIL      NiPConnect2
SYSTEM CALL connect
ERRNO       111
ERRNO TEXT Connection refused
COUNTER     2
ERROR 2007-02-08 09:18:13
FCO-00011 The step createSLDDSUser with step key |NW_Onehost|ind|ind|ind|ind|0|0|SAP_Software_Features_Configuration|ind|ind|ind|ind|5|0|NW_Usage_Types_Configuration_AS|ind|ind|ind|ind|0|0|NW_CONFIG_SLD|ind|ind|ind|ind|0|0|createSLDDSUser was executed with status ERROR .
I have stopped the installation, rebooted the system and started the installation again. Well that didnt help at all. After that I have to start Oracle database and listener to proceed with old installation.
Can you give me any advices how to solve this problem and finish the installation?
Grateful for help.
Jukka

Hi Dolores,
Thank you for your advices.
I would appreciate further assistance with this problem because I couldnt work it out jet.
I logged in to the Visual Admin by using go file in usr/sap/HSM/DVEBMGS01/j2ee/admin.
The Visual Administrator screen is opening but I cannot connect in.
The error message popping up is "Cannot open connection on host xx.yy.xx.yy and port 50004".
The login parameters specified are:
Display name: j2ee
User name: Administrator / (J2EE_ADMIN)
Host: localhost
HTTP Port: 50004
Load balancing method: manual
Transport layer: default
I tried with two different username, see above.
I also tried DDIC user logon via ssh command in Shell console, but didnt succeed.
Here is the information in some of those files your mentioned:
trc file: "dev_rd", trc level: 1, release: "700"
Wed Jan 31 10:47:35 2007
***LOG S00=> GwInitReader, gateway started ( 19402) [gwxxrd.c     1677]
systemid   387 (Intel x86 with Linux)
relno      7000
patchlevel 0
patchno    46
intno      20050900
make:      single threaded, Unicode, optimized
pid        19402
gateway runs with dp version 210000(ext=109000) (@(#) DPLIB-INT-VERSION-210000-UC)
Wed Jan 31 10:47:37 2007
gw/local_addr : 0.0.0.0
CCMS: AlInitGlobals : alert/use_sema_lock = TRUE.
Wed Jan 31 10:48:05 2007
Bind service sapgw01 (socket) to port 3301
Wed Jan 31 10:48:06 2007
GwPrintMyHostAddr: my host addresses are :
1 : [192.168.229.131] haukka (HOSTNAME)
2 : [127.0.0.1] localhost (LOCALHOST)
Wed Jan 31 10:48:07 2007
DpSysAdmExtCreate: ABAP is active
DpSysAdmExtCreate: VMC (JAVA VM in WP) is not active
Wed Jan 31 10:48:57 2007
DpShMCreate: sizeof(wp_adm)          12744     (1416)
DpShMCreate: sizeof(tm_adm)          4011160     (19956)
DpShMCreate: sizeof(wp_ca_adm)          28800     (96)
DpShMCreate: sizeof(appc_ca_adm)     9600     (96)
DpCommTableSize: max/headSize/ftSize/tableSize=500/8/520056/520064
DpShMCreate: sizeof(comm_adm)          520064     (1032)
DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0
DpShMCreate: sizeof(file_adm)          0     (68)
DpShMCreate: sizeof(vmc_adm)          0     (1596)
DpShMCreate: sizeof(wall_adm)          (38456/34360/80/184)
DpShMCreate: sizeof(gw_adm)     48
DpShMCreate: SHM_DP_ADM_KEY          (addr: 0x457a0000, size: 4663248)
DpShMCreate: allocated sys_adm at 0x457a0000
DpShMCreate: allocated wp_adm at 0x457a1e88
DpShMCreate: allocated tm_adm_list at 0x457a5050
DpShMCreate: allocated tm_adm at 0x457a5080
DpShMCreate: allocated appc_ca_adm at 0x45b7f598
DpShMCreate: allocated comm_adm at 0x45b81b18
DpShMCreate: system runs without file table
DpShMCreate: allocated vmc_adm_list at 0x45c00a98
DpShMCreate: allocated gw_adm at 0x45c00ad8
DpShMCreate: system runs without vmc_adm
DpShMCreate: allocated ca_info at 0x45c00b08
Wed Jan 31 10:48:58 2007
MtxInit: -2 0 0
Wed Jan 31 10:49:38 2007
GwDpInit: attached to gw_adm at 0x45c00ad8
Wed Jan 31 10:49:39 2007
***LOG Q0I=> NiIWrite: writev (32: Broken pipe) [nixxi.cpp 3797]
ERROR => NiIWrite: SiSendV failed for hdl 1 / sock 12
     (SI_ECONN_BROKEN; UD; ST; 127.0.0.1:0) [nixxi.cpp    3797]
LOCATION    SAP-Gateway on host haukka / sapgw01
ERROR       connection to partner 'localhost:0' broken
TIME        Wed Jan 31 10:49:39 2007
RELEASE     700
COMPONENT   NI (network interface)
VERSION     38
RC          -6
MODULE      nixxi.cpp
LINE        3797
DETAIL      NiIWrite
SYSTEM CALL writev
ERRNO       32
ERRNO TEXT Broken pipe
COUNTER     1
ERROR => GwIConnectHandle GwWrite failed (NIECONN_BROKEN) [gwxxrd.c     8689]
C-STACK -
(CTrcStack2+0x78)[0x80c1938]
(SigIGenAction+0x2d1)[0x81e9451]
[0xffffe440]
trc file: "sapstartsrv.log", trc level: 0, release: "700"
Thu Feb 8 09:15:05 2007
<<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND
SapSSLInit failed => https support disabled
Webservice thread started, listening on port 50013
Trusted http connect via Unix domain socket '/tmp/.sapstream50013' enabled.
trc file: "dev_disp.new", trc level: 1, release: "700"
sysno      01
sid        HSM
systemid   387 (Intel x86 with Linux)
relno      7000
patchlevel 0
patchno    48
intno      20050900
make:      single threaded, Unicode, optimized
pid        19381
Wed Jan 31 10:48:07 2007
CCMS: start to initalize 3.X shared alert area (first segment).
Wed Jan 31 10:48:10 2007
DpMsgAdmin: Set release to 7000, patchlevel 0
MBUF state PREPARED
MBUF component UP
DpMBufHwIdSet: set Hardware-ID
***LOG Q1C=> DpMBufHwIdSet [dpxxmbuf.c   1050]
DpMsgAdmin: Set patchno for this platform to 48
Release check o.K.
Wed Jan 31 10:49:57 2007
MBUF state ACTIVE
Wed Jan 31 10:50:11 2007
DpModState: change server state from STARTING to ACTIVE
Wed Jan 31 10:50:18 2007
WARNING => DpRqServiceQueue: timeout of HIGH PRIO msg, return DP_CANT_HANDLE_REQ
WARNING => DpRqServiceQueue: timeout of HIGH PRIO msg, return DP_CANT_HANDLE_REQ
WARNING => DpRqServiceQueue: timeout of HIGH PRIO msg, return DP_CANT_HANDLE_REQ
WARNING => DpRqServiceQueue: timeout of HIGH PRIO msg, return DP_CANT_HANDLE_REQ
WARNING => DpRqServiceQueue: timeout of HIGH PRIO msg, return DP_CANT_HANDLE_REQ
For some reason the latest files are dated 1.2.2007?
Hopefully You can see the problem from this log file information.
As I mentioned earlier I am a green novice at SAP systems and Linux.
Best regards
Jukka

ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?

OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.

Authentication and Authorization Problems with IIS 6 and Jrun 4

Hello all,
I am using IIS 6 with JRun 4 as my app server, and I am having problems trying to get authentication and role authorization with Windows Integrated Authentication to work. I have set up IIS 6 to pass-through the authentication credentials to Jrun, without using an anonymous user. What I have done is written a small test servlet that displays the username of the logged in user, and then tries to check if a user is in a test role that I set up in my database. I have specified that a roles table is to be used by specifying a JDBCLoginModule in Jrun's auth.config file. The code for the servlet is below:
package testauthenticationapp;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.*;
import javax.servlet.http.*;
public class SecureTestServlet extends HttpServlet {
   private static final String CONTENT_TYPE =
      "text/html; charset=windows-1252";
   public void init(ServletConfig config) throws ServletException {
      super.init(config);
   public void doGet(HttpServletRequest request,
                     HttpServletResponse response) throws ServletException,
                                                          IOException {
      response.setContentType(CONTENT_TYPE);
      PrintWriter out = response.getWriter();
      out.println("<h3>REMOTE USER: " + request.getRemoteUser() + "</h3>");
      if (request.getUserPrincipal() != null){
         out.println("<h3>" +request.getUserPrincipal().getName() + "</h3>");
      } else{
         out.println("<h3>User Principal is null</h3>");
      if (request.isUserInRole("Test_Role")){
         out.println("<h3>User is in Test_Role</h3>");
      } else {
         out.println("<h3>User is NOT in Test_Role</h3>");
      out.close();
1. What I am seeing is that when request.getRemoteUser() is called, the username information is what I expect it to be. It is of the form <Domain>\<Username>. When I try to redisplay the username using the request object's Principal object, the call to request.getUserPrincipal() returns null. This is a little confusing to me since I thought that essentially getRemoteUser() was a short cut for calling getUserPrincipal().getName(), and if I get something for getRemoteUser, getUserPrinicipal should return something as well. I guess they work differently at some level. Has anyone ever encountered this before?
2. When I call request.isUserInRole("Test_Role"), it returns false. I've checked the role name being called for typos in both my database and in the code, and that does not seem to be the case. I think the setup in auth.config is properly configured because I have created many other applications using declaritive FORM based authentication, and the role information was retrieved fine from the database. I would think that when I use request.isUserInRole in my servlet code it would use the same role information, but I could be wrong since this is a different type of authentication. Do you think that the reason request.isUserInRole() is returning false could be tied to the fact that request.getUserPrincipal() is returning null (even though getRemoteUser() is returning a valid username)? How does request.isUserInRole() get its user information, by using getUserPrincipal().getName() or getRemoteUser()?
Any help that is provided is appreciated. Thanks in advance.

Try This...
Close All Open Apps... Perform a Reset... Try again...
Reset ( No Data will be Lost )
Press and hold the Sleep/Wake button and the Home button at the same time for at least ten seconds, until the Apple logo appears. Release the Buttons.
http://support.apple.com/kb/ht1430

URGENT: Authorization Problem with SolMan 4.0

Similar Messages

Maybe you are looking for