Urgent : SSO2 configuration

when trying to execute my WDA component i get an error reading SSO2 config not complete
i went to RZ11 transaction to set the parameter values for "login/create_sso2_ticket" and "login/accept_sso2_ticket" but i dont have a change mode there. can someone tell me how to change the parameter values.
Thanks,
Shyam

hi
good
go through this link,hope these links will help you solve your problem
http://help.sap.com/saphelp_erp2005/helpdata/en/67/be9442572e1231e10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/2eeca7d5-0201-0010-98a4-8a9091a20bf9
thanks
mrutyun^

Similar Messages

URGENT! Configuring WNA and keytab problems

Hi, I've configured OAS10g integration with AD successfully and able to map the users successfully from AD to OID. The external authentication plugin is working as well. However, I am having problems configuring WNA and getting the following erros in the OC4J_SECURITY logfile:
08/01/06 13:18:44 Getting creds for HTTP/[email protected]...
08/01/06 13:18:44 Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt true ticketCache is null KeyTab is /san/oas10g/oracle/product/10gas_infra/j2ee/OC4J_SECURITY/config/oraprda01.keytab refreshKrb5Config is false principal is HTTP/oraprda01.mpx.biz tryFirstPass is false useFirstPass is false storePass is false clearPass is false
principal's key obtained from the keytab
08/01/06 13:18:44 principal is HTTP/[email protected]
08/01/06 13:18:44 [Krb5LoginModule] authentication failed
Pre-authentication information was invalid (24)
08/01/06 13:18:44 KerberosAuthenticator: GSSException raised in constructor - No valid credentials provided (Mechanism level: Attempt to obtain new ACCEPT credentials failed!)
08/01/06 13:18:44 GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new ACCEPT credentials failed!)
08/01/06 13:18:44 at sun.security.jgss.krb5.Krb5AcceptCredential.getKeyFromSubject(Krb5AcceptCredential.java:189)
08/01/06 13:18:44 at sun.security.jgss.krb5.Krb5AcceptCredential.getInstance(Krb5AcceptCredential.java:80)
08/01/06 13:18:44 at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:75)
08/01/06 13:18:44 at sun.security.jgss.GSSManagerImpl.getCredentialElement(GSSManagerImpl.java:149)
08/01/06 13:18:44 at sun.security.jgss.GSSCredentialImpl.add(GSSCredentialImpl.java:334)
08/01/06 13:18:44 at sun.security.jgss.GSSCredentialImpl.<init>(GSSCredentialImpl.java:44)
08/01/06 13:18:44 at sun.security.jgss.GSSManagerImpl.createCredential(GSSManagerImpl.java:102)
08/01/06 13:18:44 at oracle.security.jazn.oc4j.KerberosAuthenticator.<init>(Unknown Source)
08/01/06 13:18:44 at oracle.security.jazn.oc4j.RealmUserManager.getHttpAuthenticator(Unknown Source)
08/01/06 13:18:44 at oracle.security.jazn.oc4j.FilterUserManager.getHttpAuthenticator(Unknown Source)
08/01/06 13:18:44 at com.evermind.server.http.HttpApplication.initAuthenticator(HttpApplication.java:5371)
08/01/06 13:18:44 at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:980)
08/01/06 13:18:44 at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:549)
08/01/06 13:18:44 at com.evermind.server.Application.getHttpApplication(Application.java:890)
08/01/06 13:18:44 at com.evermind.server.http.HttpServer.getHttpApplication(HttpServer.java:707)
08/01/06 13:18:44 at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:625)
08/01/06 13:18:44 at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:278)
08/01/06 13:18:44 at com.evermind.server.http.HttpServer.setSites(HttpServer.java:278)
08/01/06 13:18:44 at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:179)
08/01/06 13:18:44 at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2394)
08/01/06 13:18:44 at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1551)
08/01/06 13:18:44 at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:92)
08/01/06 13:18:44 at java.lang.Thread.run(Thread.java:534)
08/01/06 13:18:44 Caused by: javax.security.auth.login.LoginException: Pre-authentication information was invalid (24)
08/01/06 13:18:44 at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:585)
08/01/06 13:18:44 at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:475)
08/01/06 13:18:44 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
08/01/06 13:18:44 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
08/01/06 13:18:44 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
08/01/06 13:18:44 at java.lang.reflect.Method.invoke(Method.java:324)
08/01/06 13:18:44 at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
08/01/06 13:18:44 at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
08/01/06 13:18:44 at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
08/01/06 13:18:44 at java.security.AccessController.doPrivileged(Native Method)
08/01/06 13:18:44 at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
08/01/06 13:18:44 at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
08/01/06 13:18:44 at sun.security.jgss.LoginUtility.run(LoginUtility.java:57)
Our setup is such that the SSO hostname is oraprda01.mpx.biz but the AD/KDC realm is AD.MULTIPLEX.BIZ. I found http://www.oracle.com/technology/obe/obe_as_10g/im/wna/wna.htm and we have more or less the same situation so it should work but it doesn't. I've already got this working in the test environment but the SSO hostname there is gfradev01.ad.multiplex.biz. Note that it has the same domain name as the AD realm.
Doing a kinit without using the keytab file works for HTTP/[email protected] but when I use the keytab file, I get the pre-authentication error.
Can anyone advice as to how we can make this work? Are there extra setups which need to be done on the AD server which Oracle did not document?
Thank you very much,
Abigail

If urgent, contact Support.
Is the account option ‘Do not require kerberos preauthentication’ checked (see MicroSoft KB 832572)
In addition: metalink Note: 466288.1
Message was edited on 1-feb-2008 by: Frank van Bortel

Urgent: Newly configured system doesn't show up in Maintenance Optimizer

Dear Experts,
please, I need a quick aid on the following issue:
I have just installed a brand new Java system with usage type Development Infrastructure.
As the system urgently requires installing the latest SPS available, I defined it in our Solution
Manager 7.1 SP10. I have installed the diagnostics agent, then I assigned it to the system,
I made the entire managed system configuration and everything is fine! Just when I started
the MOPZ, in order to calculate the stack, I found out, that the system isn't displayed anywhere!!
In the first step of the managed system configuration, I have created a new logical component
Z_NWDI. Reviewing transaction SMSY, I saw that this logical component is not assigned to the
solution, so I assume that this might be the problem. But I didn't find a way how to make this
logical component a part of our solution! I have checked all the setup in LMDB, and it all seems
to be perfect, I compared things for which I wasn't sure, with another Java system, which is
shown in MOPZ.
Many thanks for your help!

Hi Symon,
Great.
check the whether SLD is having proper details.
how you link the system using solution manager SLD or any other SLD. if you use other SLD also please update teh CR content.
After the successful updation in SLD,
https://help.sap.com/saphelp_sm71_sp05/helpdata/en/f6/a41e0402664451b9c4640ff4513527/cont
transaction SE38 and run the report RLMDB_SYNC_TECHNICAL_SYSTEM
.( it will delete the old data and re-synchronize from the SLD )
and select the below option and execute it. so it will delete and re-create the latest details.
once issue is solved. please close this thread.
Rg,
Karthik

Urgent- FDM configuration issue.

Hi Experts,
I am very new to FDM. We have installed FDM but got the below error when we configure webserver components
*" make sure internet information server is installed and ASP.NET applications are allowed.*
*The following error occured: cannot create ActiveX component."*
Please let me know your valuable inputs...it is very urgent.

Please review KM Document 1161892.1. This is a windows 2008 server which requires that IIS6 metabase be installed along with the Application Server Role. This document outlines the exact components and process to install them.

SSO2 configuration for 4.6C R/3, Kernel 46D

After "Activating" my SSO configuration (transaction SSO2) when I rebooted my machine I get the following error:
- Function SSFP_GETAPPCERTIFICATE Return code 2 RFC destination NONE
- Function SSFP_GETCERTIFICATELIST Return code 2 RFC destination NONE
- PSE management not possible (local system of Release < 4.6C and no connection to a WP Server)
Also on running PSEMAINT I m being shown "SSF Incorrect".
How to go about solving the issue. In the app. server trace fle, I m shown:
N Sun Sep 04 08:15:49 2005
N *** ERROR => Sign failed with rc = 5. [ssoxxsgn.c   308]
N *** ERROR => uResult=24. [ssoxxsgn.c   311]
N   Found profile is invalid.
N *** ERROR => DefaultSign failed with rc=1572873. [ssoxxsgn.c   355]
N *** ERROR => Ticket creation failed with rc = 1572873. [ssoxxkrn.c   295]
N *** ERROR => dy_signi_ext: ticket creation failed [sign.c       8465]
Whats the issue and how to proceed?
regards,
Vishal

Your PSE file seems to be corrupted / defect.
Please check also whether you are using an older version of SAPSECULIB (this information is displayed at the end when running transaction SSO2).
Please notice that SDN is intended for knowledge exchange - not for bug reporting. Kindly report your problem in http://service.sap.com
Regards, Wolfgang

Urgent: FI Configuration

Dear all,
I'm facing the problem
After I configure FI, on the screen Enter Vendor invoice/ Payment Tab (T.code:FB60) I lack some fields for inputing accounting entries data such as : payment term, Discount (where I enter cash discount amount if this amount is fixed rather than a percentage rate), Disc.Base,Partner Bank, House Bank, invoice reference. But on the screen Enter Customer invoice that has all these fields
So I can't input enough accounting entries data in Vendor invoice.
Please tell me which step I missed during configuration and How to fix it
Thank so much
Minh

Hi
you would have assigned recon account in the vendor master. go to that recon in FS00 and see the field status group in CREATE BANK/INTEREST TAB. check that field status group. There those fields would have been suppressed. Make it optional. It will surely come.
Award points if it is useful
Thanks & Regards,
A.Anandarajan.

URGENT: RAID5 Configuration on RD120 Server: Scenario A vs. Scenario B

This particular issue isn't server specific, but I am posting in this forum because it just so happens to be a brand new Lenovo RD120 I am working on.
Also, sorry for the urgent status but I have a very small amount of time to find the answer.
My issue concerns how to config RAID 5 redundancy and get 2 partitions, in the best possible manner, considering disaster recovery, and performance (but I really am not concerned about performance since this server is way over speced for the function it will be performing). The disks are 250GB X 3 so for simplicity let's just say total space is 500GB (of course total space is less due to misc. overhead).
I want to have 2 partitions on my future Windows 2003 installation; A "C" drive which will hold the OS, and an "E" drive which will hold data. I have 2 ways to accomplish this:
1) Config RAID 5 array with a single container to present to the OS. Have the OS installation create a partition 100GB for itself within that single container, then install the OS. Once installed, create a second partition for the remaining 400GB.
OR
2) Config RAID 5 array with 2 containers to present to the OS: 100GB and 400GB. Install the OS to the 100GB logical disk, and use the 400GB logical disk for "E".
I've Googled this every which way, and cannot come up with a difinitive answer. I also checked with our local server "expert" who says it does not matter which way to do it, and that he would do method #1.
Now I understand that both ways will accomplish what I am trying to do. HOWEVER, in terms of disaster recovery, I am leaning toward method #2 because we had a scenario 6 months ago where a server was configged this way and we lost container #1 (the OS), but container #2 remained intact (the data). We rebuilt container #1, then restored the OS, and it was beautiful; no loss of data from container #2.
SO, does having multiple RAID 5 containers introduce any negative concerns such as:
-More likely for RAID5 config to go corrupt (during events such as hard power loss, etc).
-Performance loss (I am not concerned about this but I would like to know)
-Premature hard drive failure (just a guess but I thought I'd mention it).
THANKS EVERYONE!
Solved!
Go to Solution.

Just to add to the topic as maybe anyone else might benefit from it.
I would suggest similar what Eric proposed. If you already have 3x250, instead of RAID 5 please buy additional 250GB HDD and use 2x250 RAID 1 for OS and 2x250 RAID 1 for data.
Also for data part I would suggest (if there's available bay) another 250GB disk as hot spare.
Disaster recovery is always more expensive than 1 spare HDD, esp. when server's lifecycle is 3-5 years.
Jan Solar
Product Marketing
(not a technical support)
http://blog.lenovo.com/author/jsolar/

Urgent- Jdbc configuration settings (mysql)

Hi,
I do want to do a scenario like File to jdbc.
I have installed mysql in my laptop. can anybody tell me how do I configure the driver settings prior to the doing the same.
And also let me know, how do I find the driver and connection parameters for the same.
cheers.,
Stallin

Hi Stallin
check this pdf
<b>How To Install and Configure External Drivers for JDBC & JMS Adapters</b>
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70ffd890-0201-0010-708f-d5dad2dfcf3a
also check
Otther option is download JDBC Driver from Microsoft Website
http://www.microsoft.com/downloads/details.aspx?FamilyID=6D483869-816A-44CB-9787-A866235EFC7C&displaylang=en
and deploy the JDBC driver using SDM.
<b>JDBC Driver Deployment Guide...</b>
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70ffd890-0201-0010-708f-d5dad2dfcf3a
<b>
how to configure drivers:</b>
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/3867a582-0401-0010-6cbf-9644e49f1a10
also http://www.oracle.com/technology/software/tech/windows/odbc/index.html
Help Required on File to JDBC scenario
JDBC Driver?
Thanks
Regards
Abhishek Agrahari

URGENT - Stage Configuration Question

Hello Gurus,
I have received a request from the business to update my workflow so that the aprover can not change anything(either role assignmnent or User details or validity) in the request for approval. He/she should just be alowed to approve or reject the request. The Workflow we are using is only for User Change and is a standard workflow. In my opinion I can achieve this by making the following changes at the stage level:
1. "Change Req Det " field as unchecked.
2. "Add Assignment" field as unchecked.
Would these teo things solve my purpose?Anything apart from this that i need to configure? Can you please suggest?
Would appreciate an early response.
Thanks.
sapgrc10

Hi,
You will be able to achive the required results by setting those two parameters.
Regards
Hemant

URGENT HELP-CONFIGURE SWITCH 3560

Dear All,
I have here in my company 25 Cisco Switch 3560 .
as i know, i will configure the Switch with the Basic configuration like Hostname & IP-Address - & Gateway.
My 2 question is :-
1- if i configure the switch with the Basic Configuration like IP-Address & Subnet mask & So on , where its saved on the Switch Exactly ?
2- instead of have the 25 Switch in-front of me , and assign each switch his configuration like IP-Address & all the Things, is there any way to copy the Configurations from the switch which i configured on the Text file & then on each switch i will modify the Text file which include the configuration for that switch ( New configuration ) & then apply to that switch ( the New one ) ?
if i can do like that , can i & HOW CAN I DO IT , PLEASE HELP ME BY WRITING THE COMMAND WHICH I NEED TO FOLLOW IT ?
Thanks .
Rania.

Hi Rania,
When you just configure the switch all the config is in DRAM (running config) but when you do wr me it is saved in NVRAM (startup config).
What you can do is write all the commands for ip address and the configs what you want on wordpad and from there you can modify the lines what you want for each switch and just copy it and paste on the switch global config mode.
Remember you have to create all the vlans manually in vlan database or you can configure one switch as VTp server and another switch as VTP client and all the vlans will be synched to the switches which are in VTP client mode.
To configure ip address
int vlan 1
ip address x.x.x.x x.x.x.x
no shut
to configure hostname
config t
hostname
This link is a complete config guide which will guide you with all what you want to configure on 3560 switch
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12119ea1/3560scg/index.htm
HTH
Ankur

Urgent - DocumentManager,Configurations and JSP Tags

I am using Vignette as the content repository.I am able to fetch data and display
on the jsp when a single VignetteDocumentProvider is being used and data coming
from a single content table.
Problem is - If I have multiple classes for the VignetteDocumentProvider that
are to be used to display data from several tables on the jsp.
Q 1) How to configure multiple DocumentManager and DocumentConnectionPool nodes
in meta-inf\application-config.xml for those multiple VignetteDocumentProvider
classes.
Q 2) On the same JSP - How would the jsp tags reference multiple VignetteDocumentProvider
classes.
Could someone PLEASE help.
Thanks a LOT in advance.
Regards,
shikha

You may be better off asking the question to Vignette.
.raja
"shikha" <[email protected]> wrote in message
news:3caa2bf7$[email protected]..
>
I am using Vignette as the content repository.I am able to fetch data anddisplay
on the jsp when a single VignetteDocumentProvider is being used and datacoming
from a single content table.
Problem is - If I have multiple classes for the VignetteDocumentProviderthat
are to be used to display data from several tables on the jsp.
Q 1) How to configure multiple DocumentManager and DocumentConnectionPoolnodes
in meta-inf\application-config.xml for those multipleVignetteDocumentProvider
classes.
Q 2) On the same JSP - How would the jsp tags reference multipleVignetteDocumentProvider
classes.
Could someone PLEASE help.
Thanks a LOT in advance.
Regards,
shikha

Required Implementation Guide for SAP Netweaver BI

Hi,
I need an Implementation Guide of SAP Netweaver BI.
Thank you,
Best Regards,
Shailu.

hello,
as i said please search in SDN.
BI 7 Blogs: Troubleshoot the SAP NetWeaver 2004s BI Frontend Installation
Installation Info: https://websmp205.sap-ag.de/installNW70
Troubleshoot BI 7 frontend installation: Troubleshoot the SAP NetWeaver 2004s BI Frontend Installation
Installation & Upgrade guides: https://websmp206.sap-ag.de/instguides
https://websmp205.sap-ag.de/~sapidb/011000358700005412792005E.pdf
Check some more info at:
Re: Urgent Help: Configuration Documents & Blue Print Documents for BI & BW
BI 7 User Guide
Regards,
Dhanya

PROBLEM connect oracle 9i with JBOSS 3.2.3 application server

i want to connect my web app to oracle9i by jboss3.2.3 .
The database is on server machine in my domain and the application is on my local machine.
Please help me is urgent
Thanks

To configure JBoss with Oracle dataabse.
1. Copy Oracle's JDBC driver .zip file /jdbc/lib/classes12.zip to the server/default/lib directory.
2. Copy /docs/examples/jca/oracle-ds.xml , to /server/default/deploy dir.
3. In the oracle-ds.xml file set the <driver-class/> and <connection-url/> settings
Class: oracle.jdbc.driver.OracleDriver
URL: jdbc:oracle:thin:@<host>:<port>:<database>
In the Connection URL setting, <host> is the HOST value specified in the /network/ADMIN/tnsnames.ora file, and <port> is the PORT value specified in the tnsnames.ora file, and <database> is the database name.
4.
Modify the standardjbosscmp-jdbc.xml configuration file, setting the <datasource> and <datasource-mapping> elements to use Oracle:
<jbosscmp-jdbc>
<defaults>
<datasource>java:/OracleDS</datasource>
<datasource-mapping>Oracle9i</datasource-mapping>
</defaults>
</jbosscmp-jdbc>
5.
Modify login-config.xml to use Oracle. Add the following <application-policy> element to login-config.xml:
<application-policy name = "OracleDbRealm">
<authentication>
<login-module code =
"org.jboss.resource.security.ConfiguredIdentityLoginModule"
flag = "required">
<module-option name = "principal">sa</module-option>
<module-option name = "userName">sa</module-option>
<module-option name = "password"></module-option>
<module-option name ="managedConnectionFactoryName">
jboss.jca:service=LocalTxCM,name=OracleDS
</module-option>
</login-module>
</authentication>
</application-policy>
5.

DiagTool- how to generate the file

Hi
can some one tell me how to use the diagtool
i read the note , its says
Dowload the attached tool (diagtool.zip) and execute it according to the root instructions:
go.bat <config_file> <path_to_configtool> (Windows and IBM iSeries)
whre can i find the <config_file> ?
from which locatioon should iu run this command
kindly explain me how to run this command
br
Nawa

Hi,
First you need to unzip the file diagtool.zip and change to directory created, and in the command line execute:
<div style='left-margin:20px'>
- Check for spnego configuration: go.bat conf/spnego.conf <j2eedir>/configtool
- Check for sso2 configuration: go.bat conf/sso2.conf <j2eedir>/configtool
- Check for authentification configuration: go.bat conf/authentification.conf <j2eedir>/configtool
</div>
The tool ask you to enter some variables and then require that you replicate the problem after will generate a file in dir <diagtooldir>/output

Libjconv.so (AIX 4.3.2)

hi, all
if you can send me the file: libjconv.so(Tuxedo root/lib/livjconv.so)? it's
urgent.
my configuration is: Tuxedo7.1, Jolt1.2.1, AIX4.3.2
thx in advance
river

Just in case anyone else comes across this, it is corrected in the Jolt rolling
patch R191_TUX71_P-AIX432-433 (or later I presume) that you can get from BEA Support.
Scott Orshan <[email protected]> wrote:
Tuxedo customers really shouldn't be sending parts of the product around
to each other. You could end up with a mixed patch level, or worse, some
sort of virus or trojan horse that steals your data. The software should
always come from BEA.
I'm told that this is already patched. Any urgent problems should go
directly to Support. We try to help here, but this newsgroup isn't the
best way to get quick help.
Scott Orshan
Coldiron wrote:
I'm apparently missing the same file in an identical environment.
Could someone send that file to me, or instructions for getting pastthe error
loading JSH?
"river" <[email protected]> wrote:
hi, all
if you can send me the file: libjconv.so(Tuxedo root/lib/livjconv.so)?
it's
urgent.
my configuration is: Tuxedo7.1, Jolt1.2.1, AIX4.3.2
thx in advance
river

Urgent : SSO2 configuration

Similar Messages

Maybe you are looking for