Windows AD SSO Configuration using Vintela

Hi All
We are doing a BOE XIR3.1 deployment with 4 machines, Weblogic 9.2 as the Application server, and oracle DB as the CMS and Audit Database, we plan to do the CMS clustering too.
BO1 used as CMS1 machine
BO2 used as CMS2 machine
BO3 used as BO clustering
WL used as the Weblogic machine for the Web-tier part.
We also plan to have the Windows AD SSO configuration done, as discussed we will be having 3 SIA node, SIA1 on the BO1 machine SIA2 on the BO2 (CMS cluster machine) and SIA3 on the BO3 machine (here all server components will be installed except the CMS and the u2018Web Appl container serveru2019).
During the SSO configuration, should the SIA1, SIA2 and the SIA3 be run under the server account?
Ie. In the properties of SIA, under the u2018Log on asu2019 section, will be using the DOMAIN\<service account>. Does this need to be done for all 3 SIAu2019s u2026. SIA1, SIA2 and SIA3 ?
- Thanks
Ranjit

It only needs to be done where there is a CMS (per your scenario SIA1 & 2).
[Section 1|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0f6ac3c-b3ac-2b10-1b95-c9bd46194977] of my doc details planning your service account(s)
Regards,
Tim

Similar Messages

Windows AD, SSO configuration

Presently we have a BO XR3.1 with weblogic 9.2 installed and running on a production env, It is been configured for Single sign on for windows AD users using Kerberos. Now the plan is to have a new production setup (replicating the same existing env) with the same single sign on for windows AD users to login to Infoview
We are planning to use a new windows AD service account on the new setup, but we plan to keep the group the same.i.e. we plan to use the same group pointing to current production env and the new production set, would this be a problem??

I'm not sure how but customers seem to make changes in their AD environment that prevents DES from working and then it ends up as a production down situation. It doesn't happen often but even once in a while is too much risk for something that is preventable.
Other known issues...
1) DES causes errors in domain controller logs and they often request that it be removed
2) Complicates configuration for SSO (requires case match on idm.princ)
3) It's the oldest and weakest protocol available
The only time I would recommend DES is if RC4 was not available for some reason (though it's unlikely Microsoft would prevent their default protocol in 2000/2003).
Regards,
Tim

SSO Configuration from Windows to ITS

Hi SAP Gurus,
WE have our BI 7.0 system in our landscape, where SSO from windows has been configured for the
BI portal and BI queries to be run and which is running fine.
Now, we have a requirement where in we need to configure SSO from windows to the web services which are running on ITS.
Like , we have certain web services , which have the URL as:
http://lv-cphsapbi1.cph.dk:8016/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?INITIAL_STATE=VIEW&INITIAL_STATE-VIEW=XV_PCA_FIN_RVW_MTH_YTD_V2
Where 8016 is the ITS port.
Has anybody worked on such a configuration before. IF yes, then sharing of some documentation and some guidance would be really helpful.
Thanks in advance,
Santosh Bhat

Dear Santosh Bhat
Regarding the application on ITS, i.e
http://lv-cphsapbi1.cph.dk:8016/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?INITIAL_STATE=VIEW&INITIAL_STATE-VIEW=XV_PCA_FIN_RVW_MTH_YTD_V2
Normally, how do you launch it?
- open a browser and type the URL directly?
or
- login the backend ABAP, and then jump to a browser from a certain transaction?
or
- login the portal firstly and open the ITS application as a kind of iView? if yes, what kind of iView it is?
I hope to be able to provide you some hints after you clarify the scenario.
Thanks
Thunder

Very simple question, how do you configure windows 8.1 to use a SF card as the default install location for software applications?

Very simple question, how do you configure windows 8.1 to use a SD card / external drive as the default install location for software applications? Primarily interested in apps installed from the windows store. This should be available in the settings
charm within the windows store. This must have been overlooked in the development of windows 8.1 or is a bug.
Regards, Bill
* update
I've tried modifying this key and the path:
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx”
http://answers.microsoft.com/en-us/windows/forum/windows_8-windows_store/how-do-you-install-apps-in-windows-8-from-the/c4fbe2a8-fd3d-41c1-b9a6-6f881eed374f
Also tried using symlinks as detailed here:
http://social.technet.microsoft.com/Forums/windows/en-US/8eee52c2-db0f-4032-8c72-7cd999e8b41a/windows-8-apps-installing-to-secondary-drive?forum=w8itprogeneral

Here's some links I've used to try to figure this out:
http://social.technet.microsoft.com/Forums/windows/en-US/2dfc0cd9-7d1b-41de-abce-e03fb6a5a383/metro-apps-not-working-in-windows-8-pro-x64-after-moving-users-and-programdata-folders?forum=w8itproinstall
http://social.technet.microsoft.com/Forums/windows/en-US/8eee52c2-db0f-4032-8c72-7cd999e8b41a/windows-8-apps-installing-to-secondary-drive?forum=w8itprogeneral
http://social.technet.microsoft.com/Forums/windows/de-DE/f5e33ac9-beab-4b99-b3ca-7cb5e6f415e4/how-do-you-change-metro-apps-default-install-location?forum=w8itprogeneral
Regards, Bill
The registry method does not work with 8.1. I found this out the hard way. Doing it on 8.1 will leave you reinstalling the OS if you didn't do a SRP beforehand.

How to install/Configure/Use VT Hash Check to detect Malware/Unwanted programs in Windows?

This just to share the below post with windows users..
How to install/Configure/Use VT to detect Malware/Unwanted programs in Windows?
http://www.windowstechinfo.com/2014/03/how-to-installconfigureuse-vt-to-detect_29.html
Hetti Arachchige V Aravinda | Network & System Administrator (B.Sc, Microsoft Small Business Specialist, MCP, MCTS, MCSA, MCSE,MCITP, CCNA, CEH, MBCS)

That is interesting. Normally a bootmgr error message means that the boot loader is corrupt and hard disk not "dead".. Replacing the hard drive is a quickie shotgun method of resolving the issue.
Did you give up on the SSD?
The desktop ( w/ASUS Crossfire V Formula-Z mobo) I am using to type this, has the same SSD that you asked about. I used the method I described in the earlier post to clone the OS to the SSD. The SSD is the boot drive.
****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
2015 Microsoft MVP - Windows Experience Consumer

How to configure use of Ethernet and wireless simultaneously, with different Windows´s?

Hello friends,
My network has two Win XP-laptops connected via ethernet to a Dovado-router, and from the Dovado-router another ethernet cable to a Win 7 PC.
The Win 7 PC connects to the internet via a D-Link wireless network to my ISP wireless router Huawei E589.
Problem: the PC refuses to work with both ethernet and wireless at the same time.
I use the ethernet for tranferring vast amounts of graphical data (astronomy photographs at 3-4 GB each), and I can only access the internet through the wireless. Neither XP nor 7 wizards are able to fix it. Both networks were visable in Network Center,
now only the wireless is available. Ethernet is gone.
What do I do, to make it work?

Hi,
What's your purpose? My understanding is that you want Windows 7 PC wireless use internet and wired use Lan. If I am misunderstand please point me fault.
For the situation you can do like this:
1) Setting for your both routers.
Make sure both routers have different Router IP's and SUBNETS, you should try to set the subnet of Dovado-router to 255.255.255.252(this router should be used as local Lan, not connect to internet).
Set the subnet of D-link to 255.255.255.0
2) Setting For the LAN adapter.
Under the TCP/IP properties(Lan adapter), please assign a unique IP address (which coincides with the subnet of Dovado-router ), set the subnet to 255.255.255.252 (or whatever you set it to Dovado-router). The very important things is that
don't assign any GATEWAY to Lan adapter, leave it blank.
3) Setting For the WIRELESS adapter.
Under TCP/IP properties(wireless adapter), please assign a unique IP address (that coincides with the wireless router), set the subnet to 255.255.255.0 (or whatever the default is for the wireless router), and make sure to type gateway IP address ( D-link
IP address).
Now you can test if they are work normally.
Hope this helps.
Regards.
Spencer
TechNet Community Support

WIndows 7 64-bit system printing to a Windows 2000 server configured as a print server

Is there any way to configure a new Windows 7 64-bit computer to use a Windows 2000 server configured as a print server ?
The printer that I would like to connect to is an HP 4240n LaserJet. I appears that there is only a 64-bit Universal Print Driver available. The server currently uses HP 32-bit PCL5e or PCL6 drivers for all other connected computers. Connection is through a Hewlett-Packard Network Port, using DLC/LLC transport for the embedded 4240n print server.
Installing the HP 64-bit UPD to the WIndows 7 64-bit system, and then attempting to redirect the local port to the Win2k network print server has not worked.
Thanks for any advice.

Hi:
See if this works...
Run msconfig.
In the System Configuration screen, Boot tab, Advanced Options, if there is a check mark in the box next to Maximum memory. Remove that checkmark and save your changes.
Reboot and hopefully Windows recognises all the Ram ( minus the reserved ) after restarting.
Please give that a try, and post back and let us know if that frees up some system memory for you.
Paul

Unable to view BI Publisher report with SSO configuration enabled

Hi All,
Can anybody let us know the configuration of the BI publisher with SSO enabled. We are unable to see any of the BI Publisher reports. without SSO configuration we have integration working perfectly fine with the OBIEE and Publisher.
We followed the configuration steps to integrate BI Publisher with Oracle SSO. The following are the steps:
1. deploy analytics.ear as a new application 'analyticsSOAP' in OAS
2. protect analyticsSOAP in mod_osso.conf file under OAS
3. change OBIEE Presentation services configuration to use analyticsSOAP/saw.dll
4. run credstore utility to encrypt password
5.restart xmlp server
6.restart http server
7.restart obiee server
8. restart obiee presentation service
Still we have issues when we try to accesses BI Publisher reports by clicking more Products -> BI Publisher or view reports directly on the OBIEE Dashboard
Thanks in advance.

configure one more virtual path which is unprotected from site minder. we had similar issue for Marketing and resolved by this virtual path.
ref:
http://vaandun-analytics.blogspot.com/2009/11/obi-publisher-with-empty-obi-catalog.html
Thanks
Sarathi

Issue with turning on project 2010 / 2013 - "There is not enough memory to complete the operation. To free up available memory, close programs, projects, or windows you aren't using, and then try again."

I get the following error after the installation and configuration window of MS Project: "There is not enough memory to complete the operation. To free up available memory, close programs, projects, or windows you aren't using, and then try again."
It happens both with MS Project 2010 and 2013 on a Windows 7 desktop.
I tried installing / uninstalling Office 2010, MS Project, tried installing 32 and then 64 bit versions, clean up, disk error checker, startup changes (msconfig), anti virus, running as Windows 7 and then Windows XP compatible mode.
Nothing helps. I see this issue reported as early as 2007 version of MS projects on Microsoft forums, but I do not see any solution anywhere. Any suggestions on how to fix the issue without having to reformat hard drive? Every other application, including
all other Office programs work seamlessly.
I also tried Microsoft support, after an hour and a half of basically doing what I did before, I was told I have to pay 99$ for "premium" support, so someone can look at this bug.
I have 16 Gb RAM and more than 200Gb or hard drive free, so actual memory is not the problem.

This issue was originally reported with MS Project 2007 and keeps popping up since.
A quick Google search provides more than 200K pages of results of this issue:
https://www.google.ca/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=There+is+not+enough+memory+to+complete+the+operation.+To+free+up+available+memory%2C+close+programs%2C+projects%2C+or+windows+you+aren't+using%2C+and+then+try+again.
And 193K results on Bing:
http://www.bing.com/search?q=There+is+not+enough+memory+to+complete+the+operation.+To+free+up+available+memory%2C+close+programs%2C+projects%2C+or+windows+you+aren%27t+using%2C+and+then+try+again.&go=Submit&qs=n&form=QBLH&pq=there+is+not+enough+memory+to+complete+the+operation.+to+free+up+available+memory%2C+close+programs%2C+projects%2C+or+windows+you+aren%27t+using%2C+and+then+try+again.&sc=0-0&sp=-1&sk=&cvid=4cb023c1fbd94ec2bba9821b095f21f2
Computer was defragged already. I run more tests, and specifically when MS Projects tries to run, it tries to take all memory, more than 300Gb, on the computer. (DropBox was running at the same time, and warned that there were no space. As soon as MS Project
stopped attempting to configure itself, everything came back to normal and the available space became available again.)
Looking through older forum posts, looks like this application tries to take "unlimited" amount of memory. Some registry fixes are mentioned potentially, but I was not able to apply them.
Since everything else works, this is a MS Project bug reported by multiple users on various versions of Windows, including Vista and 7, so please provide a fix and not 'not a know bug' lie. All the premium support will say, is to format the hard drive, unless
they have a patch or a registry edit solution. If the latter is true, since the issue exists for multiple years, it should have been already been provided to users.
Also, I am not running a SQL server, or any server, this is an installation on a local machine.

Trying to install WSUS role on Windows Server 2012 R2 using dedicated SQL Instance with static port on remote SQL Server 2012 SP1 CU7 on Windows Server 2012 R2.

I am trying to install WSUS role on Windows Server 2012 R2 using dedicated SQL Instance with static port on remote SQL Server 2012 SP1 CU7 on Windows Server 2012 R2.
It verifies the connection and then throws the error:
The request to add or remove features on the specified server failed. The operation cannot be completed, because the server you specified requires a restart.
WSUS Server : Windows Server 2012 R2
Remote SQL Server: 2012 SP1 CU7 hosted on Windows Server 2012 R2
Please let me know if anyone has experienced this issue.

We were trying to install WSUS role on Windows Server 2012 R2 using dedicated SQL Instance with static port on remote SQL Server 2012 SP1 CU7 on Windows Server 2012 R2.
It verifies the connection and then throws the error:
The request to add or remove features on the specified server failed. The operation cannot be completed, because the server you specified requires a restart.
Same error even after rebooting the server multiple times.
WSUS Server : Windows Server Standard2012 R2
Remote SQL Server: Windows Server 2012 SP1 CU7 hosted on Windows Server 2012 R2
Event ID 7000:
The Windows Internal Database service failed to start due to the following error:
The service did not start due to a logon failure.
Event ID 7041
The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.
Service: MSSQL$MICROSOFT##WID
Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID
This service account does not have the required user right "Log on as a service."
User Action
Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user
right is assigned to the Cluster service account on all nodes in the cluster.
If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated
with this node might be removing the right.
I found following article:
"MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID" error when you install WID in Windows Server 2012
http://support.microsoft.com/kb/2832204/en-us
To work around the issue, use one of the following methods:
Assign the Log on as a service user right to NT SERVICE\ALL SERVICES in the GPO that defines the user right.
Exclude the computer from the GPO that defines the user right.
We moved the SCCM server to OU where no policies were getting applied and then applied the new GPO to that OU. Restarted the server and we were able to install WSUS role.
Regards
PR

Virtual PC / XP Mode Error outs with Required configuration: - Windows must be configured in mode 800x600 minimum - Windows must be configured in mode 'true colors'.

Hello,
I am running Application using XP mode and Virtual PC on Windows 7. I have 8 GB RAM and more than 300 GB free disk space. When I launch application in XP, I receive following error
Required configuration:
- Windows must be configured in mode 800x600 minimum
- Windows must be configured in mode 'true colors'.
My screen resolution is 1024
× 768
and I do not see any other options to resolve this problem.
Any guidance is greatly appreciated.
Ganesh

This is a thread that discusses your problem.
https://social.technet.microsoft.com/Forums/windows/en-US/12a17fa5-ddab-4480-8973-1a13bfb2e8fd/need-more-than-16bit-color-depth-on-windows-xp-mode?forum=w7itprovirt
Your app is probably calling for 32-bit color, and XP Mode with
integration features doesn't support that. There's 3 ways around it.
one, is to enable remote desktop in XP Mode and connect to the VM with
remote desktop.
2nd is to turn off the integration features and then you can set the XP
Mode desktop to 1024x7687 and 32-bit color
and 3rd, if you app supports 24-bit color, there's a registry hack to do
it. It's in the thread I posted above.
Bob Comer

SSO Configuration in UNIX Environment

Hi,
We are planning to impliment SSO between 2004s Portal with R/3, BW, and host of other non SAP application which supports SSO. All the applications are hosted in UNIX environment.
Could anyone help us in understanding the pros and cons of having SSO in unix envrionment. Also you could give us any document (other than help.sap.com) which guides us in configuring will be of great help.
Thanks
Vivek Raj.

Hi,
There are no pros and cons for SSO on Unix. Needless to mention, the pros and cons of different operating systems supported by SAP.
The steps involved to configure SSO remains the same for any of the SAP backend systems:
1) Create a system on Portal and give a system alias to it.
2) Download the verify.der file from Portal (System Administration -> System Configuration -> Keystore Administration)
3) Log on to the backend SAP system.
4) Use transaction STRUSTSSO2 and import the Portal certifcate (verify.der) to the SAP R3 or SAP BW or SAP CRM or for that matter any SAP system with ABAP stack.
5) Give the values for EP system ID, client and language. Refer to this link : http://help.sap.com/saphelp_nw2004s/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm
6) Configure the backend SAP systems to accept and verify the logon ticket. Use RZ10 and set the parameters : login/accept_sso2_ticket=1 and login/create_sso2_ticket=1
7) Restart your R3 or BW system.
For non-SAP systems, can you just let me know which systems are you referring to ?
Incase you need a document for SSO configuration, do send me your email address. You can also find documents in SDN Library.
Regards,
Sunil

SSO Configuration in biztalk

Hi
I referred the below url to store config info to SSO DB , from biztalk i am reading those values.
http://www.codeproject.com/Tips/559597/How-to-store-BizTalk-configuration-in-the-SSO-data
its working fine. i have used the MMC snap in tool to create configurable values.
but now i have a situation to store one more key/value in the same application via programatically.
i tried to use the below code snippet for storing values
SSOConfigStore ssoStore = new SSOConfigStore();
ConfigurationPropertyBag appMgmtBag = new ConfigurationPropertyBag();
object value = "Sample";
appMgmtBag.Write(propName, ref value);
((ISSOConfigStore)ssoStore).SetConfigInfo(appName, idenifierGUID, appMgmtBag);
but when i try to update , it is not updating the new key/value pair in the same application store. also, when i open the MMC snap in tool, i am not able to see the existing key/value pairs.
can any one please help me how to store the sso configurable values dynamically?
Thanks
Vinoth

Hi Vinoth,
Please have a look at this thread
http://social.msdn.microsoft.com/Forums/en-US/5b914e0c-50ea-4226-8f0e-7e15e2f482ae/biztalk-2013-sso-mmc-snapin-does-not-show-key-pairs?forum=biztalkgeneral
Probably, this will solve the issue of existing key/value pairs missing in MMC
Thanks,
Deepthi
DeepthiAdith

Windows 8 freezing when using Firefox

When I'm using Firefox or Chrome browsers the whole entire PC is freezing.
Already posted my issue on the Microsoft Community forum, where you can read the details and the troubleshooting steps I tried:
http://answers.microsoft.com/en-us/windows/forum/windows_8-networking/windows-8-freezing-when-using-chrome-or-firefox/d6bad301-6c55-4469-96cb-0ec3d43e1113
Also I found another post here on the Mozilla forum, who had the same issue and he did not seem to solve it either: https://support.mozilla.org/en-US/questions/975278?esab=a&as=aaq
Please help me to fix this annoying issue! Thx!

Well, the MS site was a bust, wasn't it?
it would help to know how Firefox is configured.
Can you send me your troubleshooting information from the Firefox installation that's having issues? This is a good part in troubleshooting.
*Navigate to <code>about:support</code> via Address Bar
*Click the button that says <code>Copy text to clipboard</code>
*Now, go back to your forum post and click inside the reply box. Press Ctrl+V to paste all the information you copied into the forum post.
Firefox has hardware acceleration set to "on" by default, but it's still young, which means some video cards or drivers might have problems with it. You can try to disable hardware acceleration to see if that alleviates your problems.
You might need to restart Firefox in order for this to take effect, so save all work first (e.g., mail you are composing, online documents you're editing, etc.).
Then perform these steps for Firefox version 29.0 and above:
*Click the menu button [[Image:New Fx Menu]] and select Options for Windows or Preferences on Mac or Linux. For Firefox 28.0 and previous versions, click the orange Firefox button at the top left, then select the "Options" button, or, if there is no Firefox button at the top, go to Tools > Options.
*In the Firefox options window, click the ''Advanced'' tab, then select "General".
*In the settings list, you should find the ''Use hardware acceleration when available'' checkbox. Uncheck this checkbox.
*Now, restart Firefox and see if the problems persist.
Additionally, please check for updates for your graphics driver by following the steps mentioned in the following Knowledge base articles:
* [[Troubleshoot extensions, themes and hardware acceleration issues to solve common Firefox problems]]
* [[Upgrade your graphics drivers to use hardware acceleration and WebGL]]
Note that if this issue happens in both Chrome and Firefox that it may be a system issue and not a Firefox related issue,
Do a malware check with some malware scanning programs on the Windows computer. 
Please scan with all programs because each program detects different malware. 
All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php
*AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/ http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
*SuperAntispyware: http://www.superantispyware.com/
*Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: Home Page: http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
*Spybot Search & Destroy: http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan: http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*Anti-rootkit utility TDSSKiller: http://support.kaspersky.com/5350?el=88446
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Windows File Share configuration from AIX Portal

Hi,
we want to connect a Windows file share as KM Repository to a portal running on AIX.
The network path is configured using jCIFS and user (DOMAIN.NET\USERNAME) is entered with password. The corresponding path is also entered in the FS Repository manager using ACLSecurity manager. A Windows System is not configured .
In the repository managers monitoring view our new repository manager shows a green button. In the KM however, it is not visible. The portal log shows the following error:
"Cannot retrieve credentials from URL for file 'DOMAIN.NET; USERNAME/' "
We tried to connect the file share with the same user/password. This worked fine.
Is there something else to configure ?
Any help will be appreciated.
Thanks
Marcus

Hi,
the problem was the passwort. Using "?, %" or other special characters interpreted in a URL may not be used.
After changing password to a alphanumeric everything works just fine.

Windows AD SSO Configuration using Vintela

Similar Messages

Maybe you are looking for