WLP 9.2 Complex Producer - Portal DB

Hi,
We have a federated portal architecture where in there is a Consumer and Producer.
Our application is running in WLP9.2. Since we are using InterPortlet Communication we need to have a complex producer.
According to BEA WLP9.2, deploying a complex producer requires you to to have a Portal DB as well.
Since we are not using any Portal DB data, how can we avoid deploying Portal DB?
Is there a way to deploy complex producer without deploying Portal DB?
[Portal DB at Consumer is fine. We are concerned at the need for having a Portal DB at Producer as well].

This solved the problem, thanks!
One minor adjustment is still required: since we run Portal Admin on the
Managed Servers, the ldap directory must be deleted from them too
(\servers\ManagedServer\data\ldap).
I guess this kind of dependency makes it difficult to share the same
database between different server environments?
<Reid Elliott> wrote in message news:[email protected]..
I would guess when you recreated your database on MSSQL you did not reset
your Servers LDAP data. There are dependencies between the two so if one
is deleted, the other must also be cleared or they will get out of sync and
can run into strange problems.
There would be two options to do this (reset ldap) after you create your
database.
1. Deleting the ldap directory (\servers\AdminServer\data\ldap)
And if your you don't want to reset the entire database again,
2. delete the ldap directory above, and delete all entries from
p13n_entitlement_role,
p13n_entitlement_resource, p13n_entitlement_policy,
p13n_entitlement_application and p13n_delegated_hierarchy tables in that
order..

Similar Messages

Disabling WSRP Complex Producer security

Hello all,
We are using WebLogic 10 Portal in combination with Workshop 10. We got Complex WSRP producer up and running, everything is going/flowing ok.
Is there a way to remove authentication information that is being passes in WSRP message exchanges, so anonymous users are able to perform all operations, including PortletPreferences.store()?
In documentation it clearly states user must be not be anonymous in order to store preferences, is this a configurable option?
We know there are two ways user identity is transfered from consumer to producer:User Name and SAML token runtime propagation, and we have tried to disable security at least temporary, but could not find the magic turn-off switch.
Any tips, pointers to relevant information is appreciated.
Thanks in advance

Veljko,
Is PortletPreferences.store() only operation from the JSR 168 (Java Portlet Specification) affected by security restrictions, such as that anonymous user is not able to perform it?Yes this is the only (JSR-168 specified) operation that requires
authentication.
As for working around authentication you have several options (in rough
order of preference):
1. Propagate the user's identity from the consumer to the producer, WLP
supports:
* SAML
* UNT
* Basic Auth
* Other (Requires you to write an Identity Asserter)
2. Have your portlet detect when there is no logged in user, and log
them in as a made up user (e.g. create a wsrpAnon user)
* See code snippet below
3. Edit the ejb-jar.xml to allow anonymous users access to the relevant
methods
* You'll need to slog through each method that throws and exception and
open them one by one
Code:
//Note: In non-wsrp cases login/logout should ALWAYS happen
// in processAction and send a redirect
     public void doView(RenderRequest request, RenderResponse response)
               throws PortletException, IOException {
          if (request.getUserPrincipal() == null) {
               PortletRequestDispatcher requestDispatcher =
getPortletContext().getRequestDispatcher("/login.jsp");
               requestDispatcher.include(request, response);
Veljko Zivkovic wrote:
Hello Nathan,
Thanks for the reply.
The scenario we have is that some of the WSRP consumers of our WebLogic WSRP Complex Producer are not BEA consumers and they do not support SAML as authentication mechanism.
If we understood WSRP specification correctly, for each user session in "end user-consumer" communication scenario, WSRP consumer is in the background keeping N more session where N is the number of WSRP producers end user is accessing thru consumer. (Consumer is shielding end user from this complexity).
Q: What we need in ideal case is following: when end user authenticates on consumer in some way, and his session is created on consumer, we want producer to trust consumer that user is valid to do anything on producer since he has session, and we do not want producer to authenticate user again.
When user authenticates on consumer, consumer is then sending user id and session data to the producer, so producer knows trusted user is in question, and so on.
Using User Name Token Security is not a viable option, since we can not use two-way encrypted (reversible) method due to various reasons that are out of our control.
Can you just confirm if it is possible or not to do what I have described above in Q, to not use neither SAML not User token, but still be able to treat user as authenticated on producer, since he has valid session on consumer, and consumer is passing session id and user name to the producer.
Thanks in advance

Missing Producer Portal info in the Enterprise Portal

Whenever we make any change to our Producer Portal, BI in this case, the Consumer Portal, EP stops displaying the Fedeated pages or iviews. Anyone trying to access the EP with BI roles either then gets a blank page or it times out. The EP continues to work fine for anyone without the BI role. The BI roles are stored in LDAP, EP and the BI poratl. This has happened more than once and the option that we are left is to restart the Server Node on the EP. Any idea/help??

Hi Anup
The issue you see seems to be coming because of the fpn cache . After you make changes in the produces portal you should clear the cache or synchronize the cache
based on your content.
Clearing the cache refers to roles consumed through remote role assignment, while synchronizing the cache refers to remote delta links.
For more details see the following link :
http://help.sap.com/saphelp_nw70/helpdata/EN/43/222dfc0bb93fece10000000a11466f/content.htm
You can also configure auto sync of the cache as mentioned in the above link.
Regards
Priyanka

Cannot access the content producer portal via reverse proxy

Hi all,
I hope my post is in the right forum
We have an FPN environment using RRA with our EP (NW 7.0 SPS18) as the consumer and our BI portal (NW 7.0 SPS18) as the content producer. The consumer is registered with the producer using HTTP protocol. Everything works as expected.
We're trying to implement an Apache reverse proxy for our FPN with SSL termination so that we can access the portals from the Internet with HTTPS protocol while keeping HTTP protocol for the internal users.
Through the reverse proxy, we can access the consumer portal and we can access the producer portal directly without any problem. The only problem is that, if we logged onto the consumer via the reverse proxy, we cannot access the content from the producer. We'd get the browser security warning message
"Although this page is encrypted. The information you have entered will be sent over an unencrypted connection. ..."
When we hit the Continue button, we'd get the eror 404 Not Found - The request resource does not exist.
Our Unix admin tried both Apache and SAP Web Dispatcher but we couldn't get it to work properly. We went through a lot of blogs and documents and we are at our wits end. We would greatly appreciate if someone can point out where we should look at.
Thank you very much in advance.
Dao

Hi Kevin,
Unfortunately, our Unix admin thinks you missed the point because my question was not clear enough
We do not have problems with the "correct name" in the reverse proxy and our main SSL termination works fine.
It's just that the consumer is registered with the producer using HTTP protocol; as a result, the producer's URL link is 'hard-coded' to use HTTP protocol in the consumer portal since we are not using SSL in the internal network. Hence, we'd like to know if there's any way to change them to HTTPS for the Internet clients while keeping the HTTP protocol for the internal users.
I hope I made it clearer this time
Regards,
Dao

Producer portal iviews are not rendered on Consumer portal.

Hello People,
We are currently in the process of upgrading our portal from EP7.4 SP03 to EP 7.4 SP07.
There are some remote iviews that we take from another portal.
These remote role assignment iviews do not open and no reports open assigned with them giving us the below error:
Could not open iView. The iView is not compatible with your browser,
operating system, or device. Contact your system administrator for more
information
These iviews work with IE9,IE11 but not with Chrome on the Consumer portal
These iVIews are rendering on the Producer portal (EP7.0) but not on the Consumer,newer version.
The issue with the remote iViews is only on Chrome. I did not find any SAP note or patch that can help with the compatibility for Chrome.
Does anyone has idea regarding this?
Any help is appreciated.
Thanks,
Deep

Hi All,
After some discussions with SAP support, we got a response saying that currently Chrome browser is not supported for Producer portal reports (See SAP Note 1655306 - Google Chrome for end
users and administrators).
Hence, we need to continue using only IE for such cases.
Thanks and Regards,
Deep Desai

BEA Custom Data Transfer and non-BEA Producer Portals?

Hello,
I recently had a problem where my BEA 10 Consumer was not sending my BEA 10 Producer the user's x509 digital certifcate used in authentication. In a non-WSRP environment, the certs come over in the HttpServletRequest object. I was told that for WSRP, BEA strips things out of the request object and the cert was one of those things. The solution was to implement BEA's Custom Data Transfer. I was able to create a solution for our problem using this approach. All is well.
Now I have run into a problem where one of our other projects is using a non-BEA portal and wants to also be a Producer. Since the Custom Data Transfer is a BEA solution (the Producer portlet class imports BEA classes), how can a non-BEA Producer receive the user's digital certificate since they presumedly can't implement the BEA Custom Data Transfer (unless, I guess, they bring in some BEA library file with those particualr classes).
Any insight? Thanks - Peter Len

Peter,
What producer are you using, some other vendors have implemented BEA's
custom data transfer. Also, the WSRP committee is looking into
standardizing this.
Additionally, you may use an interceptor (9.2 and later) to set HTTP
headers that the producer may be able to use.
Nate
Peter Len wrote:
Hello,
I recently had a problem where my BEA 10 Consumer was not sending my BEA 10 Producer the user's x509 digital certifcate used in authentication. In a non-WSRP environment, the certs come over in the HttpServletRequest object. I was told that for WSRP, BEA strips things out of the request object and the cert was one of those things. The solution was to implement BEA's Custom Data Transfer. I was able to create a solution for our problem using this approach. All is well.
Now I have run into a problem where one of our other projects is using a non-BEA portal and wants to also be a Producer. Since the Custom Data Transfer is a BEA solution (the Producer portlet class imports BEA classes), how can a non-BEA Producer receive the user's digital certificate since they presumedly can't implement the BEA Custom Data Transfer (unless, I guess, they bring in some BEA library file with those particualr classes).
Any insight? Thanks - Peter Len

Federated Portal: accessing content, through Consumer, stored on Producer

Hello Guys,
I am working on a project which has a Federated Portal Network scenario. Details of it are as follows:
Details:
SAP EP 7.0 with SP11. Two portal installations: Consumer and Producer. Both Consumer and Producer are used for logging on by users. Consumer does not have any content. Users logging on to Consumer accesses all the content from Producer rendered through Remote Role Assignment which works fine. Through Consumer, I am able to access in Top Level Navigation, the Role and all assigned worksets, of the Producer. For a particular workset I have a page containing an AppIntegrator iView. AppIntegrator iView is being used as we are catering to more than one language on the portals. This AppIntegrator iView is rendering an HTML page which is stored in a KM repository on Producer (as I mentioned all content is on Producer). The path to the HTML page on KM repository is given in the URL Template property of the AppIntegrator iView created on the Producer.The path for example is something like: <System.protocol>://<System.server>:<System.port>/irj/go/km/docs/myrepository/testPage/<Request.Language>/includes/mypage.html
The links on the HTML page are all relative links. For eg, {a href = "/irj/portal/theQuickLink" target="_top"}. The behaviour I want is to navigate to the workset/page once I click the link on the HTML page while staying in the Consumer portal.
Problem/Question:
On the Consumer I see the HTML page and till this point the navigation is in Consumer portal. But when I click on any of the links on this page the navigation takes me to the Producer URL. I am transferred to the Producer portal and am no longer in the Consumer portal.
Thanks in advance.
Kaushik

Vinoth,
I am aware about the solution provided by you. But my problem here is the Server name + port and not the rest of the URL.
For eg. my consumer portal is http://Aserver:50000
and producer portal is http://Bserver:51000.
While I am able to access the HTML page via consumer and till then the URL has the consumer Server + port details (for eg. http://Aserver:50000), once I click any link on it the URL in the address bar of the browser window changes to that of the producer for eg http://Bserver:51000. All subsequent browsing happens in the producer as I am transferred to the Producer.
Let me know if anybody has more suggestions.
Thanks,
Kaushik

Error occurs in accessing producer content in federated portal network

Hi
I am trying to access my bi iViews in the enterprise portal using federated portal approach. we are having BI portal(Netweaver 2004s sp15) and Enterprise portal(Netweaver 2004s sp09).I am able to create iViews in BI portal using default system SAP_LOCALSYSTEM.Producer portal registration is also working fine(screen shot attached).But i am getting error when trying to access producer content.
Kindly suggest.
Regards
Shankar

the connection parameter were wrong

Producer content is not visible in Consumer portal in FPN

Hi All,
we have configured FPN and the connection is successful, but we are not able to see the Producer content in Consumer portal.
and we are not able to search the producer roles from Identity Management of Consumer also.
We did,
1. we configured trust between two portals.
2. Registered Producer.
3. Remote_role with actions aslo added in Producer.
Thank you.

Check whether you have proper permissions on the pcd objects (roles/pages/iviews) in producer portal.
Also check the producer roles have entry point 'Yes'.
Also you should logon to the producer with the same role atleast once as you are assigning the producer role in conusmer portal(RRA). This is the limitation in FPN.
Raghu

Federation Portal Network Impl. - Producer content is error

Implementing Remote Delta Links(RDL) between Portal Consumer SP17 and BI Portal Producer SP17.
Have Visual Composer iViews on BI Portal(Producer).
There are copy iviews,workset to Consumer Portal. The iviews,workset attached to Consumer Portal Role.
Until before 3 months was running well.
BUT
The error occurs in recent times(3 times)
Errors happened in the consumer portal content area.
I try to view the iviews that run on the producer. (The iview works fine on the BI producer portal.) and there is no problems Producer Connection Test, Producer iview copy to Consumer (RDL)
When the once error occurs and continuously the error occurs.
Finally,When restart BI Portal(Producer) Server - very well executed.
error log summary
[EXCEPTION]
com.sap.portal.fpn.exception.base.unchecked.FpnCommunicationException: Could not retrieve the bean / access service to connect with consumer 'EP_PPC_CONSUMER'
Caused by: com.sap.engine.services.jndi.persistent.exceptions.NamingException: Exception while trying to get InitialContext. [Root exception is com.sap.engine.interfaces.cross.DestinationException: cannot establish connection with any of the available instances
     Nested exceptions are:
     com.sap.engine.services.rmi_p4.exception.P4BaseIOException: Cannot open connection on host: and port:
Caused by: com.sap.engine.interfaces.cross.DestinationException: cannot establish connection with any of the available instances
     Nested exceptions are:
     com.sap.engine.services.rmi_p4.exception.P4BaseIOException: Cannot open connection on host: and port:
[EXCEPTION]
com.sapportals.portal.prt.runtime.PortalRuntimeException: Unexpected error - Unable to get IView: fpn:EP_PPC_CONSUMER/pcd:portal_content/hkmc/hmc/roles/com.sap.hkmc.portal.fpn.H_BW_TEST/fd_test/com.sap.hkmc.portal.bi.hhr_ws2/bwfd02/com.sap.hkmc.2N8._:HNVB9a8SLMvBmMm8jSFQfQ%3D%3D:1:
Edited by: ddoari-han on Feb 11, 2010 10:03 AM

Hi,
I may be mistaken, but is the copy process not WSRP based, so that the P4 communication only is used when the user really accesses the RDL-copied iView?
If you 100% sure that your P4 communication between Consumer and Producer is working, you can try to unregister and re-register the FPN connection.
Or open an OSS to SAP.
br,
Tobias

Federation Portal Network Impl. - Producer content is invisible

Hi,
I trying to implement FPN remote role assignment scenario.
I got 2 EP7.0 portals one on SP10 and the other one on SP11.
I have created a user in CP (consumer portal) in portal UME.
And via Import in Identity Management in PP (producer portal) in portal UME.
And reset the password in PP. And carried out certificate exchange.
And able to register in CP successfully.
But, when I check for the content in CP 'Content Admin' -> Producer, I could not see it. But, producer as self, i was able to see in both portals.
Pls. advice.
Regards,
Sreekanth.

Hi Sreekanth,
Have you completed the trust configuration steps beyond the ticket exchange, using the visual admin?
When you have, please clear the cache under System administration->Federated Portal->Cache management or Configure my consumer profile.
Clear the remote role assignment cache.
Go back to the content catalog.
Open the NetWeaver content producers.
Right click your producer and choose 'refresh'.
Regards,
Oren

Federated portal's, cann't see the roles and portal content from producer

We are configuring a Federated Portal, with a Producer EP7.0 SP13 and a Consumer EP7.0 SP13. The connection test is successful.
I can see the producer on the consumer and the consumer on the producer.
The problem is that I can not see the portal content of the producer in the portal content of the consumer. The producer roles are also not available on the consumer. I have selected the producer as the data source in the consumer UME,
then enter * in the role name field, then select "go", but nothing comes up.
Can anybody help me?

Hi J De Voijs
Following might be the reason:
1. User should exist in both user store of Consumer and Producer portal otherwise it wont work.
2. Incase if the registration is successful then there might be some problem with your servers (Consumer & Producer) clock timings.
3. Remote Role Assignment may get fail perhaps because user to whom remote role assignment is done doesnt have End User role assigned to him/her at Producer Portal. End-user permission enables business users to run content at runtime. Just as end users require end-user permission to run local content on your portal, they also need end-user permission for local content originating from a remote producer.
4. You should have Owner permission in the objects to which you want to assign permissions otherwise Remote Role Assignment wont work.
5. In the portal content studio, open the producer under 'NetWeaver content producers'. If it does not contain folders in it, the registration is considered to be unsuccessful even though it stated it was successful while registration.
6. During the process of Registering (Adding) Producer Portal, while entering the connection parameters of the NetWeaver producer portal use appropriate Host name against Host Name input field instead of IP address. Perhaps this might create some problem during execution in later stage.
e.g. Host Name: use sapProducerportal02 instead of 172.19.144.155
7. Also go through the following URLs (w.r.t Permissions):
1) http://help.sap.com/saphelp_nw2004s/helpdata/en/43/2232580bb93fece10000000a11466f/content.htm
2) http://help.sap.com/saphelp_nw2004s/helpdata/en/f6/2604e505fd11d7b84200047582c9f7/content.htm
3) http://help.sap.com/saphelp_nw04/helpdata/en/f6/2604e905fd11d7b84200047582c9f7/frameset.htm
4)http://help.sap.com/saphelp_nw04/helpdata/en/f6/2604e505fd11d7b84200047582c9f7/frameset.htm
5)http://help.sap.com/saphelp_nw04/helpdata/en/5b/0fab1b76984ed0944d5c732cfad1b2/frameset.htm
Points pls if you find it useful...
Thanks and Regards,

In Portal I-view cannot be fetched

Hi All,
While we click on a tab in consumer portal we are getting an error message as "500 INTERNAL ERROR - iVIEW CANNOT BE FETCHED".
This ivew exists in producer portal ( BI & Finance).
What would be the reason while going for preview getting the same error in both consumer and producer.
Regards,
Namrata

Namrata,
If this is for a URL iview, follow these steps.
1.Open the URLiView editor and check the Fetch Mode property value.
2.Launch the same URL in a new browser window (not in the portal).
3.Change the URLiView Fetch Mode property from Server-Side to Client-Side.
4.The iView is using the Server-side fetching mode but no proxy is defined for the portal
Check [help|http://help.sap.com/saphelp_nw70/helpdata/en/2f/add8403e37762ae10000000a155106/content.htm] for details.
Cheers!
Sandeep Tudumu

Error while loading a BI report through Portal

Hi Experts,
I have a FPN configured. I have a BI Portal, which hosts all BI Content.
I am accessing the BI reports in central consumer Portal using remote roles. Everything works fine, then suddenly, we experience a problem opening one of the report through consumer Portal.
Consumer Portal shows a Loading... Message and the report never comes up.
If I test the same report throuigh Producer Portal it works fine. The complete FPN setting were working fine till yesterday. Nothing changed, still we are facing this issue. This is happening for a specific role. All other roles are working fine.
Has anyone else experienced this issue.
Thanks,
Yomesh.

Hi Experts,
I have a FPN configured. I have a BI Portal, which hosts all BI Content.
I am accessing the BI reports in central consumer Portal using remote roles. Everything works fine, then suddenly, we experience a problem opening one of the report through consumer Portal.
Consumer Portal shows a Loading... Message and the report never comes up.
If I test the same report throuigh Producer Portal it works fine. The complete FPN setting were working fine till yesterday. Nothing changed, still we are facing this issue. This is happening for a specific role. All other roles are working fine.
Has anyone else experienced this issue.
Thanks,
Yomesh.

Questions on Federated Portal Network

Hi All,
I have a few questions on Federated Portal Network. Please if someone can provide appropriate answers
It is said that the look n feel will be same. Will the consumer have the look n feel of the producer or the producer application will have the look n feel of the consumer portal. Also, if it is required for the content of the producer portal to maintain it's own look n feel, is it possible
How to take care of the performance bottlenecks. Are there any standards available to improve the performance
Any limitation on the no of producer portals which can be configured with the consumer portal
If one portlet, has undergone some kind of change, then how is the consumer portal notified of this. Is there some kind of synchronization mechanism that takes place or this change is implicitly conveyed to the consumer portal, both in the case of Remote Delta Link or Remote Role Assignment
How does the session management work between the consumer portal and producer portal
What is meant by transitive content sharing
Regards
Nikhil

Hi Rasmus,
Is your consumer portal required High Availability? A scheduled re-bounce of the instance should help (weekly, monthly, etc.) as a preventive measure. Maybe you can observe to see how long does it take before the problem comes back (after a full cache refreshed) and then schedule your re-bounce accordingly. As much as we try to do our best, "things" happen
Or, you can adjust your cache settings (e.g. reduce the maxValidityPeriodInSecond property) to avoid the problem.
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
According to the following link, the cache stores only semantic objects (iViews, pages, layouts and roles); since worksets are not semantic objects, could that be why?!
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
Regards,
Dao

WLP 9.2 Complex Producer - Portal DB

Similar Messages

Maybe you are looking for