XI R3 PIK for WebSEAL 6.0

The Supported Platforms document lists, under Other Tools support for the a Reverse Proxy Server "WebSEAL 6.0 (from IBM Tivoli Access Manager)". Can any of the techs provide more insight to this declaration? For instance, will a WebSEAL junction establshed on the WebSEAL server be able to pass down the TAM credentials and the XI R3 application will pick them up, authenticate, and either build an account for said user (if none exists) and permit said user to "get in", or pass said user when an account exists into the system? I guess what I'm asking is what exactly is the interaction we should expect between WebSEAL and XI R3?
Thanks,
John

Bryan,
After my 28 Aug 2008 posting and not getting a reply here I wound up submitting a message (troubleticket) to Tech Support. Their reply was that WebSEAL should respond in similiar ways to the other interface modes that BOE supports. I can't find the "message" that I had with Tech Support (lesson learned here is to do screenshots of all correspondence I have with Tech Support because there does not appear to be a way within SDN to surf up past interactions (sad face emoticon inserted here)).
I can't add anything further because since 28 Aug the powers to be in the Systems Admin arena have now chosen to authenticate using Active Directory (AD), which for us is still in the planning phase, however, AD was and always will be a BOE approved interface that is tried and true, so we do not anticipate any unsurmountable hurdles going to the AD world...
Thanks,
John

Similar Messages

How to install SharePoint MOSS 2007 PIK for Crystal Report Server XI R2?

My configuration is :
Moss 2007 without any Crystal Report or BO component. on one box with Windows 2003 server
Cyrstal Report Server XI R2 on another box
I have downloaded the kit installation: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/webcontent/uuid/503988db-58c5-2b10-f79d-cb96700417f9 [original link is broken]
I used this one as they said:
BusinessObjects XI Release 2 SharePoint 2007 Portal Integration Kit
Download BusinessObjects XI Release 2 SharePoint 2007 Portal Integration Kit - ZIP 5MB
I do not have BO Enterprise.
Thanks,

Answered my own question. Managed to upgrade to 5.0 following this process, but follow these instructions with care...
1. Stop all CMS services in Config Manager.
2. Go to Add/Remove programs and click "change" for Crystal Reports Server XI. Click on "Modify" then change the entry for MySQL4.1.13a to "Entire Feature will be unavailable" (from Enterprise -> Server Components -> Servers - > Central Management Server). This will remove the existing mySQL version and any data/license key information/customisation, so be wary.
3. Install the desired version of mySQL.
4. Use the MySql command line to create a new database - "create DATABASE BOE115;"
5. In the Central Config Manager, select the CMS and display its properties. Select the Dependencies tab and remove the old version of mySQL and add the new version. Click on the Config tab, then Select Datasource. Select mySQL driver, then complete the details for the newly created database. Once complete it will still produce an error, at which point you need to select the options to Re-create the Current Datasource.
6. Once the datasource is sucessfully recreated, restart the Crystal service in the Config Manager.
7. Open the Config tool, and add your license key. Then Re-Enable all the servers within the Servers page.
8. Any other customisation or preferences would need to be re-applied.
This worked for me, but obviously take care as your existing mySQL database will be completely removed during the process.

SharePoint PIK for 3.1 scheduling capabilities

We are looking for report scheduling capabilities within the SharePoint Portal Integration Kit at 3.1. Does anyone know if these capabilities available at 3.1?
Thanks,
Edited by: Lindsay Kojima on Dec 8, 2008 5:44 PM
Edited by: Lindsay Kojima on Dec 8, 2008 5:45 PM

No, it doesn't. It provides only document viewing and listing capabilities. This useraction was not supported.
These enhancments are I suppose planned for next version it seems.
Regards
-amit-

MOSS 2007 BOE Web Part is unable to connect to my Local BOE server.

Greetings
I have the following items installed but the web part is unable to connect to my BOE. Anyone knows how to resolve this?
1, Business Objects XIR3.1 RTM
2, Business Objects XIR3.1 PIK for Sharepoint 2007
3, MOSS 2007
Another question is how could I update the BOE connection info of the web part (like credential info) after installed BO PIK for Sharepoint 2007?
Here are the error messages
Document List
Signon required in Crystal Report View before information is displayed
Document View
Signon required in Crystal Report View before information is displayed
DocumentForYou
Signon required in Crystal Report View before information is displayed
DocumentsForYou
Signon required in Crystal Report View before information is displayed
Crystal Report View
Unable to access the BusinessObjects Enterprise infrastructure at for user: . Contact your reporting administrator for assistance
Thanks very much in advance
Edited by: Chapman Wong on Jul 22, 2008 3:15 AM

Not sure if this helps as I have CRSXIR2 not BOE (though the web parts are probably the same thing). I had to edit the web.config for the MOSS web application to pass through the relevant credentials, but it seems only able to pass a userid - the password must be blank so I also had to create a user on CRS with no password. I expect it depends what type of authentication you need to use for BOE.

A2dp fix???

I have Motorola S805 bluetooth headphones and am having the much discussed issue with listening to them in stereo through my Mac. Basically its un-listenable. Anyone know of any software fixes down the pike for a2dp???

I haven't had any issues with A2DP, and for some reason, I'm doubting that it's *Apple* that's out of spec. The suggestion to buy a Samsung or HTC phone is just laughable too. Here's just one example of the many problems that Android has had with Bluetooth: http://code.google.com/p/android/issues/detail?id=24012
I've found that usually it's the car manufacturer insisting that they're right, when in fact they're way off. Ford has had this issue with mySync for a while too. AFAIK from developer friends, Apple has been following the Bluetooth spec pretty closely. https://developer.bluetooth.org/Pages/Bluetooth-Apple-Developers.aspx even.
Sounds like the people at m0bridge are a little too proud of their product. Some Amazon reviews and Porsche forum posts kind of indicate this as well. They're punting. If they claim that they aren't dealing with Apple anymore, get rid of the thing and get a Parrot box instead.

BOBJ Integration Kit with Plone?

We have a setup where our Enterprise Portal is Plone. Is there a BOBJ Integration Kit with Plone, or one for opensource in general, or should we use the SAP PIK and link the SAP Portal to Plone for this purpose?

Hi,
i`m not aware of any PIK for Plone. The easiest way would be to place a HTTP Link in your Portal to BI LaunchPad or SAP EP.
You could create an OSS Message with the SAP Support to check if there is a PIK....but i dont think so.
Regards
-Seb.

SSO to SAP EP6 (for Employee Self Service) using WebSEAL

Hi SDN friends,
We are about to embark on a SSO implementation using IBM WebSEAL for SAP EP6 ESS (Employee Self Service) connecting through to an SAP R/3 4.7 server. Since the ESS solution for 4.7 still uses ITS services, this means that we have ITS iViews in the EP6 portal.
We have managed to look through the whitepaper 'IBM Tivoli Access Manager - Single Sign On for SAP NetWeaver - September 2005' described at https://www.sdn.sap.com/irj/sdn/developerareas/ibm
We have the following queries, if anybody has a simple answer to these:
- Is it absolutely necessary to configure an SNC connection between ITS/EP6 and R/3 server to achieve SSO for the portal?
- Given that SAP EP6 references ITS IAC iviews, is it necessary for us to configure both ITS and EP6 for SSO, or can we simply configure EP6 for SSO? If so, is it also necessary to configure both for SSL?
- Otherwise, how easy is it to set up SSO in this scenario without SSL (for demo purposes)?
Any thoughts would be greatly appreciated.
Cheers
John Moy

Hello John,
regarding your questions:
ad 1) no. SNC is only mandatory if you use X.509-based SSO to R/3. You can also use SAP logon ticket-based SSO from EP to R/3 or usermapping that do both not require SNC.
ad 2) yes, you have to configure both EP and ITS at WebSeal.
ad 3) you can always omit SSL. However for production use, it is recommended.
Regards
Michael

How do you stop BSPs on WebSEAL for asking for user-credentials?

Hi
We are currently having an issue with BSP Pages. When we test the BSP pages on the R/3 system they work OK. When we test them directly on the Portal then they too also work. The problem is that they are not working properly on our Intranet.
The intranet that we use is an IBM Tivoli product (also known as WebSEAL). We currently have WebSEAL SSO to our SAP Portal. This is working OK. When we use WebSEAL to access the portal we are prompted to enter our user-id and password so that the BSP page can be displayed. This should not be happening and it defeats the purpose of SSO. I have attached a screen shot document to demonstate this.
Some time ago we had a similar issue where the transactions on the portal (when executed from WebSEAL) were giving us a Webdynpro time-out error. I later determined that the cookie information was not being passed to WebSEAL. To fix this, I went to the Visual Administrator and went to server >> services >> web container and for the web container "sap.com/irj" I went to the cookie configuration to add a session cookie. By doing this I fixed my previous problem.
Coming back to my problem, I had a junction created in WebSEAL to point to the bsp directory (sap/bc/sap/bsp/*) on the host concerned. I had both a SSL and TCP junction created both resulted in error messages - stating that the client (SAP) is asking for user credentials.
Hoping that I have provided enough information above my question is as follows:
(1) How can I get the BSP messages to work on WebSEAL such that it will not ask for user credentials to be entered? Would this involve making a further change to a Web Container? If so - which container also needs a session cookie to be generated?
Thanks
Kind Regards
Rajdeep Kumar

Hi Peter
I am having an issue with the re-direct and am hoping you might be able to provide a little assistance. If not then not to worry.
My security department have logged a call with IBM 2 days ago yet have not received any response.
In your document you mention that you need to have a junction to AS-JAVA and a junction to AS-ABAP.
We have created the junctions "/sapep" (for AS-JAVA) and "saphr1" (for AS-ABAP).
The junction /sapep" also contains the junction mapping entries "/irj/" and "/SSOTicket/".
The direct URL to the hidden image is : https://uadsfi01.auiag.corp:53001/SSOTicket/1x1.gif. I have tested this (using my user id and password) and it works OK.
When testing the image through TAM (https://test.insideiaghome.iaglimited.net/sapep/SSOTicket/1x1.gif) we get an "unexpected authentication challenge"
I have reviewed the log below and it seems that we are having an authentication issue with the image:
==(START OF LOG)==
2008-06-16-19:59:58.365+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD ===> BackEnd -
Thread_ID:52943
GET /SSOTicket/1x1.gif HTTP/1.1
via: HTTP/1.1 uattam01:443
host: uadsfi01.auiag.corp:53001
user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; MS-RTC LM 8; .NET CLR 2.0.50727)
iv_server_name: uatin1-webseald-uattam01
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, /
iagsapid: 52975
accept-language: en-au
referer: https://test.insideiaghome.iaglimited.net/sapabap.html
connection: close
iv-user: s52975
2008-06-16-19:59:58.373+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD <=== BackEnd -
Thread_ID:52943
HTTP/1.1 401 Unauthorized
content-type: text/html
date: Mon, 16 Jun 2008 09:59:58 GMT
cache-control: no-cache
content-length: 1787
www-authenticate: Basic realm="Upload Protected Area"
server: SAP J2EE Engine/7.00
expires: 0
pragma: no-cache
connection: close
==(END OF LOG)==
When logging into the SAP Portal directly general user ids have no problem accessing this (Non-Administrator portal users), however through Tivoli it is causing an issue.
Do you know what may be causing this issue?
Thanks in advance for any assistance you can offer.
Kind Regards
Rajdeep Kumar

PIK - is 64-bit exist / supported for Reports SDK or PIK?

All:
Can someone please confirm whether 64-bit versions exist / supported for BOXI (R2 SP3) Reports SDK libraries used for portal integration and also the PIK libraries?
Thanks.
Sathish Rajagopal.

Hi
My thoughts are that a 32bit app running on 64bit is not normally a problem if the relevant drivers/libraries are present. Most applications will either look within the install directory and/or the system32 or WOW64 directories.
Q: Which libaries are needed for the PIK?
Cheers.
W.

Tivoli Access Manager WebSeal & Infoview

Post Author: ab129001
CA Forum: Authentication
Is it possible to enable Infoview users to authenticate via Tivoli Access Manager WebSeal (a reverse proxy authentication product)?
Thanks in advance.
Andy

Post Author: jsanzone
CA Forum: Authentication
Andy,
It's my understanding that in order to achieve SSO w/ TAM running under WebSeal, that a Portal Integration Kit (PIK) must first be produced from BusinessObjects for the XI R2 platform. Back in early April 2007, before I knew about PIKs, I submitted a trouble ticket to Tech Support in the hopes of getting a "quick" solution, hence the PIK education lesson. In response to my request, tech support submitted an enhancement request for a WebSeal Portal Integration Kit, the Ticket number for the enhancement is ADAPT00755013. If you find out anything further on this situation, I'd be all ears!!

How can I get "Read Out Loud" to read a calander properly for the blind?

I create a monthly newsletter for a place that has a traditional calendar along with it. One of the people this newsletter goes to is blind and uses a screen reader to read it out loud. I also discovered Adobe Reader can also do this. Unfortunately, both methods do not seem to understand how a calendar is read. Each day on the calendar has several events written into each. So when it reads, it goes from left to right with first reading the numbers of the day, then reading the first line of events all the way across, then second, third, etc... the will read the next row of day numbers along with the events, etc... Of course I want it to read the single day number with the events next, then the next day number and events, etc... I use InDesign to create everything if that helps at all. Is there any way to create this PDF so a reader will read it properly?

Hi,
Acrobat's ROL, while I find it very useful, is limited.
After all, it is not a "AT" caliber text reader.
It "reads" PDF page content left to right --- period.
It has no recognition of the logical hierarchy or structure of a PDF's content.
Consequently, what you've described is pretty much all you get.
For AT (JAWS, Windows Eyes, NVDA, etc.) to "work" a PDF properly the PDF must come from an authoring application that supports Tag management for the Tagged output PDF.
The authoring file content must be mastered in a manner that supports a Tagged output PDF that complies with ISO 32000-1:2008 (The ISO Standard for PDF).
(Available via: http://www.acrobatusers.com/blogs/leonardr/adobe-posts-free-iso-32000 )
This is particularly true for tables.
Typically, "calendars" available for MS Word, other word processors or page layout applications usage are "layout" tables and as such will not provide an accessible table in a Tagged PDF.
A calendar, built as a data table such that it had a header row with header cells, a table body with data rows of data cells, etc,. could be the source content for a correctly built <Table> in PDF.
Such a table can be processed by AT (via appropriate keyboard commands) to permit understanding of the "who-what-why-..." of the table.
With an appropriate table description, you'd have an AT "usable" calender.
The calendar could be mastered in MS Word.
Conversion to PDF via Adobe PDFMaker or Office 2007's Save-As to PDF (with accessibility option selected) result in well-formed Tagged PDF.
n.b., Regardless of which may be used - be sure you've processed all available updates (Adobe's or Microsoft's) - it makes a difference.
From viewing InDesign/Accessibility eSeminars provided by Adobe I believe you can master tables the will be well-formed <Table> & child elements with InDesign. Until InDesign / FrameMaker get a make over <TH> Scope will still have to be done manually with Acrobat Pro.
If you have complex tables that warrent use of ID and Header you will want to use Acrobat 9 as the task is easier with it.
Some reference sources that can be informative and useful:
Duff Johnson's article "It "sounded" like a good idea at the time" (about Read Outloud)
http://www.acrobatusers.com/blogs/duffjohnson/it-sounded-good-idea-time
Duff Johnson's recorded eSeminar: "Tech Talk: Making PDF files comply with Section 508"
http://adobechats.adobe.acrobat.com/p45245327/
Charlie Pike's recorded eSeminar: "Accessibility"
http://adobechats.adobe.acrobat.com/p51087250/
Some InDesign specific resources are given in the second to last post in this thread at the AUC:
http://www.acrobatusers.com/forums/aucbb/viewtopic.php?id=15622
Be well...

Thank you SOOOO much for the new update!

I was so delighted, after waiting the 20 minutes for your latest OS X 10.6.8.whatever Snow Leopard to load itself, restart itself, and load itself again, that I actually hugged myself with joy; but nothing could have exceeded the sheer ecstasy of discovering that -- once again -- Apple has MORE than met the usual expectations with whatever the update has done to iTunes, and even to apps -- Firefox, Photoshop, and Photoshop Elements, just as minor examples -- that have nothing whatsoever to do with Apple! THAT'S what I call attention to users' wants!
This afternoon, I downloaded several gigabytes of public domain music from the State of Florida's Folklore site (I'd give you the URL, but somehow, in Apple's technical excellence, the new OS X 10.6.x update blew every bit of history up until the past 5 minutes, all cookies, and, MOST welcome of all, EVERY STORED PASSWORD for the hundreds of password-protected sites, forums, and wonderful discussion groups -- including this one -- I've ever belonged to right out of Firefox 5.0.1! Who knew Apple would be so thoughtful as to NOT merely CLEAN, but annhilate, Firefox's cache & cookies, whether I wanted it to or not? What a bunch of swell engineers and forward thinkers!)
But I digress... back to iTunes. After I DL'd all that great stuff from the Florida Folklore site, I copied it all into iTunes, and made nice playlists for everything I got, all neat and organized so if I wanted to listen to the Georgia Sea Island Singers, or, say, Doc Watson, or Bill Monroe, all I had to do was go to the rock-solid iTunes playlists. And yes, I closed iTunes and reopened it just to make sure the playlists were there and had the right music in it, because... well, once in a millenium or so, an iTunes update does funny things to your iTunes catalog. You know: it doesn't feel... well, fresh, if you catch my meaning. Everything was fine and life was good. So I closed iTunes again, full of hope and butterflies and rainbows and good thoughts and stuff like that.
I came back to my Mac this evening and discovered that software update had new and greater marvels for me, in the form of 7 new updates. "SEVEN!" I thought, this has gotta be great, like maybe FINALLY support for 1080p through the now 3+ year-old MiniDisplayPort's input.
That stuff's chump change. Apple's no piker! I could never have even dreamed that an Apple Update would do so many things to so many apps, so completely and irreversibly -- not only blow out all the bookmark history and passwords from Firefox, but strip out every single new playlist I made this morning on iTunes, and hide EVERYTHING I'd added to iTunes in the last three months so that the Music Library couldn't find it! I was awestruck! But my joy would soon be lifted to an even higher plane!
Not only did the System Update strip iTunes of every new playlist I created this morning, it simplified iTunes EVEN MORE for me, by moving every single music file I'd added since June 7, 2011, to places where iTunes can't SEE them, and they don't clutter up the main Music Library window in iTunes anymore. Is that GREAT or what? Now I get to manually replace several hundred music files, and therefore save myself from the tedium of actually getting WORK done. It's like an iTunes Boot Camp Vacation! Just as a for-instance, here's how the new OS update logically placed some of the files I had taken such care to make sure were available in iTunes, both in their playlists, and in the Music Library:
None of the songs from "Shall We Gather at The River" or "Florida Folklife Collection" show up in my Music Library now, by golly, so I don't have to waste my time listening to music I worked for a considerable time to get all safely tucked away in the glory that is iTunes. Ahhh, who needs music anyway?
BUT, being a "I love surprises" kinda guy, I've saved the BEST for LAST (also because I just found it out, when I tried to re-save these TIFF screen shots by taking them (first try) into PhotoshopCS and (second try) taking them into Photoshop Elements, which I keep as a quick & dirty backup app for just such purposes. Imagine my utter SPASMS of delight when BOTH Adobe products -- long-since bought and exorbitant-license-paid-for -- told me (A -- Photoshop): "You're missing a critical component and Adobe Photoshop can't open these files," then (B -- PS Elements): "Your license has expired for this product; you must procure a new license from Adobe Products)! BZZZZTTT! Wrong, I'm running valid retail licenses for both products -- or I WAS until the latest OS Update came along and blew my licenses out the back door. And who KNOWS about the hundreds of other apps and utilities I've paid tens of thousands of dollars over the years for? Have Apple's Update Engineering Wizards made THEM essentially non-functional, too? It's 1AM, and a little too late to explore. I can't WAIT to get on the phone to Apple Care and ask them to congratulate the engineers of this latest and -- so-far -- most spectacular update!
EXCELLENT JOB, DUDES! MY CUP RUNNETH OVER!
Message was edited by: Bartbrn: Had to edit a few mistakes -- I didn't want my post to reflect anything LESS than Apple's own excellence in software engineering.

Sorry, but I have no idea what it is you're referring to. You seem to be picking up a conversation in the middle, perhaps something you've been communicating with the iTunes Store about. None of us here work for Apple nor are able to know what you and the iTunes Store have said to each other, so you will need to explain in more detail your issue and what you wish us, your fellow users, to help you with.
Regards.

Best Practice for update to iPhone and iTouch

OK, when 3.0 comes down the pike, what is the best way to get 3.0 as a "clean" install? Currently 2.2.1 is on both. If I do a restore, will the system only pick up 3.0 or will it see 2.2.1 which is currently on the hard drive? With that in mind, how can I delete the 2.2.1 version of the iPhone and iTouch software? Sorry for two question in one post.
Steve H

When firmware update 2.0 was released, the entire iPhone was eraseed first including the existing firmware - just as when restoring an iPhone with iTunes, followed by 2.0 being installed, which was followed by the iPhone's backup being transferred to the iPhone.
The same may apply with firmware update 3.0 with your iPhone's backup being updated immediately before. If not, firmware version 2.2.1 will be updated with 3.0.
If 2.2.1 is updated and you want a "clean" install of 3.0, you can follow the initial upgrade by restoring your iPhone with iTunes.

Trying to install camera raw updates for elements 12 having trouble

as i am trying to install the camera raw up date it stops and asks me to shut down elements editor, when i do it continues to come back to the same screen and never lets me move forward. Any suggestions on how to fix or am i doing something wrong on the update.

Yes, when I tried to edit raw image from file it popped up that the camera was not supported. ( I had a Rebel XSI and upgraded to Canon 70D). Below is the error report that popped up.
Could not complete your request because the file appears to be from a camera model which is not supported by the installed version of Camera Raw.
Please visit the Camera Raw help documentation for additional information.
So when I went into help and clicked upgrades that is when I ran into the problems.
Al Schiltz
The Consortium
4636 Lebanon Pike
Suite 321
Hermitage, TN 37076
PH - 615-327-3004
theconsortiumllc.com

Hi all ,anyone knows some usefual Codecs for H.264 live video/audio

I'm headache about the JMF codecs ,they are too few ,and seems inefficiency, anyone knows pure java codecs for H.264 or MPEG4 ?And I think it's better a open source one ,do my thanks , guys!

Here are some basics....
FMLE creates RTMP protocol streams that PCs and Macs watch with Flash players. iOS devices don't understand RTMP (Flash), only HLS delivery of 10 second chuncks of downloaded video playback. Both systems understand H.264 video, but iOS wants to see AAC audio not MP3.
You didn't state how you are live streaming, meaning what bandwidth delivery service you are using. Live streaming only via RTMP won't get you to successful iPad and iPhone HTTP Live Stream. On-demand delivery to iOS devices normally requires .mp4 video files to be hosted, which Macs and PCs also understand via RTMP delivery. But unless your delivery service can convert .f4v or .flv files to .mp4 on the fly there is no easy way to to get to iOS via the direct file output of FMLE as of today. Sometimes we upload live encoded project files to our www.Wistia.com account for PC, Mac and iOS delivery. This is a YouTube / Vimeo paid type hosting service for on-demand only.
Some commercial CDNs (Content Delivery Networks) today allow an inbound live RTMP into their system using FMLE. Then they re-mux that RTMP stream into HLS delivery for iOS. Some work well using the native MP3 audio codec (Internap), but most require FMLE to have the AAC audio codec installed from Main Concept for $200. Or people use Wirecast from Telestream which is $500 per license to be able to run two instances on that one license.
In my 15 years of being a big commercial webcaster here in Silcion Valley, I have yet to find the perfect simple and easy and affordable RTMP to HLS live and on-demand delivery system. We currently do it different ways with multiple providers depending on the job. More offerings are coming out now and we try them all as they come down the pike.
Harvey Louie
Event Compression Group

XI R3 PIK for WebSEAL 6.0

Similar Messages

Maybe you are looking for