XID-- Change Local User SAPServiceXID to Domain\SAPServicesXID

Hi All.
We have to change local SAPServiceXID User to Domain\SAPServiceXID User
boths users are administrators into the Administrator Group.
If we start the three central instances(Database,Abap,JAVA) with local User there is no problem.
when we replace the local user to Domain\user and tries access to http://Host:50000/rep -->The page cannot be displayed, but in SAP Manage Console, the service green and from TCODE SMICM Java stack is green too.
any idea??
Thanks & Regards
RP.
Message was edited by:
Rodrigo Pertierra

i've found this error
com.sap.engine.services.rfcengine##com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal()####XID#SAPSYS                          #434CC9A85B334CA891E2E7F351D27B1A#Thread[JCO.ServerThread-2,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Plain###com.sap.mw.jco.JCO$AbapException: (126) SLD_CLIENT_EXCEPTION: AbapSLDRequestHandler.ping(): server connection *** failed *** on Tue Jan 16 11:37:42 GMT-03:00 2007
     at com.sap.lcrabapapi.util.AbapSLDRequestHandler.raiseAbapException(AbapSLDRequestHandler.java:4203)
     at com.sap.lcrabapapi.util.AbapSLDRequestHandler.raiseAbapException(AbapSLDRequestHandler.java:4212)
     at com.sap.lcrabapapi.util.AbapSLDRequestHandler.execPing(AbapSLDRequestHandler.java:2960)
     at com.sap.lcrabapapi.util.AbapSLDRequestHandler.execute(AbapSLDRequestHandler.java:953)
     at com.sap.lcrabapapi.util.AbapSLDRequestHandler.processRequest(AbapSLDRequestHandler.java:264)
     at com.sap.lcrabapapi.ejb.AbapSLDRequestBean.processFunction(AbapSLDRequestBean.java:48)
     at com.sap.lcrabapapi.ejb.AbapSLDRequestObjectImpl0.processFunction(AbapSLDRequestObjectImpl0.java:259)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.services.ejb.session.stateless_sp5.ObjectStubProxyImpl.invoke(ObjectStubProxyImpl.java:187)
     at $Proxy193.processFunction(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.services.rfcengine.RFCDefaultRequestHandler.handleRequest(RFCDefaultRequestHandler.java:100)
     at com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal(RFCJCOServer.java:113)
     at com.sap.engine.services.rfcengine.RFCJCOServer$ApplicationRunnable.run(RFCJCOServer.java:171)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
any idea what its means?

Similar Messages

Local Users (belongs to domain) on ISE cannot derive Password from Windows Database

Dear Support Team
We are in the progress of Migrating ACS4.2 to ISE3355 running 1.1.4. We have SSL VPN Users & Wireless Users to be migrated.
ISE 1.1.4 is already integrated with AD Windows 2008 and can see all the groups defined on AD.
1: in ACS 4.x & even 5.x, we have option to add a user locally (users belonging to domain) , and we can configure user’s password to be derived from Windows Database. It helps to control AAA Policies.
It also helps to avoid configuring "users" in specific groups on AD and as a result no dependency on System Team to configure users in specific groups, which can be used in policy making on ISE.
However while doing the same, I could not find an option in ISE 1.1.4. Password cannot be derived from windows database. Password has to be set manually, that clearly means that i have to arrange the users in specific group on AD.
Is it a platform specific issue or am I missing something ?
Thanks in advance for your valuable time to look into this issue.
Ahad....

It seems that i have to open a TAC case to get cisco official explanation on this feature, it was a nice feature, which has been unnecessarily deprecated.
Any Inputs from anyone, who has similiar requirement, Please share it here.
Regards
Ahad

XID - Replace Local User to Domain\User

Hi All.
We have to change local SAPServiceXID User to Domain\SAPServiceXID User
boths users are administrators into the Administrator Group.
If we start the three central instances(Database,Abap,JAVA) with local User there is no problem.
when we replace the local user to Domain\user and tries access to http://Host:50000/rep -->The page cannot be displayed, but in SAP Manage Console, the service green and from TCODE SMICM Java stack is green too.
any idea?
Thanks & Regards
RP.

Hi Rodrigo,
I think you will have more success if you post in the right Forum
Expert Forums » Database & OS Platforms »
Regards,
Sandro

How to Move Local Users to Network Domain Users

Before you follow these instructions...... I'm a rank amateur so I'd check to see if the smart kids have corrected my errors or improved on the method in the replies below
The reason for the post is I have good and established local user accounts on all the computers and moving them to domain controlled accounts is the one topic I could not find a script to follow that worked for my low level of knowledge of OS X.
Let me first explain my setup and needs. I'm replacing a Windows Home Server (WHS) with the Mac Mini Server. My goal was to have the Mac Mini as the server holding all our photos, data, etc. and running a user account to run the family iTunes account to feed the Apple TV and be the backup / sync point for a family sized set of iPod Touches, iPads and iPhones. I want to be able to log into each mac and have the same information setting, links, etc........ basically walk around the house, find any mac shaped device not used by someone else, log in and carry on where I was before - with the MacBook Air having a portable account so it can come travelling with us.
The key hardware is...
Mac Mini Server running Snow Leopard 10.6.8
Apple TV
2 x iMac Running Lion 10.7.1 [upgraded from 10.6.8]
MacBook Air running Lion 10.7.1 [upgraded from 10.6.8]
Normal stuff like wifi, hubs and a router doing the DHCP (and for me reserving IP addresses based on the 'MAC Address' to save me having to manually configure all the IP addresses)
Key Resources I used as I learnt how to do this; to level set you all, I'm a relative newcomer to OS X having had a Windows life with Linux for fun, so i'm not a mac or IT specialist but like to play around.
Apple's podcast series 'Apple Quick Tour of Leopard Server' - this is great, it informed me and kept me motivated through all the bah moments, all 33 episodes and it's in the iTunes store as a podcast.
The book 'Mac OS X Snow Leopard Server For Dummies' - I bought this about half way through the whole process and wish i'd bought it earlier, my reccomendation would be get the Kindle version so you can search it for advice.
The excellent information on DNS from Hoffman Labs http://labs.hoffmanlabs.com/node/1436
The video 'Setting up a primary DNS zone.....' from Lynda.com on youtube http://www.youtube.com/watch?v=OOEgQY9oFK4
The Series of PDF document on Snow Leopard Server from Apple http://support.apple.com/manuals#mac%20os%20x%20server%20v10.6
And finally this excellent post from Joe Ferrante which was the core of what I used http://joeferrante.net/how-to-migrate-local-user-account-to-network-user-account -with-networked-home-folder-on-snow-leopard-server/
Right off we go....
Setting up the Server [this took me 6 goes to get it right as I learnt a little each time].
So i'm not going to go through this step by step because it in the 'dummies' book and the videos from Apple above and those will be better than anything I write but here's my details/advice.
I split the primary disc into 2 partitions using disk utility so I could reformat the operating system without moving my data.
100GB for the OS X system
400GB for user data
Install OS X from the DVD, press the buttons based on your desires but stop at the bit about naming you computer titled Network Names
READ UP ON DNS - this one of the reason I had so many goes as it was the 1st time i've set up a server like this using DNS and guessing didn't get me there.
If you don't have one buy a domain name for your network it make it much easier in the long run & is $10 well spent
The name needs to be [the computer name].[your domain name].[com or net or org, etc]
So if you want you computer to be called fred and you bought or have the domain location.com enter fred.location.com in the primary DNS name box
This shoud automatically put fred in the computer name box.
Follow along with the set up guide to finish
After you have finished the set up test the DNS with NSLOOKUP in a terminal window
nslookup fred.location.com in my example and you should get the IP
Add your servers IP address to the list of DNS servers in network preferences on the client mac.
Bind [link] the client computers to the server in Accounts on the client computer - I used the 'dummies' book for this but there's lots of data on the web.
Clean up the user profile on the client to reduce the size of the Home folder as much as possible or the data transfer is loooooooonnnnng - i also connect the iMac on a cable rather than wifi to speed it up.
Read Joe's post http://joeferrante.net/how-to-migrate-local-user-account-to-network-user-account -with-networked-home-folder-on-snow-leopard-server/ and follow along.useful info I learnt somewhere - to get the paths to the folders correct in the terminal window go to the folder in Finder and then drag it to the terminal window and let go - this will put the correct link in the instruction.
You now need to be on a terminal window on your server, with a finder window open and logged into the client as the user you are moving
THE CLIENT COMPUTER NEEDS TO BE LOGGED OUT or logged in as a different user than the one you're trying to move.
so when you're at the right point - type sudo cp -R then hit the space bar, drag the existing user folder onto the finder window, add the /* and hit space then find the users folder on the server and drag that onto the terminal window to complete the instruction.
Hit enter and wait a while assuming it starts ok - i used network traffic on the Activity Monitor utility to check if it was working.
If you got this far and it all worked - login to the profle you moved on any computer linked to the server or the server but not the original client computer to see if it worked and all your setting and data are intact and then delete the profile off the original client if it was ok [archiving the home directory took ages for me].
As you can probably guess most of this was good learning for me and it worked successfully for me in the end, moving all my history, saved password, etc, etc without any problems.
Hope this helps other in the same situation & feel free to expand or correct this if I've missed anything.
Ed

Hi,
I was unable to access the Joe Ferrante information (it appears to now requrie a password and was not able to determine how a username and password were assigned) Would you happen to have a copy of the post that you refer to above?
I am still at the early stages of this process but am hoping that the steps you refer to are going to get me where I want to be. Your stated end goal is where I hope to get to.
Thanks,
Sean

Changing local user to network user on the sever?

I moved a local user's home folder off a client computer to the server and made them a network user. The user can log in to the network numerous computers fine, as expected. However, the original computer where the user was a local user will not allow him to log in. It seems the original computer still thinks he is a local user and not attempting to log in to the server. Other network users can log in using the same original computer in question, only this user can not. Is there some way to check and remove the the local user? Local client computer is Leopard, server is Snow Leopard. There use to be an app called Netinfo Manager which I thought would allow something like this, but seems to have been removed with Leopard. I know I can give the user a new name and that would get around the problem, but it does not solve the problem. Any ideas, anyone? Thanks.

I recreated the user, then used dscl to delete the user. But, alas, did not solve the problem. Dug a little deeper into some other commands and found "id" which indicates that said user is part of many groups
:~ id username
uid=1025(username) gid=20(staff)
groups=20(staff),215(com.apple.loginwindow.netaccounts),1025(us),102(com.apple. sharepoint.group.2)
it seems that uid 1025 is the network user id, as well 1025(us) is a group on the server; don't know where 102 come from.
It seems the client still is not looking on the server, because it immediately shakes off login.
Any more thoughts?
Thanks.

UAC - Standalone local user vs domain user

Hi,
I have an application that during first launch runs a regedit /s command to import some registry keys into the user's (HKCU) registry.
I have discovered if I run the application logged in as a local user (No admin privileges) with a machine that is not joined to the domain, I can launch the application. I can also launch regedit manually with no UAC prompt.
However if I join the machine to the domain and log in as a domain user (No admin privileges) then the application fails to launch due to a UAC prompt at the regedit /s stage and also trying to open regedit also results in a UAC prompt. Using the standalone
local user on a domain joined PC also causes the UAC prompt to appear for both the application and directly launching regedit.
Is this by design - as in the joining of a PC to the domain changes how UAC works? As a test I have moved both the user and computer in AD to a test GPO which has no GPO's applied except the Default Domain policies which have no UAC settings in them?

Local group policy take precedence over domain.
Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
Previously your uac prompt was not there, may be because you have disabled uac? Or did you run it logged under local admin/built in admin?
If uac is not disabled/altered uac prompt should be prompted for all the users except built in administrator.
http://windows.microsoft.com/en-us/windows/what-is-user-account-control#1TC=windows-7
Hetti Arachchige V Aravinda | Network & System Administrator (B.Sc, Microsoft Small Business Specialist, MCP, MCTS, MCSA, MCSE,MCITP, CCNA, CEH, MBCS)

Portal installation: Domain or Local user?

If you're reading this and running EP 6.0, can you please check how it's installed at your site? Is it running under a domain user (e.g., US\prdadm) or a Local user (e.g., <SERVERNAME>\prdadm).
I was recently advised to install Portal using a Local user, not a Domain user.
I understand the reasoning, and I trust the person who said it, but it's just awkward - I've never seen a production SAP system running (successfully) under a Local account before. But perhaps Portal is unique in the way it handles cross-domain authentication.
And do you have cross-domain traffic? For example, your portal server might be on the "US" domain but an R/3 database is on the "SAP" domain, can your users successfully logon to the R/3 system via the Portal? Was any special saprouter or network config needed to get it working?

Jason,
NW04 (latest SP) supports cross domain traffice.
Please refer to the procedure steps detailed in the SAPHELP link below & confirm you've followed & implemented them accordingly:
"Configuring SAP Logon Tickets for Multiple Domains"
http://help.sap.com/saphelp_nw04/helpdata/en/e0/fa984050a13354e10000000a1550b0/content.htm
Via J2EE Visual Admin Tool to edit the
UME property "ume.login.mdc.hosts" may also be used, if this is what you desire with your installation.
Global server config -> services -> com.sap.security.core.ume.services
Regards,
James

How to know RAC 11g R2 is installed Using Local User or Domain User on Win

We need to identify whether a local User or a domain User is Used to install 11g R2 Clusterware on Windows 2008.
Here is background:
Oracle 11g R2 RAC is configured on 2 windows 2008 servers.
User "oracle" is used to installed that RAC but we dont know whether local "oracle" user or domain "oracle" user is used to install this RAC.
"oracle" user is present in both the servers as a local user as well as a domain user.
Due to security reasons we need to remove this local "oracle" user but without knowing which user is installation user for rac we cant remove as this will disturb whole rac setup.
Please sugest me some solution ......

Right click on any folder from oracle home -> Security (tab) -> Advance -> Owner.
This will show you who owns this folder and that should be the user who did this installation. You may see 2 users where, one will be local administrator and second one will be the user who did installation.
Salman

Local Account copy to Domain account

Windows 8.1 Home version upgraded To Windows 8.1 Pro. Created Domain account. Local account is a Microsoft account. Is there a way to transfer the profile contents and settings to new domain account?

You could use the copy profile method as listed here
https://technet.microsoft.com/en-us/library/cc781200%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396 (written for 2003 but the same is still available in 8.1).
Alternatively you can do it manually as explained step by step here
http://social.technet.microsoft.com/wiki/contents/articles/24026.step-by-step-migrate-local-user-profile-to-domain-user-profile-with-all-settings.aspx

Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
Thanks

Hi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks

Local user account not working after trying to connect to windows domain

Newb Question
I was trying to log into a domain with my macbook today at work without success. I think I selected something that is telling my mac to search the domain for the user account, and NOT the local computer. So now when I boot it up the local user account isn't displayed, only 'other...'. When I click that it takes me to a log in text box that doesn't accept either my long or short user names. I booted up from the Snow Leopard disk and tried to change my password there, and that can see the local account there (and lets me change the password). However, when I boot back up from the HDD I get the same problem.
Is there a way of telling it to look locally rather than on the domain when logging in?

you could reset password on the root account from the boot disk also while booted to the system disk, open startup disk, and make sure your computer is set to boot from the built in hard drive.
This will enable root, and hopefully you can log into the computer. try logging in with the user name 'root' and what ever password you set. if you do get in, you can go to apple menu, system preferences, accounts, login options.
Make sure to set display login in window to list.
also make sure that when you click on the join button under login options, that there is nothing there. as in blank.

How can we change local administrator password in 500 machines in a domain from a centralized location?

How can we change local administrator password in 500 machines in a domain from a centralized location?

This was moved out of the Profile forum.
You should ask this question at
www.answers.microsoft.com.
Or I can move it into another forum if you'd like.
Thanks!
Ed Price a.k.a User Ed, Microsoft Experience Program Manager (Blog,
Twitter,
Wiki)

Difference between AD domain user and local user

Hello, I think the title is self explanatory. I am trying to figure out difference between AD domain user and local user. SAP Help wasnt very helpful.
Thanks.

Hi,
It's about where the user accounts are kept. Domain users are users that are entered into the domain users group on a domain controller. These domain users can be centrally managed at the server. Whereas the local users are the users created in the local system.
In BPC, you can select users from either of them or in combination as well. However, If you want to make change in the local user credentials, you need to login to the system in which the user has been created and make the changes there. On the other hand, changes to domain users can be made from any domain connected machine with the right software and the necessary rights. The changes only need to be made once.
Hope this helps.

Domain Shares for Local user with matching credentials?

I have a standalone win 7 pro machine on the same lan as our domain.
The stanalone user also has a domain account and is a local admin on his machine.
The domain account is denied when the user attempts to connect to domain shares.
Ex:
Windows 7 Pro machine (BOBwin7-PC) with local administrator: BOB, who's password is 1234
BOB also has a valid domain account [email protected], with same 1234 password.
When BOB is logged onto BOBwin7-PC and attempts to connect to a domain share as [email protected] the network credentials fail and BOB is out of luck. using Server2008R2domain.com\BOB also fails.
I'm stuck and not expecting this behavior at all. I have another win 7 Home premium workstation conneced to the shares in the same way (duplicate credentials for the PC and the domain) without issue.
On this Win 7 Pro machine, any other user account that should be able to connect to the shares can, just not the credential currently logged into the workstation.
Any help or solution to this?
Thanks,

Hello,
Kindly remove the system from domain once and delete the computer Name from Domain.
after that rejoin the domain and try.
if above solution does not work, kindly change the User Name and password in the Domain
and try.
Best & Regards,
Damodar Dhar Dwivedi
Regards, Damodar

Change users from Administrator account to user account using domain controller

good day,
In our domain controller we have around 1200 users, all these users have admin account and there is the problem.
I want to change them to a user accounts so they can not change IP address and install or uninstall programs with out our consent.
Is there a possibility to do this with the domain controller, because i don't want to go change the computers one by one. from admin account to user account.
Thank you so much

Hi,
I agree with
Ravikumar. I assume what you mean is local admin rights. Since you have so many users which
have local admin rights, you would have created an administrator group and add all the users to that group in Local Users and Groups of Computer Management. You can remove them from the administrator group and add them to a user group.
More information:
Local Users and Groups
http://technet.microsoft.com/en-us/library/cc786411(v=ws.10).aspx
Best regards,
Susie

XID-- Change Local User SAPServiceXID to Domain\SAPServicesXID

Similar Messages

Maybe you are looking for