WEB dispatcher error - Guide .
Tips for renewing SSL Certs on the Web Dispatcher
Hey out there! Our internal SSL certs expire every 2 years, so I recently had to go through the steps to quickly renew them in our web dispatcher(s).
I'd like to share that information here to serve as quick reference for others!
Our OS:
AIX 6.1
Our Web Disp Version:
Web Administration Version 7.21.0, Thu Oct 03 14:45:51 CET 2013 | |
SAP Web Dispatcher Version 7.21.0, multithreaded, ASCII, 64 BIT |
kernel information | |
system name | WXX |
kernel release | 721 |
database library | |
compiled on | AIX 1 6 00CFADC14C00 |
compiled time | Oct 18 2014 21:47:28 |
update level | 0 |
patch number | 330 |
source id | 0.330 |
Commands:
As WXXADM, in the $SECUDIR directory:
./sapgenpse gen_pse -p SAPSSLS.pse -onlyreq -r WXX.req
./sapgenpse gen_pse -p SAPSSLC.pse -onlyreq -r WXXsslc.req
This exports the request
FTP the files to your PC. Now goto CRL, sign new P7B for each(save the files as WXXcertnew2015.p7b and WXXsslc-certnew2015.p7b) . FTP back to to $SECUDIR
./sapgenpse import_own_cert -p SAPSSLS.pse -c WXXcertnew2015.p7b
./sapgenpse import_own_cert -p SAPSSLC.pse -c WXXsslc-certnew2015.p7b
This imports the signed certs
./sapgenpse seclogin -p SAPSSLS.pse -O wxxadm
./sapgenpse seclogin -p SAPSSLC.pse -O wxxadm
This generates new cred_v2 files for the user (if prompted for a PIN,enter it)
STOP and START the WEB DISPATHER
You must restart the web dispatcher before it’ll read the new certs
Now hit your back-end ECC/CRM/BW (whatever) system using the HTTPs port on your webdispatcher.
check cert to see if signed for another 2 years!
Hope that helps!
NICK
Opentext Archive Server with SAP ECC6
Hi Experts,
I have just installed Opentext Archive Server 10.5 , just wondering how do I configure this with SAP ECC system to archive the sap documents or data to Archive Server , is there any guide or steps to follow ?
Thanks
Al Mamun
UI5_731 installation need xml but not visible in Mopz
Hello Gurus.
We try to install add-on UI5_731 for SAP ERP 6.0 EHP 6 (NW 7.31). When I am loading this package into SAINT transaction
it ask me for stack.xml. We try to generate this stack.xml via Solution Manager, but there is nor package for UI5_731.
Has someone a suggestion how we get it?
Note 1940845 is implemented in SolMan
Note 1666368 read
Note 2031424 read
Attached installed comp. overview and screenshot of mopz and installed prod. vers.
regards
Chris
SAPOSS RFC connectivity issue
Hi Experts,
I have maintained the right technical parameters in OSS1 in Dev system and tried to test the SAPOSS RFC . I am getting below error.
I have maintained the public IP which is registered with SAP only.
Earlier it has worked fine. Dont know why it has suddenly failing.
Can you please advice me to resolve the issue. As it is bit urgent, I am posting the issue
BR-Vamshi
Scot settings with third party tool XAMPP
This blog refers " How to config and send email from SAP with third party tool XAMPP "
1. XAMPP installation & configuration part.
2. SCOT settings from SAP end.
1. XAMPP installation & configuration part:
XAMPP is an easy to install Apache distribution containing MySQL, PHP, and Perl.
XAMPP stands for Cross-Platform (X), Apache (A), MySQL (M), PHP (P) and Perl (P). It is a simple, lightweight Apache distribution that makes it extremely easy for developers to create a local web server for testing purposes. Everything you need to set up a web server – server application (Apache), database (MySQL), and scripting language (PHP) – is included in a simple extractable file. XAMPP is also cross-platform, which means it works equally well on Linux, Mac and Windows. Since most actual web server deployments use the same components as XAMPP, it makes transitioning from a local test server to a live server is extremely easy as well. Web development using XAMPP is especially beginner friendly, as this popular PHP and MySQL for beginners course will teach you.
Installation of XAMPP:
We can download the free version of XAMPP from web.
- Disable your anti-virus as it can cause some XAMPP components to behave erratically.
- Disable User Account Control (UAC). UAC limits write permissions to XAMPP’s default installation directory (c:/Program Files/xampp), forcing you to install in a separate directory
- Start the installation process by double-clicking on the XAMPP installer. Click ‘Next’ after the splash screen.
- Here, you can select the components you want to install. Choose the default selection and click ‘Next’.
- Choose the folder you want to install XAMPP in. This folder will hold all your web application files, so make sure to select a drive that has plenty of space.
- The next screen is a promo for BitNami, an app store for server software. Deselect the ‘Learn more about BitNami for XAMPP’ checkbox, unless you actually enjoy receiving promo mails!
-Setup is now ready to install XAMPP. Click Next and wait for the installer to unpack and install selected components. This may take a few minutes. You may be asked to approve Firewall access to certain components (such as Apache) during the installation process.
- Installation is now complete! Select the ‘Do you want to start the Control Panel now?’ checkbox to open the XAMPP control panel.
Understanding XAMPP Control Panel
The XAMPP control panel gives you complete control over all installed XAMPP components. You can use the CP to start/stop different modules, launch the Unix shell, open Windows explorer and see all operations running in the background.
Here is a quick overview of the Control Panel. For now, you only need to know how to start and stop an Apache server.
CONFIGURE MERCURY MAIL TRANSPORT SYSTEM -XAMPP
- Start Mercury (using the XAMPP Control Panel) and then open the admin panel.
2. First of all we disable the HTTP server of Mercury so that it doesn't conflict with the apache:
- “Configuration” -> “Protocol modules” .
- Disable the check “MercuryB HTTP web server” .
- I also disabled “Mercury IMAP4rev1 server” because I won’t need that one .
- Leave the window opened, we’ll need it immediately .
3. To be able to send external mail we have to disable “MercuryE SMTP end-to-end delivery client” in the same dialog and enable “MercuryC SMTP relaying client”. Click “OK” and restart Mercury!
4. Now let’s configure Mercury in general:
- “Configuration” -> “Mercury core module”, tab “General”
we want to send from localhost, therefore we check if “localhost” is the value of “internet name for this system” and adjust that if not
- All other settings stay the same as they are already configured, but we’ll have a look to the checkboxes beneath:
- Disable all but “Send copies of all errors to postmaster”
3. Check under the tab “Local domains” if the entry “localhost (local host or server) localhost (internet name)” is there, if not, add it
4. Click “OK” and leave the dialog.
5. Next we focus on the MercuryS SMTP Server for outgoing emails:
- “Configuration” -> “MercuryS SMTP Server”
- choose the tab “General” and add a wonderful name for your SMTP server under “Announce myself as”, simply fill in any name, I’ve chosen “CS SMTP”.
- under “Listen on TCP/IP port” fill in “25″, that’s the SMTP port
- add “127.0.0.1″ to “IP interface to use”, that’s the local IP of your pc. With the IP of the pc within the network (192.168.0.X) it doesn’t work (at least for me)
6. Now we limit the access to the server so that only our local machine can access it:
- Under “Connection Control” click on “Add restriction” and add the IP range from “127.0.0.1″ till “127.0.0.1″ (it’s that simple, isn’t it?)…
- Select “Allow connections”…
- Leave all checkboxes deselected
with a click on “OK” we quit the dialog and we’re looking forward to the next one
7. Now we have the important one “MercuryC SMTP Client”
- “Configuration” -> “MercuryC SMTP Client”
- To send mail to external addresses we need to have an external SMTP server. If you’re renting webspace somewhere and have mail included then you normally have access to a SMTP server. My webspace is hosted at HostEurope and I’ll use the SMTP of my domain. Without such an external server the whole thing won’t work because domain names won’t be resolved among other things. I’ve chosen this path because I didn’t feel like configuring around the whole day.
- Enter the address of your SMTP under “Smart host name”, for example “mail.meinedomain.com”
- Depending on the way you access the server fill the values under “Connection port/type”: we finally fill in the “Login username” and the “Password” that normally is supplied by your webhost and we’ve nearly finished…
For a “normal” SMTP that would probably be port 25 and “Normal (no SSL encryption)”
- I access my SMTP via SSL, that would be port 465 and “SSL encryption using direct connection”
- if you have other parameters simply try around a little.
After completing the XAMPP configuration test Mail :
Go to File Menu --> Click on Send mail message option:
Give the recipient email Address and subject then click on Send button:
XAMPP Configuration done!!!
2. SCOT settings from SAP end.
- Create a User (SCOTUSER):-SU01
- Give the User Name and Email Address.
- In Logon Data: User Type : Service
- Assign the below parameters:
- Assign the Profile: S_A.SCON - SAP Connect All Auth.RFC User/SAP Phone.Centr.Arch
- Click on Save.
- Add the highlight parameter in Instance profile :
Profile Parameter (Instance) :
- Run the TX. SCOT for settings :
Give the below details as in below screen shot:
Click on settings tab: Assign the SFDN
Create a new Job :
Sending a mail :(SO01)
Click on New message:
Click on send button on Top menu bar
Now go to Tx SOST:
Status is changed to send:
Mail is sent to the recipient, confirmation from mail inbox.
Thank you..
GSS-API(maj) : No credential were supplied , Unable to establish security context
I want to Configure SAP Abap (standalone) to use X509 Authentication.
I followed the following steps.
- Created the profile parameter
- ssf/name= SAPSECULIB
- ssl/ssl_lib = C:\usr\sap\XYZ\SYS\exe\uc\NTAMD64\sapcrypto.dll
- sec/libsapsecu = C:\usr\sap\XYZ\SYS\exe\uc\NTAMD64\sapcrypto.dll
- ssf/ssfapi_lib = C:\usr\sap\XYZ\SYS\exe\uc\NTAMD64\sapcrypto.dll
- snc/gssapi_lib = C:\usr\sap\xyz\SYS\exe\uc\NTAMD64\sapcrypto.dll
- snc/identity/as = p:CN=sr3, OU=I0020217358, O=Mycompany Inc, C=US
- Restart the server .
2. Created pse for server
- Transaction strust
- created sapcryptolib pse
- SNC ID which is taken from the instance parameter "snc/identity/as."
- Assign Password
3. Create PSE for the Client
- Set the Environment variable SECUDIR to sec folder
- Executed the command : sapgenpse gen_pse -v -p SR3.pse
- Created pse with DN : CN=sr3, OU=I0020217358, O=XYZ Enterprise Solutions Holdings Inc, C=US
- signed that certificate from ca authority and get sr3.crt ,
- sapgenpse export_own_cert -v -p SR3.pse -o SR3.crt
4. Imported the Client Certificate to Server PSE.
- Open the Node SNC (SAPCryptolib) again
- Enter the SAPCryptolib password.
- Import certificate button.
- Set the file format to Base64 and choose the file
- Added to Certificate List
5. Exported the Server Certificate.
- At node SNC (SAPCryptolib),
- Export certificate.
- From the File tab, choose Base64 for the File format and provide a name for the file.
6. Imported the Server Certificate to the Client PSE
- sapgenpse maintain_pk -v -a SR3.crt -p SR3.pse
7. Created the cred_v2 file
- sapgenpse seclogin -p SR3.pse -x 123456 -O [<Windows_Domain>\]<sidadm>
- runned sucessfully.
8. Allowed SNC RFC Connection.
- Start Transaction SM30 and enter the view VSNCSYSACL.
- Choose "E" for the Type of ACL entry.
- Enter System ID and SNC name.
- Save the entry.
9. Map the X.509 Certificate to the User.
The X.509 Certificate must be accepted for a successful Login.
- Start Transaction SM30.
- Enter VUSREXTID and click Maintain.
- Using the view VUSREXTID, you can setup a mapping between the Distinguished Name provided by a X.509 Certificate and an ABAP User.
- Choose the Distinguished Name for the External ID type.
- Create a new entry and activate it.
10. set the Environment variable : snc_lib: C:\Program Files (x86)\SAP\FrontEnd\SAPgui\Encryption\secgss.dll .on th host where sap gui is installed.
I followed all this step successfully.
but when i am using sap gui with SCN enabled DN : p:CN=sr3, OU=I0020217358, O=Infor Enterprise Solutions Holdings Inc, C=US
i am receiving error.
GSS-API(maj) : No credential were supplied , Unable to establish security context.
Is there any thing I did wrong or missed in this steps?
Does Out of box pki is necessery for sap gui to use x509 certificate?
How to delete unnecessary services from HANA
Hi, all!
First of all i wanted to say, that i'm tried to solve issue from xsengine_alert_<host>.trc file:
I've looked at daemon.ini and noticed, thet there is two xsengine services:
After some manipulations and editing (deleting [xsengine.c] or [xsengine] blocks) i've got nothing. Furthermore i got two unactive xs services in hana landscape:
Its very strange, because i've return original daemon.ini to /config derictory.
So, a got two questions:
1. How can i delete this unactive copy of xsengine service?
2. What should i do with trace file issue: XSEngine is configured to be embedded. This service should be disabled.?
Solman Technical Monitoring alert not triggered
Hi guys,
I'm currently configuring Technical Monitoring in Solman (version 7.1 SP12). I've created a custom template using the Oracle template and enabled the metric 'Oracle Database Status' such that I get an email notification whenever the database goes down:
To do a test, I shutdown the database and waited for quite some time but I didn't receive the mail.
What frequency does the hostagent checks for the database status? Is there anything I missed in the configurations?
regards,
Suraj
Transporting purchase release strategies
Dear friends,
I am Basis guy trying to help functionals with Purchasing Release Strategies, of which I know nothing about. We system-copied from PRD to QAS & SBX some months ago and now I set up fresh ALE with QAS as distributor of the release strategies, sending to SBX and PRD, and the functionals set up a release strategy in QAS. Classes CHRMAS & CLSMAS passed OK when checking we02 in SBX, but CFLMAS did not. Both SBX & QAS have release group S4. An OSS lady told me I had to maintain group S4 and strategy FS in SBX but I don't know in what moment the group gets created and no further help was given. I don't know if I have to delete the group first, and how, and next reprocess the ALE Idocs so they create the group. I have a strong suspicion the group gets created in cl24n.
These are the entries in table t16fs:
QAS:
Mandt Release group Strategy Release Code
500 S4 P1 P1
500 S4 P2 P2
SBX:
Mandt Release group Strategy Release Code
500 S4 N3 N3
No matter what I do, Strategy P1 & P2 does not get over to SBX from QAS.
So then I read about note 86900 and tried transporting table ts16fs thru the customizing, but said table was not overwritten with data from QAS so this note did not work for me.
Please note that all this ALE setup was done to avoid opening the client to set up the release strategies. Can all the release strategies be transported and setup completely with the client closed?If not, I'll have to dispense with ALE and have the functionals do it manually in PRD.....
I have followed these links:
How do you transport Release Strategies for Purchase Orders?
http://scn.sap.com/community/post!input.jspa?containerType=14&container=2174&contentType=1
PO Release error table T16FS | SCN
Thanks all for your help, kind regards.
Claudio
SM20 Audit log - The result set for this selection was empty
Hello Gurus,
after Kernelupdate the audit log files changed her name?! *strange*
We do not changed any parameter.
Now we tried to add the parameter FN_AUDIT to instance profile with the new filename, but this changed nothing.
it seems that the kernel do not take the parameter, after restart.
System is EHP6 FOR SAP ERP 6.0 with NW 7.31
SAP Kernel : 721_EXT_REL Patch 512
has someone a suggestion?
regards
Chris
PI java.lang.Thread.State: BLOCKED (on object monitor)
Hello,
We are seeing some blocked threads on one of our PI 7.31 application server 0. With the below stack trace:
hread 'HTTP Worker [@1171426684]', process 'server0', index '945'
"HTTP Worker [@1171426684]" #2125892 prio=5 os_prio=57 cpu=237502.60 [reset 1009.62] ms elapsed=561677.56 [reset 110711.49] s allocated=44572680944 B (41.51 GB) [reset 427448 B (417.43 KB)] defined_classes=1167
io= file i/o: 87358768/10818986 B, net i/o: 930145896/1173952808 B, files opened:14628, socks opened:1781 [reset file i/o: 0/0 B, net i/o: 1384/881 B, files opened:1, socks opened:0 ]
user="RUNAS_dvsmyp" request="166903" application="sap.com/com.sap.engine.docs.examples" isapplicationthread="true" tid=0x00000001307f2000 nid=0xd75e / 55134 ktid=92802221 waiting for monitor entry [_thread_blocked (_at_safepoint), stack(0x0000000167428000,0x0000000167628888)] [0x0000000167623000]
java.lang.Thread.State: BLOCKED (on object monitor)
at com.sap.engine.services.basicadmin.model.itsam.system.provider.SAP_ITSAMSystemProviderConnection.getAllInstanceProfiles()Ljava/util/Map;(SAP_ITSAMSystemProviderConnection.java:1537)
- waiting to lock <0x0000000750914c18> (a com.sap.engine.services.basicadmin.model.itsam.system.provider.InstanceCache)
at com.sap.engine.services.basicadmin.model.itsam.system.provider.SAP_ITSAMSystemProviderConnection.getInstanceProfile(Ljava/lang/String;)Ljava/util/Properties;(SAP_ITSAMSystemProviderConnection.java:1519)
at com.sap.engine.services.basicadmin.model.itsam.system.provider.SAP_ITSAMSystemProviderConnection.getJ2eeInstanceName(Ljava/lang/String;)Ljavax/management/ObjectName;(SAP_ITSAMSystemProviderConnection.java:1639)
at com.sap.engine.admin.model.itsam.system.SAP_ITSAMJ2eeNode_Impl.getSAP_ITSAMJ2eeInstanceJ2eeNodeGroupComponent()[Ljavax/management/ObjectName;(SAP_ITSAMJ2eeNode_Impl.java:173)
at com.sap.engine.admin.model.itsam.system.SAP_ITSAMJ2eeNodeWrapper.getAttribute(Ljava/lang/String;)Ljava/lang/Object;(SAP_ITSAMJ2eeNodeWrapper.java:341)
at com.sap.engine.admin.model.itsam.system.SAP_ITSAMJ2eeNodeWrapperJSR77Extension.getAttribute(Ljava/lang/String;)Ljava/lang/Object;(SAP_ITSAMJ2eeNodeWrapperJSR77Extension.java:51)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(DefaultMBeanServerInterceptor.java:665)
at com.sun.jmx.mbeanserver.JmxMBeanServer.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(JmxMBeanServer.java:648)
at com.sap.pj.jmx.server.MBeanServerImpl.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(MBeanServerImpl.java:662)
at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(MBeanServerWrapperInterceptor.java:181)
at com.sap.engine.services.jmx.CompletionInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(CompletionInterceptor.java:449)
at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(BasicMBeanServerInterceptor.java:169)
at com.sap.jmx.provider.ProviderInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(ProviderInterceptor.java:224)
at com.sap.engine.services.jmx.RedirectInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(RedirectInterceptor.java:232)
at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(MBeanServerInterceptorChain.java:161)
at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(MBeanServerSecurityWrapper.java:235)
at com.sap.engine.services.jmx.ClusterInterceptor.getAttribute(Lcom/sap/pj/jmx/server/interceptor/InvocationContext;Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(ClusterInterceptor.java:559)
at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.getAttribute(Ljavax/management/ObjectName;Ljava/lang/String;)Ljava/lang/Object;(MBeanServerInterceptorChain.java:161)
at com.sap.docs.examples.ApplicationChecker.getJ2EEInstanceObjectName(Ljavax/management/ObjectName;)Ljavax/management/ObjectName;(ApplicationChecker.java:185)
at com.sap.docs.examples.ApplicationChecker.initServiceON()Ljavax/management/ObjectName;(ApplicationChecker.java:158)
at com.sap.docs.examples.ApplicationChecker.updateTsgLink()Ljava/lang/String;(ApplicationChecker.java:111)
at com.sap.docs.examples.ApplicationChecker.getTsgLink()Ljava/lang/String;(ApplicationChecker.java:53)
at sun.reflect.GeneratedMethodAccessor599.invoke(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Method.java:597)
at javax.el.BeanELResolver.getValue(Ljavax/el/ELContext;Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;(BeanELResolver.java:293)
at javax.el.CompositeELResolver.getValue(Ljavax/el/ELContext;Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;(CompositeELResolver.java:175)
at com.sun.el.parser.AstValue.getValue(Lcom/sun/el/lang/EvaluationContext;)Ljava/lang/Object;(AstValue.java:138)
at com.sun.el.ValueExpressionImpl.getValue(Ljavax/el/ELContext;)Ljava/lang/Object;(ValueExpressionImpl.java:206)
at com.sap.engine.services.servlets_jsp.lib.jspruntime.PageContextImpl.evaluateInternal(Ljava/lang/String;Ljava/lang/Class;ZLjavax/el/FunctionMapper;)Ljava/lang/Object;(PageContextImpl.java:870)
at JEE_jsp_startPage_203029050_1424556854000_1424557826490._jspService(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)V(JEE_jsp_startPage_203029050_1424556854000_1424557826490.java:364)
at com.sap.engine.services.servlets_jsp.lib.jspruntime.JspBase.service(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;)V(JspBase.java:102)
at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Ljavax/servlet/Servlet;Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;ZZLcom/sap/engine/interfaces/security/SecuritySession;)V(Invokable.java:152)
at com.sap.engine.services.servlets_jsp.server.security.PrivilegedActionImpl.run()Ljava/lang/Object;(PrivilegedActionImpl.java:103)
at java.security.AccessController.doPrivileged(Ljava/security/PrivilegedExceptionAction;Ljava/security/AccessControlContext;)Ljava/lang/Object;(Native Method)
at javax.security.auth.Subject.doAs(Ljavax/security/auth/Subject;Ljava/security/PrivilegedExceptionAction;)Ljava/lang/Object;(Subject.java:394)
at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Ljavax/servlet/Servlet;Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Ljavax/security/auth/Subject;Z)V(Invokable.java:58)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(Ljava/lang/String;Lcom/sap/engine/services/httpserver/interfaces/HttpParameters;Lcom/sap/engine/services/servlets_jsp/server/application/ApplicationContext;)V(HttpHandlerImpl.java:466)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(Ljava/lang/String;Lcom/sap/engine/services/httpserver/interfaces/HttpParameters;)V(HttpHandlerImpl.java:210)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(Ljava/lang/String;)V(RequestAnalizer.java:441)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(Lcom/sap/engine/services/httpserver/lib/util/MessageBytes;)V(RequestAnalizer.java:430)
at com.sap.engine.services.servlets_jsp.filters.DSRWebContainerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(DSRWebContainerFilter.java:38)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ServletSelector.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServletSelector.java:81)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ApplicationSelector.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ApplicationSelector.java:278)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.WebContainerInvoker.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/HostChain;)V(WebContainerInvoker.java:81)
at com.sap.engine.services.httpserver.chain.HostFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.ResponseLogWriter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/HostChain;)V(ResponseLogWriter.java:60)
at com.sap.engine.services.httpserver.chain.HostFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DefineHostFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/ServerChain;)V(DefineHostFilter.java:27)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MonitoringFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/ServerChain;)V(MonitoringFilter.java:29)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.SessionSizeFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/ServerChain;)V(SessionSizeFilter.java:26)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MemoryStatisticFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/ServerChain;)V(MemoryStatisticFilter.java:57)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DSRHttpFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/ServerChain;)V(DSRHttpFilter.java:43)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;Lcom/sap/engine/services/httpserver/chain/Chain;)V(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(Lcom/sap/engine/services/httpserver/chain/HTTPRequest;Lcom/sap/engine/services/httpserver/chain/HTTPResponse;)V(AbstractChain.java:78)
at com.sap.engine.services.httpserver.server.Processor.chainedRequest(Lcom/sap/engine/services/httpserver/server/Processor$FCAProcessorThread;Lcom/sap/bc/proj/jstartup/fca/FCAConnection;II)V(Processor.java:475)
at com.sap.engine.services.httpserver.server.Processor$FCAProcessorThread.process()V(Processor.java:269)
at com.sap.engine.services.httpserver.server.rcm.RequestProcessorThread.run()V(RequestProcessorThread.java:56)
at com.sap.engine.core.thread.execution.Executable.run(Z)V(Executable.java:122)
at com.sap.engine.core.thread.execution.Executable.run()V(Executable.java:101)
at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run()V(CentralExecutor.java:328)
Locked ownable synchronizers:
- None
I dont the same user in session monitor in NWA, we belive this is slowing down the system and causing interment hung state for one of the java app servers. Did anyone of you guys faced a similar situation. How can we overcome this.
Thank You.
Uninstalling a dialog instance removed domain accounts
We installed a new dialog instance on our QAS system. The system
previously had two instances that were clustered. We then uninstalled
the new dialog instance. When we uninstalled, we answered "yes" to the
question to remove OS accounts. The system uses SNC. Now we can't log
in using SNC. We get a message that says:
GSS-API(maj):Miscellaneous Failure
GSS-API(min):SPPI u2u-problem: please add Service principle to targe
targer="p:SAPServiceQAS@ABCD.ORG"
Error in SNC
I think the qasadm and SAPAServiceQAS domain accounts got deleted when
the new dialog instance was uninstalled. To try to resolve this issue, we tried to
reinstall the dialog instance. I think this recreated the qasadm and SAPServiceQAS domain accounts.
We got an error when sapinst tried to start the new instance. Errors in the dev_w* files say:
C ERROR: -1 in function SQLConnectWithRetry (SQLConnectWithRetry)
[line 2307]
C (18456) [28000] [Microsoft][SQL Server Native Client 10.0][SQL
Server]Login failed for user 'ABDC\SAPServiceQAS'.
I had our system administrator add gasadm and SAPServiceQAS into the
Administrators group on the two clustered servers, but we still get the
same error when we try to log in. The system is still up and we can
log in without using SNC (by entering the username and password).
I don't want to try to restart the system because it may not start.
What do we need to do?
Thanks,
Jerry
SAP PI 7.1 Java Stack down and the abap stack throws 'SQL Exception' error
Hi ,
There are couple of instances, when the java stack went down completely (ESR, ID and RWB were not working). But we were able to login to ABAP stack.Even in the ABAP stack, 'sql error on the database occured when accessing' error message was thrown sometimes when the java stack was down. Basis team told the file /db2/OXD/db2dump became full. Later it was resolved by restarting the system. We are on PI 7.1.
Any idea why this error occurs? Has anyone faced the same issue before?
Regards,
Aarthi
SAPSYS user slowing down SAP System
Dear Experts,
Our SAP DEV System is very slow after a RESTART, user SAPSYS running SAPMSSY2 program in client 000 consuming all the BTC processes and few DIA as well.
I tried following things to resolve :
1. As recommended by note 183648 - SAPMSSY2: long runtime in background process DERANGEMENTED DISK to just 2% fragmentation now
2."Consistency check DB Tables" terminated with RUNTIME ERROR TIME_OUT.
3. No ARFC jobs are active in sm59
Please suggest to resolve this issue.
Kind Regards,
Domnic.
How to secure ms/admin_port parameter
Hi gurus, Is having a blank value for ms/admin_port just as good as having ms/admin_port set to 0 for securing the system? Audit recommendations say the parameter should be 0. The SAP online help says the default value for ms/admin_port is 0, but that is not true. The default value, if you don't set the parameter is actually nothing (blank), not the value of zero. This is true across all our systems on various releases. Is the behavior of having the parameter set to blank and set to 0 is the same thing?
I have renew my Sap Router Certificate but now I have this error.
Hi Everyone,
I have renew my sap router certificate like what I use to do, but now I have this error. And now I can not connect to OSS.
Any idea what I have done wrong?
RTCONMGR::getFreeCon: mSourceConNo 1 mFreeConNo 799
NiICreateHandle: hdl 17 state NI_INITIAL_CON
NiIInitSocket: set default settings for new hdl 17/sock 492 (I4; ST)
NiIBlockMode: set blockmode for hdl 17 FALSE
NiIConnectSocket: connection of hdl 17 to 194.39.131.34:3299 in progress (timeout=0)
NiIConnect: hdl 17 took local address 0.0.0.0:50018
NiIConnect: state of hdl 17 NI_CONN_WAIT
NiSncIInitHdlSecurity for hdl 17
<<- SncSessionInit()==SAP_O_K
out: &snc_hdl = 0000000008316F60
<<- SncSetQOP()==SAP_O_K
in: qop values = "min=8 (default), max=8 (default), use=8 (default)"
resulting = "min=3 (old:3), max=3 (old:3), use=3 (old:3)"
<<- SncSessionInitiatorAK()==SAP_O_K
'target_acl_key' (addr=000000000732C924, len=105) full hexdump
0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...
0x00010 00573055 310b3009 06035504 06130244 .W0U1.0. ..U....D
0x00020 45311f30 1d060355 040a1316 53415020 E1.0...U ....SAP
0x00030 54727573 7420436f 6d6d756e 69747920 Trust Co mmunity
0x00040 49493112 30100603 55040b13 09534150 II1.0... U....SAP
0x00050 726f7574 65723111 300f0603 55040313 router1. 0...U...
0x00060 08736170 73657276 32 .sapserv 2
parses to = "p:CN=sapserv2, OU=SAProuter, O=SAP Trust Community II, C=DE"
->> SncProcessOutput(snc_hdl=0000000008316F60, ibuf=0000000000000000, ilen=0,
&idone=000000000732C820, &obuf=000000000732C7F0, &oused=000000000732C7E0)
*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP Trust Community II, C=DE' [sncxxall.c 3585]
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3551]
GSS-API(maj): No credentials were supplied
Unable to establish the security context
target="p:CN=sapserv2, OU=SAProuter, O=SAP Trust Community II, C=DE"
<<- SncProcessOutput()==SNCERR_GSSAPI
*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;0000000008316F60) [nisnc.c 1202]
<<- SncSessionDone()==SAP_O_K
NiICloseHandle: called for hdl 17 while waiting for connection
NiICloseHandle: shutdown and close hdl 17/sock 492
*** ERROR => NiSncHandleForAddr C9/-1, 194.39.131.34 (rc=-17) [nirout.cpp 3997]
*** ERROR => NiRClientHandle: NiRExRouteCon for C9/-1 'sapsolman.rebisco.com' failed (rc=-17) [nirout.cpp 3364]
NiBufISendErr: send ni-error rc -104 to hdl 9
NiIWrite: hdl 9 sent data (wrt=240,pac=1,MESG_IO)
NiRCloseConn: closing C9/-1
NiICloseHandle: shutdown and close hdl 9/sock 480
RTCONMGR::releaseCon: mSourceConNo 0 mFreeConNo 800
RTCONMGR::releaseCon: mSourceConNo 0 mFreeConNo 801
is it ok to delete hprof files?
is it ok to delete hprof files? its eating up space on the primary drive of our server. There are hprof files modified last June and are amounting to 6GB. And also, do you have an idea what are the big files that you could delete un the usr/sap/<SID>/j2ee folder? its a whopping 44GB
How can I change FQDN in Java Systems?
Hi guys!!!
I have a doubt how to change FQDN in Portal System, I guess in ABAP System only is to change SAP parameters
SAPLOCALHOST --> hostname
SAPLOCALHOSTFULL --> hostname.mydomain.com
icm/host_name_full --> hostname.mydomain.com
Also File Hosts is updated
And in Java how can change FQDN? I haven't find a guide about this.
For example I have abap and java system on AIX server where FQDN was set during installation "mydomain.com" but bow I want to change to "domainabc.com"
Do you have any idea? I guess there are more parameters that have to be considered for Java systems
Thanks
Andy
Instance SID/ASCS01 [PARTIAL] did not start after 5:00 minutes. Giving up
Hello,
I am at step Install instance basics of ASCS01 in SWPM
An error occurred while processing option SAP NetWeaver 7.0 Support Release 3 > Software Life-Cycle Options > System Copy > Oracle > Target System Installation > Central System > Based on AS ABAP > Central System( Last error reported by the step: Instance SID/ASCS01 [PARTIAL] did not start after 5:00 minutes. Giving up.). You can now:
- Choose Retry
to repeat the current step. - Choose Log Files
to get more information about the error. - Stop the option and continue later.
Log files are written to C:\Program Files/sapinst_instdir/NW700/LM/COPY/ORA/SYSTEM/CENTRAL/AS-ABAP/.
[Thr 3492] ***LOG Q01=> MsSInit, MSStart (Msg Server 1 3488) [msxxserv.c 2288]
[Thr 3492] *** ERROR => rdisp/msserv and rdisp/msserv_internal must not be the same value (3602) [msxxserv.c 2397]
[Thr 3492] *** ERROR => MsSInit failed, see dev_ms for details
[msxxserv.c 7653]
[Thr 3492] ***LOG Q02=> MsSHalt, MSStop (Msg Server 3488) [msxxserv.c 7712]
rdisp/msserv = sapmsSID
dbs/ora/tnsname = SID
I dont have any dev_ms file, this is strange.
netstat -a >> does not show anything about message server port
Thank you for any suggestion you may have