Dear experts
We are currently upgrade our sap system from sap ecc6 ehp1 to sap EHP7 with sap kernel release 745
We face some issue most imported is users create or change some entries and save it but when when he change the same records it give him error that this record already lock there are around 6 entries when I investigate in sm12 all those record backup flag show X indicator .
it backup flag X help show this
also other user face this same time
Regrds
Hi all,
I created a new client in my system(IDES, ECC6.0).
After that i logged in with SAP* & pass for client copy. After successful login , while performing local client copy (sccl) i selected SAP_ALL profile from 800 client.
After that while i am scheduling client copy, the following error message is occurring.
The above two screenshots depicts that RFC connection has to be maintained. Can any one tell me from where we have to create RFC connection? Whether to create from 800 client(IDES) or to create from 750(New client) ??
Kindly reply
Regards
Praveen
Hello,
Is it possible to deploy the NBC6.0 via the SAP instalaltion Server Administration module ?
After adding GUI7.40, there is only the NBC5.0 available for deployement inside the console. Patching the server with the NBC6.0 installation does nothing (even if the patch is installed succesfully)
Any ideas ?
Regards
We recently applied the SPS17 patching to SAP PI 7.3 (Java only system). The patching was executed using the Java Administrator account. After the support pack update, none of the users are able to login to system. All users including Administrator account receives "User authentication failed" for their valid password logons.
This was the steps followed for patching the system -
1) From solution manager --> LMDB --> Product System --> Maintenance optimizer transaction --> Created the stack XML
2) Used SUM tool 1.0 SP12 to apply the patching
3) Took backup of exe, global and profile directories (OS is AIX 64-bit).
4) First patched the jvm to 6.01.87.0 successfully ( from 6.01.76.0).
5) Then started the java components and kernel patching. Kernel updated to kernel release 722, patch# 101.
6) During the middle of offline deployment of java components, the SUM tool showed error -
[Error ]: The following problem has occurred during step execution: com.sap.sdt.jspm.service.JspmServiceException: Could not update components.
Deployment of queue Queue_2016.04.21 at 15:04:55 completed with error Deployment error. See log deploy_api.0.log for details.
java.lang.RuntimeException: com.sap.engine.services.dc.api.AuthenticationException: [ERROR CODE DPL.DCAPI.1148] Could not establish connection to AS Java on [host:50004]. Authentication did not succeed. Wrong or missing security credentials (password) for principal [Administrator], or the specified principal has no permissions to perform JNDI related operations.
com.sap.engine.services.dc.api.AuthenticationException: [ERROR CODE DPL.DCAPI.1148] Could not establish connection to AS Java on [host:50004]. Authentication did not succeed. Wrong or missing security credentials (password) for principal [Administrator], or the specified principal has no permissions to perform JNDI related operations.
javax.naming.NoPermissionException: Exception during getInitialContext operation. Wrong security principal/credentials. [Root exception is com.sap.engine.services.security.exceptions.BaseLoginException: Authentication did not succeed.]
com.sap.engine.services.security.exceptions.BaseLoginException: Authentication did not succeed.
7) At this time the system was starting up in safe mode and after a while system started up normally, but then users are getting login failure for their valid passwords.
8) In-order to complete the patching, we enabled the SAP* login to the system and reset password for Administrator account.
9) Restarted the SUM tool from point of failure and patching completed fine with no errors.
10) But after patching, all users get "User authentication failed" error for login with their valid passwords which they used before the patching was applied. (If we reset their password, they can login to system)
Has anyone encountered this issue after SPS17 patching on a SAP PI 7.3 Java only system? If so could you please let us know what was the resolution taken to fix this?
Thank you in advance!
Looking forward of a solution to this problem.
Hello to all!
I implemented SSFS, created BRT$ADM user and fixed SDBAC_DATA.
system is using ssfs:
con_info_ext_support(): DBSL supports extended connect protocol
==> connect info for default DB will be read from ssfs
brconnect is ok:
su - oraew1
brconnect -u // -c -f check
BR0801I BRCONNECT 7.20 (42)
BR0805I Start of BRCONNECT processing: cetatcqm.chk 2016-04-27 11.16.12
BR0484I BRCONNECT log file: /oracle/EW1/sapcheck/cetatcqm.chk
BR0477I Oracle pfile /oracle/EW1/112_64/dbs/initEW1.ora created from spfile /oracle/EW1/112_64/dbs/spfileEW1.ora
BR0280I BRCONNECT time stamp: 2016-04-27 11.16.14
BR0813I Schema owners found in database EW1: APPQOSSYS, BRT$ADM, DBSNMP, DIP, ORACLE_OCM, OUTLN, SAPSR3*, SYS, SYSTEM
BR0280I BRCONNECT time stamp: 2016-04-27 11.16.23
BR0814I Number of tables/partitions in schema of owner SAPSR3: 38259/24
BR0836I Number of tables treated as info cubes for owner SAPSR3: 429
BR0814I Number of tables/partitions in schema of owner SYS: 918/138
BR0814I Number of tables/partitions in schema of owner SYSTEM: 157/45
BR0280I BRCONNECT time stamp: 2016-04-27 11.16.37
BR0815I Number of indexes/partitions in schema of owner SAPSR3: 48995/126
BR0815I Number of indexes/partitions in schema of owner SYS: 988/137
BR0815I Number of indexes/partitions in schema of owner SYSTEM: 224/64
but in db13 it seems like i did't make the changes in SDBAC_DATA:
backup job:
check db job:
What I forgot to do ? Thanks for help!
Dear Basis Gurus,
i am planning a client copy from our production system to our quality assurance system to refresh a old existing client.
In past i have done some similar copies. After the copies i am always facing the problem with the number ranges (short dump SAPSQL_ARRAY_INSERT_DUPREC). Then I need to adjust the number ranges I need manually. This is a lot of work.
How is the standard procedure in this case? Is there any option to do this in a more efficient way?
Best regards,
Klaus
Hi,
I have an Application with the files housed in BSP. My app only have Html, css and javascript files and I use Html5 Cache Manifest for use the app without connection.
My problem is that sometimes, the Server Cache is not working correctly and I don´t know why. Sometimes download all modified files and sometimes not.
Could anybody tell me how it work? Or the correctly configuration for cache?
Regards.
Hello Colleagues,
I am in a process of establishing connection from SAP to External web-service from hosted by some vendor. Due to security reason they have disabled SSLV3 and TLS 1.2 and they are accepting connection protocol which comes through HTTPS and TLSV1.2.
So based on the note http://service.sap.com/sap/support/notes/2065806. It is possible to establish connection to eternal Web services who are running on TLS 1.2 protocol only if our SAP has common Cyptolib 8.4.31 and above , So i have downloaded the latest common cryptolib 8.4.37 and upgraded.
I have also installed URL's Certificate in Strust store.
I have also setup the profile parameters mentioned in note http://service.sap.com/sap/support/notes/510007. After setting these profile parameters in RZ10 i have also restarted the server ,But for profile parameters when i check it says " Unknown profile parameter " i read in some note that this message can be ignore. Please find the additional parameters for my Cipher suits.
| ssl/client_ciphersuites | 192:HIGH:MEDIUM:+e3DES:!aNULL |
| ssl/ciphersuites | 135:HIGH:MEDIUM:+e3DES:!aNULL |
From SE38 i have run program "SSF02" and and selected radio button "Determine version" i see the below message assuming my cryptolib up-gradtion has no issues.
SSF Test Program
Version (on application server)
Result: SSF_API_OK
Version information: 145
SSFLIB Version 1.840.40 ; CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.37 (+MT) #Copyright (c) SAP AG, 2011-2015#compiled for linux-gcc-4.1-x86-64#
I have some open questions after setting up the system.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Please find the logs below mentioned logs from SMICM.
[Thr 140048473114368] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
[Thr 140048473114368] session uses PSE file "/usr/sap/SE1/DVEBMGS59/sec/SAPSSLC.pse"
[Thr 140048473114368] SecudeSSL_SessionStart: SSL_connect() failed
[Thr 140048473114368] secude_error 536875120 (0x20001070) = "SSL API error"
[Thr 140048473114368] >> Begin of Secude-SSL Errorstack >>
[Thr 140048473114368] 0x20001070 SAPCRYPTOLIB SSL_connect
[Thr 140048473114368] SSL API error
[Thr 140048473114368] received a fatal TLS1.0 protocol version alert message from the peer
[Thr 140048473114368] 0xa0600278 SSL ssl3_read_bytes
[Thr 140048473114368] received a fatal TLS1.0 protocol version alert message from the peer
[Thr 140048473114368] << End of Secude-SSL Errorstack
[Thr 140048473114368] SSL_get_state() returned 0x00002120 "SSLv3 read server hello A"
[Thr 140048473114368] SSL NI-sock: local=10.1.1.214:34300 peer=10.1.1.33:443
[Thr 140048473114368] <<- ERROR: SapSSLSessionStart(sssl_hdl=7f5f8c01b220)==SSSLERR_SSL_CONNECT
[Thr 140048473114368] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00000544} [icxxconn_m
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Please help in resolving this issues.
Thanks in advance !!
Regards,
Vardhan.
Hi All,
we are getting the below error in our error_log in webserver logs
proxy: error reading status line from remote server k96pp1c1.supplier.company.com, referer: https://bidv.supp
lier.company.com/irj/servlet/prt/portal/prteventname/Navigate/prtroot/pcd!3aportal_content!2fevery_user!2fgeneral!2fdefaultDesktop!2fframeworkPages!2fframeworkpage!2fco
m.sap.portal.innerpage?buildTree=false&NavPathUpdate=false&windowId=WID1462337687142
our infrastrure
Loadbalancer --> Webserver --> Our Portal system PP1
When we try to access some data from our portal for a long time, some of our suppliers are getting the above error.
SAP Suggested to directly connect to PP1 bypassing Loadbalancer and webserver -- > we bypassed -- > by making siteminder_off in visual admin
webagent=off in webserver ---> We are not getting any Proxy error
Could you please suggest how to solve this proxy error ?
we get below error in browser
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /irj/servlet/prt/portal/prteventname/HtmlbEvent/prtroot/pcd!3aportal_content!2fadministrator!2fsuper_admin!2fsuper_admin_role!2fcom.sap.portal.content_administration!2fcom.sap.portal.content_admin_ws!2fcom.sap.km.AdminContent!2fcom.sap.km.AdminContentExplorer!2fcom.sap.km.AdminExplorer/ (/irj/servlet/prt/portal/prteventname/HtmlbEvent/prtroot/pcd%213aportal_content%212fadministrator%212fsuper_admin%212fsuper_admin_role%212fcom.sap.portal.content_administration%212fcom.sap.portal.content_admin_ws%212fcom.sap.km.AdminContent%212fcom.sap.km.AdminContentExplorer%212fcom.sap.km.AdminExplorer/).
Reason: Error reading from remote server
Dear Gurus,
We have SOLMAN 7.2 system where both ABAP & JAVA stacks are splitted into two systems AAA (ABAP only) & JJJ (JAVA only). Now HTTPS URL for ABAP system is working fine without mentioning the port no. in the URL & also SSO is being taken care of.
https://<hostname>/sap/public/ping?sap-client=000 is working fine where we dont need to specifically mention port no.
However for JAVA system , unless untill we mention the port specifically in the HTTPS URL , it's not being accessible & additionally as expected it's not directly taking us to the system rather it's asking for ID , password to access the ABAP URL.
URL currently being used: https://<hostname>:<https_port>/nwa & then we need to provide ID password
URL want to be used: https://<hostname>/nwa , so hat port will be binded and user login will be taken care of utomatically via SSO .
Please suggest how to configure the same so that JAVA HTTPS URL can be used without specifically mentioning port in the URL & SSO can be used for configuring ?
NB: 1. Please note that ABAP & JAVA instances, both are running in same host & ABAP is already using the HTTPS port 443 , so for JAVA HTTPS, we cant keep same port for default hiding.
2. Secondly, please let me know if it can be done without using web dispatcher .
Regards,
Nilutpal
Dear All
as we are installing BI java while installing we are getting this error .
An error occurred while processing option SAP NetWeaver 7.3 > Oracle > SAP Systems > Application Server Java > Standard System > Standard System( Last error reported by the step: Java process server0 of instance SID/J04 reached state Collecting data after having state Starting framework. Giving up.). You can now:
Choose Retry to repeat the current step.
Choose Log Files to get more information about the error.
Stop the option and continue with it later.
Log files are written to /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/.
TRACE 2016-05-02 18:58:41.916 [syuxctask.cpp:600]
CUnixProcessManager::sap_waitpid(pid_t pid, int * pStatus, int options)
lib=syslib module=syslib
Child process 24359 returned 0
ERROR 2016-05-02 18:58:41.992 [sixxcstepexecute.cpp:899]
FCO-00011 The step startJava with step key |NW_Java_OneHost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|onehost|0|NW_CI_Instance|ind|ind|ind|ind|ci|0|NW_CI_Instance_StartJava|ind|ind|ind|ind|auto.id:5|0|startJava was executed with status ERROR ( Last error reported by the step: Java process server0 of instance JPH/J04 reached state Collecting data after having state Starting framework. Giving up.).
TRACE 2016-05-02 18:58:42.95 [kdxxctaco.cpp:93]
CKdbTableContainerImpl::syncToContainerFile lib=iakdblib
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE 2016-05-02 18:58:43.308 [kdxxctaco.cpp:122]
CKdbTableContainerImpl::syncToContainerFile lib=iakdblib
after creating out stream for /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/statistic.xml
TRACE 2016-05-02 18:58:43.587 [kdxxctaco.cpp:156]
CKdbTableContainerImpl::syncToContainerFile lib=iakdblib
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE 2016-05-02 18:58:43.759 [syxxcfile.cpp:85]
CSyFileImpl::decideIfMoveCopyNode(const CopyMoveDestinationInfo & {m_nodeTypeForCombiCheck: ..., m_path: /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/__instana_tmp.17.xml, m_realNodeType: 8}, ISyNode::CopyMoveMode_t 0x3, PSyNodeInt &) const
lib=syslib module=syslib
Target node does not exist and (mode & ISyNode::MISSING) ==> I will copy/move.
TRACE 2016-05-02 18:58:43.760 [syxxcnode.cpp:428]
CSyNodeImpl::move(const CSyPath & /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/__instana_tmp.17.xml, ISyNode::CopyMoveMode_t 0x3)
lib=syslib module=syslib
Moved /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/__instana_tmp.xml to /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/__instana_tmp.17.xml
INFO 2016-05-02 18:58:43.777 [syuxcpath.cpp:447]
CSyPath::createFile() lib=syslib module=syslib
Creating file /tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/__instana_tmp.xml.
TRACE 2016-05-02 18:58:43.960 [syuxctask.cpp:237]
CChildApplicationImpl::doStart() lib=syslib module=syslib
A child process has been started. Pid = 24363
TRACE 2016-05-02 18:58:44.310 [syuxctask.cpp:600]
CUnixProcessManager::sap_waitpid(pid_t pid, int * pStatus, int options)
lib=syslib module=syslib
Child process 24363 returned 0
TRACE 2016-05-02 18:58:54.884
SAPInst calls the LogInquirer. The output of the LogInquirer can be found in file sapinst_loginquirer.log.
TRACE 2016-05-02 18:59:12.434 [iaxxgenimp.cpp:649]
CGuiEngineImp::showMessageBox
<html> <head> </head> <body> <p> An error occurred while processing option <i>SAP NetWeaver 7.3 > Oracle > SAP Systems > Application Server Java > Standard System > Standard System( Last error reported by the step: Java process server0 of instance JPH/J04 reached state Collecting data after having state Starting framework. Giving up.)</i>. You can now: </p> <ul> <li> Choose <i>Retry</i> to repeat the current step. </li> <li> Choose <i>Log Files</i> to get more information about the error. </li> <li> Stop the option and continue with it later. </li> </ul> <p> Log files are written to <code>/tmp/sapinst_instdir/NW730/ORA/INSTALL/NW730/ORA/STD/</code>. </p> </body></html>
TRACE 2016-05-02 18:59:12.451 [iaxxgenimp.cpp:1062]
CGuiEngineImp::acceptAnswerForBlockingRequest
Waiting for an answer from GUI
Please help me in fixing this issue .
Regards
Hello !
It is not insufficient to grant sapdba role for user BRT$ADM in my system. But if I grant him DBA role - all works fine.
Why it can be? Thanks!
This note says that I should grant sapdba, sysdba, sysoper roles.
1764043 - Support for secure storage in BR*Tools
But only sapdba role is adding to user:
SQL> grant sapdba, sysdba, sysoper to brt$adm;
Grant succeeded.
SQL> select grantee, granted_role, default_role from dba_role_privs where grante = 'BRT$ADM';
GRANTEE GRANTED_ROLE DEF
------------------------------ ------------------------------ ---
BRT$ADM SAPDBA YES
There is a BRT$ADM without DBA role:
'SELECT DBOBJ, DOTYP, OBJOW, VWTYP, ACTIV, OBJEC, AEDAT, AMETH, OPTIO, SIGNI, TO
BDO, HISTO, TDDAT, DURAT, PLAND FROM "SAPSR3DB".DBSTATC WHERE (DOTYP IN ('01', '
') AND OBJOW IN ('SAPSR3DB', 'SAPR3', ' ') OR DOTYP >= 'AA' AND DOTYP <= 'ZZ')
AND DBTYP IN ('ORACLE', ' ') AND VWTYP IN ('A', 'O', ' ') ORDER BY DBOBJ, DOTYP,
OBJOW, DBTYP'
ORA-01031: insufficient privileges
Greetings!
When following the standard procedure for setting up Single Sign-on for a Netweaver JAVA/Portal 7.4-based system (specifically, SAML 2.x), you normally go into NWA > Configuration > "Authentication and Single Sign-On" and modify the "ticket" policy by adding the Login Module of your choice (in my case, SAML 2.x).
Example documentation:
Protecting Resources with SAML - User Authentication and Single Sign-On - SAP Library
However, when you do this, you impact nearly all aspects of accessing the Netweaver (JAVA) system, both /irj and /nwa areas now use SSO. This would normally be a good thing, but if anything goes badly with the Identity Provider, then users unable to login, even with the BasicPasswordLoginModule set as requisite AFTER SAML. You can reproduce this situation if you set SAML to trust an Identity Provider and then shutdown the identity provider. Now, when you try to login to the Portal, it will redirect you to where the Identity Provider should be, but since you can't access it (it's shutdown), you are stuck. Portal doesn't know that it should fail to Basic auth since it doesn't realize the Identity Provider is offline. The only way around in this situation that I've found is to go into the ConfigTool and disable SAML there, then you can login again with Basic authentication after a restart.
So, the question is, what's the best way to enable SSO (SAML) ONLY for /irj, but leave Basic Auth for /nwa? That way, if anything happens that screws up SAML, the admins can easily login to /nwa and fix the issue. Should I continue to edit the 'ticket' or maybe create a new policy and somehow assign Portal (/irj) to the new one and leave ticket alone? Or, is there a way to for /nwa to always use basic?
I've been looking everywhere for configuring at this detailed level and haven't run into anything yet.
Thanks in advance for any advice,
Aaron
hi experts
can we take a offline backup from db13
Hello,
I have a requirement to extend Java History reports period. Currently in default report time unit it has only 4 options ( Minute, 5 Minutes, Quarter and Hour). This gives report just for 2 days max. we are looking at something like 6 months old data.
Is there certain configuration where this period can be extend to get portal History report?
We r running on 7.40.
Let me know if you need any info.
T.I.A.
Regards,
Bala
Hi,
I am trying to access sap java nwa using sap the link http://abcd00000.xyz.com:50000/nwa
Instead of log in page , I am directly getting error "401 Unauthorized ".
Hi,
we have a quality system in which prints to an output device are going successfully to the host spooler system as shown in SAP - SP01 Tcode but user says no prints are received on checking at unix level we find that there is no print coming to the host spooler queue for this particular output device. we have also checked at unix level and user is able to receive prints given at unix level successfully to the same printer. also the prints given from local machine of the user to the printer(Non-SAP prints) are successfully printing. we have till now reset the printer at unix level. also we created the same printer in development which was transported to quality and the weird thing is the prints to the same printer are successfully going through from Dev and Prod system but not from Quality system. If somebody can guide on this it will be of great help.
Hello Friends,
Disp+Work.exe is in yellow and stating that J2EE Status info unavailable in Solution Manager 7.1.
I can see the below error in dev_jcontron.
[Thr 12864] Wed May 04 19:05:04 2016
[Thr 12864] *** ERROR => invalid return code of process [bootstrap_ID2849550] (exitcode = 66) [jstartxx.c 1647]
[Thr 12864] JControlExecuteBootstrap: error executing bootstrap node [bootstrap_ID2849550] (rc = 66)
[Thr 12864] JControlCloseProgram: started (exitcode = 66)
[Thr 12864] JControlCloseProgram: good bye... (exitcode = 66)
Below error in dev_bootstrap.
[Thr 14532] JLaunchIExitJava: exit hook is called (rc = 66)
[Thr 14532] **********************************************************************
[Thr 14532] *** ERROR => The Java VM terminated with a non-zero exit code.
[Thr 14532] *** Please see SAP Note 943602 , section 'J2EE Engine exit codes'
[Thr 14532] *** for additional information and trouble shooting.
[Thr 14532] **********************************************************************
[Thr 14532] JLaunchCloseProgram: good bye (exitcode = 66)
Please find the attachment for detailed log of dev_jcontrol, dev_bootstrap and dev_disp.
Kindly help me to resolve this issue.
Regards,
Farkath C
Hello,
I'm trying to do a system refresh from PRD to QUA with the Homogeneous system copy with Backup/Restore method.
I've made the recovery of PRD on QUA after that I've executed the System Rename but I'm getting and error during the process on create sap stored procedures step.
[Microsoft][ODBC SQL Server Driver][SQL Server]Invalid object name MSSSOURCE
What did I do incorrect?
Regards
Hello Everyone,
We met a quite strange issue that the ABAP statements runs quite slow when accessing table EKKO, EKPO etc. tables.
We have migrate the production system to the QAS system, oracle DB with 3TB datafiles. after migration, some of the transactions runs too slow, so far we found some Z* program runs too slow, not sure about the standard program. but strangely is that the same sql statement runs quick in PRD, but in new QAS system, it will cost unbearable running time......
The sql statement is as below:
ST05 trace result as below:
The ST05 Execution Plan are as the attached TXT file, please rename it as HTML extension so that you can display well.
I have tried to update oracle database statistics, rebuild all indexes, adjust sap profile parameters, compare oracle database pfiles with production system (parameters are almost the same), for my limited knowledge, I can not find what's the root cause for this tricky issue. Could you kindly give some suggestion on how to solve this? Thanks a lot!
Best regards,
Fresh