Dear All,
I just finished fresh install of Content Server 6.5 and DB recovery.
CS DB online
Content Server URL link tested , server running.
But i cannot make my content repository online
when i click on "lock" button, it turn to "defined"
when i click on "unlock" button, it turn to "offline"..
I tried to create a new repository ...also the same...tried restart CS server..DB e.t.c...not help either..
Anyone can give some advise?
Many thanks!
Regards
Gary
Hi Expert,
I am new in basis, my client has purchase ECC6.0 Ehp8 and sybase 16 DB. They need a IDES system for practice or training purpose. I am assigned to install IDES system. I am confused for download media, which is right to download.
Could you please send me list of media with Sybase 16 DB . Can i use my sql as DB for IDES, if yes then please also media for this.
Thanks,
Amit
Hello Gurus,
Need a small clarification regarding SAP Kernel update in our PI and Portal servers
Currently we are in SAP 7.4 SP 12 latest support pack and will be updating latest support pack available SP13 at earliest.
Before updating support pack patches we need to update kernel where currently we are in 7.42 patch level 101.
And latest available is 7.42 patch level 401 and kernel 7.45 latest in Service market place.
For kernel update can we go to 7.42 latest or need to update 7.45 latest kernel update.
Kindly suggest.
Thanks & Regards,
Ganesh
Hello Experts,
We have 98 GB of physical memory and 96 GB of swap memory in SUSE Linux. But when loading data or performing any other transactions it occupies only 7%(around 6-7 GB) of physical memory. Data loading takes more time since it does not use the entire available memory. I want the system to utilize entire available physical memory to process the users request. Is there any parameter to allocate memory for application server? Is there any solution to increase RAM usage?
Hello,
I'm trying to do a system refresh from PRD to QUA with the Homogeneous system copy with Backup/Restore method.
I've made the recovery of PRD on QUA after that I've executed the System Rename but I'm getting and error during the process on create sap stored procedures step.
[Microsoft][ODBC SQL Server Driver][SQL Server]Invalid object name MSSSOURCE
What did I do incorrect?
Regards
Hi Team,
I am trying to download 1 java patches.
1. When i am downloading it using IE 11, its extension is zip file. When downloading it from chrome its extension is .SCA.
2. After downloading using IE, i found that there is no application-j2ee-engine.xml in META-INF folder. As per my understanding, application-j2ee-engine.xml contains the information about container, which require to deploy the patches.
Would request you to please clear my doubt.
Regards
Shyam
Hi guys,
I want to know how thw transaction I can see the last date of execution the all transactions, but I try the SM20, can't use because takes too long to run
has other transaction?
Dear All,
We are on SAP ECC 6.0 EHP7 (NW 7.4). We have developed some of the ODATA services in ECC which we need to provide to external mobile application. For this, we need to expose ECC on internet. We have SAP web dispatcher 7.4 available in DMZ zone. Please suggest
1. Routing access from internet(mobile app) via web dispatcher to ECC
2. Allow only Odata services via webdispatcher url filter
Is this safe way or there is any other safer mechanism.
Thank you
Greetings!
When following the standard procedure for setting up Single Sign-on for a Netweaver JAVA/Portal 7.4-based system (specifically, SAML 2.x), you normally go into NWA > Configuration > "Authentication and Single Sign-On" and modify the "ticket" policy by adding the Login Module of your choice (in my case, SAML 2.x).
Example documentation:
Protecting Resources with SAML - User Authentication and Single Sign-On - SAP Library
However, when you do this, you impact nearly all aspects of accessing the Netweaver (JAVA) system, both /irj and /nwa areas now use SSO. This would normally be a good thing, but if anything goes badly with the Identity Provider, then users unable to login, even with the BasicPasswordLoginModule set as requisite AFTER SAML. You can reproduce this situation if you set SAML to trust an Identity Provider and then shutdown the identity provider. Now, when you try to login to the Portal, it will redirect you to where the Identity Provider should be, but since you can't access it (it's shutdown), you are stuck. Portal doesn't know that it should fail to Basic auth since it doesn't realize the Identity Provider is offline. The only way around in this situation that I've found is to go into the ConfigTool and disable SAML there, then you can login again with Basic authentication after a restart.
So, the question is, what's the best way to enable SSO (SAML) ONLY for /irj, but leave Basic Auth for /nwa? That way, if anything happens that screws up SAML, the admins can easily login to /nwa and fix the issue. Should I continue to edit the 'ticket' or maybe create a new policy and somehow assign Portal (/irj) to the new one and leave ticket alone? Or, is there a way to for /nwa to always use basic?
I've been looking everywhere for configuring at this detailed level and haven't run into anything yet.
Thanks in advance for any advice,
Aaron
Hi experts,
I have doubt on two things please clarify.
Regards,
venkat.
Hi together,
I want to upload some packages via SAINT.
There I get the error 13.
If I try to uncar a package via SAPCAR in trans DIR I get the error in subject.
Does anybody know how to solve this problem?
The <sid>adm has 777 on the EPS directory.
Owner of EPS is root, however, in the past it did always work fine.
What is also very interesting, I could upload one package via SAINT and there it could uncar the .SAR successfully.
Therefore it is really strange.
I've already downloaded the newest sapcar.
Kind regards
Hi Experts,
AIX OS showing High paing utilization for Jlaunch processes and oracle processes. Aix version is 6.1 and Database is recently upgraded to oracle 12c from 11.2.0.3. Please anyone guide us on how to proceed further.
Regards,
venkat
Hi expert !
My system includes PRD, DEV and QA. All system configured all parameter of SAP and Oracle for optimize
In previous time, all systems logon very quickly -> take 2-3 second
In present, DEV system logon very slow
When I type username and password -> Enter -> status Loading Data very slow
My DEV systems logon is slower than other systems, it take 5-10 second. While other systems take 2-3 second
Please help me ....i don't know the reason
Hi All,
Can anyone let me know the situation where I can go for printing with access method as "S".
We have unix server in which SAP runs and Windows system as a print server and we are using "U- Berkleys protocol" now.
Also I hope SAPSprint will run in the windows machine which will ease the printing.
Regards,
Jegan Raj
Sendig e-mail to domain with user e-mail is outside company domain - Email Spoofing
Hi, we are trying to solve an issue! Our SMTP config is delivering messages fine (All messages has been delivered), but we have some users (SU01) with e-mails like user@gmail.com ou user@outsidedomain.com. When they send e-mails for example using SO01 from their users (USER_EXT01 - email= userext01@gmail.com) to userext01@gmail.com, they get a message in Gmail MailBox as Spoofing message, and its right. We are not authorized do send mails as Gmail.com.
Companies that we have relationship wiht it, we already asked to adjust spf records at company´s Mail Servers , but others providers do that is a problem.
Are there any method to change sender e-mail or change domain when this kind of user are sending E-mails to company´s outside? Change the user e-mail address to an internal e-mail address is not an option.
Did anyone get this? Maybe could advice about that?
Configuring SAP Web Dispatcher to Support SSL - With Trust Manager
Information:
The SAP Web dispatcher lies between the Internet and your SAP system. It is the entry point for HTTP(s) requests into your system, which consists of one or more SAP NetWeaver application servers. As a “software webswitch”, the SAP Web dispatcher can reject or accept connections. When it accepts a connection, it balances the load to ensure an even distribution across the servers. The SAP Web Dispatcher therefore contributes to security and also balances the load inyour SAP system. (SAP)
Our missions this year is to focus on the security side of SAP system, we make many activities to make the SAP system more protected, more secure.
Introduction:
One of our web service applicationused SAP Web Dispatcher and we want that incoming connection will use HTTPS. For this we must configure SAP Web Dispatcher as an SSL (Secure Sockets Layer) server.
Pics by SAP
Pics by SAP
More information regarding the Web Dispatcher:
https://help.sap.com/saphelp_nw73ehp1/helpdata/en/48/8FE37933114E6FE10000000A421937/frameset.htm
There are 2 ways to configure SSL for Web Dispatcher.
This guide will help you to configure SSL for Web Dispatcher using trust manager.
Prerequisites:
You are familiar with the architecture and functions of SAP Web Dispatcher. In particular, you are familiar with the possible connections and how SSL is used with them. See the figure above. (SAP)
The SAP Web Dispatcher is installed and configured to use SSL.
Profile parameter:icm/server_port_ <xx> = PROT=ROUTER, PORT= <port>,TIMEOUT= <timeout_in_seconds>
Configuration:
Configure Environment variable
Picture 1.0 - environment variable SECUDIR
The reason we set the environment variable SECUDIR is because we will use thesapgenpseforCredentials and for export the certificate.
Creating the SAP Web Dispatcher's PSEs Using the Trust Manager
Picture 1.1 - trust manager
Go to transaction code STRUST right click on the File and choose create. (You have to be in edit Mode).
Picture 1.2 - Create (RSA)
In cryptography, SHA-1 (Secure Hash Algorithm 1) is a cryptographic hash function. SHA-1 produces a 160-bit (20-byte) hash value known as a message digest. A SHA-1 hash value is typically rendered as a hexadecimal number, 40 digits long. (Wikipedia)
https://en.wikipedia.org/wiki/SHA-1
Picture 1.3 – Save the PSE
Save the PSE to local file.
Sending the Certificate Requests to a CA.
Click on File and choose the PSE we download before
Picture 2.0 - PSE you saved in the previous procedure
Click on Create certificate request, save the certificate reques to local file and send it to the CA for request response.
Picture 2.1 - certificate request
Picture 2.2 – Export certificate request
Picture 2.3 - Pics by SAP
After you get back the certificate response from the CA, Choose file and import the certificate response.p7b
Picture 2.4 – Import certificate response
Picture 2.5 – certificate response
Picture 4.3 – Add to certificate list
Click on Add to certificate list Save and replace
Picture 4.4 – the certificate is in the list
Now you can see the certificate is signed and valid.
Creating Credentials for the SAP Web Dispatcher
The SAP Web Dispatcher must have active credentials at runtime to be able to access itsPSEs.
Put the SIDPSE.pseinthe secdirectory
Picture 5.0 – PSE in the SEC directory
Run the following command:
sapgenpse seclogin -p SAPSSLS.pse -x abcpin -O ABCadm
Picture 5.1 - The following command line opens the SAP Web Dispatcher's SSL server PSE and creates credentials for the user SIDadm
Profile parameter
Add the following parameter to the WD profile
Picture 5.2 – Profile parameter
Restart the WD!
Test the SSL connection 
Picture 6.0 – Certificate is issued
Export P12 certificate for F5 - Option
Picture 6.1 – Export the certificate
SAP Sources:
https://help.sap.com/saphelp_nw74/helpdata/en/49/3db10a19341067e10000000a42189c/content.htm
https://help.sap.com/saphelp_nw74/helpdata/en/49/4590d23a293b5be10000000a42189b/content.htm
https://help.sap.com/saphelp_nw74/helpdata/en/49/4561a6f4383659e10000000a42189b/content.htm
https://help.sap.com/saphelp_nw74/helpdata/en/49/458f193a293b5be10000000a42189b/content.htm
https://help.sap.com/saphelp_nw74/helpdata/en/49/458f193a293b5be10000000a42189b/content.htm
I hope this document will help you 
Feel free to ask questions
Thanks Naor.
Hi Experts,
We are Planning to do an S4/Hana Installation on cloud, kindly guide me, steps and process involved to that.
regards
Manjappa
Hi Gurus;
How well does FIORI works on Blackberry devices.
Does SAP support Blackberry devices ?
Regards
Tushar
Hello there,
I am looking for a way to set "Synchronous" as default for all imports in a SAP System.
Here is the Screenshot that shows what I am talking about:
As far as I could I checked the Parameters for TP - no luck here.
Any ideas?
Regards
Daniel
Hi All ,
As we have many component associated with SAP .Do we have any central place where we can get details associated with SAP at one place whether its SAP or thrid party associated with SAP .May be boltons, third party tool or SAP .
Regards ,
Abhishek