Quantcast
Channel: SCN: Message List - Security
Viewing all 5338 articles
Browse latest View live

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

Hello,

 

Based on what you are saying that notes are not released for 4.7?


Thanks

 

 

 


Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

Our system is running SAP_BASIS 620 (please see screenshot).

Then it's OK.

 

Isn't it?

 

Thank you for your help.

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

Missing method comes with SAP note 1663177 - SU01: User group as required entry field

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

Thank you for your reply.

 

I tried to implement it w/o success. There are a lot of prerequisite notes :-(

 

Any suggestion?

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

That note is 4 years old and the related notes will go as far back as 10 years because of your system release / SP level being ancient.

 

You will be better off with a release upgrade...

 

You must additionally consider that the master system where you compress from should be on the higher release / SP level within the CUA landscape, so if this system is the highest in the landscape then I doubt it is going to work very well on the backend systems anyway.

 

Cheers,

Julius

Re: Secure communication between SAP and .NET Application

$
0
0

Hi Tim,

 

yes, since SCE is 32 bit i am using NW SSO 1.0  secure login client library files.

I have installed Secure login client in my .NET application server and specified Library path as " C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll" . But still getting same issue "Can not connect to target SNC partner name = "p:CN=SAP/KerberosSC2@DOMAIN.COM".

 

Thanks,

Krishna

Re: Secure communication between SAP and .NET Application

$
0
0

Yes TIM, in that thread i found solution like i can use Secure login client 64 bit library file at client side. But i am still getting same error.


Re: Secure communication between SAP and .NET Application

$
0
0

Hi Krishna, this sounds comparable to a typical ABAP-to-ABAP SNC scenario with a fixed technical user. So this could be solved like ABAP-to-ABAP SNC (or AS-JAVA-to-ABAP-RFC): with X.509 certificate and CCL.

Have look at this thread  Simple JCo connection with SNC. Nowadays one would replace the secude libraries by the Common Cryptolib.

Regards,

Lutz

Profile Generation problem after EHP upgrade

$
0
0

Hello,

 

Can someone help here. We have recently upgraded to EHP 7.

After upgrade, we see user buffer is not getting updated from the roles with large data. for eg, for the derived roles with more than one profile, the objects are available in the role, role is assigned to user, profiles looks generated with green status, user comparison looks good.

But objects does not appear in user buffer , hence user misses authorization for the objects and the role is not appeared when we check in SUIM.

Does anybody know any Authorization subnotes need to be implemented or any other solution?

Due to the profile generation problem in SUPC, We had already implemented sub note: 2220928. Is there any other linked subnotes?

Re: Secure communication between SAP and .NET Application

$
0
0

Hi Lutz, would it be possible to encrypt the communication in the same scenario you mention there, but using the MIT Kerberos 5 library? (instead of Common Cryptolib).

Re: Secure communication between SAP and .NET Application

$
0
0

Except that using certificates means you can't have end to end identity, e.g. if architecture is as follows:

 

Web browser/workstation --> .net app server --> AS ABAP

 

With above, if you use Kerberos end to end, then the AS ABAP system will know the identity of the user logged onto workstation. If you use certificates between .net app server and AS ABAP then this won't be possible.

 

When I help customers with this exact scenario I find they prefer the end to end identity since it gives better control over the access to data on the back end ABAP system.

Re: Secure communication between SAP and .NET Application

$
0
0

Did you buy an NW SSO 1.0 license ? if you didn't you can't use this library.

Re: Disable SAP GUI login

$
0
0

Hi,

 

Password logon for CRM and BI users is required through CRM and BI URL. So, making login/disable_password_logon as 1, will disable URL logging. So, your suggestion will not fit, my requirement.

 

however, your suggestion will fit for SSO, through portal.

 

regards

Plaban

Re: Secure communication between SAP and .NET Application

$
0
0

Hi Tim,

 

Our Scenario is like exactly you mentioned above. We are using web browse to connect .NET app server and we provide SAP backend system details like usernname, password, client etc to connect.

 

Web browser/workstation --> .net app server --> AS ABAP

 

From SAP server end SNC is configured similar to Configuring SAP SNC without Single Sign-On on UNIX/Solaris/Linux between SAP GUI -> AS ABAP

 

Similar to above we are configuring .NET app --> AS ABAP using NW SSO Secure login client at Client side. Instead of 32 bit SCE file we are using NW SSO Secure login client 64 bit SECGSS.dll file  at .NET application side (We had Licensed NW SSO 1.0 product and Recently it is expired but using Dump file which was licensed one )

 

When connecting we are getting below dump.

 

**** Trace file opened at 2016-04-25 18:51:01 (UTC+05:30 India Standard Time)

 

 

SAP .NET Connector 3.0 with file version 3.0.5.0 running on 64-bit .NET Framework 4.0.30319.42000

Program: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug\NCO test.vshost.exe

Working dirctory: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug

Operating system: Windows 7 Enterprise 64-bit Service Pack 1

Processor: 4x AMD64 (or x64)

SAP release: 720, Kernel release: 720, Kernel patch level: 111

Hostname: INPUNKGINNELA1, IP address: 10.82.23.21, IP_v6 address:

 

 

Default trace level: None

 

 

>> Error entry 2016-04-25 18:51:01.936

Failure to create pool for destination 6be87c8c-4a9a-4450-ba85-00181306983d [NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM]

SAP.Middleware.Connector.RfcCommunicationException:

LOCATION    CPIC (TCP/IP) with Unicode

ERROR       GSS-API(maj): Miscellaneous failure

            GSS-API(min): A2210223:A2210223

            target="p:CN=SAP/KerberosSC2@DOMAIN.COM"

TIME        Mon Apr 25 18:51:01 2016

RELEASE     720

COMPONENT   SNC (Secure Network Communication)

VERSION     5

RC          -4

MODULE      sncxxall.c

LINE        3345

DETAIL      SncPEstablishContext

SYSTEM CALL gss_init_sec_context

COUNTER     3

 

 

   at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)

   at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)

   at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)

   at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)

   at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)

   at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)

>> Error entry 2016-04-25 18:51:02.128

NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM

SAP.Middleware.Connector.RfcCommunicationException:

LOCATION    CPIC (TCP/IP) with Unicode

ERROR       GSS-API(maj): Miscellaneous failure

            GSS-API(min): A2210223:A2210223

            target="p:CN=SAP/KerberosSC2@DOMAIN.COM"

TIME        Mon Apr 25 18:51:01 2016

RELEASE     720

COMPONENT   SNC (Secure Network Communication)

VERSION     5

RC          -4

MODULE      sncxxall.c

LINE        3345

DETAIL      SncPEstablishContext

SYSTEM CALL gss_init_sec_context

COUNTER     3

 

 

   at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)

   at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)

   at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)

   at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)

   at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)

   at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)

   at SAP.Middleware.Connector.RfcConnectionPool.GetPool(RfcDestination destination, Boolean forRepository, Boolean create)

   at SAP.Middleware.Connector.RfcDestination.GetClient(Boolean forRepository)

   at SAP.Middleware.Connector.RfcDestination.Ping()

 

 

Please help what is wrong with the connection and how it can be resolved.

 

Thanks,

Krishna


Re: External ABAP call to Sharepoint using SAML and OAuth

$
0
0

Hi Greg,

I have to fullfill a similar requirement. Did you succeed with your implementation? Could you give me some hints?

Regards, Thomas

Re: SAP ID / Account Naming Convention

$
0
0

Hi

 

1. Users are sometimes changing names or identical first and last name can occur. You should be prepared to solve this problems

 

2 . Numbers are generally good, but administration is more time consuming.

 

3. Users are migrating inside organizations, and this approach can lead you to mess.

 

Regards

Przemek

Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"

$
0
0

Thank you to all for your help.

 

We know that we are running an OLD version of SAP & SP.

 

Regards,

Zobair

Re: Secure communication between SAP and .NET Application

$
0
0

Hi Tim,

 

Please let me know if my above configuration is correct? am i missing anything here? Do we need establish trust relationship between .NET application and SAP by importing PSE in each other system?

 

what are parameters required from .NET application code.

appreciate your help on this.

 

 

Thanks,

Krishna

Re: Secure communication between SAP and .NET Application

$
0
0

Hi Lutz,

 

I am trying to configure SNC with window integrated authentication kerberos protocol between .NET application and AS ABAP server.

 

Thanks,

Krishna

Viewing all 5338 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>