Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Our system is running SAP_BASIS 620 (please see screenshot).
Then it's OK.
Isn't it?
Thank you for your help.
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Missing method comes with SAP note 1663177 - SU01: User group as required entry field
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Thank you for your reply.
I tried to implement it w/o success. There are a lot of prerequisite notes :-(
Any suggestion?
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
That note is 4 years old and the related notes will go as far back as 10 years because of your system release / SP level being ancient.
You will be better off with a release upgrade...
You must additionally consider that the master system where you compress from should be on the higher release / SP level within the CUA landscape, so if this system is the highest in the landscape then I doubt it is going to work very well on the backend systems anyway.
Cheers,
Julius
Re: Secure communication between SAP and .NET Application
Hi Tim,
yes, since SCE is 32 bit i am using NW SSO 1.0 secure login client library files.
I have installed Secure login client in my .NET application server and specified Library path as " C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll" . But still getting same issue "Can not connect to target SNC partner name = "p:CN=SAP/KerberosSC2@DOMAIN.COM".
Thanks,
Krishna
Re: Secure communication between SAP and .NET Application
Yes TIM, in that thread i found solution like i can use Secure login client 64 bit library file at client side. But i am still getting same error.
Re: Secure communication between SAP and .NET Application
Hi Krishna, this sounds comparable to a typical ABAP-to-ABAP SNC scenario with a fixed technical user. So this could be solved like ABAP-to-ABAP SNC (or AS-JAVA-to-ABAP-RFC): with X.509 certificate and CCL.
Have look at this thread Simple JCo connection with SNC. Nowadays one would replace the secude libraries by the Common Cryptolib.
Regards,
Lutz
Profile Generation problem after EHP upgrade
Hello,
Can someone help here. We have recently upgraded to EHP 7.
After upgrade, we see user buffer is not getting updated from the roles with large data. for eg, for the derived roles with more than one profile, the objects are available in the role, role is assigned to user, profiles looks generated with green status, user comparison looks good.
But objects does not appear in user buffer , hence user misses authorization for the objects and the role is not appeared when we check in SUIM.
Does anybody know any Authorization subnotes need to be implemented or any other solution?
Due to the profile generation problem in SUPC, We had already implemented sub note: 2220928. Is there any other linked subnotes?
Re: Secure communication between SAP and .NET Application
Hi Lutz, would it be possible to encrypt the communication in the same scenario you mention there, but using the MIT Kerberos 5 library? (instead of Common Cryptolib).
Re: Secure communication between SAP and .NET Application
Except that using certificates means you can't have end to end identity, e.g. if architecture is as follows:
Web browser/workstation --> .net app server --> AS ABAP
With above, if you use Kerberos end to end, then the AS ABAP system will know the identity of the user logged onto workstation. If you use certificates between .net app server and AS ABAP then this won't be possible.
When I help customers with this exact scenario I find they prefer the end to end identity since it gives better control over the access to data on the back end ABAP system.
Re: Secure communication between SAP and .NET Application
Did you buy an NW SSO 1.0 license ? if you didn't you can't use this library.
Re: Disable SAP GUI login
Hi,
Password logon for CRM and BI users is required through CRM and BI URL. So, making login/disable_password_logon as 1, will disable URL logging. So, your suggestion will not fit, my requirement.
however, your suggestion will fit for SSO, through portal.
regards
Plaban
Re: Secure communication between SAP and .NET Application
Hi Tim,
Our Scenario is like exactly you mentioned above. We are using web browse to connect .NET app server and we provide SAP backend system details like usernname, password, client etc to connect.
Web browser/workstation --> .net app server --> AS ABAP
From SAP server end SNC is configured similar to Configuring SAP SNC without Single Sign-On on UNIX/Solaris/Linux between SAP GUI -> AS ABAP
Similar to above we are configuring .NET app --> AS ABAP using NW SSO Secure login client at Client side. Instead of 32 bit SCE file we are using NW SSO Secure login client 64 bit SECGSS.dll file at .NET application side (We had Licensed NW SSO 1.0 product and Recently it is expired but using Dump file which was licensed one )
When connecting we are getting below dump.
**** Trace file opened at 2016-04-25 18:51:01 (UTC+05:30 India Standard Time)
SAP .NET Connector 3.0 with file version 3.0.5.0 running on 64-bit .NET Framework 4.0.30319.42000
Program: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug\NCO test.vshost.exe
Working dirctory: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug
Operating system: Windows 7 Enterprise 64-bit Service Pack 1
Processor: 4x AMD64 (or x64)
SAP release: 720, Kernel release: 720, Kernel patch level: 111
Hostname: INPUNKGINNELA1, IP address: 10.82.23.21, IP_v6 address:
Default trace level: None
>> Error entry 2016-04-25 18:51:01.936
Failure to create pool for destination 6be87c8c-4a9a-4450-ba85-00181306983d [NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM]
SAP.Middleware.Connector.RfcCommunicationException:
LOCATION CPIC (TCP/IP) with Unicode
ERROR GSS-API(maj): Miscellaneous failure
GSS-API(min): A2210223:A2210223
target="p:CN=SAP/KerberosSC2@DOMAIN.COM"
TIME Mon Apr 25 18:51:01 2016
RELEASE 720
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxxall.c
LINE 3345
DETAIL SncPEstablishContext
SYSTEM CALL gss_init_sec_context
COUNTER 3
at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)
at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)
at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)
at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)
at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)
at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)
at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)
at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)
>> Error entry 2016-04-25 18:51:02.128
NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM
SAP.Middleware.Connector.RfcCommunicationException:
LOCATION CPIC (TCP/IP) with Unicode
ERROR GSS-API(maj): Miscellaneous failure
GSS-API(min): A2210223:A2210223
target="p:CN=SAP/KerberosSC2@DOMAIN.COM"
TIME Mon Apr 25 18:51:01 2016
RELEASE 720
COMPONENT SNC (Secure Network Communication)
VERSION 5
RC -4
MODULE sncxxall.c
LINE 3345
DETAIL SncPEstablishContext
SYSTEM CALL gss_init_sec_context
COUNTER 3
at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)
at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)
at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)
at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)
at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)
at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)
at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)
at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)
at SAP.Middleware.Connector.RfcConnectionPool.GetPool(RfcDestination destination, Boolean forRepository, Boolean create)
at SAP.Middleware.Connector.RfcDestination.GetClient(Boolean forRepository)
at SAP.Middleware.Connector.RfcDestination.Ping()
Please help what is wrong with the connection and how it can be resolved.
Thanks,
Krishna
Re: External ABAP call to Sharepoint using SAML and OAuth
Hi Greg,
I have to fullfill a similar requirement. Did you succeed with your implementation? Could you give me some hints?
Regards, Thomas
Re: SAP ID / Account Naming Convention
Hi
1. Users are sometimes changing names or identical first and last name can occur. You should be prepared to solve this problems
2 . Numbers are generally good, but administration is more time consuming.
3. Users are migrating inside organizations, and this approach can lead you to mess.
Regards
Przemek
Re: Issue when implementing notes - report "PRGN_COMPRESS_TIMES"
Thank you to all for your help.
We know that we are running an OLD version of SAP & SP.
Regards,
Zobair
Re: Secure communication between SAP and .NET Application
Hi Tim,
Please let me know if my above configuration is correct? am i missing anything here? Do we need establish trust relationship between .NET application and SAP by importing PSE in each other system?
what are parameters required from .NET application code.
appreciate your help on this.
Thanks,
Krishna
Re: Secure communication between SAP and .NET Application
Hi Lutz,
I am trying to configure SNC with window integrated authentication kerberos protocol between .NET application and AS ABAP server.
Thanks,
Krishna