Quantcast
Channel: SCN: Message List - Security
Viewing all 5338 articles
Browse latest View live

Re: How to enable STMS for SNC authentication

$
0
0

Actually I don't have this problem. Perhaps it is only the SAP SSO 2.0 which works with the RFC calls of the TMSSUP* destinations, but I don't believe that. I am pretty sure there is something wrong in the SNC setup and TMS config distribution if SNC is not working.

 

SAP support also works for me. Delays are not enough to complain about if dealt with tactfully. Mostly things are very fast but at time a co-ordination for features to make them more easily implementable are needed. Sometimes you even need to wait for a major release change if there are compatibility concerns and both kernel and application coding corrections are needed.

 

Cheers,

Julius


Re: SAP NW AS add-on Code Vulnerabilities Analysis

$
0
0

Hi,

 

the tool is not part of the standard NetWeaver AS ABAP delivery however it requires a seperate license to be used.

 

Kind regards,

 

Patrick

Re: STAUTHTRACE not returning values for objects

$
0
0

Interesting is that the type and name tags are initial. This means that the context of the check (type=HS, name=<ws_name>) are not known (perhaps because it is not in USOBHASH yet?).

 

I think you should open a customer message and report it to SAP. I suspect that when trying to get the <ws_name> from usobhash using the webservice hash, it is also clearing the authorization data fields. Just a guess though - wouldn't bet my hat on it..  :-)

 

Cheers,

Julius

Re: SAP NW AS add-on Code Vulnerabilities Analysis

Re: Replicate All/New users in Backup system

$
0
0

Hi,

 

I meant a custom program scheduled to be executed periodically. I am not aware of a standard program that would take current users and replicate them into another client. I know that you can export/import users using basis tools but I am not sure if this is usable for periodic transfer. Writning a custom program is a easy task, you just need to search in change documents and then use standard BAPIs to create/change users.

 

Cheers

population of hr data in su01

$
0
0

is there a way to have the departement and function to be automatcally filled from the hr tables?

Re: Replicate All/New users in Backup system

$
0
0

Hi,

 

Yes, as mentioned in my earlier reply, Custom program is an option which I am considering and as you mentioned this should be the easiest approach for my requirements.

 

Thanks  to you Martin and all who has shared their views.

 

I thinks we can close this thread now.

 

I'll update this thread with my outcomes.

 

Regards,

Anuj

Re: population of hr data in su01

$
0
0

Hi Auke,

 

There is no way in which the department and functional details are automatically filled in SU01.

You can either update those details manually from SU01, or you can run an ECATT script for changing mass users.

 

Regards,

Laxman


Re: population of hr data in su01

$
0
0

Auke,

 

At which point (user creation or can be updated later) you want the data filled in SU01. Either way you need to have a custom program.

 

At user creation:- I think, you can build a user exit to read the HR specific tables and update them in USR ones.

 

Can be updated later:- Schedule a custom program to run in background to update the data.

 

 

Regards,

Daya

Re: monitoring issue in cua

$
0
0

Hello Anil,

currently we do not have change docs for the CUA landscape, but soon they will be available.

Please search form time to time for notes with the words 'RSUSRCUA' / 'SCUH'.

So Laxmans suggestion may help you.

 

Regarding Monitoring option in scua: this funciotn is described in SAP note 1645544. As only scul-entries are monitored then by ccms, this won't help regarding configuration changes.

 

b.rgds, Bernhard

Re: Profile is automatically getting generated in production ??

$
0
0

no, rhautupd_new does not generate profiles.

b.rgds, Bernhard

Re: population of hr data in su01

$
0
0

Hi,

 

there is a new enhancement spot SUID_IDENTITY that can be used for this. I am not sure which version introduced it but I can see it in 7.31SP4. You can pre-fill some fields during user creation or update identity just before saving. I haven't implemented these yet but it should be working.

 

Cheers

SM20 log missing due to max file size reached

$
0
0

Hi experts,

 

In one of our system sm20 log is incomplete because max file size reached.

 

Is there any possibility to get the complete data from any other table or from OS level?

Re: SM20 log missing due to max file size reached

$
0
0

Hello

 

You cannot recover from any table what has not been recorded in log files.

But you audit log should be able to automatically create new files and can only get stuck if file system gets full.

Check your parameters, make sur FN_AUDIT is correctly set and increase

rsau/max_diskspace/local

rsau/max_diskspace/per_day

rsau/max_diskspace/per_file


Regards


FN_AUDIT

The name must include eight (8) '+' in sequence (which the system substitutes with the current date) followed by (6) "#" (which the system replaces with a sequential number).

FN_AUDIT = AUDIT_++++++++_######.AUD

 

Name

Description

DIR_AUDIT

Directory for security audit files

FN_AUDIT

Name of security audit file

rsau/enable

Enable Security Audit

rsau/max_diskspace/local

Maximum space for security audit file

rsau/max_diskspace/per_day

Maximum size of all security audit files per day

rsau/max_diskspace/per_file

Maximum size of one single security audit file

rsau/selection_slots

Number of selection slots for security audit

rsau/user_selection

Defines the user selection method used inside kernel functions

 

539404 - FAQ: Answers to questions about the Security Audit Log

909738 - SecAudit: Files are created with other names

Re: SM20 log missing due to max file size reached

$
0
0

Hi Anjani,

 

You can check the SM20 log files which are written in the application server(DIR_LOGGING directory).

It's not that hard to check transaction SM20 to see what function modules are used by SAP. Basically, you are looking for function modules with name like RSAU_* such as RSAU_READ_FILE. Don't forget that if you remove audit files then you won't be able to read these files. So you can create your own custom table and schedule a simple report which will make a copy of audit records and then use this custom table in your report. Also don't forget that there is a security reason why audit records are written to file

 

Cheers


Re: CHARM functionality for SAP role management

$
0
0

Hi Sameer,

 

You can create a new project/correction in charm which you can customize as per your need(like removing the approval process, the charm details etc).

The transport requests for moving the security roles can be created in this charm project, thus simplifying your process.

 

Regards,

Laxman

Re: SM20 log missing due to max file size reached

$
0
0

Thanks Yves!

The different files are available but the problem here is logging stopped due to max file size reached.

 

Records are not available for 2nd half of the day.

New log will start next day as today's file size exceeded the permissible size

 

Re: SM20 log missing due to max file size reached

$
0
0

Thanks Yves!

The different files are available but the problem here is logging stopped due to max file size reached.

 

Records are not available for 2nd half of the day.

New log will start next day as today's file size exceeded the permissible size

 

Re: SM20 log missing due to max file size reached

$
0
0

Thanks Laxman!

 

Will this option recover the log which are not available for 2nd of the day?

SAP standard table for user group and system in CUA

$
0
0

Hello experts,

I am trying to get a SAP standard table that have information for user group, system and userid.

I need to create a customized program which once executed, it will provide information of total number of created users for each user group in each system in the CUA landscape.. have tried table USZBVSYS but it does not have the user group information.

 

Appreciate related advice.

 

Thanks!

 


Viewing all 5338 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>