Re: SAP Security - create 2 completely separate companies on 1 instance
Julius -- any idea how to make this work or will we need 2 clients?
View ArticleRe: SAP Security - create 2 completely separate companies on 1 instance
Hi Cheryl, I've seen something like this before but my memory is hazy. It was a time of un-bundling utility companies. My understanding is that you would like to re-use as much as possible. You could...
View ArticleRe: SU25 UPG ENHP : how to find modified roles?
Yes, current system is a copy of production and its available for few days only. We have to do our analysis and then we will start with the upgrade in dev. with the changes in SU25 date/time stamps are...
View ArticleRe: Profile is automatically getting generated in production ??
Hi,is a job like "PFCG_TIME_DEPENDENCY" running on your system?One step is the report "RHAUTUPD_NEW"This one generates the assignment of authorization to users active profile. Perhaps it's generating...
View ArticleRe: Store sensitive credentials for https connections?
Hi Steffen, I think your threat model is too strict. Yes, a user with access to debugger (read-only is enough) will be able to put a break point after your programs reads data from secure store and see...
View ArticleSSF and digital signatures
Hi Guys! I need to exchange XML documents with third-party. The aproach is to generate it from SAP and then sign it with Digital Signature. I found information, that I could use SSF to achieve it. On...
View ArticleRe: SSF and digital signatures
In order to use SSF or any SAP Cryptographic Library functionality from AS ABAP, configuration is required. See link and link for details. You can use transaction SSO2 to verify. If you want to use it...
View ArticleRe: SSF and digital signatures
I want to run it from Front-End to be able to communicate with smartcard. Best regardsAna
View ArticleRe: SSF and digital signatures
You can't invoke it directly, it is invoked by RFC from AS ABAP and for it to work you need to have SAP GUI installed and be connected to the AS ABAP.
View ArticleRe: SSF and digital signatures
I can do a test with ssfrfc.exe. And it's telling me that the DLL cannot be loaded. I found one more DLL: secgss.dll. This one was loaded successfully, but doesn't have functions that I'm interested...
View ArticleRe: SSF and digital signatures
Hi Ana, as far as I am aware the crypto library from SAP does not support smartcards. So unless this has changed recently you are wasting your time with SAP library. A quick google query returns some...
View ArticleRe: SSF and digital signatures
Well, according to help.sap.com: http://help.sap.com/saphelp_nw04/helpdata/en/62/459f34f36311d3a6510000e835363f/content.htm SSF requires the use of a security product to perform its functions. Per...
View ArticleRe: SSF and digital signatures
I think that documentation is misleading in this case. Check note 86927 It's from 2009 but I think it's still valid. It seems like SAP has a lirbary that supports smartcards but it's part of NW SSO...
View ArticleRe: SSF and digital signatures
Hi Anatoly, the page you are referring to is related to the features of security products of third party companies, not the features of the crypto libraries provided by SAP. If you want to do front-end...
View ArticleClik here to view.
Re: SSF and digital signatures
Patrick is correct about the statement. We have since improved the wording of the statement to make the distinction clearer (fromGeneral Information - SAP NetWeaver Application Server ABAP Security...
View ArticleRe: Store sensitive credentials for https connections?
Hi Martin, Why not put the reading and sending of the secret into a macro? As far as I know one cannot debug those, not even with system debugging. If one creates the key only with reading rights for...
View ArticleRe: Profile is automatically getting generated in production ??
Hello Dayanand, Lars Thank you for the replies. It seems someone moved only those 5 MTs in another revtrac path. Hence I didn't get that transport in workbench where I searched using the normal path....
View ArticleClik here to view.
STAUTHTRACE not returning values for objects
while determining a role for a service (as in an interface service / SPROXY) user using STAUTHTRACE, I came across something unusual. the services (6 in total) are called externally and handled by one...
View ArticleClik here to view.
Re: SSF and digital signatures
Hello, thanks for the information. For me it's really unclear and the documentation provided is very misleading. My problem is that I need to sign XML documents with XaDES. So far we recieved our...
View ArticleClik here to view.
Re: Security Audit Log is not active (0170)
Hi Pavan,I recreate all filter as described this http://scn.sap.com/thread/3298688And start security audit. Result the same: Security Audit Log is not active (0170).May you have idea why system return...
View Article