Re: SAP security Batch Jobs identification
Hi Ela, Please mark thread as answered if it so to close it. BR,Mangesh
View ArticleRe: An authorization object asking for ACTVT 00
Hi Vamshi, tks for answer. Unfortunately no. The objectis currentlyconfigured withall possible activities.
View ArticleRe: An authorization object asking for ACTVT 00
Hi, Wrong coding in standard program, raise to SAP, they will provide correction note. BR,Mangesh
View ArticleRe: MM02 - Class allocation: delete any class, but allow only specific...
Hi, Raise to SAP, it seems it is wrong coded, if they meant to do removal with 02 it should not be with 01. They will correct if it is mistake in coding. BR,Mangesh
View ArticleRe: Encryption Type AES-256-CTS-HMAC-SHA1-96 not working with SAP Webdispatcher
I agree with Patrick, I think CommonCryptoLib is required for AES256-CTS-HMAC-SHA1-96 support, see SAP note 2004653 for details. Maybe you have downloaded and installed SAP Cryptographic Library on the...
View Articleunable to delete Role from User ID in SAP SOLMAN production system but able...
unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
Hi, What's the error? please post screenshot. BR,Mangesh
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
In Non-Production system no issue when deleting Role from User ID, but, message is "You are not authorized to assign roles" when try deleting Role from User ID in Production system with the same...
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
Run St01 trace and post the screenshot? Could you check user buffer if it has respective authorizations in user buffer (tcode SU56). BR,Mangesh
View ArticleClik here to view.
Re: unable to delete Role from User ID in SAP SOLMAN production system but...
Please see trace In Non-Production, it works with out 02 in ACTVT in S_USER_AGR
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
These are correct object for role removal, please put trace in non-prd to check if he has auth for the same. BR,Mangesh
View ArticleRe: EHP 7 - Recommended Security Approach?
If you just want to compare the hard coded changes to the changes from SAP you could also compare the customizing tables via an RFC call and transaction OY19. Compare the relevant tables after the...
View ArticleRe: Encryption Type AES-256-CTS-HMAC-SHA1-96 not working with SAP Webdispatcher
Now that I stopped to think about this, I think I'm missing the big picture. As I understand it you are trying to configure Kerberos SSO to the SAP backend system going through Web Dispatcher. As far...
View ArticleRe: How to use one PSE with multiple URLs?
You need a recent enough SAP_BASIS and SAP CRYPTOLIB version in order to use Alternative Subject Names in STRUST. Can you share the versions you have? See also the incoming links of this discussion...
View ArticleRe: How to use one PSE with multiple URLs?
All - I appreciate all the responses. Our CA provider is currently Entrust. The Subject (Alt) names are added when posting the CSR. If we want to use more than two "Subject (Alt) names" in addition...
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
Many thanks so far, both the mentioned authorizations are available in Non-PROD and PROD, BUT, no issues while handling Role removal activity via SU01 in Non-PROD while role removal activity is not...
View ArticleHow to restrict the Request and Response process in that cookies should be...
Dear Experts,Please any one can help me i am getting one security issue.Some third party tools using and hacking the Request and Response of the Server.That time there taking one successfully Request...
View ArticleRe: unable to delete Role from User ID in SAP SOLMAN production system but...
Hi, For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04. I...
View ArticleRe: Authorization control on Project/WBS
Hello Mangesh, Thanks for your reply. It has been resolved already just based on AO and Activity combination. RegardsSaurabh
View ArticleRe: Authorization control on Project/WBS
Hi, Great, then please mark it answered. BR,Mangesh
View Article