Hello,

in our system, we have 2 NetWeaver_ORA license present with different hardware key. First is of type Permanent and another is of type Temporary.

in current scenario, Temporary license is Active and is going to expire in next week.

my concern is can we delete current active temporary license, and if we delete it , does all user will able to log in to the system?

If we can delete current temporary license, will it automatically activate another license, as both have different hardware key.

As we don't have OS level access in hand and also sap* is not enabled.

please suggest.

BR,

Chandresh.

Hi to all!

I am trying to implement SAP SSO for RHEL.

I created SPN:

setspn -L SAPServiceEW1

Registered ServicePrincipalNames for CN=SAPServiceEW1,CN=Users,DC=mydomain,DC=local:

        CN=SAPServiceEW1.MYDOMAIN.LOCAL/KerberosTDI

        p:CN=SAPServiceEW1.MYDOMAIN.LOCAL/KerberosTDI

        SAPServiceEW1.MYDOMAIN.LOCAL/KerberosTDI

        SAPServiceEW1/KerberosTDI

I created Kerberos keys:

snc -O SAPServiceEW1 status -V

------------------------------------------------------------------------------

------------ status    -------------------------------------------------------

------------------------------------------------------------------------------

Product version     : Secure Login Library 1.0 SP 4 Patch 3

                    : CryptoLib            8.3.7.12

                    :                      linux-gcc-4.3-x86-64

GSS library         : available

GSS library name    : libsecgss.so

PSE directory       : (existing) /home/ew1adm/sec

PSE file            : (existing) /home/ew1adm/sec/pse.zip

STRUST cred file    : (missing ) /home/ew1adm/sec/cred_v2

SNC config file     : (existing) /sap/usrsap/EW1/SLL/gss.xml

PSE accessible      : yes

PSE logged in       : yes

PSE credentials     : MasterPassword SystemDefault

Kerberos keyTab     :  8 entries

1: p:CN=SAPServiceEW1@MYDOMAIN.LOCAL (KeyType DES)

2: p:CN=SAPServiceEW1@MYDOMAIN.LOCAL (KeyType AES128)

3: p:CN=SAPServiceEW1@MYDOMAIN.LOCAL (KeyType AES256)

4: p:CN=SAPServiceEW1@MYDOMAIN.LOCAL (KeyType RC4)

5: SAPServiceEW1@MYDOMAIN.LOCAL (KeyType DES)

6: SAPServiceEW1@MYDOMAIN.LOCAL (KeyType AES128)

7: SAPServiceEW1@MYDOMAIN.LOCAL (KeyType AES256)

8: SAPServiceEW1@MYDOMAIN.LOCAL (KeyType RC4)

------------------------------------------------------------------------------

SNC keys registered :  0 entries

dev_w0:

SsfSapSecin: getenv(SECUDIR)=="/usr/sap/EW1/DVEBMGS00/sec"

N  SsfSapSecin: PSE /usr/sap/EW1/DVEBMGS00/sec/SAPSYS.pse found!

N

N  =================================================

N  === SSF INITIALIZATION:

N  ===...SSF Security Toolkit name SAPSECULIB .

N  ===...SSF library is /usr/sap/EW1/DVEBMGS00/exe/libsapcrypto.so .

N  ===...SSF default hash algorithm is SHA1 .

N  ===...SSF default symmetric encryption algorithm is AES128-CBC .

N  ===...SECUDIR="/usr/sap/EW1/DVEBMGS00/sec"

N  ===...loading of Security Toolkit successfully completed.

N  ===   CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.35 pl40 (Mar 16 2015) MT-safe

N  =================================================

N  SignInit: successfully obtained handle for Security Context cache

N  SPNegoInit: SPNego disabled ("spnego/enable" not set to 1)

M  JrfcVmcRegisterNativesDriver o.k.

M  CGROUPS: ThSetProcessPriority workerType=1

M  CGROUPS: changing prio of pid 17793 to medium

M  CGROUPS: disabled

E  Enqueue Info: rdisp/wp_no_enq=1, rdisp/enqname=<empty>, assume msk-ewm-tst_EW1_00

E  Enqueue Info: enque/use_pfclock2 = FALSE

E  EnqLockTableSizeCalculate: session quota = 100%

E  EnqLockTableCreate: create lock table (size = 67108864)

E  EnqLockTableMapToLocalContext: enque/use_pfclock2 = FALSE

GetWritePermissionForShm( pLocation = 281, pEnforce = 0 )

G  RelWritePermissionForShm( pLocation = 277, pEnforce = 0 )

N  SncInit():   found snc/data_protection/max=3, using 3 (Privacy Level)

N  SncInit():   found snc/data_protection/min=2, using 2 (Integrity Level)

N  SncInit():   found snc/data_protection/use=3, using 3 (Privacy Level)

N  SncInit(): found  snc/gssapi_lib=/usr/sap/EW1/SLL/libsecgss.so

N    File "/usr/sap/EW1/SLL/libsecgss.so" dynamically loaded as GSS-API v2 library.

N    The internal Adapter for the loaded GSS-API mechanism identifies as:

N    Internal SNC-Adapter (Rev 1.1) to SAP Netweaver Single Sign-On v1.x

N  SncInit():   found snc/identity/as=p:CN=SAPServiceEW1@MYDOMAIN.LOCAL

N  SncInit(): Accepting  Credentials available, lifetime=Indefinite

N  SncInit(): Initiating Credentials available, lifetime=Indefinite

M  ***LOG R1Q=> p:CN=SAPServiceEW1@MYDOMAIN.LOCAL [thxxsnc.c    300]

M  SNC (Secure Network Communication) enabled

SNC string in SAP GUI:

p:CN=SAPServiceEW1@MYDOMAIN.LOCAL

SNC Library for SAP GUI:

SNC_LIB=C:\Program Files (x86)\SAP\FrontEnd\SecureLogin\lib\secgss.dll

There is settings in DEFAULT.PFL about SCN:

snc/enable=1

snc/permit_insecure_start=1

snc/accept_insecure_cpic=1

snc/r3int_rfc_qop=8

snc/r3int_rfc_secure=0

snc/data_protection/use=3

snc/data_protection/min=2

snc/data_protection/max=3

snc/identity/as=p:CN=SAPServiceEW1@MYDOMAIN.LOCAL

snc/gssapi_lib=/usr/sap/EW1/SLL/libsecgss.so

snc/force_login_screen=1

snc/accept_insecure_rfc=1

snc/accept_insecure_gui=1

ssf/name=SAPSECULIB

ssf/ssfapi_lib=$(ssl/ssl_lib)

ssl/ssl_lib=$(DIR_EXECUTABLE)$(DIR_SEP)$(FT_DLL_PREFIX)sapcrypto$(FT_DLL)

sec/libsapsecu=$(ssl/ssl_lib)

But when I open the system in SAP GUI:

What I missed ? Thanks!!

Hello,

Is there any provision to set same password for all child systems by default in CUA?

Below is my system landscape.

CUA System: SMP

Child System 1: ERP

Child System 2: BIP

I have created user John in ERP. Now I have to create it in BIP as well. When I add BIP system against the user John in CUA and save it, I am not asked for an initial password.

Now, when I try to access BIP System with the new user created, it expects me to give the initial password which I had set for the user John when it was first created in CUA (for ERP system in this case).

Agreed that I can change initial password for BIP system, but isn't there any provision to give BIP user the same password automatically as that of ERP System without being prompted for initial password?

CUA as well as child systems are configured on NW7.4 SP10.

SSO is not configured for the landscape.

br

Yatin

Hi, In our dual stack system 731. When performing 'Check --> Transport Tool' the SDM Ping is failing with "com.sap.di.cts.deploy.api.exception.DeployToolCommunicationException: RemoteException: Server xxxx.com did not accept login"

The default trace file is showing

#2.#2016 01 11 16:45:31:166#+00#Error#com.sap.cts.deployer.Result#

#BC-CTS-TLS-PLS#sap.com/tc~cts~appl#C0000A66F60816360000000300001711#244649550000000005#sap.com/tc~cts~appl#com.sap.cts.deployer.Result#J2EE_ADMIN#4568##00226434A05C1ED5AE903CBDE06E9D14#568F7363AC991DF2E10000000A66F608#0A66F6081E075693DBF6015A00000000#1#Thread[HTTP Worker [@110934012],5,Dedicated_Application_Thread]#Plain##

com.sap.di.cts.deploy.api.exception.DeployToolCommunicationException: RemoteException: Server XXXX.com did not accept login request as apiadmin on port 52004 - Connection between SDM client and server is brokencaused by:com.sap.sdm.apiimpl.remote.client.APIRemoteExceptionImpl: Server XXXX.com did not accept login request as apiadmin on port 52004 - Connection between SDM client and server is broken#

I have reset the SDM Password via STMS --> SID -->  Goto --> SDM/DC Username/Password

Any help would be appreciated.

Thanks

Hi Experts,

Needs your valuable inputs regarding issues in STMS,

1.     System is Showing Data with status Cross symbol and message " Obsolete and missing message "

2.     Refreshing an import queue is taking so much time.

Please suggest,

Thanks,

Ahmed

HI All Experts,

we have been planing to migrate our central machine (kernel 741) to distributed machine (742) using system copy, but we are aware of some differences between source and target machines, first of all we need to upgrade to kernel 742 since 741 is not available in store anymore, secondly NW 72 comes with Oracle 12.1 while our machine with kernel 741 is still working with oracle 11.2, so there are some questions for migration phase as below:

1. if we just create an Export from old machine and start a system copy with new kernel (742) and Oracle RDBMS 12.1 in target machine, is there any problem with this scenario?

2. difference between version of kernel or oracle considered as a major change and need heterogeneous system copy or it is homogeneous ?

3. and last question, do kernel 742 work with oracle 11.2.0.3?

Regards,

ALI.

Hi experts,

we want to open an SSL Connection from WebDispatcher to ABAP-System.

As far as I know, I need to open the MSG-http port (80##) and the ICM-https Port for this in DMZ.

At least for a JAVA-System this is enough.

Now I did figure out, that for a ABAP-System also the ICM-http Port needs to be opened.

Is this correct, so that for a ABAP system I have to open also the http port if I want to make a trusted connection?

(if I don't open it, I get a "Server is not reachable").

Kind regards

Dear Gurus,

We are taking error at SUM execution step "MAIN_TRANSEXEC/TABIM_TRANS".

Hana 1503 ERP is upgrading for Insurance addons.

---------

HANA DB (SUSE)

128 GB Virtual

6 x core

128 gb RAM

-----------

SAP APP Server

4 x core

16 Gb Ram

------------

SUM Version : SUM10SP14_8-20006676

Kernel Version : Tried both 7-42(sp:300) and 7-45(sp:23) Kernels with same error.

SOFTWARE UPDATE MANAGER

---------------------------------------------------------------------------------------------------------

Checks after phase MAIN_TRANSEXEC/TABIM_TRANS were negative!

Last error code set: Detected 1 aborted activities in 'TABIMTRNS.ELG'

Calling 'D:\usr\sap\VEM\DVEBMGS00\exe/tp' failed with return code 12, check D:\SUM\SUM\abap\log\SAPup.ECO for details

ERROR: Detected the following errors:

# D:\SUM\SUM\abap\log\SAPI-700COINMSG.VEM: 4 ETW000 [ dev trc,00000] sc_p=00000047D534E888,no=85,idc_p=00000047D53B2930,con=0,act=1,slen=60,smax=256,#vars=8,stmt=00000047DA25C800,table=DOKTL 4 ETW000 [ dev trc,00000] stmtid = <3/DOKTL /268435456/20140925204956> 4 ETW000 [ dev trc,00000] INSERT INTO "DOKTL" VALUES( ? , ? , ? , ? , ? , ? , ? , ? ) ; 4 ETW000 [ dbtrtab ,00000] ***LOG BY4=>sql error 129 performing SEL on table DOKTL 4 ETW000 [ dbtrtab ,00000] ***LOG BY0=>transaction rolled back by an internal error: AttributeEngine: not enough memory 2EETW000 sap_dext called with msgnr "1": 2EETW000 ---- db call info ---- 2EETW000 function: db_docu 2EETW000 fcode: CI_CLOSE_SEQ_ACCESS 2EETW000 len (char): 68 2EETW000 key: FU/MSG/BAPI_VTG_CREATE_COMMENT DT0002 2EETW000 retcode: 1 2EETW000 sql error: 129 transaction rolled back by an internal error: AttributeEngine: not enough memory 2EETW125 SQL error "129" during "" access: "transaction rolled back by an internal error: AttributeEngine: not enough memory"

A trouble ticket and an archive with all relevant log files have been generated. Trouble ticket: "D:\SUM\SUM\abap\log\SAPup_troubleticket.log" Log archive: "D:\SUM\SUM\abap\log\SAPup_troubleticket_logs.sar"

---------------------------------------------------------------------------------------------------------------------------

TABIMTRNS.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MAIN IMPORT ERRORS and RETURN CODE in SAPI-700COINMSG.VEM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4 ETW000 [ dev trc,00000] sc_p=000000CF05F1BE60,no=14,idc_p=000000CF05F813D0,con=0,act=1,slen=69,smax=256,#vars=1,stmt=000000CF0A5CF470,table=E071

4 ETW000 [ dev trc,00000] stmtid = <3/E071 /1619001408/20160112192251>

4 ETW000 [ dev trc,00000] SELECT * FROM "E071" WHERE "TRKORR" = ? ORDER BY "TRKORR" , "AS4POS" ;

4 ETW000 [ dbtrtab ,00000] ***LOG BY4=>sql error 2048 performing SEL on table E071

4 ETW000 [ dbtrtab ,00000] ***LOG BY0=>column store error: search table error: [6952] AttributeEngine: not enough memory

2EETW000 sap_dext called with msgnr "1":

2EETW000 ---- db call info ----

2EETW000 function: db_setget

2EETW000 fcode: RT_SETB (65535)

2EETW000 tabname: E071

2EETW000 len (char): 20

2EETW000 key: SAPK-700COINMSG

2EETW000 retcode: 1

2EETW000 sql error: 2048 column store error: search table error: [6952] AttributeEngine: not enough memory

2EETW125 SQL error "2048" during "" access: "column store error: search table error: [6952] AttributeEngine: not enough memory"

1 ETP111 exit code : "12"

-----------------------------------------------------------------------------------------------------------------------

SAPUP

2EETW000 sql error:  129 transaction rolled back by an internal error: AttributeEngine: not enough memory

2EETW125 SQL error "129" during "" access: "transaction rolled back by an internal error: AttributeEngine: not enough memory"

D:\usr\sap\VEM\DVEBMGS00\exe\R3trans.exe finished (0012).

--------------------------------------------------------------------------------------------------------------------

PHASES

2 ETQ399 Distribute 12 parallel processes to 2 tp and 6 R3trans.

3 ETQ120 20160112225745: PID 7708 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\DEFAULT.TPP" setstopmark "buffer=VEM" before SAPK-700COINMSG', output written to 'D:\SUM\SUM\abap\log\TP.ECO'.

3 ETQ123 20160112225745: PID 7708 exited with status 0 (time 0.000 real)

4 ETQ399 'tp' ignored "before SAPK-700COINMSG" phrase - moving STOPMARK manually there in buffer 'VEM'.

3 ETQ121 20160112225745: PID 4228 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\TABIMTRNS.TPP" put VEM "-Dmainimp_proc=2" "-Dparallel=6"' in background, output written to 'D:\SUM\SUM\abap\log\SAPup.ECO'.

3 ETQ123 20160112225825: PID 4228 exited with status 0 (time 0.000 real)

2 ETQ399 tp finished successfully.

4 ETQ399 Group 4: Calling 'tp put' for transports from 'SAPK-700COINMSG' to 'SAPK-700COINMSG'.

4 ETQ399 Distributing 12 parallel processes for import.

2 ETQ399 Distribute 12 parallel processes to 1 tp and 12 R3trans.

3 ETQ120 20160112225825: PID 7284 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\DEFAULT.TPP" setstopmark "buffer=VEM" before SAPK-603DFININSURANC', output written to 'D:\SUM\SUM\abap\log\TP.ECO'.

3 ETQ123 20160112225825: PID 7284 exited with status 0 (time 0.000 real)

4 ETQ399 'tp' ignored "before SAPK-603DFININSURANC" phrase - moving STOPMARK manually there in buffer 'VEM'.

3 ETQ121 20160112225825: PID 9836 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\TABIMTRNS.TPP" put VEM "-Dmainimp_proc=1" "-Dparallel=12"' in background, output written to 'D:\SUM\SUM\abap\log\SAPup.ECO'.

3WETQ123 20160112230420: PID 9836 exited with status 4 (time 0.000 real)

2 ETQ399 tp finished successfully.

4 ETQ399 Group 5: Calling 'tp put' for transports from 'SAPK-603DFININSURANC' to 'SAPK-60027INLSOFE'.

4 ETQ399 Distributing 12 parallel processes for import.

2 ETQ399 Distribute 12 parallel processes to 2 tp and 6 R3trans.

3 ETQ120 20160112230420: PID 9336 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\DEFAULT.TPP" setstopmark "buffer=VEM" before SAPK-100AGINUIEAAP01', output written to 'D:\SUM\SUM\abap\log\TP.ECO'.

3 ETQ123 20160112230420: PID 9336 exited with status 0 (time 0.000 real)

4 ETQ399 'tp' ignored "before SAPK-100AGINUIEAAP01" phrase - moving STOPMARK manually there in buffer 'VEM'.

3 ETQ121 20160112230420: PID 6180 execute 'D:\usr\sap\VEM\DVEBMGS00\exe\tp "pf=D:\SUM\SUM\abap\var\TABIMTRNS.TPP" put VEM "-Dmainimp_proc=2" "-Dparallel=6"' in background, output written to 'D:\SUM\SUM\abap\log\SAPup.ECO'.

1 ETQ124 Scanned file 'log\SAPI-700COINMSG.VEM' from offset 507057666 to 520025422 for errors.

1 ETQ124 Scanned file 'log\SAPI-603DZININSURANC.VEM' from offset 114 to 1350535 for errors.

What could be wrong ?

Best Regards

Hi dear SAP Forum,

    I´m updating some components on my S4 for Hana, using SUM and having following error:

Severe error(s) occurred in phase PREP_INIT/TOOLCHECKXML_UPG!

Last error code set: The tool 'dbsl' did not meet all required checks, the failure can be resolved

Error: There is a difference regarding 'release': it ranges from 721 (R3trans) to 742 (disp+work)!

I updated 3 packages

dbsl

R3trans

disp+work

on SUM exe directory.

Any help will be rewarded

Thanks so much

Hi All,

I have an issue in PI System where I could see very high roll wait time.

Can anyone please help me out to reduce the roll wait for HTTP requests.

Thank You

Regards,

Satyardha

1) how ways to do  Deploy war file in SAP PO System (JAVA Stock)

2) if its using telnet please guide me how to how to Deploy war file in SAP PO System (JAVA Stock) and if any step by step doc is there please provide

3) and we need any down time for doing this??

Hello Gurus,

I want to analyse an SAP system if it is using the available memory in an optimised manner

From your past experiences , can you let me know the thumb rule to assess?

Say for Ex , I have the below memory assigned to my host

             total       used       free     shared    buffers     cached

Mem:          2019       1060        958          0          0         47

-/+ buffers/cache:       1013       1006

Swap:           19          0         19

Total:        2039       1060        978

and I guess we can have 60% allocated to SAP and 30% for the database.

Can you on a high level let me know , what are the main parameters which I need to check in order to make sure that my SAP server is properly using the allocated memory.

My DB size is 15 TB.

Basically i want to know the most important oracle and sap parameters to consider.

Thanks,

Sowmya

HI,

We are configuring SSL for SAP EP(NW 7.02) on windows plate form.

We have SSL V3 certificate for entire domain(wild card used), and same certificate i am directly importing in visual admin via import CSR response, but it is giving error as below:

Please suggest how to import SSL certificate.

Tarun

Dear Sir / Madam,

We recently encounter a occasion, that many users in SAP system seems hang up.

During analysis (From ST04), we soon find out that during the time, many UPDATE process (accross various server) encounter DB level blocking.

However, the overall recovery time is still rather long (near 1 hour), as we are trying to use least disruptive way to kill that process.

(i.e. the update process holding the DB connection, which being at the head of chain of DB connection encountering blocking)

We have tried in this sequence :

1) Contact user by phone, seeking them to kill his own by log out (Not work, user only sign out, update process still there)

2) On the server where the concerned UPDATE process exist, use SM04 to log off the concerned user (Not work)

3) On the server where the concerned UPDATE process exist, use SM50, cancelled the update process "without core" (That Works)

After kill that UPDATE process, from SM13, we see the concern update shown RED Alert [Error (no retry)],

but the hang up situation did resolved.

Retrospectively there seems additional options

4) On DB engine side, KILL the DB connection session with Database tools

     (which I think may cause similar effect, just like DB Cluster switching occurs during SAP program (with update) running )

5) Kill the update from SM13 (Is it at all possible ?)

So what would be the preferred way for Netweaver Administrator, when trying to do this recovery ?

(i.e. cause least effort for functional team to recover application level problem)

Any advice would be much appreciated.

Regards,

Eric

FYI.

We are using Netweaver 7.01, SQL Server 2008, Windows 2008

transaction code for browsing t-codes in ERP 6.7

Dear all,

We have two clients in our production system: 700 and 800

We have one system administrator who is responsible for transporting TRs from QAS into PRD, but here is a problem, how to avoid miss importing into wrong client? as I know, it seems we can control it by role concept, however we have only one basis guy, I think it's useless to do it by role assignment.

May I know how you handle it normally? Thanks a lot.

Best regards,

Fresh

Hi

While generating stackfile i am getting below dump .

System: solman 7.1 (stack level 710 0008)

===================================

Category               ABAP Programming Error

Runtime Errors         OBJECTS_OBJREF_NOT_ASSIGNED_NO

Except.                CX_SY_REF_IS_INITIAL

ABAP Program           CL_MO_SMP_ADAPTER=============CP

Application Component  SV-SMG-MAI

Date and Time          14.01.2016 15:14:18

  Short text

     Access via 'NULL' object reference not possible.

What happened?

     Error in the ABAP Application Program

     The current ABAP program "CL_MO_SMP_ADAPTER=============CP" had to be

      terminated because it has

     come across a statement that unfortunately cannot be executed.

Dear Experts!

I am trying to import transport request from DEV to QAS - (ECC 6.0 EHP 4) , please advice.

Transport control program tp ended with error code 0012

Message no. XT200

Diagnosis

An error occurred when executing a tp command.

  Command: IMPORT NEDK906718 NEQ client500 U0126 pf=\\SAPQAS.

  Return code: 0012

  Error text: A tool used by tp aborted

  Request: NEDK906718

System Response

The function terminates.

Procedure

Correct the error and execute the command again if necessary.

Thanks !

Hello,

I think transaction FMSU writes to table FMAPSTAT.

https://scn.sap.com/thread/1397459

Can I track down which user, changed which record, when, for this trans. FMSU?

Thanks

Ilian

Hi Experts,

We have previous backup of PSE's after importing, still it shows red in STRUST  It has all the external  certificates as it is  since we performed table backup.

Is there any way to fix WS  PSE's

regards,

Mandeep