BASIC*SSO2*_*_*ws Logon stack

[Former Member]

Dear colleagues,

Im facing a recurring problem on a 7.31 SP 14, obvioulsy while logoff of the SolMan user:

So I wanted to check BASIC*SSO2*_*_*ws logon stack, the exception pointed me to. Unfortunately I wasnt able to find it in the NWA, but after some struggling around in the config tool (on my local EP 7.4 VM), I saw that one together with many similar logon stacks, which I also cant find in the NWA.

So, I have some questions, I would be glad somebody could help me on, regarding this topic:

1.)I cant find any documentation on those "hidden" logon stacks from SAP. Sorry, I have probably not searched properly, but cant help my self currently. Could somebody point me to appropriate SAP Help page?

2.)Why I cant see this stuff in the NWA?

3.)How does the SolMan user knows he needs to use this logon stack? I would have assumed its taking the default stack for authentication

4.)Last but not least, how can I overcome

"2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          exception  while trying to invoke the method javax.security.auth.Subject.getPrivateCredentials(java.lang.Class) of a null object loaded from local variable 'subject'"?

Why does this happen? Means why this user is not logged off properly?

I have the suspicion I could simple remove affected login module, but dont want to try something I dont understand.

Thank you,

cheers

[mabujan]

Hi Lawrence,

We are facing exactly the same issue with the SolMan user.

Did you find the solution?

Unfortunately we cannot remove the login module as it is required as part of the ticket template.

Appreciate your input,

Manuel

[Former Member]

Manuel, I have an OSS call running on this since 27.01.2016, but didnt reached anything until now. Let me come back on my own questions to enlight it a bit:

1.)I cant find any documentation on those "hidden" logon stacks from SAP. Sorry, I have probably not searched properly, but cant help my self currently. Could somebody point me to appropriate SAP Help page?

This isnt existing, I was pointed to in the call: Authentication for Web Services - Security Aspects for Web Services - SAP Library, but after checking this link you will this is a generic description of web service authentication mechanisms, provided by our SAP colleagues to get me lost

2.)Why I cant see this stuff in the NWA?

corresponding to 1, still no idea

3.)How does the SolMan user knows he needs to use this logon stack? I would have assumed its taking the default stack for authentication

analogous to 1 and 2: no documentation on this topic, nothing I can tell on

4.)Last but not least, how can I overcome

"2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          exception  while trying to invoke the method javax.security.auth.Subject.getPrivateCredentials(java.lang.Class) of a null object loaded from local variable 'subject'"?

Why does this happen? Means why this user is not logged off properly?

After 6 months and 4 SAP employees as counterparts working in appropriate OSS I at least managed to get the statement in the OSS its a product error, obviuosly SAP is working on a correction. Indeed, meanwhile we are not longer interested in a solution: its too expensive and too exhausting for our customer to get a solution. My advice would be: put the location off in the log config of appropriate EP and forget this error, I have the strong suspicion Walldorf isnt interested in a correction, it makes no sense to wait for.

cheers