Skip to Content
author's profile photo Former Member
Former Member

Login Module Stack of EP

Hi guys,

I am in the process to setup HeaderVariable Authentication for accessing to EP and have a some questions.

1) What Login Module Stack needs to be adjusted to use the HeaderVariableLoginModule? SAP J2EE Root or Ticket or ....

2) Are changes in the policy configurations (adding logon module) applied immediately or is a J2EE restart required?

Thanks,

Mario.

Add a comment
10|10000 characters needed characters exceeded

Related questions

4 Answers

  • Best Answer
    Posted on Jun 01, 2006 at 06:32 AM

    Well I can answer question 2 - immediately.

    Paul

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Jun 01, 2006 at 07:57 AM

    Thank you Paul.

    I've found on my own also to question 1. I have to modify the Login Module stack of template "tiket" as following:

    1) EvaluateTicketLoginModule SUFFICIENT

    2) HeaderVariableLoginModule OPTIONAL Header=REMOTE_USER

    3) CreateTickeLoginModule SUFFICIENT

    4) BasicPasswordLoginModule REQUISITE

    5) CreateTicketLoginModule OPTIONAL

    Now I'd like to know if is it possible to test the header variable login configuration without using any external web server but connect directly to Enerprise Portal.

    When I try to connect directly to the Enerprise Portal using the URL

    http://<server>:<port>/irj/portal?REMOTE_USER=<userID>

    i'm not able to log into the system, but i'm redirected to the login page.

    If I type in userID and password, portal doesn't authenticate the user.

    Is the External Web Server mandatory for the Header Variable Login Module configuration?

    Thanks in advance,

    Mario.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Jun 08, 2006 at 02:22 PM

    Thank you Paul.

    Now I've also configured the external web server. But the login (both Header Variable Authentication and Basic Password Authentication) doesn't work again.

    I noticed that portal didn't send back to me the SAP Logon Ticket. This is clear looking at cookies with HttpWatch: the cookie MYSAPSSO2 is sent empty but never received as expected!

    Any ideas? (PLEASE HELP ME)

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Jun 12, 2006 at 12:53 PM

    Hello everybody!

    I think I've configured succesfully HeaderVariableLoginModule... I've changed in the authschemes.xml the deafault scheme to be the "Header" one.

    But if I try to authenticate the user using Header Variable I receive this error from SAP Portal:

    "Cannot logon user defined in header variable!"

    It seems that portal cannot find the user in the UME DataStore, but the user exists!!!!

    Any ideas?

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.