SSO between portal and BI (NW2004s)

[former_member194892]

Hi,

Don't worry, this is not a "please look at note 917950" type of question (actually I hope it's not).

We keep having the error message " Java system error: Incoming call is not authorized " when we try to use information broadcasting in one of our systems. After some search, we realized that it has to do with SSO (step 5 of the template installer).

When we follow the checklist of note 917950, we saw that the validNotBefore and the validNotAfter dates don't match with what we see in trx STRUSTSSO2 in our BW system. We tried to re-import the certificate into the portal and the dates still don't match.

What is weird is that there is exactly 4h or 5h difference (i.e. the equivalent of our time zone difference).

Ex:

Date from in BW : 1.10.1997 00:00:00

Date from in Portal : 30.09.1997 20:00:00

Date to in BW : 01.01.2038 00:00:00

Date to in Portal : 31.12.2037 19:00:00

The portal timezone seems to be the same as ours (machines are physically at the same place), it looks like it's only when we import the certificate that the date is changed. Did anyone saw this already? We are on SP7 (I know, I know, we are updating soon...).

Thanks,

D.

[Masaaki · Accepted solution]

Hi David,

I have faced the same problem. In my case, by creating the certificate on the ABAP stack again (t-cd: strustsso2) and importing it to J2EE stack, I have solved the problem.

(At first I tried importing ABAP certificate again, but it was not enough.)

Perhaps as you know, this is because ABAP certificate does not work on J2EE stack.

hope it helps.

Kind regards,

Masaaki

[former_member194892]

Hello,

We've solved it by going in trx STRUSTSSO2 in client 000 of our BW box, right clicking on the "System PSE" folder and select delete. Then right-click again to generate a new one. In the screen that will appear, make sure you put your country next to C=. By default it's C=DE.

It looks like the default template installer was generating a ticket with CN=BW2 which was not our system number. Re-export your certificate and import it in your portal.

Thanks to Ann from GM for her help on this one.

D.

[Former Member]

Hi David,

Did u solve the problem. We are also facing same problem. we are using 2004s SP8.

any help is appreciated.

thanks

venkata