Skip to Content
0
Former Member
Feb 15, 2007 at 04:41 AM

SSO fails from EP6 to R/3 4.6C

46 Views

Hi,

I am trying to replace a Workplace 2.11 system (and standalone ITS 6.10) with Enterprise Portal 6.0 Web AS 6.40 system (and standalone ITS 6.20).

The R/3 backend is 4.6C.

I've performed th following steps:

- installed and patched the Portal and ITS

- upgraded the WP-PI in R/3 4.6C system to 600_46C

- downloaded the verify.der file from the Portal and imported it into the R/3 backend, adding it to the PSE and ACL

- added ~mysapcomusesso2cookie = 1 to global.srvc file and restarted ITS

- implemented SSO from EP6 using SAPLOGONTICKET (using FQDN for all servers)

However, I am getting the errors below in the R/3 dev trace file for the work process.

I have checked table TWPSSO2ACL which had a valid entry for DMO client 000 (Portal system), and output from transactions PSEMAINT and SSO2 look OK.

RZ10 SSO parameters were already set:

- login/accept_sso2_ticket = 1

- login/create_sso2_ticket = 2

-


Y Thu Feb 15 15:23:53 2007

Y *** ERROR => multiple DiagSetGuiConnectData call [diagext.c 584]

N *** ERROR => dy_set_sso_ticket: client="" (will NOT be defaulted)! [sign.c 9076]

N conv_lang_iso2sap : no conversion necessary

N dy_set_sso_ticket: SSO logon data stored

N syssigni: SSO logon data retrieved

N dy_signi_ext: SSO TICKET logon (client )

N mySAPUnwrapCookie was called.

N RunningCompatibly said: I'm >= 46C.

N mySAP: Got the following SSF Params:

N DN =CN=WPP, OU=<.....>, OU=<.....>, O=mySAP.com Workplace, C=DE

N EncrAlg=DES-CBC

N Format =PKCS7

N Toolkit =

N HashAlg =SHA1

N Profile =/usr/sap/SP2/DVEBMGS91/sec/SAPSYS.pse

N PAB =/usr/sap/SP2/DVEBMGS91/sec/SAPSYS.pse

N Got the codepage 1100.

N Got ticket (head) AjExMDAgABFwb3J0YWw6SjJFRV9BRE1JTogAE2Jh. Length = 476.

N Got content client = 000.

N Got content sysid = DMO .

N *** ERROR => No entry in TWPSSO2ACL for SYS DMO and CLI 000. [ssoxxkrn.c 1101]

N *** ERROR => CheckSubject failed. [ssoxxkrn.c 501]

N dy_signi_ext: issuer not trusted

-


Any advice would be appreciated.

Thanks,

Sharyn