Failed connect LogonTicket

[Former Member]

Hi, i have problem with connection Java to ABAP system

I create new jconnecto (test logonticket) and show next messages:

com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Ticket contains no/an empty ABAP user ID (refer to note 1159962)

STACK ABAP: the SP level is 16 component Basis and ABAP

The version Kernel is: 194

Help, please

[Former Member · Accepted solution]

Hello Eli,

Kindly check whether the user which you are using to connect ABAP from Java is have proper authorization or check whether it is locked by any chance.

You can add the SAP_BC_JSF_COMMUNICATION_RO role to that user on ABAP side and try testing the connection using Visual admin. Generally you can use SAPJSF user for creation of JCO.

Regards

Vivek

[Former Member · Accepted solution]

Hi vivekwali,

I dont understand where assigned role. In the visual administrator?? or UME??

[Former Member · Accepted solution]

Hello Eli

You are connecting to ABAP from Java so on ABAP side you need to assign the role.

Regards

Vivek

[Former Member · Accepted solution]

Hi

Assign SAP_BC_JSF_COMMUNICATION_RO role to user in ABAP and also in RFC logonand security --> send SAP Logon ticket option.

Thanks

Deepak

[Former Member · Accepted solution]

Deepak, exist docummentacion?? assigned role for logonticket??

[Former Member · Accepted solution]

Hi,

Could you please tell which document you required.

Thanks

Deepak

[Former Member · Accepted solution]

Configuration logonticket in the stack abap y stack java.

[Former Member · Accepted solution]

Hi,

In ABAP you need to create RFC option TCP

Create RFC Destination in J2EE EngineExecute the following steps to create an RFC destination in the J2EE Engine:

1.Start the SAP J2EE Engine Administrator with <PORTAL_DIRECTORY>\admin\go.bat.

2.Connect to the portal server.

3.Select <SID>/Server<#>/Services/Jco RFC Provider from the hierarchy.

Program ID: <PORTAL_HOSTNAME>_PORTAL_<SID>

u2022Gateway host: <GATEWAY_HOST>

u2022Gateway service: sapgw<SYSTEM_NUMBER>

u2022Number of processes (1..20): 20

u2022Application server host: see gateway host

u2022System number: <SYSTEM_NUMBER>

u2022Client: <BW_MANDANT>

u2022Language: EN

u2022User: <USER> (user in the BW system)

u2022Password: <PASSWORD>

5 Copy the RFC destination to the available RFC destinations by choosing Set.

6.Start the RFC server by choosing Start.

• Gateway

Create RFC Destination for the Portal in ABAP systemIn this activity you create an RFC destination for the integration of a BI ABAP system and BI Java. You can specify this RFC destination in the activity Maintain Portal Server Settings for the Portal so that the RFC destination is recognized as the connected portal. The BI system uses the RFC destination to communicate with the portal.

Execute the following steps to create an RFC destination for the portal:

1.Start transaction Display and Maintenance of RFC Destinations (transaction code SM59).

2.Choose Create.

3.Maintain the RFC destination:

4.Connection type: T for TCP/IP connection

5.Technical settings - Activation type: Registered server program

Program ID: <PORTAL_HOSTNAME>_PORTAL_<SID>: The server program is set up under the program ID on the J2EE engine. The recommended naming convention is <PORTAL_HOSTNAME>_PORTAL

6.Gateway Options:

7.Send SAP logon ticket: activate: Activate option Send SAP Logon Ticket on the Logon & Security tab page.

Unicode: If the BI system is a Unicode system, you have to activate the Unicode option on the MDMP & Unicode tab page.

8.Save your entries.

[Former Member · Accepted solution]

Configuration logonticket in the stack abap y stack java, and test connection logonticket

[Former Member · Accepted solution]

Deepak,

Apply change (step by setp) and new show new message.

RFC Java = OK

RFC ABAP = OK

com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Issuer of SSO ticket is not authorized

[Former Member · Accepted solution]

Hi Daniel,

Can you tell me where or in which step you getting error.

I assume you exchanged certificate between your portal and ABAP system.

ANd from VA you made required changes in below section "

choose evaluate_assertion_ticket.

Choose the Authentication tab page.

Change the options for com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule

Thanks

Deepak

[Former Member · Accepted solution]

the setp show error:

I create new jco connection and run test failed.

question: how can test logonticket the portal to abap??

I run test RFC (stack ABAP) and OK, but no test connection portal to abap.

[Former Member · Accepted solution]

Hi,

question: how can test logonticket the portal to abap??

Login to Portal -- system landscape -- support -- SAP application -- In Test and Configuration Tools -- SAP Transaction --

You select the system which you configured and t-code.

If it work then your SSO configured properly.

Also ensure you set below parameter in ABAP side.

login/create_sso2_ticket=2:

login/accept_sso2_ticket=1:

I just want to understand have you make required changes in Java side:

Connect to VA.

1.In the tree, choose <SID>/Server<#>/Services/Security Provider.

2.Under Component, choose Ticket.

3.Choose the Authentication tab page.

4.Change the options for com.sap.security.core.server.jaas.EvaluateTicketLoginModule and enter the following values:

u2022trustedsys<Number>=<BW_SID>, <BW_CLIENT> (for example, BWP, 000)

u2022trustediss<Number>=<ISSUER_DISTINGUISHED_NAME> (z. B. CN= BWP, OU=SAP Web AS, O=SAP Trust Community, C=DE)

u2022trusteddn<Number>=<SUBJECT_DISTINGUISHED_NAME> (z. B. CN= BWP, OU=SAP Web AS, O=SAP Trust Community, C=DE)

Then In the tree, choose <SID>/Server<#>/Services/Security Provider.

1.Under Component, choose evaluate_assertion_ticket.

2.Choose the Authentication tab page.

3.Change the options for com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule and enter the following values:

u2022trustedsys<Number>=<BW_SID>, <BW_CLIENT> (for example, BWP, 000)

u2022trustediss<Number>=<ISSUER_DISTINGUISHED_NAME> (z. B. CN= BWP, OU=SAP Web AS, O=SAP Trust Community, C=DE)

u2022trusteddn<Number>=<SUBJECT_DISTINGUISHED_NAME> (z. B. CN= BWP, OU=SAP Web AS, O=SAP Trust Community, C=DE)

Thanks

Deepak

[Former Member · Accepted solution]

Deepak

SID Java: EPX

SID ABAP: R3X

The parameters in the RZ10 is OK

Logon VA in the portal (EPX)

Security Provider:

trustedsys1 EPX,000

trustediss1 CN= EPX, OU=SAP Web AS, O=SAP Trust Community, C=DE

trusteddn1 CN= EPX, OU=SAP Web AS, O=SAP Trust Community, C=DE

This correct??

or the value EPX change for R3X??

Your example BWP is JAVA or ABAP??

[Former Member · Accepted solution]

Hi,

Security Provider:

trustedsys1 EPX,000

trustediss1 CN= EPX

trusteddn1 CN= EPX

trustedsys2 R3X,000

trustediss2 CN= R3X

trusteddn2 CN= R3X

This correct.

Add sapmsEPX in service file of java system.

Run the installater templet from http://localhost:5XXXX/nwa/Deploy and Change.

Thanks

Deepak

[Former Member · Accepted solution]

Hi ,

Pl refer below two links.. Those cover all steps for SSO configuration , Template installter.

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b0a5216a-349c-2a10-9baf-9d4797349...

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b0a5216a-349c-2a10-9baf-9d4797349...

Hope this will help you.

Thanlks

[Former Member · Accepted solution]

Deepak, where find the System Alias??

[p330068 · Accepted solution]

Hi Eli Daniel,

You can find the System Alias in the SAP Portal at System Administrator >> System COnfiguration >> System landscape >> Search for System Object which you have created or existing system object >> Open the system object >> Select the drop down for System alias > here you can find the system alias.

Please refer to setuo SSO between SAP Portal and ABAP System : [/people/dennis.kleymeonov/blog/2005/09/15/connecting-sap-systems-to-enterprise-portal-with-sso|/people/dennis.kleymeonov/blog/2005/09/15/connecting-sap-systems-to-enterprise-portal-with-sso] and required parameter for system object : [/people/marcel.salein/blog/2007/03/14/how-to-create-a-portal-system-for-using-it-in-visual-composer|/people/marcel.salein/blog/2007/03/14/how-to-create-a-portal-system-for-using-it-in-visual-composer]

Hope it will helps

Best Regards,

Arun Jaiswal