Getting 403 on SLD Logon

[former_member244608]

Hello,

Here is some quick background info. We are running EP6 SP9 SR1. I'm trying to setup the SLD so we can use Web Dynpro. I initially didn't have any problem logging into http://<system>:<port>/sld. But the SLD wasn't working properly after configuration. So I did some reading in the "SLD User Manual for Web AS 640 / NetWeaver 04". On the last page, it says

"To manually assign security roles to user groups in the Visual Administrator, you go to the

SLD Service screen and click with the quick info text Assign User Groups to Roles. The

user groups are then assigned to the relevant security roles..."

So I did this. Well, that apparently broke something because now when I go to http://<server>:<port>/sld and try to authenticate, I get a 403 Access Forbidden. I've tried both UserIDs and Passwords that worked before.

Is there some config file I can edit manually related to this that got messed up when I did the above?

Thanks,

Tom

[Former Member · Accepted solution]

Hi...

I would first make sure everything tests out in the visual admin tool. Create the groups listed in the SLD guide in the user management, add your user to the administrator group, synchronize with groups in Visual Admin, enter your connectivity information, and ensure tests are successful.

Next, go into the SLD to configure the settings for server and setup the bridge. You will then need to setup your R/3 systems to send connectivity information, setup JCO, etc.

[former_member244608 · Accepted solution]

Stephen,

Thanks for the info. I had been doing what you suggested, but that wasn't working, unfortunately. It seemed no matter what values I entered in VA, nothing would work.

Ultimately, I had to create not only the SAP_SLD_xxx groups as specified in the docs, but I also had to create all the SAP_XI_xxx groups in our LDAP. Once I created all these groups, added my user ID to the SAP_SLD_ADMINISTRATOR & SAP_XI_ADMINISTRATOR_J2EE groups, and set the SLD parms in VA to use my ID, things worked again.

I can't believe this is the correct way to go about getting SLD to work in a portal environment though. Since that worked, I then created a dedicated ID in our LDAP and added that ID into the above groups and used that ID for the SLD config in VA. This appears to be working now. But I'm very curious as to what I have done! Yes, it appears to be working, but I haven't a clue as to why.

I opened a message with SAP, so hopefully if & when I talk to them, I'll understand what is going on.

[Former Member · Accepted solution]

Hi,

Did you change the password of user "Administrator" any time? If so change the password in the configtool and try accessing the SLD page.

Regards,

Santhosh.C