cancel
Showing results for 
Search instead for 
Did you mean: 

No login to WebDynpro Content Administration/User Management anymore?!

Former Member
0 Kudos

Hello,

from the J2EE start page I try to get into the WebDynpro Content administration or User Management.

Both times I get a login screen which is fine. I type in UserName and Password, press login and voila Login Screen again. When I type in wrong credentials I get an error, so the data I typed in is correct. I get nor Error nothing, just login screen again.

Any hint whats going wrong here????

Frank

Accepted Solutions (0)

Answers (4)

Answers (4)

H_Ettelbrueck
Employee
Employee
0 Kudos

Hi Frank,

this could be related to problems during creation of SAP logon tickets: After your credentials have been verified by some login module, there's another login module creating a logon ticket for you.

I would open Visual Admin, go to Server > Service > Key Storage and check whether there's a view called "TicketKeystore" containing two entries named like "SAPLogonTicketKeypair(-cert)". If you find them, check security.log and defaulttrace for messages containing the keystore view and keystore entries names.

Best regards

Heiko

Former Member
0 Kudos

Hi Frank,

I am guessing that you are using WAS SP9.

In this version it gives such behavior. What you can do is, open another browser and there fetch sld page of server like: http://<host>:<port>/sld

It will ask for login info. provide it. Then it will show sld page. Now, in the same page, type following address in address bar:

http://<host>:<port>/webdynpro/welcome

Now, it will not ask for login, as you have already logged in, ant it will take you to the content administrator page.

I don't know why thi happening.But, we have to go through this direction only.

Regards,

Bhavik

Former Member
0 Kudos

Hi Bhavik,

Thanks for telling me the work around.Now,I am able to login using the work around.Still ,I am not able to login on to the visual admin using the j2ee admin userid.

I have to configure the login module stack for SSO and I have checked it the user j2ee admin is not locked.

Can somebody will tell me how to login on the visual admin without using the emergency user sap*???

Paritosh

Former Member
0 Kudos

Hi Paritosh,

What error is it giving at the time of login to Visual admin?

There are couple of posibilities behind this.

1. Your user id is locked, but as you said that user id is not locked.

2. Change the password of your J2ee admin user in security provider service in visual admin by login into using SAP* user.

Then, try with j2ee admin user.

regards,

Bhavik

H_Ettelbrueck
Employee
Employee
0 Kudos

Hi Paritosh,

to activate the sap* user, see http://help.sap.com/saphelp_nw04/helpdata/en/3a/4a0640d7b28f5ce10000000a155106/content.htm

Best regards

Heiko

Former Member
0 Kudos

Hi Bhavik,

When I am trying to login on http://<host>:port/webdynpro/welcome using my j2ee_admin user id and password,I am not getting any error.But when,I am entering the wrong userid or wrong password then I am getting a message"user authentication failed ".

As you guys suggested me,I had activated the emergency user SAP* and was able to login on visual admin but I was not able to change the j2ee_admin password.Its not letting me to do anything..

When ,I am trying to login using j2ee_admin on the visual admin tool,geting the message"No login module succeeded".

I have created the new connection for the j2ee_admin and then tried to connect it still its not working.

Even I am not able to configure or make any changes in Login Module stack for j2ee_admin.

Waiting for yr reply

Paritosh

Former Member
0 Kudos

Hi Frank, Paritosh,

I've had a similar error:-

Check the following:-

\usr\sap\<SID>\JC00\j2ee\cluster\server0\log\defaultTrace.0.trc

I had the following error:-

"SAPLogonTicketKeypair" cannot be found in the configuration "keystore/TicketKeystore/entries"

While setting up single sign on I had deleted this entrie via the visual admin (services > key storage)and recreated it with the wrong name.

Try and recreate your entry. It is case sensitive

Regards

Andy

Message was edited by: Andrew Worthington

Message was edited by: Andrew Worthington

Former Member
0 Kudos

Hi Andrew,

I am not login on to the visual admin using the admin user id.I have enabled the SAP*(emergency user) user id but I am not able to do anychanges.

Can you tell me that how do you logged in to visual admin and recreated the ticket keystores entries.

Coz,the system is not letting me to change the keystore configuration.

Waiting for your reply

Paritosh

Former Member
0 Kudos

Hi Frank/Paritosh,

Go throuth the following link:

It will solve your problem.

Regards,

Bhavik

Former Member
0 Kudos

I can log in with user administrator but cannot login with any other user (LDAP). Checking the connection to LDAP is also possible through config tool and portal itself. If anyone knows the solution please post.

Former Member
0 Kudos

Hi Frank,

R u able to solve this problem?Can you tell me the solution of it.Coz,I am also not able to login on the web dynpro admin console.When I am using the j2ee_admin id and password is neither it is logging in nor it is giving any error.But when I am using th wrong user id and password ,it is giving me an error message"authentication failure"

Please help me

Paritosh

Former Member
0 Kudos

Hi Frank

Did you check if your user is locked?

You can do this by follwing steps

1. Start the config tool from 'C:\usr\sap\C11\JC00\j2ee\configtool'. (This is a standard installation with fixed drive and instance names, but you're clever enough to figure this out, aren't you?). There is a config.bat or for unix a shell file. The program may take a moment to come up, don't get confused by messages appearing in the console window.

2. Press the last button in the quick menu with the tabstrip: 'switch to configuration editor mode' to change to that mode.

3. Now you can see a tree of resources. You drill down the tree to security->userstores->UME User Store.

4. Switch to edit mode by clicking the first button in the button menu (very well known to R/3 users). There is a warning window popping up, which you confirm.

5. Now you can double-click the "active_userstore" value and change it to "Emergency User Store".

6. Restart the server, that means stop and start it via mmc console (or appropriate tools).

7. Login with Visual Admin as user SAP* and password PASS. In a standard installation this tool can be found at 'C:\usr\sap\C11\JC00\j2ee\admin' also as a batch file called admin.bat (and according for unix). As you cannot change the user in the default connection you have to define a new connection. Just as hint: use direct connection via a dispatcher as you anyway have to run on this machine for the procedure. (Port for default transport layer is 50004!)

8. Start Security provider service from the cluster tree tab drilling down into Server<some number>->Services->Security Provider.

9. Select tab 'User Managment'.

10. Click 'Manage Security Stores' in the bottom right corner.

11. Select 'UME User Store' (And remember in future to select the one you deactivated) and click 'Browse Security Store' on the right.

12. On the left side select the tab 'Tree'.

13. Select 'Administrators' in the tree and check your Administrator user. Here it is: the account info in the middle now shows the lock status of your Administrator. If the status is 'unlocked', my question is what are you doing here?. Most probably it shows a 'locked by...' message.

Hope it helps

Sai

Former Member
0 Kudos

Hi Sai,

I have tried what you had mentioned it here.My j2ee_Admin user is not locked.

Its something to do with the configuration of login module stack.

Do you have any idea about the configuing logim module stack for accepting SSO ticket.

It will really grate if you can help me out.

Thanks in advance.

Paritosh