403 Forbidden

[Former Member]

Dear Experts,

I have installed ecc6 with abap and java on windows with oracle 10g . i have given / make some changes in roles SAP_BC_JSF_COMMUNICATION_RO and SAP_BC_JSF_COMMUNICATION role to sapjsf user and restarted the server . after restarting it giving error when accessing system information through

http://hostname:50000/index.html

403 Forbidden

SAP J2EE Engine/7.00

You are not authorized to view the requested resource.

Details: No details available

so many times it happened .what is the best way to give these roles sapjsf user .

and gives

503 Service Unavailable

SAP J2EE Engine/7.00

Application cannot be started.

Details: com.sap.engine.services.deploy.container.ExceptionInfo: Naming error.

when accessingh user management .

Pl. advice

[Former Member · Accepted solution]

Hi,

Have a look at below links.

http://help.sap.com/saphelp_47x200/helpdata/en/8b/90f83ee0e66856e10000000a114084/content.htm

http://help.sap.com/saphelp_webas630/helpdata/en/d6/225f3ce4dd3370e10000000a114084/content.htm

http://sap.ittoolbox.com/groups/technical-functional/sap-basis/java-server-doesn4t-start-2271288?cv=...

narsi

[Former Member · Accepted solution]

Hi,

ABAP engine is perficetly working . I have assigned both the role SAP_BC_JSF_COMMUNICATION and SAP_BC_JSF_COMMUNICATION_RO . Profile and user comparison is also done .

But why this prob is comming . Shell i restart the server ?

Where to check its log ?

Edited by: anjali arora on Jun 10, 2009 4:23 AM

[Former Member · Accepted solution]

jcontrol.exe in mmc console is showing status " starting the process "

Pl. find the developer trace of jcontrol.exe

system name : SMD

system nr. : 98

started at : Sun Mar 11 03:35:02 2007

arguments :

arg[00] : D:\usr\sap\SMD\J98\..\exe\jcontrol.exe

arg[01] : pf=D:\usr\sap\SMD\J98\..\SYS\profile\SMD_J98_devd22

**********************************************************************

JStartupReadInstanceProperties: read instance properties [D:\usr\sap\SMD\J98\profile\smd.properties]

-> ms host :

-> ms port : 36

-> OS libs : D:\usr\sap\SMD\exe

-> Admin URL :

-> run mode : NORMAL

-> run action : NONE

-> enabled : yes

**********************************************************************

**********************************************************************

Used property files

-> files [00] : D:\usr\sap\SMD\J98\profile\smd.properties

**********************************************************************

**********************************************************************

Instance properties

-> ms host :

-> ms port : 36

-> os libs : D:\usr\sap\SMD\exe

-> admin URL :

-> run mode : NORMAL

-> run action : NONE

-> enabled : yes

**********************************************************************

**********************************************************************

Bootstrap nodes

**********************************************************************

**********************************************************************

Worker nodes

-> [00] smdagent : D:\usr\sap\SMD\J98\profile\smd.properties

**********************************************************************

[Thr 2240] Sun Mar 11 03:35:02 2007

[Thr 2240] *** WARNING => Key profile parameters not set D:\usr\sap\SMD\J98\..\SYS\profile\DEFAULT.PFL:

j2ee/scs/host=

j2ee/scs/system= [jcntrxx.c 1459]

[Thr 2240] *** WARNING => Can't open default profile [D:\usr\sap\SMD\J98\..\SYS\profile\DEFAULT.PFL] for migration [jcntrxx.c 1460]

[Thr 2240] JControlExecuteBootstrap: jcontrol runs in 6.20 compatible mode

[Thr 2240] JControlExecuteBootstrap: jcontrol runs in 6.20 compatible mode

[Thr 2240] JControlIBuildProcessList: Maximum error count is set to 4

[Thr 2240] [Node: SMDAgent] java home is set by profile parameter

Java Home: C:\j2sdk1.4.2_17-x64\

[Thr 2548] JControlRequestFunc: Thread 2548 started as listener thread for np messages.

[Thr 2240] Sun Mar 11 03:36:01 2007

[Thr 2240] JStartupICheckFrameworkPackage: can't find framework package D:\usr\sap\SMD\exe\jvmx.jar

**********************************************************************

JStartupIReadSection: read node properties [smdagent]

-> node name : SMDAgent

-> node type : server

-> node id : 1

-> node execute : yes

-> java path : C:\j2sdk1.4.2_17-x64\

-> java parameters : -DP4ClassLoad=P4Connection

-> java vm version : 1.4.2_17-b06

-> java vm vendor : Java HotSpot(TM) 64-Bit Server VM (Sun Microsystems Inc.)

-> java vm type : server

-> java vm cpu : amd64

-> heap size : 128M

-> init heap size : 128M

-> root path : ..\SMDAgent

-> class path : lib\launcher\smdagentlauncher.jar;..\..\exe\jstartupapi.jar;..\..\exe\jstartupimpl.jar

-> OS libs path : D:\usr\sap\SMD\exe

-> main class : com.sap.smd.agent.launcher.SMDAgentLauncher

-> framework class : com.sap.bc.proj.jstartup.JStartupFramework

-> registr. class : com.sap.bc.proj.jstartup.JStartupNatives

-> framework path : D:\usr\sap\SMD\exe\jstartup.jar;D:\usr\sap\SMD\exe\jvmx.jar

-> shutdown class : com.sap.smd.agent.launcher.SMDAgentLauncher

-> parameters : run jcontrol

-> debuggable : yes

-> debug mode : no

-> debug port : 58981

-> shutdown timeout : 20000

**********************************************************************

[Thr 2240] JControlConnectToMS: jcontrol runs in 6.20 compatible mode without message server

**********************************************************************

JControlStartJLaunch: program = D:\usr\sap\SMD\J98\..\exe\jlaunch.exe

-> arg[00] = D:\usr\sap\SMD\J98\..\exe\jlaunch.exe

-> arg[01] = pf=D:\usr\sap\SMD\J98\..\SYS\profile\SMD_J98_devd22

-> arg[02] = -DSAPINFO=SMD_98_server

-> arg[03] = -nodeId=0

-> arg[04] = -file=D:\usr\sap\SMD\J98\profile\smd.properties

-> arg[05] = -syncSem=JSTARTUP_WAIT_ON_2236

-> arg[06] = -nodeName=smdagent

-> arg[07] = -jvmOutFile=D:\usr\sap\SMD\J98\work\jvm_SMDAgent.out

-> arg[08] = -stdOutFile=D:\usr\sap\SMD\J98\work\std_SMDAgent.out

-> arg[09] = -locOutFile=D:\usr\sap\SMD\J98\work\dev_SMDAgent

-> arg[10] = -mode=JCONTROL

-> arg[11] = pf=D:\usr\sap\SMD\J98\..\SYS\profile\SMD_J98_devd22

-> lib path = PATH=C:\j2sdk1.4.2_17-x64
jre\bin\server;C:\j2sdk1.4.2_17-x64
jre\bin;D:\oracle\D22\102\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_17-x64\bin;D:\usr\sap\SMD\exe

-> exe path = PATH=C:\j2sdk1.4.2_17-x64
bin;D:\usr\sap\SMD\exe;D:\oracle\D22\102\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\j2sdk1.4.2_17-x64\bin;D:\usr\sap\SMD\exe

**********************************************************************

[Thr 2240] JControlICheckProcessList: process SMDAgent started (PID:2364)

[Thr 2240] Sun Mar 11 03:36:11 2007

[Thr 2240] JControlICheckProcessList: process SMDAgent (pid:2364) died (RUN-FLAG)

[Thr 2240] JControlIResetProcess: reset process SMDAgent

[Thr 2240] JControlIResetProcess: [SMDAgent] not running -> increase error count (1)

[Thr 2240] JControlICheckProcessList: shutdown node from console -> restart off

-

---

-

---

Pl. advice

Edited by: anjali arora on Jun 10, 2009 4:18 AM

Edited by: anjali arora on Jun 10, 2009 4:22 AM

[Former Member · Accepted solution]

Hello Anjali,

Please try a restart of the java from smicm.Wait for sometime as it can be slow.

Also, please check for the sapjsf ,guest etc in su01 for lock/unlock.

If still problem persists, let me know .

please paste the logs(tail) from the default trace:

Path: /usr/sap/SID/DVEBMGS/j2ee/cluster/sevrver/log.

Thanks,Prasanna

Edited by: Prasanna K on Jun 10, 2009 6:27 AM

[Former Member · Accepted solution]

how you got this file is having error trace.

Edited by: sonal saxena on Jun 10, 2009 7:08 AM

[Former Member · Accepted solution]

Hi Prasanna ,

Log file size is big , if you give me your id i can send it to you . pl. find last lines of log .

two folder was there server0 and server1, what is the use of these folders .

#

#1.5 #001D7DB9C63D006F0000056C0000091C00042BB935FABEE8#1173974381671#com.sap.engine.services.deploy#sap.com/tc_wddispwda#com.sap.engine.services.deploy#J2EE_ADMIN#4##devd11_D11_8836350#J2EE_ADMIN#b9890fb0d30b11dba854001d7db9c63d#SAPEngine_Application_Thread[impl:3]_36##0#0#Error#1#/System/Server#Plain###

Operation startApp over application sap.com/caf_UIptn~objectbrowser finished with errors on server 8836350. For more detailed information see traces of Deploy Service.#

#1.5 #001D7DB9C63D0060000000160000091C00042BBA8E289847#1173980155781#com.sap.engine.services.security.roles.SecurityRoleImpl##com.sap.engine.services.security.roles.SecurityRoleImpl#J2EE_ADMIN#5##devd11_D11_8836350#J2EE_ADMIN#a0eee4b0d31b11dbcad2001d7db9c63d#SAPEngine_Application_Thread[impl:3]_16##0#0#Error#1#/System/Security/Audit/J2EE#Java###: Authorization check for caller assignment to J2EE security role [ : ].#3#ACCESS.ERROR#SAP-J2EE-Engine#administrators# #1.5 #001D7DB9C63D0060000000180000091C00042BBA8E28993B#1173980155781#com.sap.engine.services.security.roles.SecurityRoleReference##com.sap.engine.services.security.roles.SecurityRoleReference#J2EE_ADMIN#5##devd11_D11_8836350#J2EE_ADMIN#a0eee4b0d31b11dbcad2001d7db9c63d#SAPEngine_Application_Thread[impl:3]_16##0#0#Error#1#/System/Security/Audit/J2EE#Java###: Authorization check for caller assignment to J2EE security role [ : ] referencing J2EE security role [ : ].#5#ACCESS.ERROR#sap.com/tc_monitoringsysteminfo*sap_monitoring#$SAP_J2EE_Engine_default_put_role#SAP-J2EE-Engine#administrators# #1.5 #001D7DB9C63D00600000001A0000091C00042BBA8E28AFAB#1173980155781#com.sap.engine.services.security.roles.SecurityRoleImpl##com.sap.engine.services.security.roles.SecurityRoleImpl#J2EE_ADMIN#5##devd11_D11_8836350#J2EE_ADMIN#a0eee4b0d31b11dbcad2001d7db9c63d#SAPEngine_Application_Thread[impl:3]_16##0#0#Error#1#/System/Security/Audit/J2EE#Java###: Authorization check for caller assignment to J2EE security role [ : ].#3#ACCESS.ERROR#SAP-J2EE-Engine#SAP_JAVA_SUPPORT# #1.5 #001D7DB9C63D00600000001C0000091C00042BBA8E28B093#1173980155781#com.sap.engine.services.security.roles.SecurityRoleReference##com.sap.engine.services.security.roles.SecurityRoleReference#J2EE_ADMIN#5##devd11_D11_8836350#J2EE_ADMIN#a0eee4b0d31b11dbcad2001d7db9c63d#SAPEngine_Application_Thread[impl:3]_16##0#0#Error#1#/System/Security/Audit/J2EE#Java###: Authorization check for caller assignment to J2EE security role [ : ] referencing J2EE security role [ : ].#5#ACCESS.ERROR#sap.com/tc_monitoringsysteminfo*sap_monitoring#SystemInfo_Support_Role#SAP-J2EE-Engine#SAP_JAVA_SUPPORT#

#1.5 #001D7DB9C63D00600000001E0000091C00042BBA8E28B1D7#1173980155781#com.sap.engine.services.httpserver##com.sap.engine.services.httpserver#J2EE_ADMIN#5##devd11_D11_8836350#J2EE_ADMIN#a0eee4b0d31b11dbcad2001d7db9c63d#SAPEngine_Application_Thread[impl:3]_16##0#0#Error#1#/System/Server#Plain###User J2EE_ADMIN, IP address

HTTP request processing failed. HTTP error [403] will be returned. The error is [You are not authorized to view the requested resource.No details available].#

Pl. advice.

[Former Member · Accepted solution]

Hello,

Check this SAP note:1238804 ACCESS.ERROR: Authorization check for caller assignment to J2EE security role <role> : <role_name>.

Did u try a restart thro' ICM.

Thanks,Prasanna

[Former Member · Accepted solution]

i have given / make some changes in roles SAP_BC_JSF_COMMUNICATION_RO and SAP_BC_JSF_COMMUNICATION

Why you doing changes in standart SAP roles?? Next time first copy this roles and after change anythinп you need ...

Try to check are your j2ee_admin in 001 client ABAP has the role SAP_J2EE_ADMIN ? and check this role are good ? Are you able to login in Visual Admin ?

P.S. are you trying to restart server ?

P.P.S. i'm see situation like you post -->

Regards.

[Former Member · Accepted solution]

Hi,

1. I have just again generated the profile of SAP_BC_JSF_COMMUNICATION_RO and SAP_BC_JSF_COMMUNICATION roles because role tab was showing red through pfcg .

then assign it to user sapjsf and made comprison with the user .

after that the all problem arise .

2. I am able to login Visual admin . it is working fine.

3. sap_j2ee_admin role is assigned to j2ee_admin user .its tabs like menu and authorization are also showing red

pl. advice.

[Former Member · Accepted solution]

In Visual Administration navigate to > Server>services --> Security provider --> security roles -->

administrators and check are here the J2EE_ADMIN in users tab, and SAP_J2EE_ADMIN in groups ?

Regards. Are you trying to restart server ?

[Former Member · Accepted solution]

Hi,

SAP_J2EE_ADMIN Role is attahced with administrator but J2EE_ADMIN user is not showing with administrator .

While I am adding J2EE_ADMIN , It is giving error

"Unable to add/user group to role "

I have restarted the server

Pl. suggest

[Former Member · Accepted solution]

I can't understand your explination .... Try step by step ...

In Visual Administrator you navigate to

Server-->services --> Security provider --> security roles -->administrators

You will see 2 mappings --> Users and Groups , under Groups you will see the SAP_J2EE_ADMIN

under Users are any one ? Try to press Add button and find J2EE_ADMIN and try to add. On this stage you see this error ? Can you explain >? Regards.

[Former Member · Accepted solution]

yes , two mapping is there

1. in group - SAP_J2EE_ADMIN is showing

2. in user - nothing is showing , when i am trying to add it is giving error

"Unable to add/user group to role "

Pl. advice

[Former Member · Accepted solution]

Can you say what do you change in SAP_BC_JSF_COMMUNICATION_RO and SAP_BC_JSF_COMMUNICATION roles ? May be problem are in this , can you post detail error you see if trying to add the user in this mapping ? Are you see anything in "Description" tab below ? Or try to check the defauttrace.trc for any error in time after you try to add this user , try to check using Logviewer in VA or Standalone -->

http://help.sap.com/erp2005_ehp_04/helpdata/EN/56/9eee4185135f24e10000000a1550b0/frameset.htm

http://help.sap.com/erp2005_ehp_04/helpdata/DE/47/209779bbe64a318454b64148a0c76d/frameset.htm

Regards.

[Former Member · Accepted solution]

Anjali,

Was this note helpful 1238804.

Does the default trace have the same error as you mentioned in the previous log?

Can you share the exact error information from the default trace?

thanks,Prasanna

[Former Member · Accepted solution]

Hi,

Nothing is showin in description .

Pl. find the trace log (tail )

1.5 #001D7DB9C63D005C000000150000091C00042BCF19882A34#1174068393484#com.sap.engine.services.httpserver##com.sap.engine.services.httpserver#J2EE_ADMIN#7##devd11_D11_8836350#J2EE_ADMIN#12cbd2f0d3e911dbc2d0001d7db9c63d#SAPEngine_Application_Thread[impl:3]_23##0#0#Error#1#/System/Server#Plain###User J2EE_ADMIN, IP address

HTTP request processing failed. HTTP error [403] will be returned. The error is [You are not authorized to view the requested resource.No details available].#

#1.5 #001D7DB9C63D0066000000060000091C00042BCF28215186#1174068638437#com.sap.engine.services.security.resource.ResourceHandleImpl##com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_ADMIN#6##n/a##5863c040d3e711dbaff9001d7db9c63d#SAPEngine_Application_Thread[impl:3]_4##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#user-management#group_account#ALL# #1.5 #001D7DB9C63D006F000005720000091C00042BD3208F9592#1174085691343#com.sap.engine.services.security.resource.ResourceHandleImpl##com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_ADMIN#6##n/a##708722f0d33a11db8463001d7db9c63d#SAPEngine_Application_Thread[impl:3]_36##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#security-roles#modify_role#ALL# #1.5 #001D7DB9C63D006A000000130000091C00042BD44B257343#1174090700718#com.sap.engine.services.security.resource.ResourceHandleImpl##com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_ADMIN#6##n/a##00612d50d28a11dbbbce001d7db9c63d#SAPEngine_Application_Thread[impl:3]_24##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#security-roles#modify_role#ALL# #1.5 #001D7DB9C63D0050000000140000091C00042BD44C24C7C2#1174090717453#com.sap.engine.services.security.resource.ResourceHandleImpl##com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_ADMIN#6##n/a##cd2d75d0d41211db92cf001d7db9c63d#SAPEngine_Application_Thread[impl:3]_33##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#security-roles#modify_role#ALL# #1.5 #001D7DB9C63D0075000000000000091C00042BD4543720AB#1174090852890#com.sap.engine.services.security.resource.ResourceHandleImpl##com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_ADMIN#6##n/a##5db5d7a0d41d11dba773001d7db9c63d#SAPEngine_Application_Thread[impl:3]_21##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#security-roles#modify_role#ALL#

Pl. suggest

[Former Member · Accepted solution]

i can't understand why do not use the log viewer, the more readable format are, and all traces are visible correctly... Try open call to SAP, if you not able to help as to help you ... You not say what you change in this default roles, can you able to change back, what do you see in Logviewer, may be any other error's are visible in it... Are you checking the correct client 001 in abap side for SAP_J2EE_ADMIN role?

I do not know how i can help you without many information ... Regards.

[Former Member · Accepted solution]

Hi,

Pl. find the error message in Log viewer file defaulttrace.trc in server0 folder . I did n't knew about log viewer .

com.sap.engine.services.jmx.exception.JmxIllegalStateException: JmxFrame not completely initialized, innerMBeanServer is null

at com.sap.engine.services.jmx.JmxFrame.getInnerMBeanServer(JmxFrame.java:466)

at com.sap.engine.services.jmx.ClusterInterceptor.getInnerMBS(ClusterInterceptor.java:111)

at com.sap.engine.services.jmx.ClusterInterceptor.getMBSC(ClusterInterceptor.java:182)

at com.sap.engine.services.jmx.ClusterInterceptor.unregisterMBean(ClusterInterceptor.java:1327)

at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.unregisterMBean(MBeanServerInterceptorChain.java:258)

at com.sap.engine.services.monitor.mbeans.Monitor.unregister(Monitor.java:106)

at com.sap.engine.library.monitor.impl0.AbstractMonitorNode.remove(AbstractMonitorNode.java:149)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:483)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.library.monitor.impl0.MonitorObjectFactory.uninstallMonitorNode(MonitorObjectFactory.java:480)

at com.sap.engine.services.monitor.install.MonitorInstaller.uninstallSimpleNode(MonitorInstaller.java:774)

at com.sap.engine.services.monitor.install.MonitorInstaller.uninstallSummary(MonitorInstaller.java:538)

at com.sap.engine.services.monitor.common.MonitorServiceRuntime.deregisterMonitors(MonitorServiceRuntime.java:759)

at com.sap.engine.services.monitor.common.MonitorServiceRuntime.stop(MonitorServiceRuntime.java:387)

at com.sap.engine.services.monitor.server.MonitorServerFrame.stop(MonitorServerFrame.java:128)

at com.sap.engine.core.service630.container.ServiceStopper.run(ServiceStopper.java:31)

at com.sap.engine.frame.core.thread.Task.run(Task.java:64)

at com.sap.engine.core.thread.impl5.SingleThread.execute(SingleThread.java:81)

at com.sap.engine.core.thread.impl5.SingleThread.run(SingleThread.java:152)

...............................................................................................................................................................................................................................................................................................................

2. I have not changed any thing in default Roles , not added any transection or object . I have just generated the profile and compare with the user sapjsf. nothing is changed in the role.

3. No log is generated in log viewer when i am mapping j22ee_admin to administrator .

4. there was so may log files in log viewar . How to know which log is for which activity ?

Pl. advice.

[Former Member · Accepted solution]

I have just generated the profile and compare with the user sapjsf

.

Can you explain why you doing it? Before this activiti the JAVA engine works fine ?

Are you doing any datasource configuration (like changing the ABAP client for UME or any other

changes ? In any case i suggest you to open OSS call, no much information about problem and need to see live system to check why it error comes. Regards.

[Former Member · Accepted solution]

Thanks for your support ,

Any expert who can support for this issue ?

[Former Member · Accepted solution]

This fixed the issue for me thanks for the info Sergo!!

MIke

[Former Member]

Not sure why are you making changes to sap standard roles, but did you activate services for sap webgui

check out

[http://sapbasis.wordpress.com/2009/03/10/activate-and-configure-sap-its-webgui-on-sap-ecc-60/]