Unable to create and lock/unlock reset password from CUA system

[Former Member]

Hi Guys

We are facing issue with one of the child system.

Say

Child system details : say sid=abc and client number is 444

and CUA system is xyz and client is 999.

CUA system is working fine for all the other child systems and their clients.

CUA system is working fine for SAP system abc for all clients other then client 444.

We are not able to create any user for abc in client 444.

We are not able to lock/unlock/reset the password for any user belong to this client 444 in sap system abc.

Actually CUA system doesnt prompt any error while user creation, lock/unloack/reset the password.

It is when we tried to logon to the child system we get errors.

We checked the RFC connection from CUA and from Child system Test connection and Authorization checks are fine.

we cant check the remote logon because user defined in the RFC is (CUA_USER) the "system" user.

We can see dumps like: Runtime Errors RFC_NO_AUTHORITY

User "CUA_USER" has no RFC authorization for function group "ARFC".

The user "CUA_USER" has no RFC authorization for the function group

"ARFC". Please contact your system administrator to give you

the RFC authorization for the required function groups (such as "ARFC").

The RFC authorization object is S_RFC.

but we can see that authorization object is S_RFC is already part of the roles assigned to the user CUA_USER.

Any assitance would be highly appreciated.

Regards

Rajesh

[jurjen_heeck]

> but we can see that authorization object is S_RFC is already part of the roles assigned to the user CUA_USER.

First things to check (I think) is the contents of this object in the role(s), profile generation and user comparison.

[Former Member]

Create Model with SUCA (Model view)

Please check with SCUM and select the field attributes for central user administration & Child systems

Like addresss , Logon data roles etc. select Locally, globally carefully .

let me know If it helps.

regards

Vikas rana

[Former Member]

Hi,

Check whether the communication user what is user to move the changes from CUA to child systems is locked.. It should be in unlocked status in both the systems.. Some time due to wrong password settings it gets locked authomatically.

Regards,

Sandip.

[former_member701183]

"The user "CUA_USER" has no RFC authorization for the function group

"ARFC". Please contact your system administrator to give you

the RFC authorization for the required function groups (such as "ARFC").

The RFC authorization object is S_RFC"

Did you check the user has the role with s_rfc and function group ARFC. In s_rfc auth object there are 3 fields. One is the function group field which should contain the value "ARFC". As a cross check, see the role assigned to other RFC system user in other clients. Find a role from suim which has ARFC value in func group and assign it to the RFC user. Please check and let us know if any issue.

Note: You can do lock/unlock in the child system also directly. Give a try.

Regards

Aveek.

[Former Member]

> As a cross check, see the role assigned to other RFC system user in other clients.

Yes, and possibly do a (temporary) remote comparison of them.

> Find a role from suim which has ARFC value in func group and assign it to the RFC user.

There might be other stuff in that role. Better would be to add the required function group (or as of 7.10 you can also add the function module name...) to S_RFC of the correct role. You can also do this via the menu.

Cheers,

Julius