configure diagnostics - sso fails

[Former Member]

Hello

We are configuring diagnostics in the solution manager system itself and the two SSO steps fails.

Error1:

A failure occured while importing Java SSO ticket certificate in ABAP

stack

Step SSO Details

Found SID for SSO ACL entry : SOL

Found login.ticket_client for SSO ACL entry : 000

The Read entry permission on TicketKeystore/SAPLogonTicketKeypair-cert

was given to

sap.com/tc_{webadministrator}solmandiag/servlet_jsp/smd/root/WEB-

INF/lib/SetupLib.jar

The TicketKeystore/SAPLogonTicketKeypair-cert was succesfully read (620

bytes)

A failure occured while getting own cert

!! Exception : SSF_KRN_INVALID_PAR

A failure occured while importing ABAP SSO ticket certificate in ABAP

stack

!! Exception : java.lang.NullPointerException

A failure occured while importing Java SSO ticket certificate in ABAP

stack

!! Exception : INTERNAL_ERROR

Error2:

SSO certificate data not available : Ticket login module can not be

updated

Step SSO Details

The SSO ticket Certificate <OU=J2EE,CN=SOL> has been successfully

imported into ticket Keystore

The Login Modules for validating SSO tickets were already installed

The ticket ACL already contained : sys=SOL,000 iss=OU=J2EE,CN=SOL

dn=OU=J2EE,CN=SOL

The Authentication template for component

sap.com/SQLTrace*OpenSQLMonitors was already set to ticket

The Authentication template for component sap.com/SQLTrace*SQLTrace was

already set to ticket

The Authentication template for component

sap.com/tc_monitoringsysteminfo*sap_monitoring was already set to

ticket

The Authentication template for component

sap.com/tc_wddispwda*webdynpro_dispatcher was already set to ticket

The Authentication template for component

sap.com/tc_wddispwda*webdynpro_welcome was already set to ticket

SSO Abap Ticket certificate of Diagnostics system not available : can

not perform SSO setup. Please make sure ABAP PSE is not empty and not

locked by transaction STRUSTSSO2 on Diagnostics system

The Login Modules for validating SSO tickets were already installed

SSO certificate data not available : Ticket login module can not be

updated

SSO setup failed : error while updating login modules : SSO certificate

data not available : Ticket login module can not be updated

Also, I have checked STRUSTSSO2 transaction, and when you run it, the message "Errot while loading PSE appears". Could this two things be related?

Thanks and best regards,

Ana.

[Former Member]

Hello,

i forget telling you that I have deleted the PSE and created it again. I've rerun the diagnostics configuration again and now, one of the two failed steps has finished successfully and also the error is different:

A failure occured while importing Java SSO ticket certificate in ABAP stack

Step SSO Details

Found SID for SSO ACL entry : SOL

Found login.ticket_client for SSO ACL entry : 000

The Read entry permission on TicketKeystore/SAPLogonTicketKeypair-cert was given to sap.com/tc_{webadministrator}solmandiag/servlet_jsp/smd/root/WEB-INF/lib/SetupLib.jar

The TicketKeystore/SAPLogonTicketKeypair-cert was succesfully read (620 bytes)

ABAP Certificate was successfully retrieved (766 bytes)

ABAP SSO ticket certificate of SOL was imported in ABAP PSE of crosol203.cromioncpd.com (client 100)

The ABAP SSO ticket certificate was successfully imported in ABAP System PSE, and the ACL updated accordingly (SID=SOL LoginTicketClient=100)

A failure occured while importing Java SSO ticket certificate in ABAP stack

!! Exception : FOREIGN_ENQUEUE_LOCK

Any idea??

Thanks and best regards,

Ana

[Former Member]

This message was moderated.

[Former Member]

Ana,

Make sure you are out of STRUSTSSO2. You're holding a lock and the configurator is trying to change entries in the PSE. Make sure you're out of all other windows before running this config.

Thanks,

Jeff

[Former Member]

Hello,

The check is OK and the status is green.

Thanks and best regards,

Ana.

[Former Member]

Hi,

In both cases it is showing the error on ABAP Certificate. Can you check the following and let us know what is the result of it.

Go to Strustsso2 transaction and on the left hand side, click on the System PSE node and Right-click on it and select check. Is it giving any error? post it. Is you PSE on OS level maintained properly? What is PSE status under System PSE is it in green color?

Thanks,

Pradeep