Error in CUP - Request Type "Change"

[Former Member]

Hi

When we try to modify a user through CUP with the request type u201Cchangeu201D the following error appears:

2010-11-17 11:50:50,210 [SAPEngine_Application_Thread[impl:3]_18] WARN RequestBO.java@5924:autoProvisioningForApprove() : Exception occured during auto provisioning , error messages : [com.virsa.ae.configuration.po.ApplicationLogPO@678fa599[userId=ECARRILLO,emailId=<null>,reqNo=523,system=CL1,recDate=11/17/2010,changedBy=BGUTIERREZVA,logAction=USER CREATE,newValue=ECARRILLO,description=<null>,error=true,singleMessage=false]]

2010-11-17 11:50:50,215 [SAPEngine_Application_Thread[impl:3]_18] ERROR RequestBO.java@6665:approveRequest() : AutoProvisioning Exception, checking if the escape route is enabled

2010-11-17 11:50:50,227 [SAPEngine_Application_Thread[impl:3]_18] ERROR RequestBO.java@6681:approveRequest() : AutoProvisioning Exception, escape route is enabled, going for the escape route

2010-11-17 11:50:50,260 [SAPEngine_Application_Thread[impl:3]_18] WARN Util.java@1094:parseInt() : Ignoring null, setting to default value : 0

2010-11-17 11:50:50,263 [SAPEngine_Application_Thread[impl:3]_18] INFO com.virsa.ae.accessrequests.bo.RequestAuditHelper : logMajorAction() : : intHstId : 46875

2010-11-17 11:50:50,292 [SAPEngine_Application_Thread[impl:3]_18] ERROR no dtos exist which are in the same state as the passing dto

com.virsa.ae.core.ObjectNotFoundException: no dtos exist which are in the same state as the passing dto

at com.virsa.ae.workflow.bo.WorkFlowBOHelper.getIfUnapprovedPathExists(WorkFlowBOHelper.java:2732)

at com.virsa.ae.workflow.bo.WorkFlowBOHelper.handleWFForNewPathStage(WorkFlowBOHelper.java:2586)

at com.virsa.ae.workflow.bo.WorkFlowRequestRerouteHelper.rerouteRequest(WorkFlowRequestRerouteHelper.java:68)

at com.virsa.ae.workflow.bo.WorkFlowBO.rerouteRequest(WorkFlowBO.java:789)

at com.virsa.ae.accessrequests.bo.RequestBO.rerouteRequestForAutoProvisioningFailure(RequestBO.java:8592)

at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6682)

at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6427)

at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:952)

at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:104)

at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)

at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

2010-11-17 11:50:50,438 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPR3UserDAO.java@191:findUser() : FunctionTemplate is/VIRSA/USER_AUTHENTICATION_NH

2010-11-17 11:50:50,442 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPConnectorUtils.java@512:getRepository() : authenticationSystem :CL1

2010-11-17 11:50:50,501 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPR3UserDAO.java@191:findUser() : FunctionTemplate is/VIRSA/USER_AUTHENTICATION_NH

2010-11-17 11:50:50,505 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPConnectorUtils.java@512:getRepository() : authenticationSystem :CL1

2010-11-17 11:50:50,542 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPR3UserDAO.java@191:findUser() : FunctionTemplate is/VIRSA/USER_AUTHENTICATION_NH

2010-11-17 11:50:50,546 [SAPEngine_Application_Thread[impl:3]_18] INFO SAPConnectorUtils.java@512:getRepository() : authenticationSystem :CL1

2010-11-17 11:50:50,685 [SAPEngine_Application_Thread[impl:3]_18] INFO MessagingHelper.java@159:clearMessages() : @@@clearing messages

2010-11-17 11:50:50,687 [SAPEngine_Application_Thread[impl:3]_18] INFO MessagingHelper.java@127:addMessage() : @@@Adding msgValue: Code: 9760; Locale: es

2010-11-17 11:50:50,689 [SAPEngine_Application_Thread[impl:3]_18] INFO MessagingHelper.java@137:addMessage() : @@@Creating new message list

2010-11-17 11:50:50,690 [SAPEngine_Application_Thread[impl:3]_18] INFO MessagingHelper.java@147:addMessage() : Adding msg to msglist

2010-11-17 11:50:50,691 [SAPEngine_Application_Thread[impl:3]_18] INFO com.virsa.ae.accessrequests.actions.RequestViewAction : confirmRequestApproval() : : setting context to true, ending context

Somebody can we help us with this problem.

Thanks

[koehntopp]

What I see in the log is that there was a provisioning error.

Did you configure CUP to create a user if he doesn't exist?

Does your RTA RFC user have enough auhtorizations to perform provisioning activities?

I don't think the problem is in workflow configuration.

Frank.

[Former Member]

If your SAP GRC SP is 12 then please assign the action "User Defaults" to the Request Change. It may be any dummy User Defaults.

[Former Member]

Hi Frank

Is correct your appreciation and answare your questions.

• Did you configure CUP to create a user if he doesn't exist?

No, I configure CUP - Create If User Does Not Exist - with value = NO, because I'm doing a change an account

• Does your RTA RFC user have enough auhtorizations to perform provisioning activities?

Yes, and we will give at the user SAP ALL

[koehntopp]

So that account does exist in all the systems contained in the request?

Please change the log level to DEBUG and let's see the error again with all the request details. It looks like CUP is trying to write the changes but does not succeed.

Your connector works fine otherwise? Have you been able to do anything from CUP?

Frank.

[Former Member]

Hi Frank

With regard to your questions, clarify the following points:

- The account exist in all systems contained in the request is correct

- The connectors work are fine

But I have a doubt

- The strange is that the system provisioning roles But I can change the user

- I change log level to DEBUG and let's see the error again with all the request details and send the details

2010-11-26 11:13:24,808 [SAPEngine_Application_Thread[impl:3]_39] DEBUG WorkFlowBO.java@1104:logExistingRolesForReqHistory() : com.virsa.ae.workflow.dto.WorkFlowRolesDTO@3da975c9[system=CL1,systemShortDesc=CL1 ERP,accessType=Select,searchValue=<null>,roleProfName=13616,roleProfDispName=BGNRALCFE0,roleProfDesc=GRC_GR: Role permisos generales en R/3,roleProfType=S,roleApproverId=<null>,roleApproverName=<null>,roleCriticalLevel=<null>,reqPathId=963,status=OPEN,oldStatus=OPEN,actionFlag=ADD,oldActionFlag=ADD,validFrom=11/26/2010 00:00:00,validTo=12/31/9999 00:00:00,selected=true,isReadOnly=true,isNew=false,expanded=false,isSimpleRole=true,isRiskAnalysisonAccessChanged=false,parentRoleName=<null>,parentRoleSystem=<null>,isEditable=false,isApplicable=true,isCommentRequired=false,altRoleApproverId=<null>,detailDesc=<null>,reaffirmPeriod=0,isLead=false,lastReaffirmDate=<null>,funcArea=<null>,roleIndex=0,companydesc=<null>,fucntionalAreaDesc=<null>,isExistingRole=false,roleProfIndicator=R,comments=<null>,validityType=NO,actualDate=<null>,years=0,months=0,days=0,URL=<null>,customBAPI=<null>,responsibilityId=0,commentsMandatory=<null>,attributelistpo=<null>,defaultRole=false,expired=false,roleStatus=2,columnFlag=false,roleApprovers=<null>,usrAttribute=<null>,usrAttributeValue=<null>,trainingVerified=false,isProvisioned=false,applicationId=GR,customFieldPOsList=[],customTemplateApproversList=[]]

2010-11-26 11:13:24,808 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.ae.workflow.bo.WorkFlowRequestRerouteHelper : rerouteRequest() : YOLIVER : INTO the method for reqNo : 559, toPathName : RTA_ASIGROL_SEG, toStageSeqNumber : 0

2010-11-26 11:13:24,814 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.ae.workflow.bo.WorkFlowTransactionHelper : closeAllOpenTransactions() : : INTO the method with reqno : 559, reqPathId : 963

2010-11-26 11:13:24,819 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.ae.workflow.bo.WorkFlowTransactionHelper : closeAllOpenTransactions() : : numUpdates : 0

2010-11-26 11:13:24,822 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.ae.workflow.bo.WorkFlowTransactionHelper : closeAllOpenTransactions() : : numUpdatesInFwdTbl : 0

2010-11-26 11:13:24,826 [SAPEngine_Application_Thread[impl:3]_39] DEBUG WorkFlowBOHelper.java@2724:getIfUnapprovedPathExists() : INTO the method : wfHistoryDTO : com.virsa.ae.dao.dto.RequestDataWFHistoryDTO@27c2246a[reqNo=559,reqPathId=<null>,pathName=RTA_ASIGROL_SEG,isDetourFlag=1,updateDate=Fri Nov 26 11:13:24 CST 2010,initialApprvrSeq=0,currentApprvrSeq=0,stageName=<null>,intCurrentFlag=1,status=OPEN,parentReqPathId=963,consistenceID=0]

2010-11-26 11:13:24,828 [SAPEngine_Application_Thread[impl:3]_39] DEBUG WorkFlowPathHistoryHelper.java@298:findCurrentDTOsWithNoApprovals() : INTO the method : reqno : 559

2010-11-26 11:13:24,830 [SAPEngine_Application_Thread[impl:3]_39] DEBUG RequestDataWFHistoryDAO.sqlj@760:findCurrentDTOsWithNoApprovals() : INTO the method

2010-11-26 11:13:24,839 [SAPEngine_Application_Thread[impl:3]_39] DEBUG RequestDataWFHistoryDAO.sqlj@820:findCurrentDTOsWithNoApprovals() : OUT of the method

2010-11-26 11:13:24,844 [SAPEngine_Application_Thread[impl:3]_39] DEBUG WorkFlowPathHistoryHelper.java@300:findCurrentDTOsWithNoApprovals() : OUT of the method : listResults : []

*2010-11-26 11:13:24,847 [SAPEngine_Application_Thread[impl:3]_39] <b> DEBUG WorkFlowBOHelper.java@2592:handleWFForNewPathStage() : A record doesn not exist in the WFHist table which is in same state as current record, so inserting : com.virsa.ae.core.ObjectNotFoundException: no dtos exist which are in the same state as the passing dto

2010-11-26 11:13:24,849 [SAPEngine_Application_Thread[impl:3]_39] ERROR no dtos exist which are in the same state as the passing dto</b>

[Former Member]

Hello Angelica

What is the current version/SP of your GRC ?

Also Do check Autoprovisioning setting and escape route setting in Congiuration tab of CUP .

Thanks & Regards

Asheesh

[Former Member]

As per log, it seems that path is not set and when it tries to go through escape route, it is also not working. Please check your configuration.

Regards,

Sabita