cancel
Showing results for 
Search instead for 
Did you mean: 

XI Post-Installation problem (403 Forbidden)

Former Member
0 Kudos

Hi,

currently i'm executing the post-installation of XI.

At topic "Creating RFC Destinations in the ABAP Environment" especially creating the RFC-Destination "INTEGRATION_DIRECTORY_HMI" (SM59) I have a problem. After saving all necessary entries in various tabs, i get after executing "Test connection" the HTTP-Code 403 (forbidden).

Following is the exact error i am getting:

HEADER NAME HEADER VALUE

~response_line HTTP/1.1 403 Forbidden

~server_protocol HTTP/1.1

~status_code 403

~status_reason Forbidden

connection close

set-cookie MYSAPSSO2=AjExMDAgAA9wb3J0YWw6WElJU1VTRVKIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIWElJU1VTRVICAAMwM

set-cookie JSESSIONID=(ximac_XID_00)ID9751150DB19780753031607883521End; Version=1; Path=/

set-cookie saplb_*=(ximac_XID_00)9751150; Version=1; Path=/

pragma no-cache

cache-control no-cache

expires 0

content-type text/html

content-length 1506

server SAP J2EE Engine/6.40

date Mon, 23 Sep 2002 08:37:06 GMT

HTTP BODY

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>

<head>

<title>Error Report</title>

<style>

td {font-family : Arial,

Tahoma, Helvetica, sans-serif; font-size : 14px;}

A:link

A:visited

A:active

</style

>

</head>

<body marginwidth="0" marginheight="0" leftmargin="0" topmar

gin="0" rightmargin="0">

<table width="100%" cellspacing="0" cellpaddin

g="0" border="0" align="left" height="75">

<tr bgcolor="#FFFFFF">

<td align="left" colspan="2" height="48"><font face="Arial, Verdana, Hel

vetica" size="4" color="#666666"><b>&nbsp;&nbsp;403 &nbsp Forbidden</b><

/font></td>

</tr>

<tr bgcolor="#3F73A3">

<td height="23" width="8

4"><img width=1 height=1 border=0 alt=""></td>

<td height="23"><img

width=1 height=1 border=0 alt=""></td>

<td align="right" height="2

3"><font face="Arial, Verdana, Helvetica" size="2" color="#FFFFFF"><b>SA

P J2EE Engine/6.40&nbsp;</b></font></td>

</tr>

<tr bgcolor="#9DCDFD">

<td height="4" colspan="3"><img width=1 height=1 border=0 alt=""></

td>

</tr>

</table>

<br><br><br><br><br><br>

<p><font face="Arial, Ve

rdana, Helvetica" size="3" color="#000000"><b>&nbsp;&nbsp;You are not au

thorized to view the requested resource.</b></font></p>

<p><font face="

Arial, Verdana, Helvetica" size="2" color="#000000"><table><tr><td valig

n="top"><b>&nbsp;Details:</b></td><td valign="top"><PRE>No details avail

able</PRE></font></td></tr></table></font></p>

</body>

</html>

Time (ms) 17,007

I do not find the way to solve it....

With regards

Sunil

Accepted Solutions (0)

Answers (7)

Answers (7)

Former Member
0 Kudos

Hi,

Now i am getting another problem.

While testing SLDCHECK i am getting exception while calling function LCR_LIST_BUSINESS_SYSTEMS.

Please find the detail below.

Testing the RFC connection to the SLD java client...

RFC ping was successful

SLD server access settings:

host name: XIMAC

port number: 50000

user : XIAPPLUSER

Use transaction SLDAPICUST if you wish to maintain the SLD server access data

Launching the SLD GUI in a separate browser window...

=> Verify in the browser GUI that the SLD is in a healthy running state!

Calling function LCR_LIST_BUSINESS_SYSTEMS

Retrieving data from the SLD server...

Function call returned exception code 3

=> Check whether the SLD is running!

-


Summary: Connection to SLD does not work

=> Check SLD function and configurations

-


Now checking access to the XI Profile

any guess to solve this problem.

with regards

Sunil

moorthy
Active Contributor
0 Kudos

Hi,

DId you do XI readiness Check ? If not this SAP note will help u to do step-by-step-817920

Regards,

Moorthy

Former Member
0 Kudos

Hi Moorthy,

I went thru the readiness check, sldcheck is ok but refreshing cache gives issues - gives me the same HTTP Forbidden 403 error.

I went thru sap note 751856, but cudn't make much out of it...I am not sure what would be the remotegui for SDM.

Former Member
0 Kudos

Hi Bhavesh,

Could please tell me how to check whether profile is generate or not and if not then how to generated the profile for User XIISUSER.

Thanks for help...

with regards

Sunil

Former Member
0 Kudos

Sunil,

when u create the user XIISUSER, assign some roles and save.

Profiles are automatically generated.

-Naveen.

Former Member
0 Kudos

Hi Audy,

I solve the problem, it is related to the user when I change the user from XIISUSER to XISUPER it is working fine I think that problem is related to user authentication, I can see the appropriate role in SU01-User XIISUSER but there is way to counter check and assign the role with the help Visual Administrator this is what I do not know, if you this let me know.

Thanks again for all your help…

With regards

Sunil

bhavesh_kantilal
Active Contributor
0 Kudos

hi,

Maybe the profile for the user XIISUSER has not been generated. make sure that the Profile has been generated for the same.

Regards,

Bhavesh

Former Member
0 Kudos

Hi Audy,

Following role has been assign to XIISUSER:

SAP_SLD_CONFIGURATOR

SAP_XI_IS_SERV_USER

SAP_XI_IS_SERV_USER_MAIN

with regards

Sunil

Former Member
0 Kudos

Hi Audy,

Following Services are active, even I am getting same 404 forbidden

SICF:

All services of sap->xi ,

sap->bc->xmb,

sap->public->icman

In case of SM59 following is the detail of setting:

Technical Settings Tab:

Target Systems Setting

Target Host : XIMAC

Service No. : 50000

Path Prefix : /dir/CacheRefresh

Logon Security

Basic Authentication (DEFAULT SSK Client (Standard))

SSL : Inactive

Logon

Language : EN

Client : 100

User XIISUSER

Special Option Tab

Timeout in msec : 900

HTTP Setting

Http Version : HTTP1.0

Compression Inactive

Compression Response : No

Http Cookies

Accept Cookies : Yes (ALL)

Even appropriate role is assign to XIISUSER

Do you want me to counter check the role for this user.

With regards

Sunil

Former Member
0 Kudos

Hi Audy,

1. ICM service is active and status is green, SMICM HTTP service is active and status is green whereas External and Bind is blank, also SMICM parameters are looking correct like port :8000

2. I do not know what are the required services which I need to check active in SICF transaction, could you please send me the list of services.

3. SM59-> INTEGRATION_DIRECTORY_HMI all required entries are set, logging verification through GUI Logon PAD you mean Visual Administration login or something else ?

I would like to say thanks to you for providing help.

With regards

Sunil

Former Member
0 Kudos

Hi Sunil,

Please Check in SICF: All services of sap->xi , sap->bc->xmb, sap->public->icman

In SM59, Verify following details:

Path Prefix: /dir/CacheRefresh

Logon Procedure: Basic Authorization

HTTP Cookies(Special Option tab) = 'Yes'.

Regards,

Audy

Former Member
0 Kudos

Hi Audy,

Forums post and reply is taking lot of time, is it possible for me to talk to you on messanger or call you at any time.

My messanger ID is : sunil_pandey_sunil@hotmail.com

with regards

Sunil

arunneerolil
Contributor
0 Kudos

Hi,

Make sure that logon credentials & conn. properties are

correct.

Rgds

Chemmanz

Former Member
0 Kudos

Hi Chemmanz,

I am using XIISUSER and respective password for this user.

Could you please tell me how to verify the connection perimeters and what would be the correct perimeters for connection.

If you have some documentation which can solve this problem please send me.

Even i seen the same problem in forum which was posted by someone but i do not find the solution from that post and replies.

Thanks you for your reply....

with regards

Sunil

Former Member
0 Kudos

Hi Sunil,

1.First of all, check whether ICM service is active or

not... Go to SMICM and check whether the status is

green.

Then Go to Menu -> Goto -> Service

HTTP service should be active (Green tick)

and 'External' and 'Bind' should be blank. Also

confirm all the parameters in SMICM transactions like

port etc.

2.Also check required services in SICF transactions are

up.

3.Go to SM59-> INTEGRATION_DIRECTORY_HMI

Give Tearget host = Host name of XI ,

service number = 5<Sys-No>00

Path prefix = /dir/CacheRefresh

Logon details. (This can be verified by actually

logging thru' GUI Logon PAD)

This should work perfectly....

Thanks and bye,

Audy