Not able to login into Visual Administrator

[Former Member]

I am not able to login into Visual Administrator tool by using J2EE_ADMIN user. The user has SAP_J2EE_ADMIN role. While login, getting the following error.

com.sap.engine.services.jmx.exception.JmxSecurityException: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX

at com.sap.engine.services.jmx.EngineAuthorization.checkMBeanPermission(EngineAuthorization.java:88)

at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:77)

at com.sap.engine.services.jmx.JmxServerFrame.checkMBeanPermission(JmxServerFrame.java:98)

at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:286)

at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:776)

at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)

at com.sap.engine.services.adminadapter.impl.ClusterAdministratorImpl.getClusterInfo(ClusterAdministratorImpl.java:41)

at com.sap.engine.services.adminadapter.impl.ClusterAdministratorImplp4_Skel.dispatch(ClusterAdministratorImplp4_Skel.java:123)

at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:320)

at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:198)

at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:129)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

Can anybody help me to solve this?

Thanks in advance.

Ramachandran

[aleksey_zvyagin]

Did not you change you J2EE_ADMIN Password? If yes please update it in secure store via configtool.

[Former Member]

Hi Ramachandran,

Check this links, will be helpful to solve your problem

http://help.sap.com/saphelp_nw04s/helpdata/en/71/540c404a435509e10000000a1550b0/content.htm

http://help.sap.com/saphelp_nw70/helpdata/en/39/83682615cd4f8197d0612529f2165f/frameset.htm

Regards,

Shemim

[Former Member]

Hi

Is j2ee_admin locked?

If no create a new user and give all the administrator rights to it.See if this user can access visual admin.

<b>Option 2</b>:Try to change the password of j2ee_admin from abap side.Now update the same in secured store.Restart the cluster.Your problem will be solved.

If you still face any issues let me know.

[former_member1193316]

Hi,

I m facing the same problem.

But i couldnot able to solve it. i follwoed the above suggestion , still i m facing the same.

please help me regarding the same

thanks in advance

[former_member185864]

Hi Venkat,

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Make the value of "login.ticket_portalid = No"

4. Save & Restart the engine.

5. then Logon with J2EE_ADMIN into Visual Admin

Thanks,

Nagaraju

[former_member1193316]

Hi Nagaraju,

I have done the same wat u mentioned above.

but still i m facing thesame error like below

<b>

Error while connecting

com.sap.engine.services.jmx.exception.JmxSecurityException: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX

</b>

please tell me wat might be the problem

[Former Member]

Hello Venkat,

It appears that J2EE_ADMIN user is not part of the Administrators group

in the UME.

Here are some points u can check:-

1) Switch user J2EE_ADMIN back to user type System. You should not be able to login in a dialog session.

2) User SAPJSF (user type Communications) assigned to

SAP_BC_JSF_COMMUNICATION_RO role in SU01.

3) User J2EE_GUEST (user type System) assigned to role SAP_J2EE_GUEST in

SU01.

4) Login to SDM with the same password used by J2EE_ADMIN, to confirm

that they match.

If after checking the above items you're still getting the same error

message, activate the SAP* emergency user, login to the UME and assign

J2EE_ADMIN to Group Administrators.

5) Also Check OSS note 997810

Regards,

Jafer

[Former Member]

I am using,

OS - windows 2003 sp1.

SAP NW - ABAP sp9 and java sp10.

[Former Member]

Yes, my user J2EE_ADMIN is already assigned with role SAP_J2EE_ADMIN.

[Former Member]

What system/version/patch level are you using?

[Former Member]

Does the J2EE_ADMIN have SAP_J2EE_ADMIN role assigned?