Integrating Sap Netweaver IDM 7.2 to Sap Grc 10.0

[Former Member]

Hi Everybody,

i would like to integrate IDM 7.2 to Grc 10.0 and i´m followin the Instructions on the Compliant Identity Management Guide ! So far so good, i imported the Grc Provisioning Framework and installed the Virtual Directory Server with the appropriated Config. The Documentation of this CIM-Scenario suggere to test firstly the Connection with a Ldap Tool Client ! by starting the Server, when i click the Run Button (in Ldap Tool client) i get a Error which i don t understand !

Logger: Plain

Message: 

HTTP/1.0 500 SRT Unexpected failure in SOAP processing occurred: ("No Web service configuration for this access path: "/sap/bc/srt/rfc/sap/grac_select_appl_ws/000/grac_s"")

I installed SP01,2,3,4,5,,6,7 and the GRC_WS_APPL Services are already activated ! but it seems that s some configuration will be missed there !?

Please could someone put some Light on This ?

Thanks in Advance

Omar

[Former Member · Accepted solution]

Using the Grc 10.0 Template in the VDS 7.2, i found a Parameter ( Web Service URL ),  which port should i use here? In the example from the configuration guide it was the port number 53000 with the GRC URL, but I assume this should be a port from the ABAP system, isn't it?

Regards

[former_member2987 · Accepted solution]

Omar, it's interesting that we are hitting some similar issues on our current project. We are recieving some similar messages as you can see from the log:

Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    XML sent:    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    ---------------------------------------------------    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Enter: SOAPPart::saveChanges    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    POST /nwbc/sap/bc/srt/rfc/sap/grac_select_appl_ws/200/grac_select_appl_ws/grac_select_appl_ws HTTP/1.0
Content-Type: text/xml; charset=utf-8
Accept: application/soap+xml, application/dime, multipart/related, text/*
User-Agent: Axis/1.4
Host: kwt-grodl01.kiewit.com:8000
Cache-Control: no-cache
Pragma: no-cache
SOAPAction: ""
Content-Length: 346
Authorization: Basic bWF0dC5wb2xsaWNvOjEwamFrZTE2
<?xml version="1.0" encoding="UTF-8"?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><soapenv:Body><GracIdmSelectApplServices xmlns="urn:sap-com:document:sap:soap:functions:mc-style"/></soapenv:Body></soapenv:Envelope>    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    HTTP/1.0 500 Internal Server Error    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    content-type text/html; charset=utf-8    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    content-length 3775    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    connection close    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    org.apache.axis.i18n.resource::handleGetObject(return01)    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    (500)Internal Server Error    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Enter: SOAPPart ctor(FORM_FAULT)    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    org.apache.axis.i18n.resource::handleGetObject(setMsgForm)    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Setting current message form to: FORM_FAULT (currentMessage is now org.apache.axis.AxisFault)    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Exit: SOAPPart ctor()    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    org.apache.axis.i18n.resource::handleGetObject(toAxisFault00)    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Mapping Exception to AxisFault    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Exception in GRC WS API call:(500)Internal Server Error    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    *** Starting post processing phase ***    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    (Node:o=grc,ou=selectapplications,*): Failed    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    *** Fetch result code ***    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Exception: (GRC Select Applications:1:Exception in GRC WS API call:(500)Internal Server Error) 
    WARN    Java    true    
 {0}#1#com.sap.idm.vds.MVDException
    at com.sap.idm.vds.operations.MVDSearchOperation.FetchResultCode(MVDSearchOperation.java:908)
    at com.sap.idm.vds.operations.SearchOperation.mxperform(SearchOperation.java:49)
    at com.sap.idm.vds.Engine.answerRequest(Engine.java:261)
    at com.sap.idm.vds.protocols.ldap.MxLdapSession.run(MxLdapSession.java:193)
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Returning: opResult:1,info: ((GRC Select Applications:1:Exception in GRC WS API call:(500)Internal Server Error))    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Finished search operation    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    Sending operation result    DEBUG    Plain    false    
Thread[23,3,LDAP Sessions:main_listener_7001]    Mon Apr 09 16:59:32 CDT 2012    LDAP Session continues ...     DEBUG    Plain    false   

So I have a couple of questions for you.

Are you using SP3 or SP4?

I assume you've installed the Java stack for GRC?

Did you set up the SPML connection as a separate VDS configuration and compile it to a web service?

Thanks,

Matt

[Former Member · Accepted solution]

Hello Matt,

firstly, i would like to thank you for your Reply ! 

I´ll get the same Exception too ..

I´m  on SP7 and the Java stack is already installed but i didn´t setup the SPML Connection...

How do i set it up ?

Regards

Omar

[former_member2987 · Accepted solution]

Hi Omar,

So we found a few things that were going on:

1. The Webservices must be turned on in GRC.  These Webservices will match the Java classes called by the data source single nodes.

2. Make sure you have the correct URL specified for the GRC connection in VDS you'll need to make sure you're using the straight url (not nwbc) also test with a regular user not a dialog user first and that your credentials are good.  Make sure you have the right port # as well.

3. If you're still having issues include the grc JARS in the class path.  Don't include the folder, include the specific files, e.g., C:\usr\sap\IdM\Virtual Directory Server\lib\grcac2010lookup.jar

Finally the setup of the webservice is in the document Identity Services Configuration Guide.

Matt

[Former Member · Accepted solution]

Hallo Matt,

Firstly, i would like to thank you for your Reply.

is the integration working fine now in your system?

We still have the problem by setting up the VDS server.

1. The Webservices are activated in GRC, which we have verified in SE80;

2. I am not quite unterstand what here the straight url means. We have defined in VDS following Web Service URL, is that correct?    http://nwa.securintegration.de:8000

[Former Member · Accepted solution]

as you can see in my Logs: 

POST /sap/bc/srt/rfc/sap/grac_select_appl_ws/000/grac_select_appl_ws/grac_select_appl_ws HTTP/1.0

HTTP/1.0 500 SRT Unexpected failure in SOAP processing occurred: ("No Web service configuration for this access path: "/sap/bc/srt/rfc/sap/grac_select_appl_ws/000/grac_s"")

Exception: (GRC Select Applications:1:Exception in GRC WS API call:(500)SRT) 

       i was suching in this Path: sap/bc/srt/rfc/sap/   for the grac_select_appl_ws manually in the grc

       ABap-system but i didn t find this application ...

       Can you please put some Light of this .

       Thanks in Advance and sorry for the late reply

       Omar

[former_member2987 · Accepted solution]

Nope still having trouble.  However from your log snippet you have a GRC issue, probably with the Web Services setup.  Don't know very much about this as it's currently being handled by my project's basis team.  I'm trying to get some time to set up my own lab environment to look into this a bit deeper.

Matt

[Former Member · Accepted solution]

Hello Matt,

After searching, i found a Configuration Tool. In This Configuration (Tcode: Soamanager) you can activate the  webservice. Now i can see my grac_select_appl_ws in this Path:  sap/bc/srt/rfc/sap/

but i still get this error :

500 SRT Unexpected failure in SOAP processing occurred: ("No Web service configuration for this access path: "/sap/bc/srt/rfc/sap/grac_select_appl_ws/000/grac_s"")

have u already activate this webservices?  and the Configuration ?

Regards

Omar

[Former Member · Accepted solution]

It s all good now ! I can reach The Web Services from Access Control 10.0. The End-Point for my Web Service was incorrect and not configured..

[Former Member]

Hi Omar,

Can you please shear what was your End-Point? I am not able to find wsdl URL  for web services that can be used by IDM like "GRAC_USER_ACCES_WS".

I am trying below URL

http://hostname:50000/sap/bc/srt/rfc/sap/grac_user_acces_ws/100/grac_user_acces_ws/binding?sap-clien...

Can you please guide me for right WSDL URL?

Thanks

Shant