Mapping error: RFC lookup from decentral adapter engine fails with 401 "Unauthorized"

[Former Member]

Hi experts, my integrated configuration is SOAP to ABAP proxy with a mapping performing an RFC lookup. It runs on a PI 7.31 decentral adapter engine.

The SOAP call fails with the following error message:

com.sap.engine.interfaces.messaging.api.exception.MessagingException: com.sap.aii.af.service.mapping.MappingException: Runtime Exception when executing application mapping program [...] root message: Cannot perform RFC lookup Error when calling an adapter by using the communication channel ECC_RFC_Receiver_Decentral (Party: *, Service: BS_ECC_100, Object ID: 68e332f8bf9036fba29997ac6f1d4776) Connection to system <DECENTRAL> using application AF lost. Detailed information: Error accessing "http://<DECENTRAL>:50000/AdapterFramework/adapteraccess/int?container=web" with user "PIISPI1". Response code is 401, response message is "Unauthorized"

<HOSTNAME> is a placeholder for the hostname of our decentral adapter engine.

The user PIISPI1 is the integration server user as maintained in the decentral adapter engine's "Java system properties" for service "XPI Service: AII Config Service" > property "com.sap.aii.integrationserver.serviceuser.name". This user only exists on the integration server, not on our decentral adapter engine <HOSTNAME>.

From the mapping an access to "http://<DECENTRAL>:50000/AdapterFramework/adapteraccess/int?container=web" is performed with a user that does not exist on <DECENTRAL>? What can be wrong here?

Thanks for your valuable input, best regards, Martin

[former_member185239]

Hi Martin,

Just copy paste the below url in browser

http://<DECENTRAL>:50000/AdapterFramework/adapteraccess/int?container=web

and try to logon with user : PIISPI1 and if you get error "401 unauthorized error" then check user

PIISPI1 in su01 and unlock it and also check the roles for the user.

In PI 7.31 , during craetion of user it creates two type of user PIIS<SID> and along with PIISUSER.So over here SID of your system is PI1.

So what you can do ,

1. you can copy the roles of PIISUSER to PIISPI1 user .

2. Also maintain the same password both in su01 and also in exchange profile.

Run the transaction sxmb_ifr->select Administration tab in webpage and logon with PISUPER user and in the left panel click on exchange profile link and then maintain the password for the user PIISPI1.

Moreover error is for Adapter Framework so here also check the PIAFUSER too because this user is for Adapter framework.

And also follow the below setup too Click on link "Functional Unit Configuration UI". Select Group "Advanced Adapter Engine", Functional Unit "Advanced Adapter Engine". All required Functional Units are selected automatically.

SAPNote : 1314855 go through the note.

Please let me know.

With Regards

Ashutosh Chaturvedi

[naveen_chichili]

Hi Martin,

The above error is due to user credential issue.Please check if all your PI Service users are functioning correctly ex:PIAPPLUSER,PIAFUSER...e.t.c

Regards,

Naveen.

[Former Member]

Hi Naveen and thanks for your answer,

why should I check those users if the affected user is PIISPI1?

PIISPI1 is the integration server user. It only exists on the integration server PI1, and not on the non-central adapter engine <DECENTRAL>.

What I wonder about is why PIISPI1 (integration server user) is used to call a service on the non-central adapter engine? This user does not exist there!

Can it be some configuration is missing on the non-central adapter engine?

Regards, Martin