No authorization to log on as a Trusted System (L-RC=100 T-RC=0)

[Former Member]

Hi
I have searched, and found a lot of topics about this problem, but none of the topics did solve the problem for me

I got an RC=100 when I try to connect my GateWay with my ERP system.

From Gateway I got a problem to call my ERP
From my ERP I have the same problem to call GateWay

User in ERP has the authorization object S_RFCACL and S_RFC, s_rfc_tt (and SAP_RFC_ADM + SAP_TRANSLATOR)
The same for user in GateWay.
I use the same user, with the same password.

In SM59 I can do a connection test, and also a Remote logon - from GateWay to ERP, and from ERP to GateWay.

In SMGW I can see the connection.
In SMT1 I can see the calling system from Gateway and from the calling system I can see my gateway (incl. the installation no.).

So my error is "No authorization to log on as a Trusted System (L-RC=100 T-RC=0).", even that I can connect via SM59.

Anyone who can help me?

Thanks,

[Former Member · Accepted solution]

Now I have a connection between ERP and GateWay 🙂
Below my settings + I did also add note 01678930 in both Gateway and ERP

Gateway - tcode SMT1

In ERP following settings in SMT1

[Akshay_G · Accepted solution]

Hi,

That's great that you are through this now.

So note 01678930 was the catch i guess, but this was a system bug right?

Regards,

Akshay.

[Former Member · Accepted solution]

The note did help me to save the settings in SM59 🙂
But after that change I needed to change the client etc. at the logon information in SM59 (logon tab).

Maybe we also tried that the other day, but at that time it wasn't possible to save the settings.

[Akshay_G]

Lars,

I have finished the Installation & Configuration of SAP Netweaver Gateway 2.0 couple of weeks back.

Also our Mobility Development team was able to successfully create some mobile prototypes.

I observed that you are using the obsolete version of Installation & Configuration Guide.

I had also struggled with that.

I suggest you should go through the configuration at the SAP Help's Portal following link=>

http://help.sap.com/saphelp_gateway20sp06/helpdata/en/4c/a670b0e36c4c01ae2b9a042056f9dc/frameset.htm

Also for your help:

1) Define RFC From ERP to Gateway => Default Settings (No Trusted or User's Credentials to be defined, just Gateway's Target Host & System No. Field.

2) Define trust from ERP to Gateway via SMT1 using above RFC (Credentials will be prompted for now)

3) Define RFC from Gateway to ERP. (Trust Relationship YES, Current User Checked)

Let me know if you face any further issues.

Best Regards,

Akshay

[Former Member]

Akshay,
I can now get a connection from ERP to GateWay and the authoritycheck that I do in tcode SMT1 is prompting me for my username and password, and then I am connected to Gateway 🙂

But when I don't get a connection from GateWay to ERP.
I have tried to do the same stuff for in the GateWay, but when I try to do the connection from GateWay to ERP, I face the same problems as I did before from ERP.

[Akshay_G]

Lars,

Glad to know that you are half way through.

Regarding the second half, i just was cross examining the RFC's in my Landscape.

Minor correction from my yesterday's reply (Check if this resolves, however i doubt so)=>

1) RFC from ERP to Gateway=> Gateway Client, Current User is Checked & Trust Relationship  No (I Believe I did not mention the current user to be checked earlier).

Also the important thing is that, yo do the steps 1 --> 2 --> 3 in sequence.

You can also delete the RFC's and entry in SMT1 if you are not sure the sequence is correct and then re-try performing steps 1,2,3.

Also pl. check you have authorizations while doing this setup, you may temporarily use Super User with SAP_ALL to get this done, or i think there is a dedicated Gateway Administrator Role in Gateway Box.

If you can post the error screen-shot of RFC Test then it would be more helpful to figure out the issue.

Regards,

Akshay.

[Former Member]

I have now tried to follow this guide, but the setup still have the error in SMT1

and SMT1 from GateWay:

In ERP my settings are as following:
SMT1:

Connectiontest: OK

Remote logon: OK

SMT1 in Gateway:

Connection test: OK

Remote logon: OK

In SM59 there is generated a new connection with the name "TRUSTING@ER1_00XXXXXXXX" (x=install no)

Could it be that one, that is the problem? The reason that I point at TRUSTING@ER1_00XXXXXXXX, is that I can see in the status line, that GateWay is calling that, when I press "Authorization Check" in SMT1.

What am I missing? 😞

[Akshay_G]

From the screen shots of what i see is that, you need to do one correction.

But ensure to delete the TRUSTING@ER1_00XXXXXXXX in Gateway Box first and then do the below steps:

a) As per the Guide, you need to correct RFC GW1CLNT001 (RFC from R/3 to GW)

    There is no specification on Checking the Trust Relationship to YES.

    In your RFC it displays YES. Change it to NO. (I mentioned this above too, and you can not use Trust Relationship YES unless your system has been trusted already, explained in point f below )

b) Test RFC

c) Now do SMT1 from ERP System (Make sure that earlier entries have been removed, because you will use the above RFC whose setting is changed now. Also TRUSTING@ER1_00xxxxxxx RFC should be deleted from Gateway before this step)

d) Use the above corrected RFC GW1CLNT001, provide credentials it will log on to Gateway and thus create a new TRUSTING@ER1_00xxxxxxx RFC in Gateway

e) You do not need to do Connection Test of this above automatically generated TRUSTING@ER1_00xxxxxxx RFC.

f) Once you are done with the wizard successfully, now you should create RFC from Gateway back to ERP and use Trust Relationship YES (because the systems are trusted now as per success of the above SMT1 Wizard).

I hope you got the point.

Nothing is missing, I am getting the feeling that you do this from scratch.

Delete all the RFC's & links (In SMT1) first and do it from start.

Let me know, how it goes?

Regards,

Akshay.

[Akshay_G]

And also you do not need to do SMT1 from Gateway to ERP.

Its just one way handshake(SMT1) from ERP to Gateway which sets:

• Back-end (ERP) to be the Trusting System
• Gateway to be the Trusted System.

[Former Member]

All the connections are done from scratch, and now I have done as mentioned...

1. I did delete the trusting connection in Sm59 in GateWay.
2. Did delete the entries in ERP in tcode SMT1
3. In ERP i did correct the connection GW1CLNT001 to NOT be trusted.
4. Did test GW1CLNT001 from ERP, and it was OK
5. In SMT1 a new entry was created for GW1CLNT001 in ERP
6. In Gateway a new trusting connection was created automaticly.
7. In Gateway I create  a connection in SM59 ER1CLNT800 and with YES in trust.
8. If I now do a test from ERP via SMT1, I need to logon by my own user-info, and then I got following error:
   Error Details No authorization to log on as a Trusted System (L-RC=1 T-RC=0).

Any suggestions?

[Akshay_G]

OK.

Let's trouble shoot this then.

Basically your trust is setup OK (T-RC=0)

But you are not able to Login (L-RC=1)

First let's check this:

As per this http://help.sap.com/saphelp_gateway20sp06/helpdata/en/d3/5b5c8ac5a93941b9f4e2f09b50beb4/frameset.htm check whether the User (In ERP, Trusting System) with which you are testing has authorizations (To be specific,

authorization object S_RFCACL)

You can check the authorizations for the  user in the trusting system (ERP) in advance, by using the function module AUTHORITY_CHECK_TRUSTED_SYSTEM via SE37.

Please post the results. Success will give the run-time output like below:

If the above doesn't helps, you might want to investigate here:

Check Note 128447 https://websmp130.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=128447

Let me know, the result of Authorization Check.

Regards,

Akshay

[Former Member]

Akshay I appreciate your help 🙂

I am not sure if I can use the FM, as the result is OK no matter what I type in.

I am running the FM in the ERP system.

The note 128447 is already printed, and I have also cheked it, and it seems okay

[Akshay_G]

Lars,

I understand your despair.

But i am sure this has got to do something with Authorizations only for the User in ERP & Gateway.

And you are using this user in RFC Definition too.

One last suggestion.

Assign yourself SAP_ALL if possible in ERP & Gateway.

Also your SAP User should be same in both ERP & Gateway.

Else consider raising this to SAP.

Regards,

Akshay.

[Former Member]

The user in ERP and GateWay is the same, and the user has SAP_ALL in both places.

I will raise a message for SAP.

Thanks for your input.

[Akshay_G]

Sure,

Let me know when & how this gets resolved...

Pl. award points if the above suggestions were of help

Regards,

Akshay

[JPReyes]

Hi Lars,

I read your post a couple of times and I don't get what sort of gateway are you using?...

Regards, Juan

[Former Member]

Hi Juan

I am not sure, if I answer your question..
We are using SAP GateWay - with SAP GW CORE 200.

Is that the answer, that you was looking for?

regards

Lars

[JPReyes]

Ok, thats what I though, I have no experience with SAP GW but as far as I understand its just an add-on that runs on top of a standard NW system. right?

What process did you use to create the Trusted system?,  This does not look like an authorization issue as the return code would be different.

Regards, Juan

[Former Member]

I have followed the procedure in this paper:

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b054074c-d6cf-2e10-8e96-f81869792...

For creating the trusted relationship, I am using transaction code SM59, and transaction SMT1. The place where I got problems according to the description, is as point no 69.

So in SMT1 the destination is created, but I got the authorization error here.

[JPReyes]

Can you please post errors on the SM21 log and or ST22 if a shortdump is been created.

Regards, Juan

[Former Member]

In ERP system I got this in SM21:

12:15:53 DIA  006 000 SAPSYS                AB  0 Run-time error "CALL_FUNCTION_SINGLE_LOGIN_REJ" occurred
12:15:53 DIA  006 000 SAPSYS                AB  1 > Short dump "130417 121553 ERP_ER1_ 00 " generated

Short dump says:

An RFC call (Remote Function Call) was send with an invalid user ID
"GATEWAY " or the caller system is not registered as a Trusted System in the
target system.

    The error code of the trusted system (T-RC) was 0.

    Meaning:
      0   Correct logon via trusted system.
      1 No trusted system entry for the caller system "GW1 "
          with the installation number " ", if this exists, or
          the security key entry for system "GW1 " is invalid.
      2 User "GATEWAY " does not have RFC authorization (authorization object
          (S_RFCACL) for user "GATEWAY " with client 001.
      3   The time stamp of the logon data was invalid.

    The error code of the SAP logon procedure (L-RC) was 1.

    Meaning:
      0   USER_OK                    Login was correct
      1   USER_NOT_ALLOWED           User or password incorrect
      2   USER_LOCKED                User locked
      3   STOP_SESSION               Too many attempts to log on

[JPReyes]

An RFC call (Remote Function Call) was send with an invalid user ID "GATEWAY"

Ok, first question is an obvious one, does the user exist?... if it does, whats type of user it is?

Regards, Juan

[Former Member]

User is a dialog user in both GateWay and in ERP

The user has the same password in both ERP and GateWay.

[JPReyes]

What I found extrange is the RC was 0...

Have you tried assigning the S_RFCACL authorization to your own user in both source and target and try the connection, simply to discard a problem with the user itself?

Regards, Juan

[Former Member]

Yes all the users has assigned the S_RFCACL authorization.

The RC = 0 is only for T-RC

The error code of the SAP logon procedure (L-RC) was 1.

    Meaning:
      0   USER_OK                    Login was correct
      1   USER_NOT_ALLOWED           User or password incorrect

But the user ihas the same password in both systems.

Regards
Lars

[JPReyes]

But the user ihas the same password in both systems.

Trusted system do not require that the passwords for the users in source and target are the same.

Can you post a screenshot of your RFC's logon and security tab?

Regards, Juan

[Former Member]

Here is the SM59 and SMT1 from the ERP system

[JPReyes]

Trust Relationship is set to "no"... you might want to change that.

Regards, Juan

[Former Member]

I am not sure, that I need to change that.

I have found this "....

Log on to the trusting system S00

(server). Here, create a destination for the trusted system C00 (client) using

transaction SM59 (for example, C00_SYSTEM). It is important that the option

'Trusted System' is not set to active for this destination (Security Option

Trusted System = No).     "

On this page:

http://help.sap.com/saphelp_nw04/helpdata/en/8b/0010519daef443ab06d38d7ade26f4/content.htm

Do you agree with me?

Regards
Lars

[JPReyes]

It also says, "If different users or clients are used for the trusted scenario, you must create an RFC destination on the client side, and perform an authorization check for the specified logon data, setting the flag for "Trusted System" to "Yes""

Regards, Juan

[Former Member]

OK

I have just changed the flag to  "Yes" for the "Trusted System" in ERP, but still the same error

regards

Lars

[JPReyes]

What about the RFC on the trusting system?... Can you post the details here?

BTW, you mentioned that all users have the S_RFCACL authorization, why is your RFC fixed to a user, can you try ticking current user rather tha GATEWAY?

Regards, Juan

[Former Member]

Am I missing something here?  In the screenshot of the RFC, the user GATEWAY has password status 'initial'.  Should this not have a value?

regards,

Graham

[JPReyes]

Absolutely, you have a valid point, Also, as I mentioned above, I always condition the Trusted RFC's to the current user rather than a particular one.

Regards, Juan

[Former Member]

Now I have changed to "current user", but still the same error.