problem with trusted / trusting systems in solmon ?

[Former Member]

HI Folks ,

Please help me when I give test connection from solmon system I am getting error message " Not authorization to log on as trusted system".

Regards,

Sree

[Former Member]

Hi Sree,

please detail the steps that you are using to create trusted RFCs?

what are the authorisation of the user?

it should necessarily contains S_RFCACL authorisation object.

Have a look at the below thread:

http://scn.sap.com/thread/1001855

Cheers

SB

[Former Member]

Hi SB,

Kindly find the details:

I am using trusted rfc like SM_SIDCLNTXXX_TRUSTED. When I give test connection from solmon system (trusted system) to target system (trusting system)

I am getting error message "Not authorized to log on as trusted system" return code 1.

On Trusted system

RFC : SM_SIDCLNTXXX_TRUSTED

Connnection type : 3

Technical settings: target system setting : NO

Target host : host name

System No : XX

IP adress: IP address

Logon security tab:

Language: EN

Client : XXX

password: is initial

Trust relation ship : Yes

Uni code : Non Uni code

On trusting system

RFC : SM_SIDCLNTXXX_TRUSTED

Connnection type : 3

Technical settings: target system setting : NO

Target host : host name

System No : XX

IP address: IP address

Logon security tab:

Client : XXX

password: is initial

Trust relation ship : Yes

Uni code : Non Unicode

RFC connection was working before getting error message under same user, but it is not working now.We are using our own personnel id's like DDIC users.

[Former Member]

Hi Sree,

Is your problem resolved?

Cheers

SB

[Former Member]

Hi SB,

No, problem is not resolved. Please help.

Thanks,

Srinivas

[Former Member]

Hi Folks,

Please any one help me for this issue.

Thanks,

Sree

[Former Member]

Hi,

Please create a role containg the S_RFC and S_RFCACL authorization objects and assign full authorization to it.

Steps to create Role:

1. Go to PFCG.

2. Create new Single role, e.g. ZTRUSTED_XYZ

3. Add Transaction ‘SU0’ in ‘Menu’ tab

4. Goto ‘Authorization’ Tab and Click on ‘Change Authorization Data’.

5. Click on ‘Manually’ button for ‘Manual entry of authorization objects’.

6. Enter ‘S_RFC’ and S_RFCACL’ Authorization Objects. And click on Continue.

7. Assign full authorization for ‘S_RFC’ and ‘S_RFCACL’

8. Click on ‘Generate’ Button.

9. Goto ‘User’ Tab Map the user.

10. Click on Save.

Therafter assign this role created to user.

Hope it helps.

BR,

Prem

[Former Member]

Hello Sree,

Please check the below steps detailing on how to create trusted & trusting systems.

A user must be assigned S_RFCACL auth object.

refer to Prems step above for doing the same.

There is a concept called trusting system and trusted system. When we create a Trusted RFC connection, this Trusting and Trusted concept plays most important role. The source system will the Trusted system and the destination will be the Trusting system.

For example, from PRD to DEV you are creating a Trusted RFC connection, which doesn't require a usre name and password, the PRD will become Trusted system and DEV will become Trusting system.

Try performing the following steps to recreate the Trusted RFC connection between the system.

On the Trusting System

1.Create the Trusted RFC connection in sm59

a. RFC destination = <trustedSID>TRUSTED

b. Connection Type = 3

c. Description = SID Trusted System

d. Click save

e. Target host= <hostname of trusted system)

f. Enter System #

g. Click save

2. Create the Trusted System

a. smt1

b. Click create

c. Enter the name of the rfc connection created in step 1

d. Enter the client, userid, and password information

On the Trusted system

1. Create an RFC connection (sm59 ?create)

2. RFC Destination = <trustingSID>CLNT<trustingclient#> ex. CKDCLNT500

3. Connection type = 3

4. Description = <trustingSID> Client <trustingclient#>

5. Save

6. Enter Target Host and System Number information

7. Click Logon Security Tab

8. Trusted system= yes

9. Enter language and client information

10. Check the current user option

11. Save

cheers

SB

[Former Member]

Hi Sree,

Did you see the below replies??

isnt this of any help for you.

If you go step by step on reply from me & Prem, there shiuldnt be any problem.

Regards

Sachin Bhatt

[Former Member]

Hi Sachin/Prem,

I don't have authorization to execute the tcode PFCG. Both the systems are production system. Do we need to delete them and recreate in production systems? Please suggest.

Thanks,

Sree

[Former Member]

Hi,

You will need to have authorization for PFCG to create roles.There is no need to delete and recreate. Just check if the authorization objects are assigned, you will have to assign them if not assigned.

BR,

Prem

[Former Member]

Hi Folks,

Issue has been resolved. Thank you so much for your assistance.

Thanks,

Sree.