Solman_Setup Single Sign on issue

[former_member206167]

Hi dear Forum,

    Whyle performing Managed System configuration ==> Configure Automatically ==> Single Sign on Setup I'm getting this error in solman 7.1 SPS08

No certificate available for import to ABAP Host=xxxxx.com sys=00 client=000 admUser=USRSOLMAN rfcUser=USRSOLMAN

Found SID for SSO ACL entry : EMW

Found login.ticket_client for SSO ACL entry : 000

The Read entry permission on TicketKeystore/SAPLogonTicketKeypair-cert was given to sap.com/tc~webadministrator~solmandiag/servlet_jsp/smd/root/WEB-INF/lib/SetupLib.jar

The TicketKeystore/SAPLogonTicketKeypair-cert was succesfully read (618 bytes)

A failure occured while connecting to ABAP stack on localhost sys=00 client=001 user=SOLMAN_ADMIN

!! Exception : Name or password is incorrect (repeat logon)

No certificate available for import to ABAP Host=erpdev.machetazo.com sys=00 client=000 admUser=USRSOLMAN rfcUser=USRSOLMAN

Java SSO ticket certificate of EMW was imported in ABAP PSE of erpdev.machetazo.com (client 000)

The Java SSO ticket certificate was successfully imported in ABAP System PSE, and the ACL updated accordingly (SID=EMW LoginTicketClient=000)

com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Name or password is incorrect (repeat logon)

at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)

at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:1070)

at com.sap.mw.jco.JCO$Client.connect(JCO.java:3511)

at com.sap.smd.agent.plugins.remotesetup.CommonServices.getJcoClient(CommonServices.java:646)

at com.sap.sup.admin.setup.AbapSysRfcAdapter.getAbapOwnCert(AbapSysRfcAdapter.java:530)

at com.sap.sup.admin.setup.ManagingServices.fetchSSOParameters(ManagingServices.java:677)

at com.sap.sup.admin.setup.ServerSetupStep.preExecute(ServerSetupStep.java:145)

at com.sap.sup.admin.setup.ServerSetupStep.runExec(ServerSetupStep.java:167)

at com.sap.sup.admin.setup.ServerSetupStep.execute(ServerSetupStep.java:279)

at com.sap.smd.agent.plugins.remotesetup.SapInstance.setup(SapInstance.java:699)

at com.sap.sup.admin.setup.SapCluster.setup(SapCluster.java:2074)

at com.sap.sup.admin.setup.SapCluster.runClusterSetup(SapCluster.java:2408)

at com.sap.sup.admin.setup.ws.SetupWrapper._rManagedSetup(SetupWrapper.java:528)

at com.sap.sup.admin.setup.ws.SetupWrapper.managedSetup(SetupWrapper.java:338)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:331)

at com.sap.engine.services.webservices.runtime.JavaClassImplementationContainer.invokeMethod(JavaClassImplementationContainer.java:76)

at com.sap.engine.services.webservices.runtime.RuntimeProcessor.process(RuntimeProcessor.java:174)

at com.sap.engine.services.webservices.runtime.RuntimeProcessor.process(RuntimeProcessor.java:81)

at com.sap.engine.services.webservices.runtime.servlet.ServletDispatcherImpl.doPost(ServletDispatcherImpl.java:90)

at SoapServlet.doPost(SoapServlet.java:47)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1060)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

     Please help

Thanks you

[former_member206167]

Hi,

    thanks all for your answers, I have note 1121248 which is not clear for me:

You can get the certificate file from Diagnostics Setup -> Diagnostics System -> Advanced Setup

How can I get Diagnostics Setup?

Thanks in advance

[Former Member]

Hello Jose,

Did you try alternative way ?

Alternatively, you may run Visual Admin on the Java stack of the Diagnostics server, go to server -> services -> Key Storage -> Ticketkeystore (View) -> SAPLogonTicketKeypair-cert (Entry) -> "Export" button -> Choose "X509" (binary, .crt) format

BR,

K.

[hasanajsh]

It seems there is a password problem for user SOLMAN_ADMIN

Moreover, please follow: Note 1121248  - SSO Setup for Diagnostics

if everything is accordingly.

Regards,

Shkelzen

[Former Member]

Hello Luis,

According to error

com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Name or password is incorrect (repeat logon)

Please check:

http://help.sap.com/saphelp_nw04/helpdata/en/f6/e002416225f023e10000000a155106/content.htm

BR,

K.