SAP PI 7.3 SOAP Receiver using Client Authentication

[former_member586297]

Hi,

We are currently working on a connectivity scenario where PI 7.3 is connecting to another external PI using SOAP with client Authentication for the first time (as we usually use User Authentication).

Considering host entries, FW and certificates has been set up, we are still getting the below error:

Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: SOAP: response message contains an error XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 401 Unauthorized

I wonder what else is needed to be set up?  Any other configuration that we need to set up in NWA?

Kind regards,

Grace

[former_member586297]

Hi guys,

To answer your questions:

• Unfortunately, I could not use external tools not approved by the company - internal security.
• Yes, upon certificate upload, Basis did a restart.
• The customer requires client authentication and not user authentication

Since we're using client authentication, and we're getting 401 unauthorized error, it seems it has something to do with the certificate.  XPI logs shows that we are not getting the right certificate.

During my checks on the blogs, I stumbled into this:

http://scn.sap.com/community/pi-and-soa-middleware/blog/2013/09/20/sender-soap-adapter-https-with-cl...

Though we have already uploaded SSL certs, I was thinking that since it is the first time we used client auth, we might need to set up something from NWA.  The link I provided is for Sender Adapter - is it right to assume that same process needs to be done for Outbound SOAP (Receiver Adapter)?  Won't this affect existing SOAP connectivity we have using User Auths?

Many thanks.

Kind regards,

Grace

[markangelo_dihiansan]

Hello Grace,

As far as I know, user authentication from SOAP Sender Adapter can only be disabled at adapter level and not on a channel basis. Either you have to complete remove the user authentication on the PI receiver system or you have to add a username/password in your receiver channel.

Regards,

Mark

[iaki_vila]

Hi Mary,

It isnt the same to act like https server or https client. I usually configure the ABAP stack to set up the SSL and there are little differences, in the Java stuck im not sure what problem could appear. Have you check this http://help.sap.com/saphelp_nw73/helpdata/en/48/a9bb3c7e28674be10000000a421937/content.htm?frameset=...?

Regards.

[former_member208404]

Hi Mary,

The user with which you are trying to connect to the external PI system might not have the proper roles assigned or the password could be wrongly configured.

Try and find out more from the NWA logs.

Hope it helps!

Abhishek

[markangelo_dihiansan]

Hello,

Try configuring user authentication aside from the certificate authentication in the receiver cc.

Regards,

Mark

[javier_alcubilla]

Hi Mary

As Iñaki says, try with an external tool first, like soapUI.

Check user roles also

Regards

Javi

[iaki_vila]

Hi Mary,

No extra configuration is neccesary as the usual. Have you tried to connect via SOAPui for example?, have you restart the ICM after the certificates installation?

Regards.