Personas Error - You are not allowed to access this system

[guy_perets]

Hi,

First I would like to state that I reviewed Personas Error - You are not allowed to access this system - Looks like my issue is different...

This is the error from the log file:

Any tips would be appriciated.

Guy

-------------------------------Log Notes-------------------------------------------

LOG: 9/3/2014 12:29:47,810 DEBUG Sap.Imagineering.Personas.Common.Utils.HttpWebRequestExtension->GetResponse -

Synchronized GetResponse called for url http://ilbnkbs1.tlv.sap.corp:50000/sap/restgui/newsession?sap-client=100&sap.language=EN

9/3/2014 12:29:47,845 ERROR Sap.Imagineering.Personas.Common.Utils.<>c__DisplayClass6-><GetResponse>b__5 -

System.Security.SecurityException:

   at System.Net.Browser.AsyncHelper.BeginOnUI(SendOrPostCallback beginMethod, Object state)

   at System.Net.Browser.BrowserHttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at Sap.Imagineering.Personas.Common.Utils.HttpWebRequestExtension.<>c__DisplayClass6.<GetResponse>b__5(IAsyncResult asyncResult)

*** ROOT Exeption:

System.Security.SecurityException: [Arg_SecurityException]

Arguments:

Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=5.1.20913.00&File=mscorlib.dll&Key=Arg_Securit...

   at System.Net.Browser.BrowserHttpWebRequest.InternalEndGetResponse(IAsyncResult asyncResult)

   at System.Net.Browser.BrowserHttpWebRequest.<>c__DisplayClassa.<EndGetResponse>b__9(Object sendState)

   at System.Net.Browser.AsyncHelper.<>c__DisplayClass4.<BeginOnUI>b__0(Object sendState)

9/3/2014 12:29:47,846 ERROR Sap.Imagineering.Personas.ItsConnector.Connector->NewSession -

Connection to http://ilbnkbs1.tlv.sap.corp:50000/sap/restgui/newsession?sap-client=100&sap.language=EN failed. Please check you system configuration.

System.Security.SecurityException:

   at Sap.Imagineering.Personas.Common.Utils.HttpWebRequestExtension.GetResponse(HttpWebRequest request)

   at Sap.Imagineering.Personas.ItsConnector.Connector.NewSession()

*** ROOT Exeption:

System.Security.SecurityException: [Arg_SecurityException]

Arguments:

Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=5.1.20913.00&File=mscorlib.dll&Key=Arg_Securit...

   at System.Net.Browser.BrowserHttpWebRequest.InternalEndGetResponse(IAsyncResult asyncResult)

   at System.Net.Browser.BrowserHttpWebRequest.<>c__DisplayClassa.<EndGetResponse>b__9(Object sendState)

   at System.Net.Browser.AsyncHelper.<>c__DisplayClass4.<BeginOnUI>b__0(Object sendState)

9/3/2014 12:29:47,846 ERROR Sap.Imagineering.Personas.Base.Controller.RenderingController->Connect -

Connection to http://ilbnkbs1.tlv.sap.corp:50000/sap/restgui/newsession?sap-client=100&sap.language=EN failed. Please check you system configuration.

-------------------------------Log Notes-------------------------------------------

[guy_perets · Accepted solution]

Found the issue: clientaccesspolicy and crossdomain were not configured correctly in the target system.

[Former Member · Accepted solution]

Hi ,

I have the same problem. Can you tell me How to configure clientaccesspolicy and crossdomain in the system?

[guy_perets · Accepted solution]

Hi

The configuration is fairly simple, you hvae to add 3 keys to your system profile file. Section 3.1 of the configuration file provide more details - make sure you specify the full path of the clientaccesspolicy and the crossdomain files.

-------------from the config file--------------------

3.1 Configure System Settings

SAP Screen Personas need SAP Kernel 7.21 as a prerequisite. The following steps also need to be performed to complete the system settings.

3.1.1 Silverlight Cross Domain Setup

Locate key: "icm/HTTP/file_access_<n>" in your system profile.

Add following line into profile:

• icm/HTTP/file_access_0 =
  PREFIX=/sap/public/icmandir/,DOCROOT=$(DIR_ICMAN_ROOT),ARCHIVE=$(DIR_EXECUTABLE)/ITS.SAR,CACHECTRL=+28800

Add following lines into profile:

• icm/HTTP/file_access_1 = PREFIX=/clientaccesspolicy.xml, DOCROOT=<absolute pathto>\clientaccesspolicy.xml,CACHECTRL=0
• icm/HTTP/file_access_2 =PREFIX=/crossdomain.xml, DOCROOT=<absolute pathto>\crossdomain.xml,CACHECTRL=0

----------------------------------------------------------------------

My issue was that I configured it only for the main system and you have to do the same for each target system.

To validate your setting try to access the clientaccesspolicy file directly for example:

http://<domain><port>/clientaccesspolicy.xml

this should work...

I hope it helps.

Guy

[Former Member · Accepted solution]

Thanks. It worked.