Authentication Stack: com.adobe/AdobeDocumentServices*AdobeDocumentServicesSec_Config

[Former Member]

Hi,

I am trying to configure the ADS SSL connection. I have followed all the steps as per the guide. ABAP & JAVA Signed certificates are in place & export/import of it within ABAP & JAVA is also performed.

while testing the ADS_HTTPS RFC it asks for WS Navigator User/Password Popup. & FP_ report also ask for credentials.

I used the web diag tool & found the attached traces.

LOGIN.FAILED

User: N/A

Authentication Stack: com.adobe/AdobeDocumentServices*AdobeDocumentServicesSec_Config

Login Module                                                              Flag        Initialize  Login      Commit    Abort      Details

1. com.sap.engine.services.security.server.jaas.ClientCertLoginModule      SUFFICIENT  ok          false                false     

        #1 CertAuth =

        #2 issuer =

        #3 SerialNumber =

        #4 subject =

I have also referred below trace but no luck.

My environment is SAP Netweaver 701.

Please help me to resolve this issue.

Regards,
Sachin

diagtool.txt.zip

[Former Member]

Hi Sachin,

Please check sapnote 944221 for ADS issues and troubleshooting

Thanks,

SK

[Former Member]

Can you tell which steps have been performed to configure SSL connection to ADS?

[Former Member]

Hi Roman,

Activate SSL on ABAP stack.

Create Serever & client PSE.

Generate the CSR & import its response to Serever & client PSE & restart ICM. Also maintain ROOT CA's.

Create  RFC ADS_HTTPS & maintain the prefix as per guide. In logon & security no logon & SSL to active & select the SSL client cerificate.

Export the ABAP client certificate.

Create ADSUSER in ABAP

On JAVA Stack,

Create SSl certificate adscredentia-cert in service_ssl view in keystore. Get it signed & import.

Export the adscredential-cert.

Add adscredential-cert certificate in TrustedCA view.

in SSL provider assign adscredential-cert certificate to server for HTTPS socket.

Export/Import of cert. & other steps.

Import JAVA adscredential-cert to ABAP SSL client & restart ICM.

Import the ABAP certificate to JAVA & add it to Trusted CA's list As well ADSCerts view.

Assign the ABAP certificate in SSL service provide HTTPS socket client authentication--> Request Client Certificate-->Add ABAP certificate & restart SSL Service,

Assign the ABAP certificate to ADSUSER in java system.

In addition to this activate UME parameter logon.allow.cert to TRUE.

Regards,
Sachin

[Former Member]

Please repeat steps to reproduce your issue and attach latest defaultTrace.X.trc file.

[Former Member]

Hello Sachine,

Please refer to note 1675976 - Password pop-up during PDF print or print preview

BR,

K.

[Former Member]

Hi Kamil,

Thanks for quick reply.

I checked this note but this is not applicable in my case.

When I just test ADS_HTTPS RFC I can see lines like No user name provided.

Regards,

Sachin Sable

[Former Member]

Hell Sachin,

What results brings abap reports FP_PDF_TEST_00 and FP_CHECK_DESTINATION_SERVICE ?

BR,

K.

[Former Member]

Hi Kamil,

Both reports getting below login screen.

Reagrds,
Sachin

[Former Member]

Have you check if user ADSUSER isnt' locked from ABAP and Java side ?

BR,

K.

[Former Member]

Yes it is not locked in ABAP as well as in JAVA.

Test Program: Version Information (for Analysis Only)

***************************************************
*** SYSTEM ERROR
***************************************************

ERROR CODE    :    100,101
ERROR MESSAGE : SOAP Runtime Exception: CSoapExceptionTransport : HTTP send returned with status code
SOAP Framework error: SOAP Runtime Exception: CSoapExceptionTransport : HTTP send returned with status code(100,101).

Regards,

Sachin