Accidentally deleted SAPLogonTicketKeypair from NWA in Netweaver 7.4

[Former Member]

Hello Friends,

I deleted the SAPLogonTicketKeypair from NWA and had taken a restart of JAVA server.

But now I am not able to open NWA page and other pages as well. I can see the start and login page but it shows blank page after login.

Please let me know if there is any alternate method to create the same.

As you already know that in SAP Netweaver 7.4 there is no Visual Admin tool .

Regards,

Kapil

[Former Member]

This has been resolved. Solution was provided by SAP.

Root cause: User pcd_service" has the wrong producer(We using FPN) roles assigned.

Solution delete entries from UME table on DB level.

This error is just specific to our environment.

[hemanth2]

Hi Kapilendra,

Hope you are doing good.

It is a bit tricky, but you can do this:

1) activate the emergency user- SAP* as per:

<http://help.sap.com/saphelp_nw73/helpdata/en/48/bb6ca4f5fe307be10000000a42189b/content.htm>

2) Once this is done, use the below link and recreate the certs:

Replacing the Key Pair to Use for Logon Tickets - User Authentication and Single Sign-On - SAP Lib...

Thank you!

_____________

Kind Regards,

Hemanth

SAP AGS
 

[Former Member]

Thanks I have activated the SAP*.

Please find the status below-

1) /irj/portal is not working, giving 500 error.

2) NWA page is opening but after giving valid login credentials it

shows blank screen.

3) User Admin page is also opening but after giving valid login

credentials it allows me to enter Identity Management but I cant do

anything.

4) I can not use Administrator for nwa since it is not working although

it is not locked. I have activated the emergency user SAP*.

5) Even by emergency user I am not able to change(password) any user in

Identity management. It gives message "error contact your adminstrator"

Regards,

Kapilendra Yadav

[hemanth2]

Hi Kapilendra,

Hope you are doing good.

The best option would be that you raise different threads for different issues as there seems to be many problems.
The first and the ofremost is fixing the SAP* login so that you can unlock the administrator user and set the tickets right.

Did you check out:

1) The defaut trace entry when the sap* logon worked but you were unable to fix the admin user?
2) Download the UME configuration as per the below link and check if the UME properties for SAP* are indeed correct.

http://help.sap.com/saphelp_nw73ehp1/helpdata/EN/49/21616989A13896E10000000A421937/content.htm?

Let me know if you have any questions with the above.

Regards,
hemanth

Thank you!

_____________

Kind Regards,

Hemanth

SAP AGS
 

[Former Member]

Hello Hemanth,

I created the ticket with SAP*.

I did check out default trace but it says JAVA stack overflow..nothing is concreate.

UME roles are not seeing when I check Administrator Group. I cant assign the roles to user and groups since it gives error. In default trace it says UME exception while assigning role.

Problem is with local UME I think.

I cant apply latest patches since Aministrator user is not being authenticated while using SUM.

Regards,

KY