cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Unable to login to userconsole

Go to solution
Former Member

on ‎05-24-2007 5:25 PM

0 Kudos

Hi Guru's

I installed SRM 5.0 with ABAP + JAVA (NW04s)stack in one step. Later on I created production client using client copy from source client 000. Since default client for Java stack is 001, I created all users present in 001 client again in production client and changed client details in UME configuration and tested with j2ee_admin, it is giving tested failed but when I checked with other ABAP user test is successfully.

Both ABAP and Java engine are up and running. When I opened Java home page, from there I am unable to login to userconsole through j2ee_admin ID. Where as I am able to login to System Info link from Java home page with j2ee_admin ID and later to userconsole directly.

After logging to userconsole using above procedure, I am unable to perform any operations (i.e. creation of users and etc.).

I performed UME consistency check and found some errors, following is the content:

Thu May 24 20:34:30 IST 2007 INFO ********************************************************************************

Thu May 24 20:34:30 IST 2007 INFO ******************* DB CHECK STARTED (2005-11-09) *******************

Thu May 24 20:34:30 IST 2007 INFO ************************* Thu May 24 20:34:30 IST 2007 *************************

Thu May 24 20:34:30 IST 2007 INFO ********************************************************************************

Thu May 24 20:34:30 IST 2007 INFO Results directory: /tmp/SAP_UME_DB_CHECK_RESULTS/

Thu May 24 20:34:30 IST 2007 INFO Logfile: /tmp/SAP_UME_DB_CHECK_RESULTS/\check.log

Thu May 24 20:34:30 IST 2007 INFO Reading UME objects from table UME_BLOBS... (this may take a while)

Thu May 24 20:34:31 IST 2007 INFO Reading UME objects from table UME_ACL_ACLENTRY... (this may take a while)

Thu May 24 20:34:32 IST 2007 INFO Reading UME objects from table UME_ACL_OWNER... (this may take a while)

Thu May 24 20:34:32 IST 2007 INFO Reading UME objects from table UME_STRINGS.PID... (this may take a while)

Thu May 24 20:34:32 IST 2007 INFO Reading UME objects from table UME_STRINGS.VAL... (this may take a while)

Thu May 24 20:34:32 IST 2007 INFO Found 24 UME object(s) to process

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginTrailingSpaces"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginUniqueIDWellformed"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginAccessibility"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginConfigurationChanged"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginIUser"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginIUserAccount"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginIRole"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginIGroup"

Thu May 24 20:34:32 IST 2007 INFO Added consistency check plugin "com.sap.security.core.tools.imp.ConsistencyCheckPluginIPrincipalSet"

Thu May 24 20:34:32 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_LOCAL".

Thu May 24 20:34:32 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_LOCAL" has no members.

Thu May 24 20:34:32 IST 2007 INFO PASSED

Thu May 24 20:34:32 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.e01e07fdd1d7411438c61b129af499080001".

Thu May 24 20:34:33 IST 2007 INFO PASSED

Thu May 24 20:34:33 IST 2007 INFO Checking "GRUP.SUPER_GROUPS_DATASOURCE.EVERYONE".

Thu May 24 20:34:33 IST 2007 INFO PASSED

Thu May 24 20:34:33 IST 2007 INFO Checking "GRUP.PRIVATE_DATASOURCE.un:ADSCallers".

Thu May 24 20:34:34 IST 2007 ERROR Some members of "GRUP.PRIVATE_DATASOURCE.un:ADSCallers" are not accessible. (com.sap.security.core.tools.imp.ConsistencyCheckPluginIPrincipalSet)

Thu May 24 20:34:34 IST 2007 ERROR FAILED

Thu May 24 20:34:34 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:Everyone".

Thu May 24 20:34:34 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:Everyone" has no members.

Thu May 24 20:34:34 IST 2007 INFO PASSED

Thu May 24 20:34:34 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_LOCAL_READONLY".

Thu May 24 20:34:34 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_LOCAL_READONLY" has no members.

Thu May 24 20:34:34 IST 2007 INFO PASSED

Thu May 24 20:34:34 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.8efb21f5a7da69c4542749129af497fe0000".

Thu May 24 20:34:35 IST 2007 INFO PASSED

Thu May 24 20:34:35 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.dfdd73d0c76f80f3a8a6a5129af499370003".

Thu May 24 20:34:35 IST 2007 INFO PASSED

Thu May 24 20:34:35 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:CAFUIAdmin".

Thu May 24 20:34:45 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:CAFUIAdmin" has no members.

Thu May 24 20:34:45 IST 2007 INFO PASSED

Thu May 24 20:34:45 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.e099516d2b860cf4c047fd129af499170002".

Thu May 24 20:34:45 IST 2007 INFO PASSED

Thu May 24 20:34:45 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.e2691c87ea9db698e29e51129af499a40008".

Thu May 24 20:34:46 IST 2007 INFO PASSED

Thu May 24 20:34:46 IST 2007 INFO Checking "GRUP.R3_ROLE_DS.SAP_J2EE_ADMIN".

Thu May 24 20:34:48 IST 2007 INFO PASSED

Thu May 24 20:34:48 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.e382e8f400bf889a861055129af499940007".

Thu May 24 20:34:49 IST 2007 INFO PASSED

Thu May 24 20:34:49 IST 2007 INFO Checking "USER.R3_DATASOURCE.ADSUSER".

Thu May 24 20:34:49 IST 2007 ERROR Principal "USER.R3_DATASOURCE.ADSUSER" is not accessible. (com.sap.security.core.tools.imp.ConsistencyCheckPluginAccessibility)

Thu May 24 20:34:49 IST 2007 ERROR Checking "USER.R3_DATASOURCE.ADSUSER" aborted by plugin com.sap.security.core.tools.imp.ConsistencyCheckPluginAccessibility because of severe inconsistencies.

Thu May 24 20:34:49 IST 2007 ERROR FAILED

Thu May 24 20:34:49 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.dec986526c6e63519df1ab129af499460004".

Thu May 24 20:34:49 IST 2007 INFO PASSED

Thu May 24 20:34:49 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.ddfc0beed6f5ba30bc1933129af499650005".

Thu May 24 20:34:50 IST 2007 INFO PASSED

Thu May 24 20:34:50 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.de59fabc8901003047e9df129af499750006".

Thu May 24 20:34:50 IST 2007 INFO PASSED

Thu May 24 20:34:50 IST 2007 INFO Checking "ROOT.PRIVATE_DATASOURCE.e2c70b569ca8fc986e6efd129af499b40009".

Thu May 24 20:34:51 IST 2007 INFO PASSED

Thu May 24 20:34:51 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_SUPPORT".

Thu May 24 20:34:51 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_SUPPORT" has no members.

Thu May 24 20:34:51 IST 2007 INFO PASSED

Thu May 24 20:34:51 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:Administrator".

Thu May 24 20:34:51 IST 2007 INFO PASSED

Thu May 24 20:34:51 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_CENTRAL_READONLY".

Thu May 24 20:34:52 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_CENTRAL_READONLY" has no members.

Thu May 24 20:34:52 IST 2007 INFO PASSED

Thu May 24 20:34:52 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:CAFAdmin".

Thu May 24 20:34:52 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:CAFAdmin" has no members.

Thu May 24 20:34:52 IST 2007 INFO PASSED

Thu May 24 20:34:52 IST 2007 INFO Checking "UACC.R3_DATASOURCE.J2EE_ADMIN".

Thu May 24 20:34:52 IST 2007 ERROR Attribute "lastsuccessfulpasswordcheck" on namespace "com.sap.security.core.usermanagement" set for account "UACC.R3_DATASOURCE.J2EE_ADMIN", but ume.logon.security_policy.password_max_idle_time=0. (com.sap.security.core.tools.imp.ConsistencyCheckPluginIUserAccount)

Thu May 24 20:34:52 IST 2007 ERROR FAILED

Thu May 24 20:34:52 IST 2007 INFO Checking "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_CENTRAL".

Thu May 24 20:34:52 IST 2007 INFO PrincipalSet "ROLE.UME_ROLE_PERSISTENCE.un:SAP_JAVA_NWADMIN_CENTRAL" has no members.

Thu May 24 20:34:52 IST 2007 INFO PASSED

Thu May 24 20:34:52 IST 2007 INFO ********************************************************************************

Thu May 24 20:34:52 IST 2007 INFO *********************************** SUMMARY ************************************

Thu May 24 20:34:52 IST 2007 INFO ********************************************************************************

Thu May 24 20:34:52 IST 2007 INFO 24 object(s) processed.

Thu May 24 20:34:52 IST 2007 INFO Found 1 object(s) to be deleted.

Thu May 24 20:34:52 IST 2007 INFO Found 1 attribute(s) to be deleted.

Thu May 24 20:34:52 IST 2007 INFO Found 1 value(s) to be deleted.

Thu May 24 20:34:52 IST 2007 INFO ********************************************************************************

Thu May 24 20:34:52 IST 2007 INFO ************************* DB CHECK FINISHED *************************

Thu May 24 20:34:52 IST 2007 INFO ************************* Thu May 24 20:34:52 IST 2007 *************************

Thu May 24 20:34:52 IST 2007 INFO ********************************************************************************

Could you please suggest any solution.

Regards

Shiv

Show replies
Show replies
Answer

Accepted Solutions (1)

Accepted Solutions (1)

arun_ev
Participant
‎05-28-2007 10:32 AM
0 Kudos

Hi Shiv,

On a combined stack(ABAP+JAVA) the java_admin is not permitted to make a entry into the UME as you will using a ABAP UME. See by adding a sap_all profile to the j2ee_admin and it helps. Alternatively, find the roles/authorisations/profile in ABAP that gives the permission for user/role creation and use it for your work.

Also, when you log into the portal you can still create roles relevant for the portal usage alone.

Thanks,

Arun

Show replies
Show replies
Former Member
‎03-18-2008 6:43 AM
0 Kudos

Hi Shivkumar,

Can you please tell how you solved the problem. I am also getting the same error in consistency check of UME. I am unable to view ABAP roles from identity mgmt., but am able to view ABAP users.

Thanks & Regards,

Shobhit

Answers (3)

Answers (3)

Former Member
‎05-28-2007 9:24 AM
0 Kudos

J2EE_ADMIN is not locked. I am able to login into System Info page from Java home page and then I am able to go through user administration link without authentication. But after that it is not allowing to perform any action such as user creation, copy user and etc.

When I am directly trying to login through user administration, it is not allowing me to login.

Regards

Shiv

Show replies
Show replies
Former Member
‎05-25-2007 8:31 AM
0 Kudos

Hi,

1. If admin is locked activate emergency user and unlock the admin. Please, refer the link for more information for emergency user activation.

http://help.sap.com/saphelp_nw2004s/helpdata/en/b8/58414254259d35e10000000a1550b0/frameset.htm

2. During the consistency check if any inconistencies are found you can repair it thrgough the repair tool for removing inconsistencies.

3. After log-in as an admin if you are able to access roles then assign the "Every one" role to "Everyone" group.

Thanks

R.Murali

Show replies
Show replies
Former Member
‎05-24-2007 6:11 PM
0 Kudos

Hi,

Check if user j2ee_admin exists in client 001, or if it is locked, or if it has the needed roles.

Regards,

daniel

Show replies
Show replies
Ask a Question