Question on service userid - for RFC call

[Former Member]

Hi

In XI 3.0 SP18 , we are making a RFC call from XI mapping runtime - to XI's ABAP stack - RFC function module . In the RFC receiver communication channel , I tried using service user XIISUSER , XIAPPLUSER for this RFC call - I got short dumps on XI ABAP stack mentioning that these two service users do not have authorization to make RFC calls -

Does anybody out there know what service user on XI has RFC call authorization that can used to make RFC calls onto XI ABAP stack from its mapping runtime ?

Correct answers will be rewarded rightaway. Thanks for your time in advance.

[Former Member · Accepted solution]

Hi,

u have to make entry in sld...

Hi,,

2 Introduction

Configuring IDoc adapter in Exchange Infrastructure 3.0 requires some configuration on the SAP

systems, for both XI and the backend system where the IDoc message is to be sent. These steps, although

simple, are many times missed or mis-configured, causing the delivery of messages to fail.

Since IDoc adapter uses the ABAP stack, instead of J2EE, the configuration requirements are mainly in

ABAP.

Setting up IDoc adapters requires the XI integration server to be able to communicate with the backend

SAP system, and also to make sure that the Logical System Name used when posting IDoc exists on the

backend SAP system.

3 The Step By Step Solution

The basic steps for the IDoc configuration are outline below:

1. Configure SM59 on XI to communicate to SAP backend system.

2. Configure port on XI for IDoc communication.

3. Create or verify the Logical System Name on the SAP backend system.

4. Create or verify business system in XI’s System Landscape Directory.

5. Verify the Logical System Name of the business system.

6. Verify or add the Logical System Name for the sender business system.

7. Create/configure the Communication Channel for the IDoc receiver adapter

3.1 Configure SM59 on XI to communicate to SAP backend system.

1. Using transaction SM59, create an RFC destination with Connection Type = “3”.

In this example, the RFC destination name is “NDVCLNT510”.

2. Enter the logon information:

3. Test the connection by clicking on “Testing connection” and “Remote logon”.

Both must be successful.

3.2 Configure port on XI for IDoc communication.

4. Go to transaction IDX1 on XI, and create a port. In this example, the Port name is “SAPNDV”.

• The Port name must be in the form of “SAPxxx”, where xxx is the system ID of the backend SAP

system.

• The Client must be the client number of the backend SAP system.

• Select the RFC Destination which was created in the previous step.

3.3 Create or verify the Logical System Name on the SAP backend system.

5. Enter transaction SALE on the SAP backend system.

6. Create or verify the Logical System Name. In our example, NDVCLNT510 is verified.

3.4 Create or verify business system in XI’s System Landscape Directory.

The business system name for the SAP backend system must contain a valid Logical System Name. This Logical System Name is the one verified or created in the previous step.

7. In the System Landscape Directory, select the SAP backend business system. If one does not exist, then create the business system. Verify the Logical System Name.

3.5 Verify the Logical System Name of the business system.

8. In the Integration Directory, doubleclick on the business system (in our example, it is NDVCLNT510).

Navigate the menu:

Service • Adapter Specific Identifiers.

If information is empty or incorrect, then it will have to be synchronized with the content of the System Landscape Directory. Follow the steps below for synchronization.

9. (Optional) Synchronization of the business system in Integration Directory to the business system in System

Landscape Directory.

• Double-click on the business system in the Integration Directory.

• Switch to Edit mode.

• Select menu: Service • Adapter-Specific Identifiers

10. (Optional) Within the dialog box, click on the button as indicated below to resynchronize.

11. (Optional) If the expected data from the System Landscape Directory is not updated, then the SLD cache may need to be cleared first.

3.7 Create/configure the Communication Channel for the IDoc receiver adapter.

15. In the Integration Directory, create an IDoc receiver communication channel.

• The RFC Destination is from step 3.1.

• The Port is from step 3.2.

NOTE:

There is no need to create an IDoc sender Communication Channel for XI. Instead, the backend SAP system must be configure to send the IDoc to XI.

4 Appendix

Transaction: IDX2

There are a couple of situation where IDX2 can be useful on the XI system.

1. When we want to test connection between the XI and SAP backend system.

2. When an IDoc has changed, and the meta data stored in XI needs to be update. When an IDoc is sent from the SAP backend system to XI, XI will first check to see if the meta data for the IDoc is already in its persistent cache. If not, then XI will use the configuration in IDX1 to retrieve the IDoc meta data from the backend system. If the

meta is already in cache, then it will NOT do so. Therefore, when an IDoc has changed, it is necessary to manually update the new meta data on XI, or delete it from the cache, so that the latest version can be retrieved. IDX2 is used for this purpose.

Go to transaction IDX2 and click on “Create”.

Enter the IDoc Type and the Source Port as defined in step #2. Click “Continue”.If successful, the following will show up. If error occurs, then the IDX1 configurations will need to be re-checked.

Reward points if find useful.

[Former Member]

Have you tried XISUPER?

oops...

[Former Member]

Barry

XISUPER is a dialog user - not sure whether using this is a correct choice - since pwds for dialog users can be reset easily and I do not want this to affect the rfc call -

I already tried XIAPPLUSER - i got a short dump on ST22 for lack of rfc call authorization.

[Former Member]

We cheated and created a service user with sap_all and sap_new called XIRFCUSER in all clients (including R/3)

This worked for us (although it might break some rules... Sarb-Ox maybe...)

[Former Member]

Thanks for the suggestion - Barry. That is certainly a doable thing - but I am wondering whether there is any SAP delivered xi service already available with this authorization.

[Former Member]

Hi Karthik,

For RFC different authorization object is requried. You can ask your basis team to add the relevant authorization object in a new role and then add the new role to any existing service user or better create a new system user and add the role.

Regards,

Sumit