cancel
Showing results for 
Search instead for 
Did you mean: 

how to configure a system

former_member196517
Contributor
0 Kudos

Hi Friends,

I have installed EP 7 and now when i logon to visual composer and try to look for API's in added system it shows an error

'failed to connect to backend system. check your system definition and user privileges.'

can anyone help me resolving this..

Regards

Anuj

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Anuj,

Please check the permission for the systems .I guess you must have not given the enduser permission to you system.Let me know.

see this links for help

Thanks

Regards

Santosh

Reward if helpful !!!

former_member196517
Contributor
0 Kudos

Sorry Santosh .. not useful any other pointer.. ?

Former Member
0 Kudos

Hi Anuj,

Please check the troubleshooting of VC link ..

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/8ee70a47-0a01-0010-d198-f94...

Thanks N Regards

Santosh

Reward if helpful !!!

Former Member
0 Kudos

Did you try the "User Administration" TAB?

This one should give you he desired result.

Former Member
0 Kudos

Did you manage to solve the problem, becuase I am facing it to .

Former Member
0 Kudos

I had this same problem yesterday and all that I did was changing the Flash option to webdynpro in tools > options > compiler > runtime.

also check out the following notes:

974494

936390

886209

1017934

also check the system object permissions. make sure you have the Owner permissions for ur id since this is required for design time.

let me know if you still have trouble.

Former Member
0 Kudos

Hi Rahul,

I have changed the <i>flash</i> option to <i>webdynpro</i> and it didn't work, I also gave to my user Owner permissions allthough I had because of the super_admin role I am assigend to.

I read the notes you told me to, but non of them really describe my problem.

Can you tell me which user you used for user mapping for the system object?

Did you configre Single Sign On on your System?

Because I am not sure if it's necessary.

Thanks for your fast answer

Ali

Former Member
0 Kudos

plain and simple "SSO IS REQUIRED TO RUN" Visual Composer

do your connector test and then make sure you have the system alias set so that way you can retrieve your system through the alias in your Visual Composer.

let me know if u have problems with SSO

also just like how everybody ends their answer ....."DONT FORGET TO GIVE ME POINTS".....seriously i dont care about them....I think we should all learn not to be stupid and greedy for funny looking points....rather SHARE KNOWLEDGE and make the SAP COMMUNITY a lot more smarter !!!!

Former Member
0 Kudos

The connector test says <i>"Connection failed. Make sure that Single Sign-On is configured correctly".</i>

Former Member
0 Kudos

check all the possible solutions for your error

see what suits your situation and apply them ...let me know if u still have errors

1) Export certificate from portal (verify.der and verify.pse)

..... a) Navigate to 'System Administration' >> 'System configuration' >> 'Keystore Administration'.

..... b) in 'Content' select "SAPLogonTicketKeypar-cert" and press'n'save "Download verify.pse file" and "Download verify.der file".

2) Check existence of SAPJSF user in target system

..... a) Create if necessary using transaction SU01.

..... b) User should have two roles: SAP_BC_JSF_COMMUNICATION and SAP_BC_USR_CUA_CLIENT_RFC (if you have CUA in place).

..... c) Probably you will have to generate profiles for those roles in target system (transaction PFCG).

3) Check profile parameters

..... a) use transaction RZ10

..... b) choose instance profile, 'extended maintenance', then 'Change'

..... c) make sure that "login/create_sso2_ticket" is set to "2" and "login/accepte_sso2_ticket" set to "1"

4) Export certificate from target system (the system to which you want to connect using SSO from portal)

..... a) use transaction STRUSTSSO2

..... b) double-click on "Own Certif." on "CN=..." part.

..... c) press on "Export certificate" button in the middle of the screen and provide file name and path, where to save certificate file.

5) Import portal certificate to target system

..... a) Use transaction STRUSTSSO2 in target system

..... b) push "Import certificate" button in the middle of the screen

..... c) in 'File path' field enter path to *.der file, you created in step 1 (or point at it via 'Browse' button)

..... d) Press "Enter"

..... e) Press 'Add to certificate list' button and then 'Add to ACL button

6) Create an JCo RFC provider in J2EE engine of portal system.

..... a) Logon to J2EE using J2EE Admin tool (go.bat)

..... b) navigate to 'Server' >> 'JCo RFC provider' node

..... c) On the right side of the screen choose any entry in 'Available RFC destinations' area.

..... d) Enter information about new destination:

..... ..... - Program ID: name of the program (you will need it later) - sapj2ee_port, for example

..... ..... - Gateway host - FQDN of target system - server.domain.com, for example

..... ..... - Gateway service - sapgw00 for example

..... e) in 'Repository' section enter:

..... ..... - Application server host - FQDN of target system - server.domain.com, for example

..... ..... - system number - 00, for example

..... ..... - client - 100, for example

..... ..... - logon language - EN

..... ..... - user - SAPJSF (from step 2)

..... ..... - password (from step 2)

..... f) press 'Set'

7) Add target system to Security providers list

..... a) Open J2EE Admin and navigate to 'Server' >> 'Services' >> 'Security Provider'. In components select 'Ticket'. Enter edit mode (button with pencil above)

..... b) select 'Login module' "com.sap.security.core.server.jaas.EvaluateTicketLoginModule" and press 'Modify'

..... c) ensure that "ume.configuration.active" is set to "true"

..... d) enter following info:

..... ..... - Name - 'trustedsysN' (there should be a number instead "N", if target system is the first one you implementing SSO with, there should be 'trustedsys1'). Enter <SID>,<client> as a value (C11,100 for example)

..... ..... - Name - 'trustedissN' (there should be a number instead "N", if target system is the first one you implementing SSO with, there should be 'trustediss1'). Enter CN=<SID> as a value (CN=C11 for example)

..... ..... - Name - 'trusteddnN' (there should be a number instead "N", if target system is the first one you implementing SSO with, there should be 'trusteddn1'). Enter CN=<SID> as a value (CN=C11 for example)

..... e) Press 'OK'

..... f) Do substeps b,c,d,e in 'evaluate_assertion_ticket' view for "com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule" login module.

😎 Import target system certificate to J2EE of portal system (from step 4)

..... a) Open J2EE Administrator and logon to portal instance

..... b) Navigate to 'Server" >> 'Services' >> 'Key storage'

..... c) in 'Ticket keystore' view press 'load' and select certificate of target system, you exported in step 3.

9) Restart J2EE instance.

10) Create RFC connection in target system

..... a) use transaction SM59

..... b) Point to TCP/IP connections and press 'New'

..... c) Enter name for new connection ("RFC_to_portal", for example), enter connection type "T" (external TCP/IP application) and description. Save.

..... d) in 'Technical settings' choose "Registered server program" and enter application name from step 6d in "Program ID" field. Provide 'Gateway host' and 'Gateway service' same as in step 6d. Save. Test connection. RFC connection ready.

If You had to change or add parameters in RZ10 (in step 3), do not forget to restart target system.

Also double-check that portal server and target system are in a same domain, this is important for ticket issuing. This thing is always mentioned in various documents.

Now SSO is configured. Try to test it by creating simple iView, that launches WebGUI

Answers (1)

Answers (1)

Former Member
0 Kudos

Log on to http://yourserver:50100/irj/portal

Then navigate through the following tabs :

User Administration > Identity Management

Type in the User Id and click modify.

Under 'User Mapping for System Access' assign a system to the user.