How to configure umeconfiguration.xml file

[Former Member]

hi experts,

i have requirement like this

when user logs in to portal only R/3 database should be searched not portal

i know we need to do this in umeconf file

here is the .xml file

i am not getting exactly what parameters in this xml file i should change so that

it never searches portal database

<?xml version="1.0" encoding="UTF-8"?>

<!-- $Id:

//shared_tc/com.sapall.security/630_SP_COR/src/_deploy/dist/configuration/shared/dataSourceConfi

guration_r3_roles_db.xml#8 $ from $DateTime: 2004/08/03 08:42:39 $ ($Change: 16964 $) -->

<!DOCTYPE dataSources SYSTEM "dataSourceConfiguration.dtd">

<dataSources>

<dataSource id="PRIVATE_DATASOURCE"

className="com.sap.security.core.persistence.datasource.imp.DataBasePersistence"

isReadonly="false" isPrimary="true">

<homeFor>

<principals>

<principal type="account">

<nameSpace name="$serviceUser$">

<attribute name="SERVICEUSER_ATTRIBUTE">

<values>

<value>IS_SERVICEUSER</value>

</values>

</attribute>

</nameSpace>

</principal>

<principal type="user">

<nameSpace name="$serviceUser$">

<attribute name="SERVICEUSER_ATTRIBUTE">

<values>

<value>IS_SERVICEUSER</value>

</values>

</attribute>

</nameSpace>

</principal>

<principal type="group"/>

<principal type="team"/>

<principal type="ROOT"/>

<principal type="OOOO"/>

</principals>

</homeFor>

<notHomeFor/>

<responsibleFor>

<principals>

<principal type="account"/>

<principal type="user"/>

<principal type="group"/>

<principal type="team"/>

<principal type="ROOT"/>

<principal type="OOOO"/>

</principals>

</responsibleFor>

<notResponsibleFor/>

<privateSection/>

</dataSource>

<dataSource id="R3_DATASOURCE"

className="com.sap.security.core.persistence.datasource.imp.R3Persistence" isReadonly="false"

isPrimary="true" policyEnforced="true">

<homeFor>

<principals>

<principal type="user"/>

<principal type="account"/>

</principals>

</homeFor>

<notHomeFor>

<principal type="user">

<nameSpace name="$serviceUser$">

<attribute name="SERVICEUSER_ATTRIBUTE">

<values>

<value>IS_SERVICEUSER</value>

</values>

</attribute>

</nameSpace>

</principal>

<principal type="account">

<nameSpace name="$serviceUser$">

<attribute name="SERVICEUSER_ATTRIBUTE">

<values>

<value>IS_SERVICEUSER</value>

</values>

</attribute>

</nameSpace>

</principal>

</notHomeFor>

<responsibleFor>

<principals>

<principal type="user">

<nameSpaces>

<nameSpace name="com.sap.security.core.usermanagement">

<attributes>

<attribute name="uniquename"/>

<attribute name="firstname"/>

<attribute name="lastname"/>

<attribute name="salutation"/>

<attribute name="title"/>

<attribute name="jobtitle"/>

<attribute name="department"/>

<attribute name="email"/>

<attribute name="telephone"/>

<attribute name="mobile"/>

<attribute name="fax"/>

<attribute name="locale"/>

<attribute name="timezone"/>

<attribute name="referenceuser"/>

</attributes>

</nameSpace>

</nameSpaces>

</principal>

<principal type="account">

<nameSpaces>

<nameSpace name="com.sap.security.core.usermanagement">

<attributes>

<attribute name="j_user"/>

<attribute name="j_password"/>

<attribute name="validfrom"/>

<attribute name="validto"/>

<attribute name="islocked"/>

<attribute name="lockreason"/>

<attribute name="passwordchangerequired"/>

<attribute name="userid"/>

<attribute name="ispassworddisabled"/>

<attribute name="logonalias"/>

<attribute name="SecurityPolicy"/>

</attributes>

</nameSpace>

</nameSpaces>

</principal>

</principals>

</responsibleFor>

<notResponsibleFor/>

<attributeMapping/>

<privateSection/>

</dataSource>

<dataSource id="R3_ROLE_DS"

className="com.sap.security.core.persistence.datasource.imp.R3RoleDataSource" isReadonly="true"

isPrimary="true">

<homeFor/>

<notHomeFor/>

<responsibleFor>

<principals>

<principal type="group">

<nameSpaces>

<nameSpace name="com.sap.security.core.usermanagement">

<attributes>

<attribute name="description"/>

<attribute name="displayname"/>

<attribute name="uniquename"/>

</attributes>

</nameSpace>

<nameSpace name="com.sap.security.core.usermanagement.relation">

<attributes>

<attribute name="PRINCIPAL_RELATION_MEMBER_ATTRIBUTE"/>

</attributes>

</nameSpace>

</nameSpaces>

</principal>

</principals>

</responsibleFor>

<notResponsibleFor/>

<attributeMapping/>

<privateSection>

<ume.r3.roles.user_datasource_id>R3_DATASOURCE</ume.r3.roles.user_datasource_id>

</privateSection>

</dataSource>

</dataSources>

Thank u in advance

[Former Member]

Normally you would have specified this during the installation but there is a way to switch "manually"

You need to launch the configtool - go into the node Global Server Configuration --> Services --> com.sap.security.core.ume.service

In there you need to modify initially the entry for ume.persistence.data_source_configuration to be dataSourceConfiguration_abap.xml

Before you save and restart you MUST ensure all your backend connectivity details have also been filled in - including specifying a user with appropriate privileges.

These will be the entries that begin with ume.r3.connection.master. - you dont have to fill them all in however.

Hope this helps for starters. Ill see if I can find the appropriate section on help.sap.com for you in the meantime.

Haydn

[Former Member]

as a word of warning - im not sure if this is still true but in the past once you had switched to abap UME - you couldnt switch back (even though you could changes the config entries). Consider carefully before you proceed.

Haydn

[Former Member]

its done manually then also

its searching portal database

can u pls suggest u r idea clearly

[former_member189326]

Still true (the part about switching to an ABAP UME).