Standard user group to role assignment fails

[Former Member]

Hi!

The standard user group to role assignment in visual administrator fails, but data transfer to sld works. I have mapped all users to the appropriate security policy in the security provider by hand. But when I want to perform initial Adapter Engine Cache Refresh I get following error:

<Trace>

com.sap.aii.af.service.cpa.impl.exception.CPADirectoryCacheException: Couldn't open Directory URL (http://secat2:50000/dir/hmi_cache_refresh_service/ext?method=CacheRefresh&mode=C&consumer=af.s01.secat2), due to: HTTP 403: Forbidden

at com.sap.aii.af.service.cpa.impl.cache.directory.DirectoryAccess.getDataFromDirectory(DirectoryAccess.java:382)

at com.sap.aii.af.service.cpa.impl.cache.directory.DirectoryAccess.getDeltaCacheUpdateXML(DirectoryAccess.java:545)

at com.sap.aii.af.service.cpa.impl.cache.CacheManager.performCacheUpdate(CacheManager.java:551)

at com.sap.aii.af.service.cpa.impl.servlet.CacheRefresh.process(CacheRefresh.java:102)

at com.sap.aii.af.service.cpa.impl.servlet.CacheRefresh.doGet(CacheRefresh.java:53)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:385)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:263)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:340)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:318)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:821)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:239)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:147)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:37)

at com.sap.engine.core.cluster.impl6.session.UnorderedChannel$MessageRunner.run(UnorderedChannel.java:71)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:94)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:162)

Has anybody got an idea how to solve these two problems? I want to know to whom I have to grand where, which right or how to solve the problem with the role assingment.

Thanks in advance

Christian

[Former Member · Accepted solution]

Hi,

for you to be able to do AE cache refresh (CPACache) u need to use XIDIRSUSER.

cheers,

naveen

[Former Member · Accepted solution]

Hi Naveen,

I know that. I use XIDIRUSER and get this error anyway.

Greetings

Christian

[Former Member · Accepted solution]

hi,

did you try doing a CPACache refresh using the following link

http://server:port/CPACache/refresh?mode=full

cheers,

naveen

Message was edited by: Naveen Pandrangi

[Former Member · Accepted solution]

Yes I did.

Greetings

Christian

[Former Member · Accepted solution]

Chritian,

Please be a little more verbose. According to the thread you tried doing a CPACache refresh using XIDIRUSER credentials using http://server:port/CPACache/refresh?mode=full .

XIDIRUSER comes out of the box with all the authorizations. check if you are using this id for CPACAche refresh. Following are the roles XIDIRUSER is supposed to have

SAP_BC_BASIS_MONITORING

SAP_SLD_GUEST

SAP_XI_BPE_MONITOR_ABAP

SAP_XI_DEMOAPP

SAP_XI_ID_SERV_USER

SAP_XI_ID_SERV_USER

SAP_XI_MONITOR

SAP_XI_MONITOR_ABAP

SAP_XI_MONITOR_J2EE

cheers,

naveen

[Former Member · Accepted solution]

Sorry Naveen.

XIDIRUSER has got all required rights. I have also tried ist with XISUPER, to whom I have assigned really ALL authorizations. The main problem is, that the assignment in security provider doesn't work. I think that is the reason, why my XIDIRUSER doesn't work. Have you got an idea which authorizations I have to assign in visual administrator or UME?

Thanks for your effort

Christian

[Former Member · Accepted solution]

Hi,

its strongly advised to do role management on the ABAP stact. log into ABAP stack,

Tcode : su01

view the details of the userid: XIDIRUSER

make sure under roles tab you see all the roles in mentioned in the previous post.

cheers,

naveen

[Former Member · Accepted solution]

Yes,

there are all the mentioned roles. The Problem ist not the ABAP, but the J2EE-site. The automatic application role to user group assignment doesn't work...

Christian

[Former Member · Accepted solution]

Christain,

Look the following snotes.

SAP Note Number: 881276

SAP Note Number: 751856

Cheers,

naveen

[Former Member · Accepted solution]

Christain,

HTTP 403 during cache refresh of the adapter framework

SAP Note Number: 751856

Cheers,

naveen

[Former Member · Accepted solution]

Christain,

did the note fix ur issue??

Cheers,

naveen

[Former Member · Accepted solution]

Sorry, I couldn't try. I have got a lot of other errors now...

When I try to view my log files in LogViewer I get this message:

com.sap.engine.service.rmi_p4.P4IOException: No alive connection

May be you have got an idea...

Thanks a lot

Christian

[Former Member · Accepted solution]

christan,

i have replied back to ur other post. this is a very standrad error. look at the snote and the other posts i have in my reply.

cheers,

naveen

[former_member91687]

Hi Christian,

Have a look at the following thread.

/thread/75053 [original link is broken]

Cheers,

Chandra