how to get sap system id

Dear Experts,

Recently, we installed SAP Netweaver AS Java. During post installation step, we're struck with the error "Error: Some of the archives defined in the stack configuration file were not found in the download directory" using SUM (software update manager) tool (see attached screenshot).

Patch files mentioned in stack.xml are already copied to the required path directory /usr/sap/trans/EPS/in.

I don't understand, still what files are missing? I also checked in path \SUM\sdt\log\SUM\DEFINE-TARGET-SOURCE file, it says none of these files were found in the download directory.

Patch files copied to this directory are .SCA (in Zip format) and .SAR (kernel files). Do I have to extract them like SPAM process? Is the directory path required, similar to that of SPAM process?

Any ideas, please?

Thanks & best regards,

Sreenu

Dear Experts,

We are using 3 rd party tool, Dell Netvault Backup Plugin to perform DB backup and receive below error. Could you please advise.

The DB is oracle.

BR0280I BRBACKUP time stamp: 2015-11-13 17:25:10

BR0279E Return code from 'backint -u QAS -f backup -i F:\oracle\QAS\sapbackup\.bervjies.lst -t file_online -c': 2

BR0232E 0 of 56 files saved by backup utility

BR0280I BRBACKUP time stamp: 2015-11-13 17:25:10

BR0231E Backup utility call failed

BR0074W BRCONNECT call failed

BR0056I End of database backup: bervjies.anf 2015-11-13 17:25:10

BR0280I BRBACKUP time stamp: 2015-11-13 17:25:12

BR0054I BRBACKUP terminated with errors

BR0280I BRBACKUP time stamp: 2015-11-13 17:25:12

BR0291I BRARCHIVE will be started with options '+bervjies.anf -U -jid ALLOG20151113172505  -c force -p initqas-onlinenv.sap -sd'

BR0280I BRBACKUP time stamp: 2015-11-13 17:25:15

BR0292E Execution of BRARCHIVE finished with return code 5

BR,

Fadzly Iqbal

Dear Experts,

I am installing S4HANA SAP Simple Finance On Premise Edition 1503.

During Installation, there is SAP HANA Import parameters option.

By default, only  3 parameters are checked. Should I check all the parameters?Or just click Next?

BR,

Fadzly Iqbal

Hello,

I'm facing an problem when the user login on the CRM WEBUI using HTTPS protocol. The user use BCM to receive the calls from a 0800 number and the BCM software communicates with the CRM filling the customer's informations. When the user use HTTP protocol, the informations fills, but when the user use the HTTPS protocol, she can login (using a certificate or/and login manually), but the customer's informations don't fills.

I already update the certificate from BCM to CRM (in the STRUST).

My parâmeters for HTTPS in RZ10 is:

icm/HTTPS/verify_client                     2

icm/server_port_2                           PROT=HTTPS,PORT=443$$

ssl/ssl_lib                                 C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

sec/libsapsecu                              C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

ssf/ssfapi_lib                              C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

SMICM it's ok.

In the ICM logs i see a error (Atached on file erro_ICM_CHELEB_CERTIFICADOS).

CANOPUS, in the ICM logs error, is a virtual host that have two apps, in server CHELEB and CHERTAN, but the ICM errors appears only in CHELEB server. This is the CRM landscape.

Can you tell me if i need to do any configuration in CRM side? Or its like a infrastructure problem?

Thanks in advanced!!!!

Cleiton Folster Eli

We have an SICF node (with HTTP Class Handler) setup and want to do the client authentication using certificates. The Login Procedure is C (Required with SSL Certificate). However, when we call the service the browser is not prompted for a certificate and we get a 403 error:

The termination occurred in system ESA with error code 403 and for the reason Forbidden. 
This service requires a client certificate for the logon procedure. 

We have parameter icm/HTTPS/verify_client set to 1

SMICM Trace Log:

[Thr 5264] <<- SapSSLSessionInit()==SAP_O_K
[Thr 5264]      in: args = "role=2 (SERVER), auth_type=1 (ASK_CLIENT_CERT)"
[Thr 5264]     out: sssl_hdl = 00000000246FB0E0
[Thr 5264] NiIBlockMode: set blockmode for hdl 406 TRUE
[Thr 5264]   SSL NI-sock: local=194.11.93.51:443  peer=10.60.182.87:65143
[Thr 5264] <<- SapSSLSetNiHdl(sssl_hdl=00000000246FB0E0, ni_hdl=406)==SAP_O_K
[Thr 5264] <<- SapSSLSessionStart(sssl_hdl=00000000246FB0E0)==SAP_O_K
[Thr 5264]          status = "resumed SSL session, NO client cert"

This seems to indicate that no certificate was sent but our understanding is the server must request it and the client (IE) will prompt the user. Also tried in FF and Chrome - no certificate prompt appears.

Dear Experts,

I am going to install SAP BW on SUSE Linux. i have installed it on windows platform,

Please let me know the prerequisites for installation on Linux, do we have to install JAVA as we do on Windows Platform, and do we have to configure Swap size on Linux ? and how to do that? and any blog or document will be much appreciated.

Please help me, as i need to start installation today.

Hi! We have problem in Portal system, we unable to access to it.  Its not able to open the any link (Ex:http://hostname:port/nwa or any other.), any is terminated with this error:

************

401 Unauthorized

Error: Unauthorized

Troubleshooting Guide https://sdn.sap.com/irj/sdn/wiki?path=/display/jstsg/home

************

The error message is displayed soon after opeining the URL, ex if we try opening the URL:http://hostname:port/nwa, the error message is displayed immediately after opeining the link in the browser, not reach the point of asking the password.

I cleared up the browser cache and restarted the SAP and the OS, but the error still exist.

In logs have any errores:

dev_server0:

ERROR => JRFC> Java_com_sap_conn_rfc_driver_CpicDriver_nativeSAP_1CMACCPTP SAP_CMACCPTP returned 6 [jrfc.c       1304]

dev_icm_sec:

***********************************************************************************

******                           SECURITY LOG STARTED                        ******

***********************************************************************************

***********************************************************************************

******                              SECURITY WARNING                         ******

***********************************************************************************

Tue Nov 17 17:00:38 2015

Error: Protocol error (-21), NULL bytes in HTTP request [http_plg.c 6829]

Any help will be welcome.

Thanks,

Juan.

Hi,

We are using EP 7.0 with database and instance are in different Hosts.

due to power failure both the AIX lpar servers down, we start both servers but while startsap command is executed its shows command not found.

i check the environment variable seems correct.

please help for the same.

Hello

I want to allow consutant to assign users for Physical Inventory tolerances(OMJ2) directly in Production server.

can any one help me to do this without client opening (Cross client customizing allowed)

Thaks

Sisila

Hello,

My company is running a centralized SAP PI/PO  AEX and BPM (7.4), java only, to which many internal systems connect.  We have a new requirement to process messages from external vendors. Corporate Security is insisting that we have the external users authenticate in the DMZ.  With this stipulation, our options seem to be limited to building an AEX in the DMZ with a load balancer in front of it, whether it's Cisco or SAP WD.  The problem with this is that we also are trying to limit the complexity/footprint of the applications in the DMZ (simpler apps have less maintenance needs).  An AEX instance  will require failover capability and a database both also in the DMZ.

Can we do this with the SAP Web Dispatcher alone in the DMZ?  I have read the document regarding SAP Web Dispatcher Security and it seems that, although we can provide layers of filtering, there is still no authentication capability.

Are there alternatives that I am missing here? 

Thanks much,

Diane Maller

Hello Experts,

  I want to cancel a active background job after it runs more than 1 hour.

is there a way to do that?

Thanks,

Raneetha.

INTRODUCTION:

I found a lot of notes and documents  when i wanted to configure saprouter. Here i would like to collaborate all how-to's into a single document.

SAProuter is kind application level firewall, allows your SAP servers to be accessed globally in a secured way. Nowadays it is a basic requirement for every customer who uses Solution manager for getting support from SAP. Following are the situations where you need SAPRouter.

1. You want your users access SAP server out of LAN without having VPN .
2. You want to get support from SAP.
3. You are planning to implement SAP Solution manager.
4. You want to download SAP notes and corrections via snote assistant

This document is targeted for those who have following environment.

OS platform  : Windows 2008 or higher (indeed for windows 7)

Architecture : nt-x86_64

PREREQUISITES:

1.Get a Public IP from your ISP for SAProuter.

2. Create message on support portal as in this note  28976 - Remote connection data sheet

    You would receive a confirmation from SAP with a Destination SAP IP and Distinguished name.

3. NAT policy in firewall with permission to the TCP ports 3200-3299 for the above registered public IP

  (TCP ports for message servers 32<instance_no> and any free TCP port as a dedicated port for SAProuter)

4. Download latest version of SAPRouter from support portal.

    (visit Support Packages  --> Browse Download catalogue --> Additional components-- >SAProuter)

5. Download latest version of SAPCRYPTOLIB from support portal.

    (visit Support Packages  --> Browse Download catalogue --> Additional components-- >SAPCRYPTOLIB)

6. Download latest version of SAPCAR to extract the above downloaded software.

    (visit Support Packages  --> Browse Download catalogue --> Additional components-- >SAPCAR)

PREPARATIONS:

1. Copy all the above downloaded files in to temporary dir and uncar the Saprouter and cryptolib files.

2. Open cmd and navigate to above temp location and execute sapcar_<version>.exe  -xvf  <filename>.sar

3. Make new directory (ex: D:\usr\sap\saprouter) and paste the extracted files of router and cryptolib files.

4. I recommend you to create an exclusive local user "sncadm" and set password never expires.

      (in my case i use to change pwd for sidadm and this caused issues in starting router)

5. Logon with user for saprouter and set following user environmental variables.

    SECUDIR =<dir_saprouter>  (ex: SECUDIR = D:\usr\sap\saprouter)

    SNC_LIB  = <dir_saprouter>\nt-x86_x64\sapcrypto.dll  (ex: D:\usr\sap\saprouter\nt-x86_x64\sapcrypto.dll)

CONFIGURATION:
1. Generating a new certificate request.

    a. Goto SAProuter Certificates --> click Apply Now and copy your distinguished name and click next

    b. Open cmd as administrator and navigate to <path_saprouter>\nt-x86_x64\ and execute,

          sapgenpse get_pse -v -r certreq -p local.pse "<Distinguished Name>"

      example: sapgenpse get_pse -v -r certreq -p local.pse"CN=example, OU=00123456, OU=SAProuter, O=SAP, C=DE"

    c. It will ask to enter and re-enter a PIN. This is used to access the local.pse, so better note it down.

    b. A file  "local.pse" will be created in the saprouter directory. (Ex: D:\usr\sap\saprouter\local.pse)

    d. A file "certreq" will under <dir_saprouter>\nt-x86_x64  (Ex: D:\usr\sap\saprouter\certreq)

2. Aquiring certificate signed by CA.

    a. Open the "certreq" file with notepad and copy the text (including BEGIN and END)

    b. Paste it on the above opened certificate page and click next.

    c. You would get a certificate (series of jumbled characters) copy this (including BEGIN and END)

    d. create a new file "routcert.txt" under <dir_saprouter>\nt-x86_x64 and paste the above certificate text.

3. Importing router certificate.

    a. Open cmd as administrator and navigate to <dir_saprouter>\nt-x86_x64\ and execute,

sapgenpse import_own_cert -c routcert.txt -p local.pse

          Running the above command would ask you to enter PIN, enter the one you have given on step 1c

4. Authorizing windows user for accessing SAPRouter.

        Execute the following cmd with the saprouter user (sncadm).

sapgenpse seclogin -p local.pse -O <exclusive_user_SAProuter>

example: sapgenpse seclogin -p local.pse -O hostname\sncadm

Now you will prompted to enter the PIN. enter the one you have given on step 1c        

Check whether a file "cred_v2" is created under saprouter directory.

5. Verifying authorization for the sncadm of saprouter.

      log on to user for saprouter,  open cmd and navigate to <dir_saprouter>\nt-x86_x64\ and execute

      sapgenpse get_my_name -v -n Issuer

    You should get an output like this. CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE  

Voila ! you have configured your SAPRouter successfully.

But wait.. We have to check whether the router works or not.

Start your sap router using command  <dir_saprouter>\saprouter.exe -r

You should be getting an out put  "trcfile dev_rout  no logging active". This shows that the router started successfully. But if you close the above cmd prompt, then your SAPRouter will shutdown.

We can avoid this by registering SAProuter as windows service, so that it can run on background

Registering SAProuter as Windows service:

1. open command prompt as administrator, and navigate to <dir_saprouter>

2. execute  following commands as it is. Replace the <path> with your saprouter directory path and <your distinguished name>

    sc.exe create SAPRouter binPath= "<path>\saprouter.exe service -r -S 3299 -W 60000 -R <path>\saprouttab -K ^p:<distinguished name>^" 

    example: sc.exe create SAPRouter binPath= "D:\usr\sap\saprouter\saprouter.exe service -r -S 3299 -W 60000 -R     

        D:\usr\sap\saprouter\saprouttab -K ^p:CN=example, OU=00123456, OU=SAProuter, O=SAP, C=DE^"

3. You would get an output saying service "SAPRouter" created successfully.

4. Open "regedit.exe" and edit the string "ImagePath" under following location.   

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ saprouter

5. Replace ^with " and click OK. The updated value should look like below

      <path>\saprouter.exe service -r -S 3299 -W 60000 -R<path>\saprouttab -K "p:CN=example, OU=00123456, OU=SAProuter, O=SAP, C=DE"

6. Now open "services" right click "SAPRouter" and choose properties. click on "Log On" tab and choose "This account".

    Type the user ID created for configuring saprouter (sncadm), type password and then click apply.

7. Now start the saprouter service and you're done.

Congrats !! You have implemented SAP ROUTER successfully.

Dear Friends,

We just installed a New System for Fiori Gateway. Which i know is only an Netweaver System. Now when I look for installation number under system status is it same as our ERP systems.

Also when applying license key i am unable to see Netweaver system do we need to request SAP to add there for future references.

At the moment i have request an License under ERP system is that ok ?

Please Advice..

Best Regards,

Ali

Hi,

We are using ECC6.0 dual stack system. We have 2 issues:

1. We do a full backup / restore for refreshing QA from Prod (5TB). We use RMAN and copy datafiles from datadomain on QA. Ours is a distributed system with DB and CI running on separate hosts. We did a java stack export through SWPM using central instance export which we executed on our CI host. Now, when we tried to use SWPM for import it failed and gave error message server not running. But system is down on QA since we are trying to refresh so why would it expect message server to be up and running. Also, during import it shows first we need to import SCS and then CI..how do we do that? Do we also need to export DB instance? Please suggest.

2. Our sandboxes cannot be as big as production so we use TDMS slice to refresh Sandboxes. SAP suggested to do a vanilla install on sandboxes and then bring data through TDMS. As a result JAVA doesnt work on sandboxes and configtool shows all prodcution instances. How do we fix our java on sandboxes. We are going to upgrade our ECC6 to EHP6 and sum tool expects all the rpocess to be up and running. Please suggest if we export java schema SAPSR3DB at DB level from prod and import it?

Regards,

SJ

Where I can find installation instructions and installation software for S/4 HANA Simple Finance and Simple Logistics?

Thanks.

Paul

Please can you tell me from which table is the SLD picking up the component information related data when the rz70 transaction is called?

Hello All,

We are doing EHP7 upgrade activity on Development system. Now in Pre-processing phase "MAIN_INIT/REPACHK_CLONE"

I am facing issue on releasing transport request in DEV system. The client was already deleted but request still exists.

Transport request is need to release because it is showing in list of upgrade pre-processing steps.

How to change client of modified transport request?

Kindly suggest what should be done?

Thanks,

Siddhesh

Dear Experts,

MESSAGE_TYPE_X abap dump  is popping up for SAPLGT0 abap prgram, FI-GL component in transaction FB05

We applied note 924657 - Document splitting: MESSAGE_TYPE_X in the include LGLT0FER    but still  short dumps are popping up.

Regards,

Domnic

I have a question concerning The ROLL IN/OUT Operations :

"Whenever a dialog step is executed, a roll action occurs between the roll buffer in the shared memory and the memory area, which is allocated according to ztta/roll_first in a dialog process. Then the area in the shared memory is accessed that belongs to this user context.

The following graphic displays the roll process performed by the dispatcher.

• Roll-in: cross-user data is rolled in from the common resource in the work process (and is processed there).
• Roll-out: User-specific data is rolled out from the work process in the common resource (after the dialog step has ended).

The common resource stands for the different SAP memory types."

According to this passage  in SAP HELP Forum is the Roll IN = From Shared To Local and The Roll Out = From Local To Shared  , Am I getting it right ?

Because this Figure made me a little bit confused :