Dear sap techs,

we made a kernelupgrade from 7.11 to 7.21 EXT of our PI system. As a perquisite of this upgrade, we had to update the SAPJVM from 5.1.047 to 5.1.084 (made it with JSPM). After the kernelupgrade the system starts (dev_server0 contains status (Running)), but no http-page is displayed (e.g. systeminformation or nwa).  After changing SAPJVM version back to 5.1.047 the http pages are accessible again. Now the system runns with kernel 7.21 ext and SAPJVM 5.1.047, but oss 1716826 "Usage of the downward compatible kernel 721 (EXT)" states:

"Release 7.10 or 7.11: When using the SAPJVM 5.1, you have to install the latest patch collection, at least PC 58 (Build 5.1.074).".

Systemdata:

  SAP EHP1 FOR SAP NW PI 7.1

  HP-UX ia64 11.31

  ORACLE 11.2.0.3.0

  All Java Softwarecomponents are on 7..11 Patch-level 4

Best regards

Willi Eimler

Hi All,

We have just upgraded our ERP system to ECC 6.0 EhP5 and we are trying to reconnect our ERP system to our Content Server through transaction CSADMIN but are getting the following error when trying to send or view the certificate....

Error in HTTP Access: IF_HTTP_CLIENT->RECEIVE 1 HTTPIO_PLG_CANCELED

The Content Server has not changed and is up and running - could you advise how we can solve this problem ?

We've already looked at SAP Notes 3299473 and 1734842 and they don't help as we can't access the Tab in CSADMIN to delete the certificate.

Has anyone see this before?

thanks,

Graham

Hello,

I'm trying to configure SAP Local printing and I want to know if It's possible to use a Device Type like SWIN or SAPWIN:

SAP System: NW 7.0 EHP1

Platform: Windows server 2008 R2 / Oracle 11G

Access Method: C

I have tried using the SAP device type for the printers I have (XRW002 for Xerox), however, the printing is not coming aligned. In every information from SAP it says that you should only use the Device Type for the printers model with Access method: C (local)

Regards,

JAM

Hi,

I am stuk up with ADS SSL configuration between CRM ABAP and CRM Java

I am getting RFC error when I test the connection of RFC ADS_SSL in SM59

I followed below Steps for SSL configuration. As it is sandbox system I did not use CA certificates.(I am using test server certificate from SMP)

• Created ssl server standard PSE
• Exported the certificate request and got THE SSL TEST SERVER certificate response from SMP
• Imported it in SSL server standard PSE
• Created self-signed SSL client standard PSE
• Added SSL TEST SERVER certificate to the certificate list of SSL client standard PSE
• Download SSL test server CA certificate from SMP and imported it in SSL server standard PSE and added it to the certificate list of SSL server standard PSE  and SSL client standard PSE

But still I am getting below error (dev_icm trace file attached)

[Thr 2828]      in: hostname = "10.219.200.238"

[Thr 2828] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

[Thr 2828]    session uses PSE file "/usr/sap/CRX/DVEBMGS00/sec/SAPSSLC.pse"

[Thr 2828] SecudeSSL_SessionStart: SSL_connect() failed --

[Thr 2828]   secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

[Thr 2828] >> ---------- Begin of Secude-SSL Errorstack ---------- >>

[Thr 2828] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

[Thr 2828] ERROR in af_verify_Certificates: (27/0x001b) Chain of certificates is incomplete : "CN=localhost, OU=ssl-enabled-server, O=app-server"

[Thr 2828] ERROR in get_path: (27/0x001b) Found root certificate of <CN=localhost, OU=ssl-enabled-server, O=app-server> which does not fit the given PKRoot

[Thr 2828] ERROR in verify_with_PKs: (27/0x001b) Found root certificate of <CN=localhost, OU=ssl-enabled-server, O=app-server> which does not fit the given PKRoot

[Thr 2828] << ---------- End of Secude-SSL Errorstack ----------

[Thr 2828]   SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

[Thr 2828]   No certificate request received from Server

[Thr 2828] <<- ERROR: SapSSLSessionStart(sssl_hdl=111489670)==SSSLERR_SSL_CONNECT

[Thr 2828] <<- SapSSLErrorName()==SSSLERR_SSL_CONNECT

[Thr 2828] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00010011} [icxxconn_mt.c 1957]

[Thr 2828] <<- SapSSLSessionDone(sssl_hdl=111489670, ni_hdl=74)==SAP_O_K

------------------------------------------------------------------------------------------------------------------

As per SAP note 1318906: The solution is given below:
"...
Situation: The ICM is in the client role and the following entry is displayed in the trace:

ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of theserver's certificate chain failed

Reason:You try to set up a secure connection to a server, but the validity of the certificate cannot be verified because the required
certificates are not available.

Solution:The missing certificates are listed in the trace file. You mustuse transaction STRUST to insert these certificates in the Personal
Security Environment (PSE) that is used for the connection. The certificates are usually made available to you by the server
administrator. If the certificates are public Certification Authority (CA) certificates, you can also request the certificates there.

--------------------------------------------------------------------------------------------------------------------

I have no clue about where we can get the certificates.

Kindly help us to solve this issue.

Regards,

Sridharan R.

Hi,

We are facing couple of issues with SAP kernel upgrade. We are upgrading the kernel from 201 to 402 with reference to the SAP Security Note 1800603

SAP Kernel 720 64bit

Windows 2008 64 bit x86

1. When we have upgraded the kernel application comes up fine and we are able to login as dialog user but on MMC console, dispatcher is in yellow color with the status as "Running but dialog queue info unavailable". Please see below screen shot

2. When we check the kernel version via disp+work or via application status it say kernel patch level to be 401 instead of 402. Please see below screen

Please provide your expert advise to resolve the issue.

Thanks!!!!

SG

Dear Experts,

We have a 3 system landscape – Development (DEV), Quality (QAS) & Production (PRD) system.

We have identified the security notes from ST13->RSECNOTE tool for each system & were able to find the common notes for all 3 systems.

1->Please let us know the sequence in which we need to apply the notes? Date wise or note number wise (increasing order)

2->Also can we club the common notes in one transport request and then transport it in all 3 systems ?

As per custom, we would be applying security notes starting from DEV->QAS->PRD.

Issue is , we found some notes which are different for each system. Please guide how do we proceed ?

Whether to import the uncommon notes first or common notes, or in total sequence for each system independently ?

3->By clicking the ‘check side effects button’ We were able to also find some list of notes. These must be the side effects notes of previously applied notes…Should these notes also be implemented first ?

4-> We are also able to see different corrections section as per release version in most of the notes.Should we implement the note(containing all the corrections release wise) or the correction corresponding to the release of our system (in this case we should download the correction only and not the note then ? )

Please guide me...

Regards

Imaan

Greetings,

As the subject implies, I am trying to enable SSL on my instance.  I have two very good articles I am reading:

http://help.sap.com/saphelp_nw73/helpdata/en/49/23501ebf5a1902e10000000a42189c/frameset.htm

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20c109d3-afd7-2d10-939f-8d143f0ff7da?QuickLink=index&overridelayout=true&49546742789630

However, I am having an issue creating the SSL Server PSE.

I am reading this:

http://help.sap.com/saphelp_nw73/helpdata/en/49/2371abbf5a1902e10000000a42189c/content.htm

I am able to right click on "SSL server Standard" and "Create".  Once this is created, the right side of screen containing the certificate information is blank.

Following the next step, which is to export, appears to be in vain.There isn't a certificate to click, so I cannot export.

I'm not sure what, but something is not creating correctly.

HTTPS cannot be enabled.  I review the ICM monitor logs, and I have errors:

[Thr 4332] *** ERROR =>   secudessl_Create_SSL_CTX():  PSE "K:\usr\sap\TB2\DVEBMGS00\sec\SAPSSLS.pse": unable to use! [ssslsecu.c   1848]

[Thr 4332] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --

[Thr 4332]   secude_error 4130 (0x00001022) = "Object Cert doesn't exist"

So, I'm not really sure what to do from here. It appears that a cert is not being made that should be.

Thanks

hi ..i have istalled sap netweaver trial version..everything went perfect..and when is started logon i cannot able to create a abap program in se38..i have given staritng with letters z,y..its not working..it is asking me access key ..i searched a lot ..but couldnt find one..help me..

                             thanks.

Hi SAP community,

if have a question regarding strange messages in my "stderr1".

How comes I can see message "ls: cannot access vg....: No such file or directory"

The SAP System is running on SLES 11 SP2 Linux and we are using LVM for storage.

vgsapp01, vgora, vgsap are different volumegroups. The system is running stable and customer is able to work. No problem at all, except the messages being written to stderr1 since start of system!

If you have any idea please let me know!

Thank you very much.

Cheers,

Marc

Hello

Actually  I have a problema with one request , I am importing to  QAS system  and this process is stopped, I checked the log then I found this  message:

   No memory for space allocation (45037686)

   Main import

   End date and time : 20130717203633

   Ended with return code:  ===> 16 <===

I had checked  on fórums  ans SAP notes ( 103582, 103562)

Hi experts,

It seems that with SWPM the good old tip of changing [CDATA[ERROR]] to [CDATA[OK]] to bypass an error is not available anymore.

On a failed step I was not able to find a [CDATA[ERROR]] tag in the keydb.xml file.

Did you notice the same behavior, does anyone find what is the new tag for error ?

Best regards

Hello,

I am facing an issue with my cluster installation. Below is the environment I am trying to setup

SAP NW 702 HA Install

MS SQL Server 2008

Windows 2008 R2 Enterprise 64 bit

I was successfully able to install First Cluster Node and Database Instance

But when I am trying to install Additional Cluster Node, I am facing an issue. Below is the error from the sapinst log

============================================================================

ERROR 2013-07-18 15:41:30.577

FJS-00003  uncaught exception: undefined (in script unknown, line 0: ???)

ERROR 2013-07-18 15:41:30.659

MUT-03025  Caught ESAPinstException in module call: executing JS script failed.

ERROR 2013-07-18 15:41:31.906

FCO-00011  The step askClusterGroup with step key |NW_SecondClusterNode|ind|ind|ind|ind|0|0|NW_GetSidFromClusterSecond|ind|ind|ind|ind|getSid|0|askClusterGroup was executed with status ERROR ( Last error reported by the step: uncaught exception: undefined (in script unknown, line 0: ???)).

=============================================================================

Below are the steps I have tried:

1. Initially I performed install of First Cluster Node and Database instance as Domain user, but when this error occured, I have tried to login as SIDADM user and checked. But same error.

2. I have restarted the machine and checked. But same issue.

Any suggestions please.

Thanks,

Srikanth

I get up to step 23 of 36, and see this:

The last messages in the sapinst.log file are:

Any ideas on where to look?

Hi all,

I'm doing to install IDES ECC6 SR3 on window x64 with oracle database.

I have some error in start instance step as error log below.

Could you help me to investigate it?

I try to do it more time but it can not pass this step.

Thank you very much.

This thread is same my problem but it still is not solved.

Solution Manager 4.0 on Win install problem

CJS-30149 ABAP processes of instance FSM/DVEBMGS00 ABAP: MSNOTRUNNING did not start after 10:00 minutes. Giving up.

Connect to message server (st/3900) failed: NIECONN_REFUSED.

C:\usr\sap\FSM\SCS01\work

trc file: "dev_enqsrv", trc level: 1, release: "700"

Thr 2932 Thu Jun 26 14:01:51 2008

Thr 2932 stopAllThreads: stop Thread worker thread ...Thr 2932 done

Thr 2932 stopAllThreads: stop Thread Listener thread ...Thr 2932 done

Thr 2932 stopAllThreads: stop Thread IOThread_0 ...Thr 2932 done

Thr 2932 stopAllThreads: stop Thread ADM-thread ...Thr 2932 stopAllThreads: stop ADM-thread not implemented. Hard kill

Thr 2932 *** ERROR => ShmDelete: Invalid shared memory Key=1. http://shmnt.c 719

Thr 2932 *** ERROR => ShmCleanup: ShmDelete failed for Key:1. http://shmnt.c 793

...

Thr 2932 *** ERROR => ShmDelete: Invalid shared memory Key=82. http://shmnt.c 719

Thr 2932 *** ERROR => ShmCleanup: ShmDelete failed for Key:82. http://shmnt.c 793

Thr 2932 ***LOG GEZ=> Server shutdown (normal shutdown) http://encllog.cpp 493

Thr 2932 Enqueue server: normal shutdown

Ref.

My RAM is 3.33 GB

and SWAP Memory around 22 GB.

I've check requisition option in master installation and all result is pass to install.

Case 1: Problem with Cache Refresh

When we perform any changes to our design objects and configuration objects which were created in our IR and ID and if the changes were not reflected to that objects, at that time every one mind would point to perform the cache refresh. We have different options available to perform the cache refresh. 

1.      In IR from MenuàEnvironmentàClear SLD Data cache.

2.      In ID from Menu ClearàEnvironmentàSLD Data Cache. 

When we log in to ABAP stack and hit the transaction SXI_CACHE there you can observe the status will be in red color and the cache will not be up-to-date and unable to refresh cache. Even though if we perform the cache refresh the changes are not reflecting since the cache is not working properly.

From IR from menu using cache notifications we can see whether cache is refreshing or not. From that option also it shows the status as RED color and cache is not up-to-date and cache is not refreshing.

So how to resolve this issue and what might be the problem for displaying the status as red and cache is not up-to-date. 

To resolve this issue logon ABAP stack and check the RFC Destination of

Type H: INTEGRATION_DIRECTORY_HMI in this check whether the path prefix is maintained or not. 

If we observe the above screenshot we can identify that path prefix as not maintained anything. So maintain the path prefix as in the below screen shot and save it. 

After performing the above step go to SXI_CACHE and perform cache refresh. Now cache will perform the refresh and the status will be as below. 

Case 2: Problem with Cache Refresh

When Path Prefix is fine and you unable to perform the Cache Refresh

GO to SM21, search for the system logs. You could find multiple entries as below for user “SAP_PI_RFC”.

During processing of asynchronous messages a lock was triggered that prevents a message being processed more than once in parallel. Either the lock prevented this, or the lock was not cleared in an earlier call and so now prevents further processing. It should not be possible to execute a message more than once. Notify support of the problem. If the lock was not cleared, you can remove it manually SM12 – You can confirm with PI team). You should then be able to continue processing without problems.

Solution: Please make sure these are NOT recent entries. Delete these entries from SM12 after confirmation from functional/Technical team.

Case 3: Problem with Cache Refresh

There is a chance that system has too many suspended DB commands at DB02. There might be any SQL command blocking other inbound queue.

Solution: It just happens due to huge blocking. Kill the culprit process which is causing blockage.

Case 4: Problem with Cache Refresh

Once I have resolved the issue by restarting the Java stack system from SMICM T-code.

.Hello friends,

I have installed SAP NetWeaver Application Server ABAP 7.03  trial  on  windows 7  professional  64 bit. I am trying to configure Transport Management System. I have performed following steps as given installation guide.

1.
Call transaction SE06.
2.
Select Standard Installation.
3.
Choose Perform Post-Installation Actions.

Then

when I called STMS transaction,  I getting following message.

TMS must configured for client 000. And the screen didn't let me edit anything.

Could you  please help  me to configure Transport Management System.

with best regards

Mahendra

Dear i am functional consultant

i hope this is basis forum .. i want to know how to cancel customizing request and how to reverse customizing request

Thanks a lot  

Hi,

After we did a system copy from Production to the Sandbox, the portal is throwing the following error when the user tried to access

Maintain Performance Document

I have checked the SICF and all the BSP related stuff is activated.

Can anybody help me to troubleshoot this error .

Thanks for youe time

Hi All,

I am working on enabling our SAP SRM System on internet by reverse proxy

Our Server Details

Portal 7.3

SRM 7.01

MDM 7.1

Below is the

External url -> Apache Reverse Proxy -> Portal -> SRM

https://www.mycompany.com -> http://www.Apachereverse.mydomain.com:80/ -->

                                                                                                       http://portal.mydomain.com:50100/irj/portal

                                                                                                       http://srm.mydomain.com:8000/sap

I am able to send all requests from external url to portal and by changing the system object (ITS & WebAS) hostname and protocol.

But in SRM, there is one place when I click on Internal product Catalog, its uses host name from SMICM and http protocol.

At this point, I want to all requests in ICM to use https and www.mycompany.com as the hostname.

Then From Apache reverse proxy, I will redirect to http://srm.mydomain.com:8000/sap.

Please help

Regards

Ponnusamy