We are running a virtualised environment, and getting a warning in the configure automatically single sign on step. The following error occurs:

SSO setup failed : a problem occured while attempting to add login modules for ticket authentication

Details

Found SID for SSO ACL entry : SOL

Found login.ticket_client for SSO ACL entry : 000

The Read entry permission on TicketKeystore/SAPLogonTicketKeypair-cert was given to sap.com/tc~webadministrator~solmandiag/servlet_jsp/smd/root/WEB-INF/lib/SetupLib.jar

The TicketKeystore/SAPLogonTicketKeypair-cert was succesfully read (619 bytes)

The SSO ticket Certificate <OU=J2EE,CN=SOL> has been successfully imported into ticket Keystore

WARNING : domain of ourphsicalhostname.companyid.com does not match the domain of monitoring host (and is not a subdomain of) ourvirtualhostame.sap.companyid.com. SSO will not work across such domains

SSO setup failed : a problem occured while attempting to add login modules for ticket authentication

SSO setup failed : error while updating login modules : java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!; nested exception is:

java.lang.SecurityException: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!

The SSO ticket Certificate <CN=SOL> has been successfully imported into ticket Keystore

WARNING : domain of phsicalhostname.companyid.com does not match the domain of monitoring host (and is not a subdomain of) cisol.sap.ebrd.com. SSO will not work across such domains

SSO setup failed : a problem occured while attempting to add login modules for ticket authentication

SSO setup failed : error while updating login modules : java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!; nested exception is:

java.lang.SecurityException: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!

   Exception

java.rmi.RemoteException: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!; nested exception is:

java.lang.SecurityException: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!

at com.sap.engine.services.security.restriction.Restrictions.checkPermissionRemote(Restrictions.java:81)

at com.sap.engine.services.security.remoteimpl.RemoteSecurityImpl.getPolicyConfiguration(RemoteSecurityImpl.java:71)

at com.sap.engine.services.security.remoteimpl.RemoteSecurityImplp4_Skel.dispatch(RemoteSecurityImplp4_Skel.java:266)

at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:466)

at com.sap.engine.services.rmi_p4.server.ServerDispatchImpl.run(ServerDispatchImpl.java:69)

at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:72)

at com.sap.engine.services.rmi_p4.P4Message.execute(P4Message.java:43)

at com.sap.engine.services.cross.fca.FCAConnectorImpl.executeRequest(FCAConnectorImpl.java:999)

at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:59)

at com.sap.engine.services.cross.fca.MessageReader.run(MessageReader.java:55)

at com.sap.engine.core.thread.execution.Executable.run(Executable.java:122)

at com.sap.engine.core.thread.execution.Executable.run(Executable.java:101)

at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)

Caused by: java.lang.SecurityException: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!

at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:109)

at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:86)

at com.sap.engine.services.security.restriction.Restrictions.checkPermissionRemote(Restrictions.java:79)

... 12 more

Caused by: java.lang.SecurityException: User 'SM_ADMIN_SOL' does not have permission for the security operation!

at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:105)

... 14 more

In Check Configuration Step the warning is further detail as follows:

Warning

Activity 'Single Sign On Setup' has been executed with warnings

Action

Please check the warning details and take action if necessary

Details

Message.SSOsetupfailed:aproblemoccuredwhileattemptingtoaddloginmodulesforticketauthentication(Message.java:1)

Details

Details.FoundSIDforSSOACLentry:SOL

Foundlogin.ticket_clientforSSOACLentry:000

TheReadentrypermissiononTicketKeystore/SAPLogonTicketKeypair-certwasgiventosap.com/tc~webadministrator~solmandiag/servlet_jsp/smd/root/WEB-INF/lib/SetupLib.jar

TheTicketKeystore/SAPLogonTicketKeypair-certwassuccesfullyread(619bytes)

TheSSOticketCertificate<OU=J2EE,CN=SOL>hasbeensuccessfullyimportedintoticketKeystore

WARNING:domainof ourphsicalhostname.companyname.comdoesnotmatchthedomainofmonitoringhost(andisnotasubdomainof) virtualhostname.sap.companyname.com.SSOwillnotworkacrosssuchdomains

SSOsetupfailed:aproblemoccuredwhileattemptingtoaddloginmodulesforticketauthentication

SSOsetupfailed:errorwhileupdatingloginmodules:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!;nestedexceptionis:

java.lang.SecurityException:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!

TheSSOticketCertificate<CN=SOL>hasbeensuccessfullyimportedintoticketKeystore

WARNING:domainofphysicalhostname.companyname.comdoesnotmatchthedomainofmonitoringhost(andisnotasubdomainof)cisol.sap.ebrd.com.SSOwillnotworkacrosssuchdomains

SSOsetupfailed:aproblemoccuredwhileattemptingtoaddloginmodulesforticketauthentication

SSOsetupfailed:errorwhileupdatingloginmodules:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!;nestedexceptionis:

java.lang.SecurityException:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!

(Details.java:2)

   Details

Exception.java.rmi.RemoteException:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!;nestedexceptionis:

java.lang.SecurityException:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!

atcom.sap.engine.services.security.restriction.Restrictions.checkPermissionRemote(Restrictions.java:81)

atcom.sap.engine.services.security.remoteimpl.RemoteSecurityImpl.getPolicyConfiguration(RemoteSecurityImpl.java:71)

atcom.sap.engine.services.security.remoteimpl.RemoteSecurityImplp4_Skel.dispatch(RemoteSecurityImplp4_Skel.java:266)

atcom.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:466)

atcom.sap.engine.services.rmi_p4.server.ServerDispatchImpl.run(ServerDispatchImpl.java:69)

atcom.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:72)

atcom.sap.engine.services.rmi_p4.P4Message.execute(P4Message.java:43)

atcom.sap.engine.services.cross.fca.FCAConnectorImpl.executeRequest(FCAConnectorImpl.java:999)

atcom.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:59)

atcom.sap.engine.services.cross.fca.MessageReader.run(MessageReader.java:55)

atcom.sap.engine.core.thread.execution.Executable.run(Executable.java:122)

atcom.sap.engine.core.thread.execution.Executable.run(Executable.java:101)

atcom.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)

Causedby:java.lang.SecurityException:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!

atcom.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:109)

atcom.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:86)

atcom.sap.engine.services.security.restriction.Restrictions.checkPermissionRemote(Restrictions.java:79)

...12more

Causedby:java.lang.SecurityException:User'SM_ADMIN_SOL'doesnothavepermissionforthesecurityoperation!

atcom.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:105)

...14more

(Exception.java:3)

Screen shot below.

All other steps have completed successfully, (The dataextract error is know about)

The BJT system is a BI Java system linked to BWD (ABAP Stack BW System)

Any assistance or pointers will be appreciated.

Thanks
Tariq 

Hi,

I'm migrating Service Desk from S.7.01 to S7.1 and we've found several issues in almost every aspect of the process.

So far the strategy has been mostly: look on 7.01 and replicate that on 7.1. All of the above based on the respective configuration guides.

I haven't found any guide that help us trough that process.

Does anybody have some tips or a guide that could help us?

Unfortunately upgrade is not an option.

Thanks in advance.

Regards.

Hi Solman Experts,

In configuration, we are using copy of transaction ZMCR(copy of SMCR) and solman system is 7.1 SP 8.

We have requirement to restrict closure of ZMCR transactions if follow up tasks (Activity type Task) are open.

In SPRO, we did not find any option to add Task types so that status attributes can be checked under below path:

SPRO->Capabilities->ChaRM->Standard Configuration->ChaRM Framework->Make settings for Change Transaction Types.

Request you to please provide your inputs.

Regards,

Hanumant

Hello All,

In ITSM ticket screen, "reply" text in ticket is not working as default option where as "description" is default

while we are keeping the status to "customer action".

We have to make "reply" text as default.

Kindly below the screen shots for more

information.

BR,

Prathap

Hi Folks,

Is there a specific table or transaction that has the whole metrics and threshold available in the solution manager? Instead of checking one by one by via Technical Monitoring configuration.

Thanks in advance,

Ma

Hi,

We are receiving alerts for java instance not available for our java systems. When I checked, Java is up and running. On further checking, I have found that the single component is failed to start which triggers the alerts. We have found the note  2080293 - sap.com/tc~lm~itsam~cdp~cdp_ws~client~proxy failed to start the note says as below.

Reason and Prerequisites

The application sap.com/tc~lm~itsam~cdp~cdp_ws~client~proxy is very old and obsolete. This application has no use in the Java stack but it was still retained due to complex dependencies. The recent process changes required modification of code which has resulted in this side effect.

Solution

This error would hopefully be corrected in next Support Packages but as of now customers are advised to stop the application as it has no uses in the Java system. It is safe to do so. In case you see any issues with this solution then please raise a ticket on BC-NWA-INC-CDP component.

We can exclude single component from monitoring. Please let me know how to exclude the single component from monitoring.

regards,

Vaithy

Hi Experts,

We are facing issue one issue with same SID's.

We have one landsacpe ASA->ASB->ASP for which we have activated CHARM and now we have to do upgrade for same SID's and client, how do we active CHARM with same upgarde SID's and client  but with different server.

Thanks and Regards,

Rohan

Hi experts,

I tried to setup the OS process monitoring, to check if some processes are running fine.

However, I don't really get it.

I did the steps and did restart Hostagent and DAA, but the metric still stays greay with error, that it didn't receive data.

http://wiki.scn.sap.com/wiki/download/attachments/355894832/OS%20Process%20Monitoring.pdf?api=v2

Hi All,

We have Technical Monitoring scenario on our solution manager 7.1 SPS11 and it was working fine. Now suddenly the notification mails stops and are not triggering from the system.

I can find the EWA mails and other in the SOST but not the monitoring alerts.

I checked and found the notifications are active but still the alerts are not triggering.

I can find the alerts under Technical Monitoring --> alert inbox.

Please suggest where else I can check.

Thanks,

Arpit Jain

Hi folks,

we have technical monitoring configured in our solman for which i can find alerts and managed system data. Now I am configuring dashboards and added few apps. System availability, system performance for which i can find the data but for alert performance app, i cannot find the data in the app.

Please help if anyone have faced this or have any idea on this.

Faced below error:

No more than one implementation can be selected for the current BAdI

Error while processing action ACT1 of type URL_FWK for app type SAP_ALM_GROUPS_PER_MO_TY_1 (sap.e2erep.alm)

I have checked the below SAP note and i got the query for the corrosponding app.

2038212 - Troubleshooting the Solution Manager Dashboards

Below is the output for RSRT and LISTCUBE

RSRT:              no data available for the query

LISTCUBE:     InfoProvider 0SMALMMP1/0SMD_ALM_ALERTSPERCO is not active; check the entries

Hi,

When we have UC with multiple transports attached, it imports all transports at once and not in sequence.  We want it to wait for earlier transport to finish and start next one.  Is there any way we can resolve this issue?

Thanks,

Digesh

i've created a BPM using type CRM Service Documents to try to retrieve changes and request for changes, however it returns no data.  i left the transaction type empty (no restrictions). when it runs it only returns incidents.  (transaction types ZMIN and ZMI1).  why does it not return data for all the different transaction types?  it appears to be limited to just retrieving incidents.

has anyone been able to create a monitor against changes and requests for changes?

thanks for any input!

Hi there,

is it possible to use mail forms in connection with support team determination in SolMan 7.1?

I configured Support team determination with BRF+ and it sends mails, but using smart forms. In action definition AI_SDK_DETERMINE_SUPPORT_TEAM there is no parameter for mail forms. Is there any chance to use mailforms in this context?

Thank for you help

Michael

Dear SolMan experts.

When you document transactions, customizing objects and development objects in project systems via SOLAR business process structure in implementation/upgrade projects - what do you do with them after go-live?

Suppose that they were in documented when Solman was connected to the project systems via LOGON/TRUSTED RFC's.

Do you just change the systems in corresponding logical components to match your maintenance transport route and use the documented objects for maintenance, break-fix and support development and transports? What are some of the common practices?

Hi All,

I am trying to create a monitoring object in BPMon , It is showing as "No Text" for all Application Areas

Have tried option "Load Monitoring Definitions" for the logical component ..no luck

Is there a way using Charm to create a request (urgent or normal) that has multiple transports so that if one import fials, the others would not get imported ? we haven't found a way yet - other than creating multiple requests.

Thanks in advance

Hi experts,

I have SAP Solution Manager SPS12 and SAP HANA SP9. I added HANA to Solution Manager and performed Managed System configuration and DBA cockpit connection is set up. I also performed Technical Monitoring setup for HANA in solman_setup. Now when I want to use Root Cause Analysis, it seems that some data is missing.

When I open Root Cause Analysis > Database Analysis> SAP HANA database and Load data from the Business Warehouse:

a can see data like memory usage:

but when I load data for example Size and Host volume files a get No Applicable Data Found :

This is also case for I/O and Workload.

How can I resolve this No Applicable Data Found issue?

Best regards,

Zeljko Paic

Hi All,

As per our client's requirement we have create three separate solutions in SOLMAN, one for DEV, one for QA and one will be for PROD. The problem is the systems are added to their respective solutions already. So, do I need to delete old the solutions or a system can be part of two different solution ? Also I also want to know the complete procedure to create and add systems in a new solution. Help would be appreciated.

Hello,

I am facing some issues when I try to close a maintenance cycle. I already checked for the BP in SolMan System and transaction crm_dno_monitor, No errors so far. All tasks in the tasklist are unlocked.

When using the report /TMWFLOW/PHCNTRL_DB_UTILITY from SAP Note 933986 I am able to close the maintenance cycle, but its not possible via the task list or the ITSM web UI.

Here is a screenshot of errors I got from SCMA when checking the maintenance cycle for completion.

Message numbers in detail are:

• /TMWFLOW/TASKLIST049
• /TMWFLOW/PHCNTRL054
• /TMWFLOW/PHCNTRL056
• /TMWFLOW/TASKLIST251

Any ideas?

Thanks in advance!

Hello,

I´m trying to setup the EarlyWatch Alert (EWA) in our SAP landscape and as you know this requires some components installed (ST-PI and ST-A/PI) in all SAP systems.

In SAP Solution Manager system, when I go to solman_setup transaction and I press the option "EarlyWatch Alert Management", in "Check Software Component Level" tab, I choose the solution that I created - SAP Solution (the same solution that I used to run, for example, the Maintenance Optimizer service) and it show me which components are outdated... the problem is I already done all the updates for this specific components in all that SAP systems but it still show the warning in ST-PI and an error in ST-A/PI component. I can´t understand why because as I mentioned, I already did all the updates.

For example, in case of EP1 (ERP Production System) and SM1 (Solution Manager) systems the status are correct but in ED1 and EQ1 systems aren´t correct.

Can you help me to understand why this is not show me the correct status of both components status in the ED1 and EQ1 systems? This are related with some Job or a RFC connection... or something like that?

Best regards,

JD