RFC Destination problem

former_member614185 — Thu, 13 Dec 2007 08:57:23 GMT

Hi,

I have created one RFC destination of type 3 and tried test connection. it was good. but when i tried remote logon it was asking the user and password again.

So i tried Authorization test. it says name or password incorrect.

but my password and user is 100% correct.

What could be problem.

<b>Ponit ll be awarded for helpful answers</b>

Re: RFC Destination problem

Former Member — Thu, 13 Dec 2007 09:08:41 GMT

check if you have selected proper client number of the destination system...

Re: RFC Destination problem

Former Member — Fri, 14 Dec 2007 11:42:30 GMT

Dear Prabhu,

Remote Function Call (RFC) - Authorization Concept

If the instance profile parameter 'auth/rfc_authority_check' is set (to 1), the system automatically performs an RFC authorization check. The authorization check refers to the relevant function group for the function module to be called. If no authorization is found, a runtime error occurs. You can check the authorization in advance with the function module AUTHORITY_CHECK_RFC. If the RFC communication takes place in one system in the same user context - that is, using the same client and user ID - the system does not carry out an RFC authority check.

Remote Function Call (RFC) - Authorization Concept

Since Release 3.1G you have been able to run RFC authorization checks based on the (called) function group.

If the instance profile parameter 'auth/rfc_authority_check' is set to 1, the system automatically runs an RFC check. The authorization check refers to the function group of the function module to be called. If no authorization exists, this leads to runtime error RFC_NO_AUTHORITY. If the RFC communication takes place within one system and in the same user context, i.e., the same client and user identification, no RFC authorization check is performed.

You can first check the authorization using function module AUTHORITY_CHECK_RFC. The system runs the RFC authorization check each time you access the called function module using RFC (the system checks the corresponding function module groups).

The authorization is checked using authorization object S_RFC.

This authorization object contains the following three fields:

RFC_TYPE : Type of the RFC object to be protected

This field can currently have the value 'FUGR' (function group).

RFC_NAME : Name of the RFC object to be protected

This field currently contains function group name. It may be up to 18 characters long. The authorization check only applies to the first 18 characters.

ACTVT : Activity

This field can currently have the value 16 (execute).

From Release 4.0, the authorization check is active by default (that is, auth/rfc_authority_check = 1).

In addition, from Release 4.0 you can also set up a trusted relationship between systems (see also documentation on Trusted/Trusting Systems). This sets up a trusted relationship between the calling and the called systems, whereby this relationship is initiated by the called system. In the called system you must then specify the users in the calling system who may execute Remote Function Calls over this type of trusted relationship (trusted users). Additionally you must assign the trusted users with trusted profiles (authorization object S_RFCACL) in the called system.

This authorization contains the following fields:

RFC_SYSID : ID of the calling system

RFC_CLIENT : Client for the calling system

RFC_USER : ID of the calling user

RFC_EQUSER : Identifier, whether or not the user may be called by a user with the same ID (Y = Yes, N = No).

RFC_TCODE : Calling transaction code

RFC_INFO : Additional information from the calling system (currently inactive)

ACTVT : Activity

This field can currently have the value 16 (Execute)

Using this, you can specify exactly which users may call remote function modules using other user IDs.

Note : The authorization check based on the function groups (authorization object S_RFC) takes place independently of the authorization checks within the trusted systems.

The link below can also be helpful.

<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/42/f3d07f074e1bcae10000000a11466f/frameset.htm">Access Control Using Assigned Users</a>

Best Regards,

Raj

<b>Please award points if found helpful.</b>

topic Re: RFC Destination problem in Application Development and Automation Discussions

RFC Destination problem

Re: RFC Destination problem

Re: RFC Destination problem