Authorization required error

[Former Member]

Hi friends,

When partner is sending message from there business connector system to my xi system,they are gettin error, Authorization requiredu2019. So what id and password i need to gve them,i had not created in xi,do i need to create it???

[Former Member · Accepted solution]

Hi!

The XI always performs an authentication for incoming requests. On XI you have to create a communication user (e.g. based on XIAPPLUSER). Tell you BC guys the user and password and it will work!

Regards,

Volker

[Former Member · Accepted solution]

Additional info:

It may be required to restart the J2EE stack of your XI in order to get the user in effect.

First try without restart.

Regards,

Volker

[Former Member · Accepted solution]

Hi Volker,

XIAPPLUSER is service user, so do i need to give id and password of communication user or service user. Partner tried to send message using that ID and password bt they are gettin error...

u2018http://212.*..**:*****/MessagingSystem/receive/BcAdapter/BC with status 400 Bad Requestu2019.

also need to confirm one more thing, i had given partner http://212.*..**:*****/MessagingSystem/receive/BcAdapter/BC

this address on which they can send us message....is it correct. they have BC system and we have XI system.

Thanks ,

Brijesh..........

[Former Member · Accepted solution]

Hi!

HTTP code 400 normally points to wrong URL. 401 would be an authentication problem.

XIAPPLUSER is okay, but ik would suggest you to create different users for every interface. Otherwise in case of problems you can never see, who used that user.

XIAPPLUSER can be used as a template. Service user is also okay. The main (security-relevant) difference between communication user and service user is, that with a service user you might logon to an SAP system using SAPGUI. A communication user cannot logon as dialog user.

By the way: Beginning with SAP NW 7.0 the password is also case-sensitive!

So I think your URL is wrong. You can test it by simply typing this in a browser and see what happens. By the way: Most of the XI URLs are case-sensitive. So please type in carefully. URL must be:

http://<hostname:portnumber>/MessagingSystem/receive/BcAdapter/BC

Hope this helps!

Regards,

Volker

[Former Member · Accepted solution]

I tried to test the url by giving it into browser,but I got "Internet Explorer cannot display the webpage" error page. So i guess the url is incorrect, is this the only way to test url,or is there any other way possible.??

[Former Member · Accepted solution]

Hi!

Strange ... Is the BC Adapter service running? You can check this using Visual Admin (up to PI 7.0) or NWA (PI 7.1).

Is there a firewall between your browser and the PI system? If so ask your network guys whether server and/or port are blocked .... Can you open XI/PI Start Page in the browser?

Which port do you use: 5xxxxx (Java Stack) or 8xxx (ABAP stack)?

BTW: Is password of your user really correct and is the user really not locked? Check this by trying to logon with that user resp. by using transaction SU01.

Regards,

Volker

[Former Member · Accepted solution]

one thing is really confusing me... the sender has BC system and I have XI system with backend system as R3 , so do i need to use the address http://212.*..**:*****/MessagingSystem/receive/BcAdapter/BC ,

coz what i understant is i wll receive message in xml file.and have to send it to r3 system.

so is it correct that i am giving this address to partner,on which they are sending me address....

this question may seems silly..bt realy confused about this..

[Former Member · Accepted solution]

Hi!

No problem. You took it right. Hand over this URL to the BC colleagues. They have to maintain it in their BC along with the correct user and password. Normally it then should work.

Does it now work or not?

Regards,

Volker

[Former Member · Accepted solution]

Hi Brijesh

The issue is with BC side. Check with Business Connector routing rules. To integrate BC and XI you need to configure http://<hostname:portnumber>/MessagingSystem/receive/BcAdapter/BC in XML transport frame and set for utf-8 and SAP-XML under dialect

For authentication you need a user created in XI. Certificate based authentication can be a better solution for this.

Thanks

Gaurav

[Former Member · Accepted solution]

Hi Volker,

Thanks for ur help...

We had given that address to our partner, but they got error message, in response they said us that,they are goin to send message to us at http interface. I think ,for this now i have to provide them with http address. I got format of http address on sdn,

i.e.

http://<host>:<port>/sap/xi/adapter_plain?namespace=<nameSpace>&interface=<OutBoundMessageInterface>...;

but here also have few doubt,here namespace and interface are mandatory fields,

in namespace what should i give?should i give the name space that i had created in IR or some thing else,and also what to give in interface.

Thanks,

[Former Member · Accepted solution]

HI Brijesh

You need to give namespace and of your outbound interface. outbound interface name that you have created in your IR.

Thanks

Gaurav

[Former Member · Accepted solution]

HI Brijesh,

As Gaurav said, namespace and interface name of your outbound interface. You can get it from IR or ID.

But please take care of case-sensitiveness. Exact matching is required.

You can again try to test it by typing this URL in your browser.

What about the other thing I asked for? ICF services active? user valid and not locked? correct password? Starting with NetWeaver 7.0 password is case-sensitive? Firewalls?

Regards,

Volker

[Former Member · Accepted solution]

As Gaurav said, namespace and interface name of your outbound interface. You can get it from IR or ID.

But please take care of case-sensitiveness. Exact matching is required.

You can again try to test it by typing this URL in your browser.

What about the other thing I asked for? ICF services active? user valid and not locked? correct password? Starting with NetWeaver 7.0 password is case-sensitive? Firewalls?

after checking the setting, i tried the url in the format..

http://host:50000/sap/xi/adapter_plain?namespace=http://sahara.com&interface=INTERFACE NAME&service=SERVICE NAME

But for this url i am gettin error, '404 Not Found , The requested resource does not exist.'

after this I tried with the URL with format,

http://hostname.com:50000/MessagingSystem/receive/BcAdapter/BC

For this I got the page that ask for ID and Password,and after providin the PIAPPLUSER id and passowrd, i get followin msg,

<?xml version="1.0" encoding="UTF-8" ?>

- <scenario>

<scenname>MSG_SCEN</scenname>

<scentype>SERV</scentype>

<sceninst>MSG_001</sceninst>

<scenversion>001</scenversion>

- <component>

<compname>SERVLET</compname>

<compdesc>Messaging System</compdesc>

<comphost>localhost</comphost>

<compinst>MSG_001</compinst>

- <message>

<messalert>OKAY</messalert>

<messseverity>100</messseverity>

<messarea>QR</messarea>

<messnumber>801</messnumber>

<messparameter>na</messparameter>

<messtext>MessagingServlet is active.</messtext>

</message>

</component>

</scenario>

So which is the correct format,will it work if i provide the second format,or it should be tthe first format that i had stated in this thread?

[Former Member · Accepted solution]

Hi!

The BC Adapter URL obviously works as you have seen in your browser. So give the BC scenario a second chance. That means: Tell your partners to use BC and that they have to configure their BC in the way mentioned in a few thread entries above.

And again connect your network guys whether there is a firewall blocking the communication. By the way: A firewall may also exist on partner's site ....

As I've seen in the BC url you worked with fully qualified domain name, but not in the Plain HTTP URL.

PLEASE: Always work with FQDN whenever possible!!!!!!

Regards,

Volker

[Former Member · Accepted solution]

Add. info:

Gaurave gave the hints concerning the BC settings in his post dated Nov. 15

Regards,

Volker

[Former Member · Accepted solution]

HI Brajesh

If you can provide what exactly the URL you have used that will allow us to point out the problem..

Moreover is your HTTP port 50000 and your host is your complete host name.

As for BC you are using hostname.com Check for the fully qualified hostname from BASIS and check the HTTP port in SMICM -> parameter -> Display

Then Give it a try.

Forgot to add. If you are trying to post content as HTTP over the internet . Your firewall should allow the access to internet for this. If there is a security issue then use HTTPS. For that you need to generate certificate from XI system or use a standard certificate by Verisign etc to make this communication

Thanks

Gaurav

Edited by: Gaurav Bhargava on Nov 18, 2008 1:45 AM

[Former Member · Accepted solution]

Thanks All for ur support, now i am able to get message from partner side..after providing proper interface name and port, along with id and password,i m able to get message .

Thanks..