Implementing a Federated Portal Network

[Former Member]

Hello,

I try to connect from a EP6-SP16 (Main Portal) to a EP7-SPS07 (Porducer).

On EP6 I create a EP7-System with alias in Menue "Global Portal"

Connection Protocol: HTTP

Consumer Name: EP2

Host Name: r3341.ims.ihost.lcl

Port: 50100

To trust the EP6, I download the EP6-Certificate and import in EP7 with Alias "EP2"

On both systems exists my user "schroeder" with the superadminrole.

If I want to configure the Usermapping for EP7 (Usermapping Remote iViews), I get an error :

• Cannot establish connection to remote content provider ****

These are Logentries from both portals:

EP6:

#1.5#000D600A1A6000380000000A0009402A0004136D4D156A60#1147260072454#com.sap.security.portal.service.usermapping#sap.com/irj#com.sap.security.portal.service.usermapping.[cf=com.sapportals.portal.prt.service.usermapping.UserMappingService][md=getMappingData()][cl=null]#Schroeder#1304##r3423_EP2_6894050#Schroeder#bed32600e00811daa325000d600a1a60#Thread[PRT-Async 3,5,PRT-Async]##0#0#Error##Plain###UserMappingService: Lookup for system's unique Id failed.

Context: UME principal to be mapped = "Schroeder, Christian", principal's type: user, mapped user in target system = "(null)" system alias = "Default_System_Alias"

Exception: (none)#

#1.5#000D600A1A6000380000000B0009402A0004136D4D16E4B8#1147260072551#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#Schroeder#1304##r3423_EP2_6894050#Schroeder#bed32600e00811daa325000d600a1a60#Thread[PRT-Async 3,5,PRT-Async]##0#0#Warning#1#/System/Server#Java###Call failed

#1#SOAP Fault Exception [Actor com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The User Authentification is not correct to access to the Portal Service AutoGenProducer or the service was not found. > <type>java.lang.IllegalAccessError</type> > > > > # > #1.5#000D600A1A6000380000000D0009402A0004136D4D16F7F9#1147260072556#com.sap.portal.global_portal_consumer#sap.com/irj#com.sap.portal.global_portal_consumer#Schroeder#1304##r3423_EP2_6894050#Schroeder#bed32600e00811daa325000d600a1a60#Thread[PRT-Async 3,5,PRT-Async]##0#0#Error#1#/System/Server#Java###<<ProxyBasicComponent>> Failed to get markup! > > #1#SOAP Fault Exception [Actor com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The User Authentification is not correct to access to the Portal Service AutoGenProducer or the service was not found.

<type>java.lang.IllegalAccessError</type>

EP7:

#

#1.5#0002556F0CF7006D000000F8000C10E00004136C8A78D06E#1147256807410#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#J2EE_GUEST#1####7c391d20e00f11dac68c0002556f0cf7#SAPEngine_Application_Thread[impl:3]_27##0#0#Warning#1#/System/Server#Java###User is not authorized to access to the Portal Service AutoGenProducer

#1#com.sapportals.portal.prt.runtime.PortalRuntimeException: Access is denied: AutoGenProducer - user: J2EE_GUEST, at com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java(Compiled Code)) at com.sapportals.portal.prt.core.service.ServiceManager.get(ServiceManager.java:239) at com.sapportals.portal.prt.service.soap.security.SOAPSecurityManager.isAuthorizedUserForService(SOAPSecurityManager.java:266) at com.sapportals.portal.prt.service.soap.SOAPConnection.processSOAPPost(SOAPConnection.java:222) at com.sapportals.portal.prt.service.soap.SOAPConnection.handleRequest(SOAPConnection.java:185) at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522) at java.security.AccessController.doPrivileged1(Native Method) at java.security.AccessController.doPrivileged(AccessController.java(Compiled Code)) at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405) at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code)) at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156) at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code)) # #1.5#0002556F0CF7006D000000FA000C10E00004136C8A78E946#1147256807417#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#J2EE_GUEST#1####7c391d20e00f11dac68c0002556f0cf7#SAPEngine_Application_Thread[impl:3]_27##0#0#Warning#1#/System/Server#Java###The User Authentification is not correct to access to the Portal Service AutoGenProducer or the service was not found. #1#java.lang.IllegalAccessError: The User Authentification is not correct to access to the Portal Service AutoGenProducer or the service was not found.

at com.sapportals.portal.prt.service.soap.SOAPConnection.processSOAPPost(SOAPConnection.java:229)

at com.sapportals.portal.prt.service.soap.SOAPConnection.handleRequest(SOAPConnection.java:185)

at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)

at java.security.AccessController.doPrivileged1(Native Method)

at java.security.AccessController.doPrivileged(AccessController.java(Compiled Code))

at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)

at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code))

at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)

at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code))

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java(Compiled Code))

Why does the EP6 try to logon to EP7 with the user "J2EE_GUEST" ? The access denied message is right, so this user can´t have admin rights or something.

Can someone help me?

Thanks a lot.

[Former Member · Accepted solution]

Christian,

Might want to try with J2EE_ADMIN user. Also, check sap note 897585.

James

[Former Member]

Doesnt work with EP6

You need at least NW04s SP11

[Former Member]

Please see my pervious post on this thread.

There is no Federation support for before NW7.0 (NW 04s) SP8 (9 with verions support).

This includes NW 04 versions.

Oren

[Former Member]

hi christian,

have a look at these threads.its useful to u......

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/webcontent/uuid/351402eb-0a01-0010-50ab-a85ed...

regards

bhargava

pts r welcome

[Former Member]

Hi,

Federated Portal Network Cross Version support or Version Interoperability (VI) is available for RRA: NW7.0 SP9 and upwards.

for RDL: NW7.0 SP10 and upwards. So the scenario described is not supported.

An alternative would be to use URL integration.

Regarding the specific permission problem: you're being authenticated as a guest on the producer, this usually implies either a trust problem or a user problem.

Please check that the Logon ID of "schroeder" is exactly the same on both portals.

To verify that configuration was done correctly: logon to the consumer. Then replace the browser's address to that of the producer. If you're automatically logged in, you're good.

But again, as stated, this is not a supported scenario.

Regards,

Oren

[Former Member]

Hi,

we found, that it´s not possible to run a Nw04-Portal (EP6) as consumer and Nw04s-Portal(EP7) as Producer.

I have another question:

It´s possible to connect a Nw04-Producerportal (EP6-SP18) to a Nw04s-Consumerportal (EP7-SP11) ?

Does anyone have some experiences ?

Best regards

Christian

[Former Member]

Christian,

As you said, EP6 can neither act as a producer nor as a consumer in FPN. Period. However, I know a few customers are using EP6 exposing few iViews running on EP7 (without a fpn set up). It'll be helpful if you can explain what really do you want your EP7 to serve.

Kiran

[olaf_reiss]

Hi to everyone,

I am trying to connect a portal NW04 SP18 (Consumer) to NW04s SPS12 (Producer).

Is it still imposible to connect them as a federated portal network?

Thanks in advance.

Best regards,

Olaf Reiss

[Former Member]

Roy is correct. On SAP central note on FP.

https://websmp210.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=012003146900000435132005

Regards,

James

[RoyF]

Hi Christian,

I am not sure of your Portal versions,

did you mean NW04s SP6 and SP7 ?

If so , there is a known problem with doing user mapping thru Portal Personalize-> user mapping (Remote iViews)

There is an easy workaround using the super admin:

Thru the Producer UME, (User Administration->identity management) configure the user mapping for your user on desired system.

This will work only if the trust is succeeded between the Portals, you can see if the trust is working by

logon to the Consumer Portal as super admin,

Navigation to User Administartion -> Proxy-to-Remote-Role

choose your Producer alias.

if you can see the remote roles, then trust succeeded. (verify that all users you are working on exist both in Producer and Consumer Portal)

Hope it help,

if you need any more help , just ask.

Regards

Roy

[Former Member]

Hello Roy,

Portal Versions

Producer Portal: EP 7.0 SPS07 (Nw04s)

Consumer Portal: EP 6.0 SP16 (Nw04)

Is there need to import certificates in BOTH portals?

Your workaround should work with two NW04s Portals/Systems.

Best regards

Christian

[RoyF]

Hi Christian,

I hoped I misunderstood you regarding the Portal versions,

However The Federated Portal Network solution is available only from NW04s SP6. so it is not possible to implement it between NW04 and NW04s.

You Can learn much more in the link below:

<a href="http://help.sap.com/saphelp_nw04s/helpdata/en/5b/9f2d4293825333e10000000a155106/frameset.htm">Implementing a Federated Portal Network</a>

Best Regards

Roy

[Former Member]

Hi Roy,

it´s really not possible a remote connection (iViews and Roles) between NW04 and NW04s ?

Best regards

Christian

[RoyF]

Hi Christian,

In NW04 there was an initial version (POC) called Syndication, which allowed you to shared only iViews (not roles). as oposed to FPN in NW04s which give you a much bigger solution.

So doing NW04s as a consumer to NW04 as a producer isn't possible.

Regarding the other direction, I'm not sure it's supported / recommended, especialy if you need to share WD iviews.

Best Regards

Roy

Message was edited by: Roy Fishman

[Former Member]

Hi Roy,

we need the other direction. NW04s as a producer and NW04 as a consumer.

Our customer is in a ramp up project and want to migrate BI and have already a EP 6.0 on NW04.

They want to use iViews from NW04s in a NW04-Portal.

Best regards

Christian

[RoyF]

Hi Christian,

What you are trying is the opposite of a backward compatability. I think this is impossible.

The new BP for NW04s ERP2005 is not supposed to run on NW04.

you should upgarde your NW04 to NW04s and then it should work.

I know there is an upgrade flow which should include your scenario, (NW04 - (ERP and BI) => NW04s)

Best Regards

Roy