Security Troubleshooting Guide For NetWeaver J2EE 640/700

I found a very nice security troubleshooting guide attached to note 1296330.
Below is the index of the document :

Chapter 1 - Authentication

Read this chapter if you have general problems logging in to a resource on the SAP J2EE Engine (NetWeaver Administrator, User Management, System Information) or to standalone SAP applications which connect to the SAP J2EE Engine (Visual Administrator). No single sign-on must be active on the system.

Chapter 2 - Authorization

Read this chapter if you see error messages saying that the user is not authorized to access the requested resource.

Chapter 3 - Session Management

Read this chapter if you think that the security sessions of the user expire when they should not or if a user is incorrectly logged in to the SAP J2EE Engine as another user.

Chapter 4 - Single Sign-On

Read this chapter if you have a single sign-on scenario and it fails.

Chapter 5 - SPNego

Read this chapter if you have setup the SAP J2EE Engine to use Kerberos authentication via SAP's SPNego mechanism.

Chapter 6 - SSL

Read this chapter if you have enabled communication over the SSL protocol and it fails.

Chapter 7 - Key Storage

Read this chapter if you see error messages saying that there are problems with Key Storage views or if you have problems importing/exporting certificates.

Change Livecache user password

I recently had an issue changing the Livecache user in a SCM 5.0 system.
Changing the password in the ABAP stack transaction LC10 was easy.
But you also have the change the password in the Livecache database.

So do that you need the following commands.

(XXX is the database name)
1.Start the Livecache DB command line : dbmcli -d XXX -u control,[password]
2. Login as Superdba : sql_connect superdba,[password]
3.Change Livecache user password : sql_execute alter password sapr3 [new password]
4. Make the new password known : user_sap sapr3,[new password]

If you don't know the SuperDBA password you can execute the following command after step 1 above : user_put superdba password=[new password]

Solution Manager EHP1 : upgrade steps

I recently upgraded 2 Solution Manager 4.0 systems to EHP1 and here is the steps I followed:

1.Update Java stack to SPS17 (including IGS) via JSPM.This step is a prereq. Time = 5-7 hours.
2.Update Java stack to EHP1 (including IGS) via JSPM. Time = 3-4 hours
3. Update SPAM/SAINT patch level to 33.
4. Update Kernel to 7.01 patch level 23.
5.Install EHP1 via SAINT on ABAP stack.Time = 9-15 hours

Notes :

• You need BI_CONT 7.03 installed in the ABAP stack before you can upgrade to EHP1.
• Make sure the Java Heap parameters is set correctly before running JSPM
• You have ample free disk space in the disk drive that SDM in running in, as it creates files temporariliy when compiling in JSPM.
• Make sure all the plugins in the system is upgraded to it's latest level before installing EHP1.
  

Below a screenshot of what SAINT looks like before your start EHP1 install :

Upgrading Solution Manager 7.0 to 7.0 EHP1 (Stack 18)

Solution Manager 7.0 EHP1 (Stack 18) is now available for download. Please make sure that you read note1169247 before starting the upgrade. Also check out this detailed presentation on what EHP1 contains.

New in NW 7.0 EHP1 usage Type ABAP : Information Lifecycle Management

As of SAP NetWeaver 7.0 Enhancement Pack 1 you can use the ILM solution from SAP for end-to-end management of your information. Information Lifecycle Management (ILM) in general, is comprised of the policies, processes, practices, and tools used to align the business value of information with the most appropriate and cost effective IT infrastructure from the time information is conceived through its final disposition.

This includes Data Archiving, Retention Management and the Retention Warehouse.
Have a look here.

New in NW 7.0 EHP1 usage Type EP : WorkProtect Mode

New in NW 7.0 EHP1 usage Type EP (Portal) is the WorkProtect Mode. To avoid losing unsaved data when navigating to another iView, the portal provides a WorkProtect mode that, when activated, provides the user an opportunity to save any changes before navigating.

Screenshots of BI Diagnostics & Support Desk Tool

I have mentioned the BI Diagnostics & Support Desk Tool in one of my previous posts.
Here is 2 screenshots of what it looks like, very handy indeed in solving BI Java issues.