SAP NetWeaver 2004s: Setting Up BEx Web Problem

Anal ysis

This short document contains all screenshots required by SAP to support a problem
regarding BI and Portal integration.

If you create a problem message, please provide all screenshots below. This helps
SAP to understand the current situation of your system.

Please replace screenshots below by screenshots of your own
installation and send this document back to SAP!

Please see table in section Status Overview for details about
required screenshots!

You can help us to accelerate solving your problem, if you
check especially the blue remarks on your own!

For general questions, please read note 917950.

For specific communication and Single Sign-On (SSO) problems, please read note
888687.


Information about Installation ........................................................................................ 2
Status Overview ............................................................................................................. 3
Step 1 Create RFC Destination in J 2EE Engine ............................................................ 5
Step 2 Create RFC Destination for Portal ...................................................................... 6
Step 5 Export BI Certificate into Portal ......................................................................... 8
Step 6 Import BI Certificate to Portal ............................................................................ 9
Step 6.1 Import BI Certificate into Portal .................................................................. 9
Step 6.2 Enter BI Certificate into Evaluate Ticket Login Module .......................... 10
Step 6.3 Enter BI Certificate into Evaluate Assertion Ticket Login Module .......... 12
Step 7 Create BI System in Portal ................................................................................ 13
Step 8 Configure User Management in Portal ............................................................. 17
Step 9 Export Portal Certificate to Portal .................................................................... 19
Step 10 Import Portal Certificate to BI ........................................................................ 20
Step 12: Maintain User Assignment in Portal Step ..................................................... 23
Step 14 Security Settings for BEx Web Applications (J ava) ....................................... 24

Information about Installation

Which type of installation do you have?

[ ] Application Server ABAP (AS-ABAP with own system ID and instance
number)
[ ] Application Server J ava (AS-J ava with own system ID and instance
number)
[ ] Double-Stack (ABAP and J ava combined on one server with identical
system ID and instance number)

In case of Double-Stack installation, did you performed an Add-In installation?
(i.e. upgrade of ABAP stack and than Add-In installation of J ava stack)

[ ] Yes [ ] No



BI System (Usage Type AS-ABAP)

System ID: [ ]
Client: [ ]

Portal (Usage AS-J ava, EP and BI-J ava)

System ID: [ ]




Status Overview

Report RSPOR_SETUP (transaction SE38)

Please apply the following two notes before you check the
configuration with report RSPOR_SETUP:
916571 RSPOR_SETUP: Adjustments for Template Installer
928332 RSPOR_SETUP: (Part 2) Adjustments for Template Installer

This screenshot of Status Overview is always required!



Please press button Overview and click on the marked third line to download the
complete output of report RSPOR_SETUP to a text file
(If the third line is not marked, please apply note 935177)
Please send attach this text file to your message or mail!

Is there any failed step (marked red)?
Search for notes with error message!
Read the Checks for Step section at the bottom of each steps for hints to
analyze a problem!

In case of error messages, please provide the following screenshots
For example, if step 12 failed, please provide screenshot of step 5, 6, 8, 9 and 10.

Failed Step(s) Required Screenshots
Status 1: Create RFC Destination in J 2EE Engine Step 1, 2
Status 2: Create RFC Destination for Portal Step 1, 2
Status 3: Maintain Portal Server Settings for Portal
Status 4: Maintain Single Sign-On in BI
Failed Step(s) Required Screenshots
Status 5: Export BI Certificate into BI
Status 6: Import BI Certificate into Portal
Status 7: Create BI Sytem in Portal
Status 8: Configure User Management in Portal
Status 9: Export Portal Certificate into Portal
Status 10: Import Portal Certificate into BI Step 9
Status 11: Set Up Repository Manager for BI in Portal
Status 12: Maintain User Assignment in Portal Step 5, 6, 8, 9, 10
Status 13: Import SAP NetWeaver Plug-In into BI
Status 14 - Security Settings for BEx Web Applications

Step 1 Create RFC Destination in J2EE Engine

SAP J 2EE Visual Administrator
(\usr\sap\<PORTAL_SID>\J C<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID>/ Server<#>/ Services / J co RFC Provider / RFC Destination

The icon Running man must be visible in the list of Available RFC
Destinations next to the name of Program ID




Step 2 Create RFC Destination for Portal
Transaction in BI System
Display and Maintenance of RFC Destinations (SM59) / TCP/IP Connection

Screenshot of register Technical Settings (Gateway Host and Gateway service
must be visible on screenshot)
Screenshot of Logon & Security
Program ID, Gateway Host and Gateway Service must be identical to Step 1
Send SAP Logon Ticket must be checked on




Step 5 Export BI Certificate into Portal

Transaction in BI System
Trust Manager for Single Sign-On with Logon Ticket (STRUSTSSO2)

Double click on Own Certificate / Owner to show information about own
certificate in the Certificate section (middle)

See step 6 for check



Step 6 Import BI Certificate to Portal
Step 6.1 Import BI Certificate into Portal

SAP J 2EE Visual Administrator
(\usr\sap\<PORTAL_SID>\J C<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID>/ Server<#>/ Services / Key Storage / TicketKeystore / Views / Load

Detailed information of the CERTIFICATE must be identical with screenshot of
step 5:
Step 6.1 Step 5
[DN] Owner
[issuerDN] Issuer
[validNotBefore] Valid From
[validNotAfter] to
[fingerprint] Check Sum


Step 6.2 Enter BI Certificate into Evaluate Ticket Login Module

SAP J 2EE Visual Administrator
(\usr\sap\<PORTAL_SID>\J C<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID>/ Server<#>/ Services / Security Provider / Components / ticket /
Authentification /
com.sap.security.core.server.jaas.EvaluateTicketLoginModule

Name of Login Module must be
com.sap.security.core.server.jaas.EvaluateTicketLoginModule
trustedsys1 must be ABAP system ID and client (see status line of screenshot in
step 5; sample BR9 (2) 000; (2) indicates only the number of open SAP GUI windows
connected to the system)
trustediss1 must be identical with Owner in step 5
trusteddn1 must be identical with Issuer in step 5

Number behind trustedsys, trustediss and trusteddn must be identical
Number must be identical with number in step 6.3
First number must start with 1, than 2, 3 and so on




Step 6.3 Enter BI Certificate into Evaluate Assertion Ticket
Login Module
SAP J 2EE Visual Administrator
(\usr\sap\<PORTAL_SID>\J C<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID>/ Server<#>/ Services / Security Provider / Components / ticket /
Authentification /
com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule

Name of Login Module must be EvaluateAssertionTicketLoginModule
See step 6.2 for other checks




Step 7 Create BI System in Portal

iView in Portal
System Administration / System Configuration / System Landscape

Property Category: BI / Business Intelligence
Property Category: BI KM / Business Intelligence KM Integration
Property Category: Connector
Property Category: User Management

Property BI Master System must be selected
Property Authentication Ticket Type must be SAP Assertion Ticket
Property Logon Method must be SAPLOGONTICKET












Step 8 Configure User Management in Portal

iView in Portal
System Administration / System Configuration / Configuration for User Management
Tab Page Security Settings

Screenshot of register Data Sources
Screenshot of register SAP System
Screenshot of register Security Settings
(property SAP Reference System must be visible)

Property SAP Reference System (under register Security Settings) must be set (to
BI system or to any other SAP system with same users as BI system)






Step 9 Export Portal Certificate to Portal

SAP J 2EE Visual Administrator
(\usr\sap\<PORTAL_SID>\J C<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID>/ Server<#>/ Services / Key Storage / Views / TicketKeystore /
SAPLogonTicketKeypair-cert / Export

Select SAPLogonTicketKeypair-cert
(This allows us to see the values of the certificate, CN=)

See step 10 for check




Step 10 Import Portal Certificate to BI

Transaction in BI System
Trust Manager for Single Sign-On with Logon Ticket (STRUSTSSO2)

Double-click on Portal certificate in Certificate List
(This allows us to see the values of the certificate, CN=)
Select Portal SID in Certificate List
Select Portal SID in Access Control List (ACL)

Portal certificate must be part of Certificate List
Double-click on Portal certificate in Certificate List and compare fields with the
detailed information of the CERTIFICATE of certificate SAPLogonTicketKeypair-
cert (see step 9):
Step 10 Step 9
Owner [DN]
Issuer [issuerDN]
Valid From [validNotBefore]
to [validNotAfter]

Portal certificate must be in Access Control List (ACL)
Compare fields with
System Portal System ID (default value, if login.ticket_issuer is
not existing; see second screenshot below)
Cl. (Client) 000 (default value if login.ticket_client is not changed)
Certificate Owner [DN] (see step)


For verification of the correct parameters (System ID and Client) in the Access
Control List (ACL), please perform the following steps.

Config Tool (see folder \usr\sap\...\J C\j2ee\configtool; start configtool.bat)

Use default DB settings
Cluster-data / Global server configuration / Services /
com.sap.security.core.ume.service

Select key login.ticket_client
(if key login.ticket_issuer is existing, please ensure that this key is visible)





Step 12: Maintain User Assignment in Portal Step

Please check step 5, 6, 8, 9 and 10!
Step 14 Security Settings for BEx Web Applications
(Java)

iView in Portal
System Administration / Permissions / Portal Permissions
Portal Content / Content Provided by SAP / Platform Add-Ons / Business Intelligence
/ iViews / BEx Launcher

pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/iViews/com.sap.ip.bi
.bex

In row Everyone, the column Administrator must be Read and column End User
must be checked on
Icon of Everyone must be the Group icon; column Description must be Built-in
Group Everyone