SAP Note

Page 1 of 2

Back

SAP Note Number: 728075 EP 6.0: Unable to access logon page

Version: 14, Note Language: EN, Released on: 25.10.2005 Symptom
Portal runtime error when calling the logon page in the browser

Other terms
iView Error, authentication, logon, LDAP, datasource, log in, login, data source

Reason and Prerequisites

One of the following situations apply: 1) Anonymous user definition You have configured the portal to use two user management data sources, for example a database and a LDAP directory. On both data sources there are users with 'anonymous' as logon ID (the logon ID is defined by the j_user attribute in the data source configuration), and the parameter Pcd.Gl.PermissionCheck = true is set in /WEBINF/portal/system/pcd/pcdStartup.installer.properties or usr/sap/global/config/pcd/pcdStartup.installer.properties (depending on the patch level). 2) Parameter ume.login.anonymous_user.mode The parameters ume.login.anonymous_user.mode = 0 is set in the usermanagement configuration under System Administration -> System Configuration -> UM Configuration-> Direct Editing and in the file system the parameter Pcd.Gl.PermissionCheck = true is set in /WEB-INF/portal/system/pcd/pcdStartup.installer.properties or usr/sap/global/config/pcd/pcdStartup.installer.properties (depending on the patch level).

Solution
1) Anonymous user definition If the Permission check is set to true the portal uses per default a service user whose login ID (j_user) is equal to 'anonymous' for the logon page. If more than one user with the same logon ID exist, the logon page cannot be called. You can use any of the following possibilities to resolve the problem: Delete the 'anonymous' user from one of the data sources. Caution: The 'anonymous' user in the portal database is recreated after deletion during the next restart of the J2EE Engine. Therefore deleting the 'anonymous' user from the database does not resolve the problem. Specify a different anonymous user for the logon page as follows: 1. To be able to log on to the portal, follow the procedure described in note 713210. 2. Log on to the portal and navigate to User Administration -> Users. 3. Create a new user with unique attributes. Do not assign any roles to this user. 4. Choose System Administration -> System Configuration -> UM Configuration-> Direct Editing and change the following properties: ume. login.guest_user.uniqueids=<add uid of new anonymous user> ume. login.guest_user.defaultid=<uid of new anonymous user> 5. Change the ACL settings back as described in note 713210. 6. Restart the J2EE Engine. If you are using NetWeaver '04 with database and LDAP directory as data sources, you can prevent the anonymous user from being read from the LDAP directory as follows: 1. Start the J2EE Engine Config Tool. 2. Choose UME LDAP Data. 3. On the 'Additional LDAP Properties' tab, add the 'anonymous' user to the blocked users: ume.ldap. blocked_users(global)=Administrator,Guest,anonymous ume.ldap. blocked_accounts(global)=Administrator,Guest,anonymous 2) Parameter ume.login.anonymous_user.mode

https://websmp202.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=...

26/1/2006

SAP Note

Page 2 of 2

If the Permission check is set to true the portal logon page needs a named service user for the ACL permissions checks. In order to make this named user available to the logon page, set ume.login.anonymous_user.mode = 1

Released on Priority Category Primary Component Secondary Components

25.10.2005 Correction with medium priority Installation information EP-PIN-SEC-AUTH EP-PIN EP-PIN-USM BC-JAS-SEC-UME

No attributes available

Soft. Component EP-PSERV SAP-JEECOR

Release Track 6.0 6.40

From Release 6.0 6.40

To Release 6.0 6.40

And Successors

No correction instruction available

No data available

Number

Short Text

0000713210 Restrictive ACL settings can block access to portal 0000669848 Unlocking the Administrator User on the SAP J2EE Engine 0000589012 EP 6.0 SP2 on WAS 6.20: Central Note for EP-BC-UME

No attachments available

SAP Notes / Patches corrected by this Note No entries available

The following SAP Notes correct this Note / Patch No entries available

Back

https://websmp202.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=...

26/1/2006