How to display authorization objects for specific TCODE

Having difficulty to troubleshoot authorization issues for certain TCODE? An easy way to debug the required authorization objects with the use of TCODE: SU24.

Example:

1) Execute TCODE: SU24 -> enter the TCODE to be analyse -> Click the "Execute" button

2) Double click on the list of TCODE on the left side to view the relevant authorization objects.

3) Continue the authorization checking/resolution with these information.

How to lockdown a specific TCODE

Scenario: administrator would like to perform maintenance task and would want to temporary block/disable the access of certain TCODE for a specific of time.

Simple steps to disable a TCODE from user access:

1) Execute TCODE: SM01

2) Enter the TCODE to be lock in the text box and press the "ENTER" key

3) Click in the TCODE text box and click the "Lock" button

4) A tick will be shown on the check box indicating the TCODE been locked

5) Sample error when the TCODE been execute.

6) Perform the similar task to unlock the TCODE later.

Administration: HP-UX commands to verify hard disk status after replacement

A little bit sidetrack from SAP topic, some of the commonly used HP-UX commands to verify on the hard disk status.

To obtain the relevant hard disk information

1) To show all the disks that currently connected to the server
    Command: ioscan –fnkC disk

2) To show the status of the hard disk
    Command: ioscan –fnkd ciss (to get the driver name)

    Command: sautil /dev/ciss0 (Utility to show the disk property)

Parameter meaning:

f=give full listing

 n=show device file names

k=show kernel structure; don’t scan hardware

C=show hardware in specified class

d=show hardware controlled by specified driver

Example of the sautil (Utility): 

Assumption: the server is running with 2 hard disks on RAID 1

1) One of the hard disk encounter error/failure

2) The server is currently running with one hard disk and experiencing failure on the other

3) Replication/mirroring is in progress (automatically started once a new hard disks been replace/hot swap)

4) Mirroring complete

How to install SAP license from OS level

You would like to install the SAP license but with limited permission on SAP GUI to execute TCODE: SLICENSE. The alternative solution is to install through OS level with the assumption of sufficient OS level access.

A) Example of license renewal required

1) Sample warning message of license expired

B) Steps to renew the license from SAP marketplace

1) Ensure the installation number for the license renewal:  System -> Status

2) Login to SAP marketplace: Keys & Requests -> License Keys -> Click on the relevant installation
    number

3) Click on the "Change details" icon for system that required license renewal.

4) Click "Continue"

5) Select the Certificate that required renewal and click "Change selected entry".

6) Click "Save"

7) Once the "Valid Until" shown the new date, click "Continue".

8) Enter the email address to receive the certificate and click "Submit".

9) Click "OK".

10) Request is being process ...

11) Wait for the email from SAP containing the new certificate details

12) Sample content of the new certificate.

C) Steps to perform the renewal at OS level

1) Example of insufficient permission to perform license renewal from SAP GUI

2) By using WINSCP or FTP, transfer the certificate received into the "prdadm" folder

3) File transfer successfully.

4) With PUTTY, login to OS level with root permission and perform the steps below:
    With root permission:
    - cd /home/prdadm
    - chmod 777 CERTICATE_FILE (change mode of the file)
    - chown prdadm:sapsys CERTICATE_FILE (change owner for the file)
    - su - prdadm

5) Execute the command highlighted below with prdadm

    With prdadm permission

    - cdpro

    - ls (to get the correct DVEBMGS name)

    - pwd (to get the correct path name)

    - ls (to get the copied certificate filename)

    - saplikey pf=path name + "/" + DVEBMGS name -install certificate filename

6) Once license installed successfully, the warning message no longer appear

D) Troubleshooting

1) Error: Insufficient permission when performing the license installation.

     Solution: Ensure change mode and change owner be perform prior to the SAP license installation

Introduction and how to configure SAP Web GUI

To eliminate the extensive support of SAP GUI maintenance and upgrade on user PCs, the SAP Web GUI would provide an alternative solution to avoid all the support hassle and attractive benefit of zero installation.

A) Introduction on the SAP GUI family:

1) Web / HTML GUI: 

Pro: 

- Suitable for users who work with SAP transactions but don't require the performance of a native GUI

- Runs within standard browsers on Windows, Linux, MacOSX, iPad or Android browsers.

Cons: 

- Not getting the performance of an natively running software

- User may encounter usability limitations that caused by the browser framework

- Requires ITS in your SAP landscape to render pages

2) Windows / Java GUI: 

Pro: 

- native high performance

Cons:

- Requires local installation of the solution.

- Requires Java Plug-In on the client side (Java GUI)

- Have to worry about the software installations, upgrades, etc

B) Steps to setup the SAP WEB GUI

1) Verify the ICM configuration parameters. Execute TCODE: SMICM

2) Click "Goto" -> "Parameters" -> "Display"

3) Ensure the parameter: icm/server_port_0 = HTTP,PORT=<Desired port ex:8000>, ........

4)  Ensure the parameter: icm/host_name_full = <Full Qualified Domain Name/FQN>

4) Execute TCODE: SICF, click the "execute" button

5) Select the following node and active the services:
- /default_host/sap/bc/gui/sap/its/webgui
- /default_host/sap/public/bc/ur
- /default_host/sap/public/bc/its/mimes

Right click the selected node and click "Activate Service"

6) Click "Yes"

7) Execute TCODE: SIAC_PUBLISH_ALL_INTERNAL (wait few minutes to activate the publishing services)

 8) The progress will be shown in the status bar

9) Once the progress complete, a information screen will be shown.

10) Login with one of the following URL from the web browser
- http://<IP>:8000/sap/bc/gui/sap/its/webgui
- http://<FQN>:8000/sap/bc/gui/sap/its/webgui

 11) The login splash screen

 12) The SAP Web GUI main menu

13) Sample login screen with iPad

C) Troubleshoot:

1) Problem: The required icm parameters not found

    Solution: Execute TCODE: RZ10 to add the parameter to the profile 

2) Problem: How to check the FQN 

    Solution: View the "C:\Windows\System32\Drivers\etc\hosts" file 

                  (depends on windows configuration, some might not be available and could be added manually)

3) Problem: Error "Session not found" when executing TCODE in SAP Web GUI after login

Solution: Execute TCODE: SICF_SESSIONS and select the client to be access by Web GUI

Double click the state to activate it and retry the login again.

4) Problem: How to ensure the Web login connection details

    Solution: By using the sapmmc (windows), select the connections icon under the ICM for more details

D) Conclusion 

That all for the configuration and in the end, it's all depends on the environment and on the type of users whether to use pure native GUI or Web GUI or even mixture of it.