<div dir="ltr">Hi Gustav,<div><br></div><div>Thanks for your reply! We've been researching the threats you mention and also we try decompiling the JCO in order to understand how it's done and we found that if the System ID is not specified, then the JCO requires the ASHOST parameter to establish the connection, but if it's specified, then the expected parameter is MSHOST.</div><div><br></div><div>If we set the System ID on the resource configuration parameters, we get the "Parameter message server host ('mshost') is missing" because the SAP Connector is hardcoded to set the ASHOST parameter always, but if keep the System ID field empty, we get the following error from the log:</div><font size="1"><br>2017-01-26 10:48:01,303 [] [http-nio-8080-exec-4] ERROR (com.evolveum.midpoint.provisioning.ucf.impl.IcfUtil): ICF Exception org.identityconnectors.framework.common.exceptions.ConnectorIOException in connector:45a7ea01-69aa-422b-adae-61682c5809f3(ICF com.evolveum.polygon.connector.sap.SapConnector v1.0.1.0-SNAPSHOT): resource:e307a460-2310-4f18-9644-6534d62fa999(SAP): Error when parse user schema from SAP: com.sap.conn.jco.JCoRuntimeException: (127) JCO_ERROR_FIELD_NOT_FOUND : Field ADMINDATA not a member of OUTPUT<br>org.identityconnectors.framework.common.exceptions.ConnectorIOException: Error when parse user schema from SAP: com.sap.conn.jco.JCoRuntimeException: (127) JCO_ERROR_FIELD_NOT_FOUND : Field ADMINDATA not a member of OUTPUT<br> at com.evolveum.polygon.connector.sap.SapConnector.buildAccountObjectClass(SapConnector.java:295) ~[na:na]<br> at com.evolveum.polygon.connector.sap.SapConnector.schema(SapConnector.java:278) ~[na:na]<br> at com.evolveum.polygon.connector.sap.SapConnector.init(SapConnector.java:191) ~[na:na]<br> at org.identityconnectors.framework.impl.api.local.operations.ConnectorAPIOperationRunnerProxy.invoke(ConnectorAPIOperationRunnerProxy.java:94) ~[connector-framework-internal-1.4.2.18.jar:na]</font><div><br></div><div>When we check the SAP connector logic, the ADMINDATA field is not set, it's a read only attribute and seems that is not returned from SAP across the connection process.<br></div><div>As we are using a SAP ABAP Netweaver 7.01, do you know if there could be any restriction or limitation on our SAP environment? Perhaps the SAP Connector only works for Java Netweaver instances, for example.</div><div><br></div><div>Many thanks!</div><div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Ing. Santiago R. Benavídez</b><br><font face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum S.A.<br></font><font face="verdana, sans-serif" style="font-size:small"><i><font color="#666666">Jorge Newbery 3226, Argentina<br>Tel: +54 (11) </font></i></font><font color="#666666" face="verdana, sans-serif" style="font-size:small"><i>4552.3050 (int. 107)</i></font><font face="verdana, sans-serif"><br></font><div><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a></font></i><br>
<a href="http://www.identicum.com/" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Wed, Jan 25, 2017 at 3:19 AM, Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@evolveum.com" target="_blank">gustav.palos@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Santiago,<div><br></div><div>this looks like as SAP side configuration problem, I found only this on the internet:</div><div><a href="https://archive.sap.com/discussions/thread/3151604" target="_blank">https://archive.sap.com/<wbr>discussions/thread/3151604</a><br></div><div>"<span style="color:rgb(68,68,68);font-family:bentonsans,helvetica,arial,sans-serif;font-size:14px">the issue caused by an empty entry in SM59 under TCP/IP</span>" ...</div><div><br></div><div>maybe you can found more info in SAP not public docs.</div><div><br></div><div>Best regards,</div><div><br></div><div>Gustav</div><div><br><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">2017-01-24 23:13 GMT+01:00 Santiago Benavidez <span dir="ltr"><<a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi community,<div><br></div><div>We are trying to do some tests with the SAP resource version 1.0.1.0-SNAPSHOT on a Midpoint 3.5-SNAPSHOT environment and when we try to test the connection between Midpoint and our SAP environment we get the following error:</div><div><br></div><font size="1">Caused by: com.sap.conn.jco.JCoException: Configuration of destination 2 is incomplete: Parameter message server host ('mshost') is missing<br> at com.sap.conn.jco.rt.Middleware<wbr>JavaRfc$JavaRfcClient.connect(<wbr>MiddlewareJavaRfc.java:1359) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.ClientConn<wbr>ection.connect(ClientConnectio<wbr>n.java:721) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.PoolingFac<wbr>tory.init(PoolingFactory.java:<wbr>103) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Connection<wbr>Manager.createFactory(Connecti<wbr>onManager.java:293) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.DefaultCon<wbr>nectionManager.createFactory(D<wbr>efaultConnectionManager.java:4<wbr>6) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Connection<wbr>Manager.getFactory(ConnectionM<wbr>anager.java:262) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.RfcDestina<wbr>tion.initialize(RfcDestination<wbr>.java:509) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.RfcDestina<wbr>tion.ping(RfcDestination.java:<wbr>780) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.evolveum.polygon.connector<wbr>.sap.SapConnector.init(<wbr>SapConnector.java:183) ~[na:na]<br> ... 118 common frames omitted<br>Caused by: com.sap.conn.rfc.exceptions.Rf<wbr>cException: Parameter message server host ('mshost') is missing<br> at com.sap.conn.rfc.api.RfcOption<wbr>s.checkParameters(RfcOptions.<wbr>java:299) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.rfc.api.RfcApi.Rf<wbr>cOpen(RfcApi.java:78) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Middleware<wbr>JavaRfc$JavaRfcClient.connect(<wbr>MiddlewareJavaRfc.java:1329) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> ... 126 common frames omitted</font><div><br></div><div>We are running SAP Netweaver 7.01 ABAP Trial Version with a JCO 3.0.6. According to the documentation, it's tested with a JCO 3.0.13, but unfortunately we don't have the required permissions to download it from SAP. Do you guys know if this works with previous versions of the JCO, like the 3.0.6?</div><div><br></div><div>Thanks in advance,</div><div><br clear="all"><div><div class="m_-2974197234593409176gmail-m_-1639183590868326840gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Ing. Santiago R. Benavídez</b><br><font face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum S.A.<br></font><font face="verdana, sans-serif" style="font-size:small"><i><font color="#666666">Jorge Newbery 3226, Argentina<br>Tel: +54 (11) </font></i></font><font color="#666666" face="verdana, sans-serif" style="font-size:small"><i>4552.3050 (int. 107)</i></font><font face="verdana, sans-serif"><br></font><div><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a></font></i><br>
<a href="http://www.identicum.com/" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="m_-2974197234593409176gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Gustáv Pálos</div><div>Identity Engineer</div><a href="http://evolveum.com/" rel="noreferrer" style="color:rgb(17,85,204);font-size:12.8px" target="_blank">evolveum.com</a><br></div></div>
</font></span></div></div></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div></div>