<div dir="ltr">Hi Community,<div><br></div><div>We have a couple of news about this issue. We managed to get a JCO 3.0.16 but unfortunately we are getting the same "<i>ADMINDATA not a member...</i>." error message. What seems to have change is the MSHOST or ASHOST issue, because we are not getting the "<i>MSHOST not found</i>" error even if we have the System ID parameter on the resources configuration.<br></div><div><br></div><div>After that we take a time to understand why the connector needs that parameter and it seems to be used on method <span style="color:rgb(51,51,51);font-family:consolas,"liberation mono",menlo,courier,monospace;font-size:12px;white-space:pre">getSchemaFromBapiFunction </span><span style="color:rgb(51,51,51);white-space:pre"><font face="arial, helvetica, sans-serif">apparently to retrieve</font></span> SAP user schema from the BAPI_USER_GET_DETAIL bapi function. As it's a read only attribute, we tried to remove this field from the array</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font size="1"><br> // these "Paremeter name"-s we can only read (don't have appropirade parameters in BAPI_USER_CHANGE)<br> private static final String[] READ_ONLY_PARAMETERS = {"ISLOCKED", "LASTMODIFIED", "SNC", "ADMINDATA", "IDENTITY"};</font></blockquote><div><br></div><div>And also the "IDENTITY" value which also return us the same error after removing the ADMINDATA value. </div><div><br></div><div>Finally after removing those two values from the array, we got the driver working, or at least the test connection is OK. </div><div><br></div><div>We did some basic testing of an import and sync events and seems to be working properly, nevertheless, as we modified the SAP connector, we are not pretty sure that we will not get any future error because of this change. We will continue our testing.</div><div><br></div><div>Any thoughts on the modifications that we have done to the connector? Any similar experience?<br></div><div><br></div><div>Many thanks!</div><div><br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail-m_-6927673177318544599gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Ing. Santiago R. Benavídez</b><br><font face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum S.A.<br></font><font face="verdana, sans-serif" style="font-size:small"><i><font color="#666666">Jorge Newbery 3226, Argentina<br>Tel: +54 (11) </font></i></font><font color="#666666" face="verdana, sans-serif" style="font-size:small"><i>4552.3050 (int. 107)</i></font><font face="verdana, sans-serif"><br></font><div><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a></font></i><br>
<a href="http://www.identicum.com/" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Thu, Jan 26, 2017 at 12:10 PM, Santiago Benavidez <span dir="ltr"><<a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Gustav,<div><br></div><div>Thanks for your reply! We've been researching the threats you mention and also we try decompiling the JCO in order to understand how it's done and we found that if the System ID is not specified, then the JCO requires the ASHOST parameter to establish the connection, but if it's specified, then the expected parameter is MSHOST.</div><div><br></div><div>If we set the System ID on the resource configuration parameters, we get the "Parameter message server host ('mshost') is missing" because the SAP Connector is hardcoded to set the ASHOST parameter always, but if keep the System ID field empty, we get the following error from the log:</div><font size="1"><br>2017-01-26 10:48:01,303 [] [http-nio-8080-exec-4] ERROR (com.evolveum.midpoint.provisi<wbr>oning.ucf.impl.IcfUtil): ICF Exception org.identityconnectors.framewo<wbr>rk.common.exceptions.Connector<wbr>IOException in connector:45a7ea01-69aa-422b-a<wbr>dae-61682c5809f3(ICF com.evolveum.polygon.connector<wbr>.sap.SapConnector v1.0.1.0-SNAPSHOT): resource:e307a460-2310-4f18-96<wbr>44-6534d62fa999(SAP): Error when parse user schema from SAP: com.sap.conn.jco.JCoRuntimeExc<wbr>eption: (127) JCO_ERROR_FIELD_NOT_FOUND : Field ADMINDATA not a member of OUTPUT<br>org.identityconnectors.framewo<wbr>rk.common.exceptions.Connector<wbr>IOException: Error when parse user schema from SAP: com.sap.conn.jco.JCoRuntimeExc<wbr>eption: (127) JCO_ERROR_FIELD_NOT_FOUND : Field ADMINDATA not a member of OUTPUT<br> at com.evolveum.polygon.connector<wbr>.sap.SapConnector.buildAccount<wbr>ObjectClass(SapConnector.java:<wbr>295) ~[na:na]<br> at com.evolveum.polygon.connector<wbr>.sap.SapConnector.schema(<wbr>SapConnector.java:278) ~[na:na]<br> at com.evolveum.polygon.connector<wbr>.sap.SapConnector.init(<wbr>SapConnector.java:191) ~[na:na]<br> at org.identityconnectors.framewo<wbr>rk.impl.api.local.operations.C<wbr>onnectorAPIOperationRunnerProx<wbr>y.invoke(ConnectorAPIOperation<wbr>RunnerProxy.java:94) ~[connector-framework-internal<wbr>-1.4.2.18.jar:na]</font><div><br></div><div>When we check the SAP connector logic, the ADMINDATA field is not set, it's a read only attribute and seems that is not returned from SAP across the connection process.<br></div><div>As we are using a SAP ABAP Netweaver 7.01, do you know if there could be any restriction or limitation on our SAP environment? Perhaps the SAP Connector only works for Java Netweaver instances, for example.</div><div><br></div><div>Many thanks!</div><div><div class="gmail_extra"><span><br clear="all"><div><div class="gmail-m_-6927673177318544599m_1866782660248135286gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Ing. Santiago R. Benavídez</b><br><font face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum S.A.<br></font><font face="verdana, sans-serif" style="font-size:small"><i><font color="#666666">Jorge Newbery 3226, Argentina<br>Tel: +54 (11) </font></i></font><font color="#666666" face="verdana, sans-serif" style="font-size:small"><i>4552.3050 (int. 107)</i></font><font face="verdana, sans-serif"><br></font><div><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a></font></i><br>
<a href="http://www.identicum.com/" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
<br></span><div><div class="gmail-m_-6927673177318544599h5"><div class="gmail_quote">On Wed, Jan 25, 2017 at 3:19 AM, Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@evolveum.com" target="_blank">gustav.palos@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Santiago,<div><br></div><div>this looks like as SAP side configuration problem, I found only this on the internet:</div><div><a href="https://archive.sap.com/discussions/thread/3151604" target="_blank">https://archive.sap.com/discus<wbr>sions/thread/3151604</a><br></div><div>"<span style="color:rgb(68,68,68);font-family:bentonsans,helvetica,arial,sans-serif;font-size:14px">the issue caused by an empty entry in SM59 under TCP/IP</span>" ...</div><div><br></div><div>maybe you can found more info in SAP not public docs.</div><div><br></div><div>Best regards,</div><div><br></div><div>Gustav</div><div><br><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="gmail-m_-6927673177318544599m_1866782660248135286h5">2017-01-24 23:13 GMT+01:00 Santiago Benavidez <span dir="ltr"><<a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-m_-6927673177318544599m_1866782660248135286h5"><div dir="ltr">Hi community,<div><br></div><div>We are trying to do some tests with the SAP resource version 1.0.1.0-SNAPSHOT on a Midpoint 3.5-SNAPSHOT environment and when we try to test the connection between Midpoint and our SAP environment we get the following error:</div><div><br></div><font size="1">Caused by: com.sap.conn.jco.JCoException: Configuration of destination 2 is incomplete: Parameter message server host ('mshost') is missing<br> at com.sap.conn.jco.rt.Middleware<wbr>JavaRfc$JavaRfcClient.connect(<wbr>MiddlewareJavaRfc.java:1359) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.ClientConn<wbr>ection.connect(ClientConnectio<wbr>n.java:721) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.PoolingFac<wbr>tory.init(PoolingFactory.java:<wbr>103) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Connection<wbr>Manager.createFactory(Connecti<wbr>onManager.java:293) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.DefaultCon<wbr>nectionManager.createFactory(D<wbr>efaultConnectionManager.java:4<wbr>6) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Connection<wbr>Manager.getFactory(ConnectionM<wbr>anager.java:262) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.RfcDestina<wbr>tion.initialize(RfcDestination<wbr>.java:509) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.RfcDestina<wbr>tion.ping(RfcDestination.java:<wbr>780) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.evolveum.polygon.connector<wbr>.sap.SapConnector.init(SapConn<wbr>ector.java:183) ~[na:na]<br> ... 118 common frames omitted<br>Caused by: com.sap.conn.rfc.exceptions.Rf<wbr>cException: Parameter message server host ('mshost') is missing<br> at com.sap.conn.rfc.api.RfcOption<wbr>s.checkParameters(RfcOptions.j<wbr>ava:299) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.rfc.api.RfcApi.Rf<wbr>cOpen(RfcApi.java:78) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> at com.sap.conn.jco.rt.Middleware<wbr>JavaRfc$JavaRfcClient.connect(<wbr>MiddlewareJavaRfc.java:1329) ~[sapjco3.jar:20100905 1938 [3.0.6 (2010-08-24)]]<br> ... 126 common frames omitted</font><div><br></div><div>We are running SAP Netweaver 7.01 ABAP Trial Version with a JCO 3.0.6. According to the documentation, it's tested with a JCO 3.0.13, but unfortunately we don't have the required permissions to download it from SAP. Do you guys know if this works with previous versions of the JCO, like the 3.0.6?</div><div><br></div><div>Thanks in advance,</div><div><br clear="all"><div><div class="gmail-m_-6927673177318544599m_1866782660248135286m_-2974197234593409176gmail-m_-1639183590868326840gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Ing. Santiago R. Benavídez</b><br><font face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum S.A.<br></font><font face="verdana, sans-serif" style="font-size:small"><i><font color="#666666">Jorge Newbery 3226, Argentina<br>Tel: +54 (11) </font></i></font><font color="#666666" face="verdana, sans-serif" style="font-size:small"><i>4552.3050 (int. 107)</i></font><font face="verdana, sans-serif"><br></font><div><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:sbenavidez@identicum.com" target="_blank">sbenavidez@identicum.com</a></font></i><br>
<a href="http://www.identicum.com/" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><span class="gmail-m_-6927673177318544599m_1866782660248135286HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="gmail-m_-6927673177318544599m_1866782660248135286m_-2974197234593409176gmail_signature"><div dir="ltr"><div>Gustáv Pálos</div><div>Identity Engineer</div><a href="http://evolveum.com/" rel="noreferrer" style="color:rgb(17,85,204);font-size:12.8px" target="_blank">evolveum.com</a><br></div></div>
</font></span></div></div></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div></div></div></div>
</blockquote></div><br></div></div>