some SAP sync. errors after upgrade to version 9.1.1

Dear all

when we start our synchronisation project of authorisatioin object we get some error messages after we upgrade our IAM Version to 9.1.1 like

ErrorMessages (2023-06-07 18:26:24.293) [2134003] Error running synchronization.

[1777018] Error running synchronization project (SAP R/3 authorization objects (W01 - 011))'s workflow (Initial Synchronization).

[1777124] Error running synchronization step (transactionHasTobj) of synchronization configuration (Initial Synchronization (Initial Synchronization)).

[1777009] Error loading system objects of class TRANSACTIONHASTOBJ (all) (TRANSACTIONHASTOBJ_Master).

[SAP.Middleware.Connector.RfcAbapException] NOT_AUTHORIZED

it seems the service account has not enough permission but there is not notification from manufactor ( I don't find them which authorisation has been modified)

or

[1777124] Error running synchronization step (userComSMTP) of synchronization configuration (Initial Synchronization (Initial
Synchronization)).
[1777009] Error loading system objects of class UserComSMTP (all) (UserComSMTP_Master).
[SAP.Middleware.Connector.RfcAbapRuntimeException] Kein Speicher für Erweiterung einer internen Tabelle mehr verfügbar

in other szenarios ( sync projects it works as design but not for SAP Retail R3. A question to the SAP support was not be given...

or

[1777124] Error running synchronization step (usobHash) of synchronization configuration (Initial Sync SAP R/3 authorization objects HRI
- 011 (Initial Synchronization)).
[1777009] Error loading system objects of class USOBHASH (all) (USOBHASH_Master).
[System.Exception] Error executing function call AUTH_TRACE_GET_USOBHASH
[SAP.Middleware.Connector.RfcAbapRuntimeException] Keine RFC-Berechtigung für Funktionsbaustein AUTH_TRACE_GET_USOBHASH.

Here it seems the IAM sync would be read more information about services e.g. Fiori etc. but we are not sure which authorisation the service account realy need.

So please can some one help us out with this 3 error messages?

Many thanks for your support

BR Dierk

Parents
  • Hi Dierk,

    please have a look at technical documentation online, look for "Identity Manager 9.1.1 - Administration Guide for Connecting to SAP R/3"  (https://support.oneidentity.com/de-de/technical-documents/identity-manager/9.1.1/administration-guide-for-connecting-to-sap-r3/2#TOPIC-1993267 ) and dive a bit deeper with "Table 2: Users for synchronization".

    This should solve your first and third issue if you have updated the BAPI inside SAP during your upgrade project.

    The second message is saying the ABAP server cannot handle the amount of rows in the result. Probably you have many old email addresses stored in table "ADR6". You may have a look to your synchronization project, mapping "userComSMTP". This mapping is built on target system type "UserComSMTP (all)". This means all rows of "ADR6" table will be synchronized. You can reduce the amount of synchronized (and selected data) rapidly if you create a new mapping using new target system type "UserComSMTP_CurrentActive". Maybe a reload of target system schema is needed to have this schema type available. This schema type will synchronize the active SMTP addresses only.

    Regards,

      Tino

Reply
  • Hi Dierk,

    please have a look at technical documentation online, look for "Identity Manager 9.1.1 - Administration Guide for Connecting to SAP R/3"  (https://support.oneidentity.com/de-de/technical-documents/identity-manager/9.1.1/administration-guide-for-connecting-to-sap-r3/2#TOPIC-1993267 ) and dive a bit deeper with "Table 2: Users for synchronization".

    This should solve your first and third issue if you have updated the BAPI inside SAP during your upgrade project.

    The second message is saying the ABAP server cannot handle the amount of rows in the result. Probably you have many old email addresses stored in table "ADR6". You may have a look to your synchronization project, mapping "userComSMTP". This mapping is built on target system type "UserComSMTP (all)". This means all rows of "ADR6" table will be synchronized. You can reduce the amount of synchronized (and selected data) rapidly if you create a new mapping using new target system type "UserComSMTP_CurrentActive". Maybe a reload of target system schema is needed to have this schema type available. This schema type will synchronize the active SMTP addresses only.

    Regards,

      Tino

Children