Microsoft Exchange Relaying feature

While configuring SAP Connect with Microsoft Exchange server, SAP could send the mails to internal email addresses but couldn't send to email addresses out of domain. This is because of Exchange relay feature (quoting)
http://technet.microsoft.com/en-us/library/dd277329.aspx
"To allow specified IP addresses—internal or external—to relay, check the "Hosts and clients with these IP addresses" checkbox, then use the Add, Edit, and Remove buttons to build the list of IP addresses from which you want to accept relay traffic. Remember that this checkbox controls relaying when you have selected the radio dial for "Reroute incoming SMTP ..." in the Routing tab. You should normally check this box; doing so will prevent relaying. If you leave it unchecked, your server is open for relay."

But the confusion remained from normal IP address 192.168.1.x we can send mail to outofdomain email addresses but why not from SAP servers (because they are on 192.168.213.x IP range ) :-)

If the administrator wants he may allow the same (192.168.213.x) as well to relay to outofdomain email addresses.

We were getting (Value is obsolete) in Operating System MTE in RZ20. We followed the below link :
http://help.sap.com/saphelp_nw04/helpdata/EN/28/58b3d95bcea54d81e76b2ec122c564/content.htm
You can also reset the method status by selecting the corresponding MTE, choosing Display Details (), and, on the following screen, choosing Edit ® Method Status ® Reset ® Select Data Collection Method and it resolved the same.

5 steps to configure HADR on db2

Here is all the setup required for HADR on one slide. Note the steps are quite simple.
Backup database on primary
Restore database on secondary
Set config parms (which are all pretty straight forward, hostname, port to listen on, remote instance name)
Start standby
Start primary
That’s it!

SAP may remain up during offline database backup

Within an SAP environment, the SAP system may remain up and running during an offline backup to preserve the buffers of the SAP application servers. All SAP work processes are disconnected from the database and remain in a reconnect state during the offline backup. After the backup has been finished, the work processes reconnect to the database using the reconnect feature of the SAP Database Support Layer (DBSL). - DB2 UDB for SAP Guide

Learnings from Remote Client Copy

1. Take offline backup just before the activity and switch off the archive logs otherwise, they will pile up and fill up the filesystem.
2. Execute the Test run before actual activity but it may not give practical results, in our scenario test run gave 2 hours but actually it took 12 hours for the copy to complete.
3. Lock users both in Target System and Source System, otherwise inconsistencies specially in number ranges may occur.
4. Take offline backup after Copy and don't forget to switch on archive logs before releasing the sytem for use.

SAPCPIC user don't lock only change the password

SAPCPIC has the default password as (ADMIN), if you don't change the same your Early Watch Alert report will show red under User Authorizations. Follow SAP note 29276 to change the password only, don't lock the same.
Run report RSUSR003 to know what users are with standard passwords.

SAP Note 19574 Regarding Number Range in Client Copy

Amazing SAP Note clears concept of Number ranges during client copy:

St02 Call Statistics Hit Ratio

Yesterday we did a test run of client copy from PRD to DEV client. It took 2 hours during peak load. Today I checked the buffer it is showing hit ration 51% in call statistics the
"Select" is showing only 4-5% hit ration in both PRD and DEV instance.

The above is more or less in both PRD and DEV servers, then I read one blog and it said :
"Transport activity triggers flushing of SAP buffer. Hence it is always advisable to do transport in the least loaded segment of a day." -

http://soumen.wordpress.com/performance-tuning-of-sap-another-experiance/5-st02-another-magic-transaction-for-sap-tuners-ii/

After above scenario, we should take care even test run should be scheduled after peak hours. Any other suggestions on tuning are welcome.

SAP MC utility allows you to start / stop sap from browser

From Netweaver Release 7.0 onwards, you may start and stop SAP intance from browser itself using the port http://hostname:5$$13 where $$ is the instance number. Amazing utility, even for UNIX also you can do the same. For more information, follow the below link:
http://help.sap.com/saphelp_nwpi711/helpdata/en/48/217444c3a34e6fe10000000a42189c/content.htm

Spool Request deleted immediately after printing

In the given scenario when we need to preserve the spool request even after printing, (in our scenario the spool is to be converted to pdf using zsmart program), we need to make sure that the "Delete after output " option in User profile (SU01) -> Defaults tab is unchecked, other wise it may delete the request immediately.
Follow below links for further information :
http://sap.ittoolbox.com/groups/technical-functional/sap-basis/spool-request-gets-deleted-automatically-2065750

How to check process and memory status in AIX

During monitoring we check the processes in SAP SM50 but if the SAP system is running for a long time, ST06 may show the RAM is reducing even though the system load is less. This results in less availability of RAM for other processes.

We need to trace the process that is consuming considerable amount of RAM. In AIX us the following command :
ps aux more
General view can be optained by command :
topas
Vitual memory state can be known by :
vmstat 01
For more information follow the below threads:
http://www.unix.com/aix/91057-process-consuming-most-memory.html
http://unix.ittoolbox.com/groups/technical-functional/ibm-aix-l/command-to-find-top-5-memory-consuming-process-2742917

Config Tool Usage

You can only use the Config Tool to change parameters if all
instances of a SAP NetWeaver AS Java are stopped.

How to know who imported the Transport Request

From the STMS, go to Import history Goto -> import history. Then in personal settings of import history (Extras -> Personal Settings) , uncheck the "Hide Expert Fuctions" . This will bring you more options in menu. Then in Edit tab, you will be able to see "Display more" which will show the user who imported the request in "user" column.

For details follow the below link :

https://forums.sdn.sap.com/message.jspa?messageID=6606054

EP key pair certificate expires after 2 years of installation

When EP is installed it comes with the initial certificate for 2 years. You need to generate a new certificate so there is “Seamless SSO in spite of certification expiration “. Please follow the blog by Karsten Geiseler on SDN.
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417400)ID0877570550DB01449507420568747014End?blog=/pub/wlg/4417

You may also follow the pdf
http://www.scribd.com/doc/6558598/Seamless-SSO-in-Spite-of-Certificate-Expiration

How to create certificate for your local system and get it certified from CA
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417800)ID1328630650DB00590205151273352352End?blog=/pub/wlg/15747

Developers must not work on PRD system.

Referring SAP Documentation

"Also, taking into consideration security factors (and perhaps performance aspects, if the developers have to debug programs), developers must not work on production system."

DB2 License Issue

In DB2 , the SAP OEM license has to be applied after 90 days. If you don't apply then the database won't start. The procedure is different from Oracle as you need to log into the DB2 CLP to apply the license. Please find below the procedure:

1. Login as db2sol
2.Go to Start -> All Programs ->IBM DB2 -> SAPDB2SOL -> Command Line Tools -> Command Window
3. Now apply license here as per SAP Note 816773.Even with db2cmd we were not getting the actual license status.
Actually we raised OSS and logged it on SDN as well. For the same we also opened WTS connection. For more information, please refer the below SDN link:
https://forums.sdn.sap.com/thread.jspa?messageID=8124383&#8124383

Total number of SAP transaction per day

There was a requirement from customer, if there is any way we can find out what is the total number of SAP transactions in any module in SAP. I raised the OSS, pl find below the reply:
Question :
"Is it possible to get the number of transacions done in SAP Finance per day?
We want to know how many transactions relating to FI are done in a day. "

Answer:
"There is no standard program that could record the transactions done during a day in any module."
-SAP Active Global Support

SSCR Registration : Check Advance Correction in case of SAP Notes

If you are registering SSCR keys for SAP Standard object mentioned in SAP Note then check Advance Correction checkbox, as it will tell SAP that this is due to SAP Note only, otherwise SAP warranty is invalidated.

Remote support SAPOSS - Connection Type WTS

There is more popular procedure known as R/3 support wherein the SAP support remotely connects to the customer throught SAPGUI but if the SAP server is down then WTS (Windows Terminal Server) connections needs to be opened.
How to :
SAP Note : 605795

Points to remember :
1. Please maintain the following line in the SAProuttab:
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" (IP-Address) 3389
PLEASE NOTE!!!!The "*" is a wildcard for all ports within 3200 and 3299. All otherports must be specified with their own lines.
When you make changes to saprouttab please run "saprouter -n" toreload the new saprouttab. You may also restart the router.

2. The connection needs to be re-established again from scratch (the SAProuter should come to disconnect state), otherwise, you may get error like :
route permission denied sapserv2 to (IP address of machine), (Port Number) Location: SapRouter on hostname(of machine where saprouter is running)
The above error can also come if the host entry is not maintained in saprouttab file as given above.

Reset Host Name Buffer : SM59 not working

Sometimes SM59 RFC connection doesn't work after change of IP address of server. Go to SM51 -> Goto -> Hostname Buffer -> Reset .

It may work fine after that .

Reference : https://forums.sdn.sap.com/message.jspa?messageID=5838310

Activation of ITS integrated in ECC 6.0 server

Prior to ECC 6.0, you need to install stand alone ITS server for accessing SAP GUI screens in Web Browser ( HTML based GUI), Now we can activate integrated ITS server in ECC 6.0 with the following steps:

1. Check whether the integrated ITS is active.
a) Check that profile parameter itsp/enable is set to 1, either by:
. Executing report RSPFPAR
. Executing report SITSPMON
. Calling transaction RZ11
Note that all of these approaches are instance-specific.

2. Verify that the ICF service /sap/bc/gui/sap/its/webgui is active and intended for
calling the GUI.
Verify that the ICF service /sap/public/bc/its/mimes is active and that Not
Specified is entered for the GUI link.
a) Call the Maintain Services transaction SICF. Accept the default values
and choose Execute.
b) Navigate to the service /sap/bc/gui/sap/its/webgui and activate it if
necessary (click the secondary mouse button and choose Activate Service).
Double-click the service and make sure that the GUI Link field on the
Service Data tab page contains the value Yes.
Navigate to the service /sap/public/bc/its/mimes and activate it if
necessary (click the secondary mouse button and choose Activate Service).
Double-click the service and make sure that the GUI Link field on the
Service Data tab page contains the value Not Specified.

3. Start the SAP GUI for HTML from transaction SICF.
Can you start the transaction from the command field?
a) In the hierarchy tree in transaction SICF, click the /sap/bc/gui/sap/its/webgui
node with the secondary mouse button and choose Test Service.
b) Log onto the SAP GUI for HTML Web browser with your ADM102-##
user and password. The system may display warnings about the logon
procedure. If so, choose Log On and enter your details.
Choose the small triangle in the top-left of the screen to display the
command field in which you can enter transaction codes.
Go to transaction code SE80
Choose Internet Service and select the following types
Type SYSTEM (enter)-----Right Click on SYSTEM----Publish-->Complete service
Type WEBGUI (enter)-----Right Click on WEBGUI----Publish-->Complete service
Check whether the its is enabled or not through testing in the following node
Navigate to /sap/bc/gui/sap/its/webgui
Right Click webgui and select Test Service option
If ITS is enabled then it should allow you to login via browser.

Standard Roles for Support activities by OSS

Now, there is no need to assign SAP_ALL to OSS user as SAP has come up with Standard Roles for OSS support professionals performing remote services to clients. This is to bridge security and practicality. SAP Note 1154550 - Standard roles for support activities.
Excerpt from the SAP Note :

Summary
Symptom
In many cases, processing customer messages involves the analysis of the
problem directly in the customer system. For this, users with sufficient
authorization must be provided. However, authorization scope defined
(exactly) for the task is seldom possible because you cannot foresee each
individual process step at the start of the support task.
Most customers solve the problem pragmatically by assigning extended
authorizations up to SAP_ALL. This prevents inconvenient processing delays
due to authorization errors and queries, but also risks unintentional data
changes by the SAP employee.
However, a small group of very security-oriented customers behaves in a
restricted manner and demands a detailed reason for the assignment of each
authorization. The disadvantage of this practice is a massive increase in
processing time.

Cause and Prerequisites
There is no suitable authorization concept to perform support tasks.

SAP Certification (Technology) Roadmap

References :
Home Page
http://www1.sap.com/services/education/certification/index.epx

Curriculum: Technology Associate / Professional - Platform Technology - SAP NetWeaver 7.0

http://www1.sap.com/services/education/certification/curriculum.epx?context=%5b%5bNW_ADM_TC_BASIC%5d%5d%7c

SAP Certified Technology Associate - System Administration (DB2) with SAP NetWeaver 7.0

http://www1.sap.com/services/education/certification/certificationrole.epx?context=%5b%5bROLE_C_TADM56_70%7cG%5d%5d%7c

SAP Certified Tech. Associate - System Admin (Oracle DB) with SAP NW 7.0

http://www1.sap.com/services/education/certification/certificationrole.epx?context=%5b%5bROLE_C_TADM51_70_CER%7cG%5d%5d%7c

SAP Certified Technology Professional - Platform Technology with SAP NetWeaver 7.0

http://www1.sap.com/services/education/certification/certificationrole.epx?context=%5b%5brole_P_ADM_SYS_70_CER%7cG%5d%5d%7c

SAP Certified Technology Professional - Security with SAP NetWeaver 7.0

http://www1.sap.com/services/education/certification/certificationtest.epx?context=%5b%5bP_ADM_SEC_70+%7cG%5d%5d%7c

CIN is in-built in ECC 6.0

CIN is the Indian version for excise tax and earlier it was available as an add-on like CIN40A till R/3 version 46C. Now it is available as part of core i.e. we needn't install any add-on for that. Please follow the SAPNote 532596 for details.

How to free up space on Windows 2008 server

This is a very effective command, we were facing space problem in our Solution Manager Server (64-bit) with 4GB RAM (VMWARE). Free space was only 295 MB but when we turned off the hibernate feature (that most people don't want) it freed up 4GB space. This is the command
powercfg -H OFF
To turn it ON you may use
powercfg -H ON
This doesn't require reboot also. (For screenshots please follow the below links)
http://cameronfuller.spaces.live.com/Blog/cns!A231E4EB0417CB76!1991.entry
http://www.pcwindowstips.com/2007/09/02/how-to-turn-hibernate-on-or-off-in-windows-vista/

List of all User IDs containing Roles

Sometimes you want the list of all SAP user IDs with what roles they contain. Follow the below procedure:
Go to SE16N and export the list from following tables

AGR_USERS for what roles users contain
AGR_1251 for authorization objects
USER_ADDR for addresses stored by users.

SAP_USER Profile doesn't overwrite customizing or application data in Target client.

When copying, you can use copy profiles that simplify selection and combination of the objects to be copied. The customizing and application data is deleted in the target client before copying for all profiles except SAP_USER. This is technically unavoidable.
Links :
http://help.sap.com/saphelp_nw04s/helpdata/en/99/0a2a887e2511d2a6250000e82deaaa/content.htm
The customizing and application data is deleted in the target client before copying for all profiles except SAP_USER.
https://forums.sdn.sap.com/thread.jspa?threadID=1322121
Excerpts from SAP note 24853
: This applies to all data except for the user master data i.e. in the case of a copy with SAP_USER (or SAP_USR) only users and authorization profiles are overwritten.
: User master data is only deleted in the target system if a profile is copied with user master data

Quoting from SAP weblink “BASIS TUTORIAL 3”

http://sites.google.com/site/saparchives/SAP-basis-operation-3---windows
“Also, remember that all client copies are destructive and will delete all data before copying in the new data. The only exception is when the SAP_USER profile is used. In this case, only user master data is deleted from the target client before the new user master data is copied. ***”

Other links :

http://www.saptechies.com/faq-client-copy/

http://help.sap.com/saphelp_sm32/helpdata/en/69/c24c4e4ba111d189750000e8322d00/content.htm

http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCCTSCCO/BCCTSCCO.pdf

Copy TDS script form from 000 client

Copied script form from client 000 to 110 in DEV using T-Code SE71. Actually the customer wanted the form J_1IEWT_CERT to be displayed in 110 client but it said form not available in English. On the same page (SE71) you may go to utilities -> Copy from client and specificy form name, in this scenario J_1IEWT_CERT, Source client 000 and Target form J_1IEWT_CERT , keep the option Flow trace checked. It worked later we transported the same to QAS system.