Skip to Content
Author's profile photo Sunny Pahuja

ADS Configuration in Netweaver 7.3

Let’s Begin- There are 2 types of ADS Configuration-

1) Basic Authentication

2) SSL Authentication.

Here, I am discussing ADS Configuration using Basic Authentication for interactive Adobe Forms.

Prerequisites

1) SAP Netweaver 7.3 As Java System (ADS should be installed).

2) SAP Business Suite 7 System

Profile Parameters

1) Profile Parameter SAPFQDN should be set in both As Java and As ABAP system.

Process


AS Java (Netweaver 7.3)

1) If UME is on As Java

a) Create ADSUSER as a Technical User in Identity management if it does not exist.

b) Create ADSCALLERS group in Identity Management.

c) Assign UME Role SAP_ADSCALLER (You need to assign this role only to users who need to access ADS). In my case, I assigned this role to the ADSCALLERS group in identity management.

d) Assign ADSCALLERS group to ADSUSER in identitiy management.

2) If UME of As Java is running on As ABAP system

a) Create ADSUSER in As ABAP.

b) Create ADSCALLERS role in PFCG and don’t assign any authorization to it.

c) Assign ADSCALLERS role to ADSUSER.

d) Go to Identity Management of As Java, there search for role SAP_ADSCALLER and add user ADSUSER to it. Go to assigned Action Tab and search for adobe in available actions and add action AdobeDocumentServicesADSCaller to role and save it.

3) Go to SAP netweaver administrator (http://<server>:<port>/nwa).

Then Go to SOA. Under SOA, go to Technical Configuration –> Destination Template Management


SOA

Choose Create New Destination

Choose Destination Type as WSIL and enter Destination name as ConfigPort_Document

Enter URL as below:

http://<server>:<port>/inspection.wsil

Enter System name: <SID of As Java> and hostname: <hostname of As Java>

On next screen, Choose Authentication as HTTP Authentication and Select User ID/Password (Basic). Enter ADSUSER and password as shown below:

Then click on finish. Now, destination ConfigPort_Document will be created.


Note: If you are configuring Interactive Adobe Forms then first request SAP to provide Adobe Interactive form credentials and *.pfx file which you need to configure Reader Right credentials. In order to obtain Reader Right credentials then please follow SAP note 736902.


4) In order to install Reader Right credentials, go to nwa (http://<server>:<port>/nwa).

Go to Configuration –> Infrastructure –> Adobe Document Services

Choose Document Security and then select Credentials.

Click on Manage P12 Files. A Pop-up will be open where you need to provide path of *.pfx file that you got from SAP.

Choose Upload. Now, your *.pfx file will be uploaded.

Click on Add New Object and a pop-up will be opened.

In Alias,Select Reader Rights

Type should be P12.

P12 File should be automatically filled as we have already uploaded the file in previous step.

Enter Password for P12 file.

Save this record.

5) Restart the service Document Service Trust Manager Service and then the service PDF Manipulation Module for the changes to take effect.

In order to restart the service, go to Operations –> Systems –> Start & Stop.


Open Java Services Tab. In order to obtain list of services for ADS, filter the Service component Name column by Adobe. Restart the service.

6) Create Destination FP_ICF_DATA_<SID of As ABAP> in SOA.

Go to nwa (http://<server>:<port>/nwa)

Go to SOA –> Technical Configuration

Select Destinations

Click on Create.

Enter Destination Name as FP_ICF_DATA_<SID of As ABAP>

Select Destination Type as HTTP. Click Next.

Enter URL of As ABAP system (http://<server>:<port>) e.g. http://abc.com:8000

Enter System ID and Client of As ABAP system.

On Next screen, Select Authentication as Basic.

Enter User as ads_agent and its password.

Click on Finish.

By this way, configuration of ADS on As Java side is complete.

As ABAP


Login to As ABAP system.


1) Create user ADSUSER as a system User in transaction SU01.

2) Create user ADS_AGENT as a system user in transaction SU01 and assign roles SAP_BC_FP_ICF, SAP_BC_FPADS_ICF & SAP_BC_JSF_COMMUNICATION.

Note: Either assignstandard roles or make a copy of this role to Z roles. If you are assigning standard roles then make sure that profile of these roles should be generated.


3) Create role ADSCALLERS in PFCG and assign user ADSUSER to it.

4) Go to t-code SM59 and create ADS RFC as Type G.

a) In Target System settings, enter target host name and Service no. of your As Java systems.

b) In Path Prefix, enter- /AdobeDocumentServices/Config?style=rpc

c) In Logon & Security tab, select Basic Authentication. Then, enter user adsuser and its password.

Save the RFC.

5) Go to SICF and activate below services

/default_host/sap/bc/fp

/default_host/sap/bc/fpads

By this way configuration of ADS is completed.

If you face any problem during ADS configuration or during testing, Please check below SAP notes:

944221- Troubleshooting if problems occur in forms processing

915399- com.adobe.ProcessingError File not found on URL Location

Link to help.sap.com for ADS Configuration-

http://help.sap.com/SAPhelp_nw73/helpdata/en/a8/fe362be64d4e3784e951e482a6eaff/content.htm?frameset=/en/69/a633254b6e47e6aa379e68e36eb66d/frameset.htm

Assigned tags

      28 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Juan Reyes
      Juan Reyes
      Hi Sunny,

      Nice strait to the point technical blog. Don't be afraid to throw a joke or two next time 😀

      Best Regards
      Juan

      Author's profile photo Nicholas Chang
      Nicholas Chang
      Hi Sunny,

      Thanks for sharing and i'm sure it'll be helpful to many sapadmin when the times come.

      Thanks,
      Nicholas Chang

      Author's profile photo Former Member
      Former Member

      Hi Sunny,

      Thanks for providing ads configurtaion steps.

      Is there any standard docuemnt that you followed for configuring the ads setup in NW 7.3. I could not find any ADS document available in market palce on latest version.

      Can you please provide me the location you have donwloaded the document.

       

      Best Regards,

      Uday

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Hi,

      You can follow ADS config on help.sap.com. Please find below the link:

      http://help.sap.com/saphelp_nw73/helpdata/en/69/a633254b6e47e6aa379e68e36eb66d/frameset.htm

      Thanks

      Sunny

      Author's profile photo Former Member
      Former Member

      Hi Sunny,

      Thanks for sharing the link,I am at step "Setting Up Basic Authentication to ADS in a Java Environment"

      http://help.sap.com/saphelp_nw73/helpdata/en/69/a633254b6e47e6aa379e68e36eb66d/frameset.htm

      As per the help link if UME is JAVA then we need to create WSIL as Destination connection to point to JAVA stack.

      But as per your Blog step H4 you have connected it to ABAP,I think your UME is ABAP?

      In my case UME its JAVA ,so do I still need to create userID in ABAP aswell for commuication?

      Regards

      Uday

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Hi,

      In my case UME was As Java only.  Yes, you need to create user ID in ABAP as well for communication.

      Thanks

      Sunny

      Author's profile photo Former Member
      Former Member

      Hi Sunny,,

      Thanks you,I have setup the way you mentioned.

      After creating FP_ICF_DATA_SID destination when I do a ping destination it fail with "Error during ping operation: Ping not successful! Received HTTP response 404"

      I cross checked the passwords for ADS_AGENT and User in ABAP as well JAVA every thing looks fine

      From ABAP side ADS "G" type connection as well gave me

      Status HTTP Response 405

      Status Text Method Not Allowed

      Duration Test Call 7 ms

      Regards

      Uday

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Hi,

      If you are getting status- Received HTTP response 404. Then it is fine.

      Thanks

      Sunny

      Author's profile photo Former Member
      Former Member

      Hi Sunny,

      Thank you..things are working fine as expected

      Thanks for all your help in fixing the issues.

      I see Connection test ADS (G connection from ABAP)ends up with

      Status HTTP Response 405

      Status Text Method Not Allowed

      Duration Test Call 7 ms

      Regards

      Uday

      Author's profile photo Former Member
      Former Member

      Hello Sunny and Uday,

      So is it OK if we get the following error after testing the connection in ABAP SM59?

      Status HTTP Response: 405
      Status Text: Method Not Allowed

      Error: com.sap.engine.services.webservices.espbase.server.additions.wsa.WSAddressingException: com.sap.SOA.wsr.030104 - Expected request method POST. Found GET.

      Regards,
      Mei

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Hi,

       

      No, Status response should be 404.

       

      Thanks

      Sunny

      Author's profile photo Former Member
      Former Member

      Hi Sunny,

       

      Even my status response is 405 and things are working fine as expected,there is not issue as of now with our ADS

       

      Regards

      Uday

      Author's profile photo Former Member
      Former Member

      Hi Gurus,

       

      My system response is 405. From SA38 I executed FP_TEST_00 - "Opened a PDF Page", FP_PDF_TEST_00 - "Displayed Version number", FP_CHECK_DESTINATION_SERVICE - "6887 bytes transferred". But when I tried print preview from T-Code PC00_M40_EPF - "no job started". Can u suggest what the error exactly is? and how to resolve this.

       

      Regards,

      Srinivas

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Hi,

       

      Are you trying to configure ADS for digital signature ?

       

      Thanks

      Sunny

      Author's profile photo Former Member
      Former Member

      Hi sunny

       

      I have configured ADS to avail print preview for form 12a(HCM). For your question, I dont know about digital signature. Thanks for your blog http://scn.sap.com/people/sunny.pahuja2/blog/2012/01/04/ads-configuration-in-netweaver-73#comment-310160 helped me configure. But now I am facing above problem.

       

      Regards,

      Srinivas

      Author's profile photo Deb Nugent
      Deb Nugent

      Thank-you Sunny. This blog is a very good help on this configuration. However, after following, I am still having a problem with my connections. Everything looks like it should but when I test the ADS connection from my ABAP system, I am getting HTTP 404 errors. This is when I am testing with programs FP_CHECK_DESTINATION_SERVICE and FP_TEST_00. I am getting errors:

       

      SYSTEM ERROR: SOAP Framework error: SOAP Runtime Exception: CSoapExceptionTransport : HTTP receive failed with exception communication_failure  (100,101).

      Exception of class CX_FP_RUNTIME_INTERNAL

       

      I have been searching notes / SCN and have gone through the help files as well but so far, I am still getting this error. This is with basic configuration - no added security.

       

      Has anyone seen anything like this or have any ideas of what I should check / where?

       

      Thanks again,

       

      Deb.

      Author's profile photo Former Member
      Former Member

      Hello  Deb,

       

      Try checking with sicf and smicm.

       

      Regards,

      Srinivas

      Author's profile photo Deb Nugent
      Deb Nugent

      Problem was solved with help from SAP. Ended up the port on the firewall between my systems was blocked. Once port was opened, we were able to connect and everything worked perfectly. Thank-you! Greatly appreciated your help.

       

      Deb.

      Author's profile photo Abhi S
      Abhi S

      Nice blog Suny. I have a question for you. What if UME is connected to LDAP. Where we have to create the ADSUser. Can you help me?

       

      Thanks!

      Abhinav

      Author's profile photo Former Member
      Former Member

      Thank you for this nice tutorial Sunny.

      Author's profile photo Former Member
      Former Member

      Great blog. Thank you Sunny.  Worked like charm. I just had to restart the instance as restarting services did not make the pfx file take effect.

       

      Thanks,

      Raj

      Author's profile photo Sunny Pahuja
      Sunny Pahuja
      Blog Post Author

      Thanks Raj!

       

      Regards,

      Sunny

      Author's profile photo Willi Eimler
      Willi Eimler

      Hi Sunny,

       

      good blog. It helped me. But in my BI system there was one more issue:

       

      TA: SM30 -> RSPOR_T_PORTAL -> Set X to "Use SAP Export Library (PDF)"

       

      Best regars

      Willi Eimler

      Author's profile photo carmen guerrero
      carmen guerrero

      Hi.

       

      The system is showing the following screen:

       

      Error.jpg

       

      I am working with SAP NW 7.4

      Author's profile photo Former Member
      Former Member

      Hi Carmen,

       

      you have to put it the login information for adsuser.

       

      regards

      Martin

      Author's profile photo carmen guerrero
      carmen guerrero

      Hi Martin.


      Our UME is on As Java.

       

      I have updated the password of the user ADSUSER in the Destination Template Management.

       

      1. Question:


      The user adsuser and the password is the created in the ABAP system?


      For this in the portal-->

       

      a) Create ADSUSER as a Technical User in Identity management if it does not exist.

      b) Create ADSCALLERS group in Identity Management.

      c) Assign UME Role SAP_ADSCALLER (You need to assign this role only to users who need to access ADS). In my case, I assigned this role to the ADSCALLERS group in identity management.

      d) Assign ADSCALLERS group to ADSUSER in identitiy management.



      Yo also update in the destination with the user ADS_AGENT


              Create Destination FP_ICF_DATA_<SID of As ABAP> in SOA.

              Go to nwa (http://<server>:<port>/nwa)

            Go to SOA --> Technical Configuration


      For the ERP: As ABAP


      Login to As ABAP system.


      1) Create user ADSUSER as a system User in transaction SU01.

      2) Create user ADS_AGENT as a system user in transaction SU01 and assign roles SAP_BC_FP_ICF, SAP_BC_FPADS_ICF & SAP_BC_JSF_COMMUNICATION.

      3) Create role ADSCALLERS in PFCG and assign user ADSUSER to it.

      4) Go to t-code SM59 and create ADS RFC as Type G.

      a) In Target System settings, enter target host name and Service no. of your As Java systems.

      b) In Path Prefix, enter- /AdobeDocumentServices/Config?style=rpc

      c) In Logon & Security tab, select Basic Authentication. Then, enter user adsuser and its password.

       

      2. Question:

      The user adsuser and the password is the created in the portal.


      Author's profile photo Haron Chege
      Haron Chege

      can you do a ADS configuration on a ABAP Only system without solution manager?

      Author's profile photo Former Member
      Former Member

      I have recorded same steps on following video, hope its useful

      https://youtu.be/SDbvKNJwSHA