cancel
Showing results for 
Search instead for 
Did you mean: 

Setting up trusted Systems

Former Member
0 Kudos

Hello SAP friends,

I have an issue setting up a trusting system connection in SMT1 between an CRM (7.02) system and an ECC 6.0 (release 7.02)

In both systems I have users defined RFC_CRM, RFC_ECC having the profiles SAP_ALL, SAP_NEW and  Authorization object S_RFCACL
Authorization object S_RFCACL that has the following settings:

RFC_CLIENT: 100
RFC_USER  :  RFC_CRM, RFC_ECC
RFC_EQUSER: N
RFC_TCODE : *
RFC_INFO  : *
ACTVT     : 16

When testing in SMT2 the status of the trusted systems I get the following authorization error.

No authorization to log on as a Trusted System (L-RC=0 T-RC=2).

Between the 2 Systems CRM - ECC there is an RFC connection which is not set as trusted, but is created for the users RFC_CRM, RFC_ECC. Then also from which in SMT1 I have created a trusted connection to the other system using these RFC connections.

Should users RFC_CRM, RFC_ECC have added extra permisions?

Could you advise what more should be configured?

Thank you!

Accepted Solutions (1)

Accepted Solutions (1)

AtulKumarJain
Active Contributor
0 Kudos

Hi Mihaela,

Please check

https://help.sap.com/saphelp_nw04/helpdata/en/8b/0010519daef443ab06d38d7ade26f4/content.htm

Note 128447 - Trusted/trusting systems

Please ensure trusted RFC should have authorization S_RFCACL and S_RFC .

Best Regards,

Atul

Answers (2)

Answers (2)

Former Member
0 Kudos

Hello,

I have added authorization S_A.SYSTEM and still had errors at tests.

After lots of tests and modifications of values from S_RFCACL I set it as follows for the user with which I was creating in SMT1 the trusted connections:

RFC_CLIENT: 100
RFC_USER  :  ''
RFC_EQUSER: Y
RFC_TCODE : *
RFC_INFO  : *

RFC_SYSID: *
ACTVT     : 16


If I have S1 and S2 and want to create connection from S1 to S2, the user in S2(with whom you connect at creation of trusting relation time) needs to have S_RFCACL as set above.

In S1 you need to have one RFC connection where to specify:

-target host,

-system nr

-(under tab Logon&Security) don;t specify any user&client; Current User not checked, Trust Relationship (NO)

Then from S2 you will be able to test connection into S1 from SMT2.

Thank you for your answers and help!

Best Regards,

Mihaela S

Reagan
Advisor
Advisor
0 Kudos

Try adding the profile S_A.SYSTEM to the user and see if that helps.

I remember once facing this issue and I believe this is the profile I added.

RB