SAP Knowledge Base Article - Preview

1424009 - Tracing the CMS for SAP plugin related information such as viewing adding, and removing mapped users and groups


 secSAPR3 logs information 

  • Enabling the SAP plugin will generate secSAPR3 log files with plugin config info (this is in addition to generating the normal CMS logs). secsapr3 log files can be deleted between updates to get a new clean file without restarting the CMS
  • set default logical system to [T25CLNT800] means T25~800\ is not needed for users logging into this system using client tools
  • SI_IMPORT_USERS = 1  auto import checked =1 not
  • SI_SAP_UPDATE_USERS = 1 force synchronization checked =1 not
  • SI_MAPPED_GROUPS = T25~800@BOE_SYSTEM_ADMINISTRATORS refers to the mapped roles not total roles available. Non mapped roles will not show up in the logs

CMS Tracing Information 

  • CMS tracing will not show users/groups/roles until one is added in the SAP plugin and update is performed. Then the group queries below will show up  
  • The users (in the user query below) did not show up in the CMS trace until the group members were viewed in the CMS > users and group properties
  • 'secsapr3 will proceed every mapped group/role and user and can be used to search for them 
  • A unique search for just groups is available using WHERE Alias = 'secsapr3
  • WHERE Alias IN ('secsapr3 will show groups and users so you have to hit f3 until you pass all group queries (when searching from the beginning of the log).
  • Searching for group name or username can be substituted as well and at least one example of each should be provided when troubleshooting

Group Queries

  • groups will have an @ between the SAP system info and group name

(.\SQLServerStatement.cpp:186) ExecDirect: SQL: SELECT dbo.CMS_Aliases6.ObjectID FROM dbo.CMS_Aliases6 WHERE Alias = 'secsapr3:t25~800@boe_system_administrators' AND AliasIsTruncated = 0

(.\SQLServerStatement.cpp:186) ExecDirect: SQL: SELECT Alias, ObjectID FROM dbo.CMS_Aliases6 WHERE Alias IN ('secsapr3:t25~800@boe_system_administrators') AND AliasIsTruncated = 0

User Query 

  • users will have a / between the SAP system info and user name

(.\SQLServerStatement.cpp:186) ExecDirect: SQL: SELECT Alias, ObjectID FROM dbo.CMS_Aliases6 WHERE Alias IN ('secsapr3:t25~800/taz', 'secsapr3:t25~800/zat', 'secsapr3:t25~800/taz1', 'secsapr3:t25~800/usr1', 'secsapr3:t25~800/usr2', 'secsapr3:t25~800/usr3', 'secsapr3:t25~800/usr4', 'secsapr3:t25~800/entadm', 'secsapr3:t25~800/taztest', AND AliasIsTruncated = 0



These logs were taken on XI 3.1 no patches


SAP BusinessObjects Enterprise XI 3.1


zie logging logs trace troubleshooting ztrace intitial setup baseline group mapping role adding creatingXIR3 XI 3.x XI3 XI3.1 , KBA , BI-BIP-IK , Integration; Integration kits for SAP, Baan, PeopleSoft, Sie , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.