Overview
Universal Connector supports two modes of client fault tolerance:
- Secure Client Fault Tolerance (Secure CFT)
- Pre-XBP 2.0 Client Fault Tolerance (CFT)
The mode of client fault tolerance to be used by Universal Connector is determined by the value of the SECURE_CFT option.
Valid values for this option are yes and no:
- yes will cause Universal Connector to use the Secure CFT mode.
- no will cause Universal Connector to use the original Pre-XBP 2.0 CFT mode.
The default value is yes.
Both modes of CFT follow the same basic process flow. When Universal Connector is requested to restart a particular command ID job, it queries the SAP system for all jobs with the specified job name. The list of jobs returned by the SAP system is scanned for a job that contains an appropriate Command ID Job Step. If found, Universal Connector will re-connect to the SAP job instance and satisfy the command line requirements.
Universal Connector is capable of restarting a command ID as long as the associated command ID job remains in the SAP system.
Secure Client Fault Tolerance (Secure CFT) Mode
This mode is an enhancement of the original implementation. The secure CFT mode requires XBP 2.0 to be installed on the SAP side of the Universal Connector connection. In this mode, an ABAP program step is used for the command ID job step.
Using an ABAP program step as the Command ID job step eliminates the security and ease of use drawbacks mentioned above for external program job steps.
- Security
The execution of ABAP programs and the resources required by them are secured by SAP authorization checks. - Ease of Use
ABAP program job steps do not require a target host. They run on whichever application server the job runs on. Therefore, there are no target specific parameters required for secure CFT mode.
Pre-XBP 2.0 Client Fault Tolerance (CFT) Mode
This mode is the original implementation of client fault tolerance used prior to the release of XBP 2.0. Due to limitations in the XBP 1.0 interface, Universal Connector client fault tolerance on pre-XBP 2.0 SAP systems uses an external program step as the command ID job step.
Using an external program step as the command ID job step has the following security and ease of use drawbacks:
- Security drawback
Using an external program job step requires the SAP user ID to have authority to run external programs. This authority cannot be given lightly for the following reason: When running an external job step, the SAP system first performs an authorization check to see if the user ID has the right to run an external program. If so, the external program is run under the user ID of the user who started the SAP system - Ease of use drawback
Using an external program job step requires a target host be specified for the external program to run on. This requires information about the SAP landscape that may not be readily available. Also, this presents the possibility of the Universal Connector job's parameters becoming out of sync with the SAP landscape.