Not able to start Saprouter from services.msc

[former_member185031]

Hi,

We have installed a saprouter into Windows 2003 Server. It is running fine. When we start the system then we need to manually start the saprouter by a batch file, so i am trying to register a service so that we need not to start the router manually.

i have read the note 525751 and install a new service by this command

ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""

Service successfully created. I have followed the note and done everything as per the note, but when i try to start the service i am getting this error couldnot start saprouter service on local computer, error 1067 process terminated unexpectedly

When i checked the event log i found this message.

RROR       Unable to load the GSS-API DLL
             named "sncgss32.dll"

TIME        Tue Oct 06 16:30:17 2009
RELEASE     640
COMPONENT   NI (network interface)
VERSION     5
RC          -17
MODULE      sncxxdl.c
LINE        342
DETAIL      SncPDLInit
SYSTEM CALL LoadLibrary
COUNTER     1

I have checked some thread on related to issue but not able to solve the problem. Could you please assist what's wrong.

Regards,

Subhash

[former_member227283 · Accepted solution]

Hi subash,

try to create new user on OS and create the sap router credential for that newly created OS user.

Try to start the saprouter service with newly created user.

And check everything working fine or not.

Thanks

Anil

[former_member185031 · Accepted solution]

I have created a new user who os the member of Administrator, Power users and all the other groups and try to start the saprouter service from this user.

Wed Oct 07 18:39:20 2009
*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1510]
      GSS-API(maj): No credentials were supplied
      GSS-API(min): No credentials found for this name (not logged on) (USER=subhash)
    Could't acquire INITIATING credentials for

    name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
*** ERROR => ErrISetSys: error info too large [err.c        931]
Wed Oct 07 18:39:20 2009
LOCATION    SAProuter 37.11 on SAPROUTER
ERROR       GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged on) (USER
name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
TIME        Wed Oct 07 18:39:20 2009
RELEASE     640
COMPONENT   SNC (Secure Network Communication)
VERSION     5
RC          -4
MODULE      sncxxall.c
LINE        1510
DETAIL      SncPAcquireCred
SYSTEM CALL gss_acquire_cred
ERRNO       
ERRNO TEXT  
DESCR MSG NO
DESCR VARGS GSS-API(maj): No credentials were supplied;;;;
;;;;GSS-API(min): No credentials found for this name (not logged on) (USER;;;;
;;;;name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

But still the same error

Regards,

Subhash

[Former Member · Accepted solution]

Hi,

Please use command sapgenpse seclogin -l to view the existing credentials.

Also refer the OSS Note 800240 - FAQ: SAP Cryptographic Library error analysis (App. Server) Question No. 8

for more information & actions.

Thanks,

Shambo

[former_member185031 · Accepted solution]

C:\saprouter>sapgenpse.exe seclogin -l
 running seclogin with USER="subhash"

 0: CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
         C:\saprouter\local.pse
      NOT readable for subhash

 1: CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
         C:\saprouter\local.pse
      Options:  LIFETIME= Thu,  7 Oct 2010 08:50:39 (GMT)
                DIRACCESS=FALSE
                CRLCHECK=FALSE

 2: CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
         c:\saprouter\local.pse
      Options:  LIFETIME= Thu,  7 Oct 2010 08:50:39 (GMT)
                DIRACCESS=FALSE
                CRLCHECK=FALSE


 2 readable SSO-Credentials available (total 3)

As per the note i have created the credentials, but still it is not able to read, anything else i need to check.

Regards,

Subhash

[former_member72237 · Accepted solution]

Hi Subhash,

Please run

sapgenpse seclogin -p C:\saprouter\local.pse -O <SNC_admin>

here as "snc_admin = the user with which you want to run the service and as Domainname\username format."

Restart the service.

regards

Virendra.

[former_member185031 · Accepted solution]

Hi Virendra,

Thanks for your reply. My computer is not in a domain

C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O WORKGROUP\subha
sh
 running seclogin with USER="subhash"
ERROR in lookup_sid_by_username: (10/0x000a) LastError=1332: No mapping between
account names and security IDs was done.


C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O subhash
 running seclogin with USER="subhash"
 creating credentials for user "SAPROUTER\subhash"...
Please enter PIN:
 Adjusting credentials and PSE ACLs to include "SAPROUTER\subhash"...
 Oh, you supplied your own name explicitly ... ok.
   c:\saprouter\cred_v2  ... ok.
   C:\saprouter\local.pse  ... ok.
   C:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
 Added SSO-credentials for PSE "c:\saprouter\local.pse"
   "CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Please suggest what else option i have

Regards,

Subhash

[former_member72237 · Accepted solution]

Hi subhash,

Have you restart the server after giving the command

C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O subhash

i think now it should start the service. check if error have changed ?

regards

Virendra

[former_member185031 · Accepted solution]

HI Vrendra,

Thanks for your reply. I am able to start the service, but when i checked the dev_rout file i am getting the same error, and if i test the OSS connection it is giving me the same error. I am not sure that i need SAPservice_SID user into window machine to start the saprouter, another thing is is required the any sap instance should be there to run the saprouter as a service.

Regards,

Subhash

[former_member72237 · Accepted solution]

Hi subhash,

I think the user you have use to create the local.pse is different then the user with which you are starting the service.

If so then can you please test it with that user to start the service.

Please add the dev_router here.. Also add the -G option in service command line .

regards

Virendra

[former_member185031 · Accepted solution]

Thu Oct 08 14:25:03 2009
*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1510]
      GSS-API(maj): No credentials were supplied
      GSS-API(min): No credentials found for this name (not logged on) (USER=srvsolmgr)
    Could't acquire INITIATING credentials for

    name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
*** ERROR => ErrISetSys: error info too large [err.c        931]
Thu Oct 08 14:25:03 2009
LOCATION    SAProuter 37.11 on SAPROUTER
ERROR       GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged on) (USER
name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
TIME        Thu Oct 08 14:25:03 2009
RELEASE     640
COMPONENT   SNC (Secure Network Communication)
VERSION     5
RC          -4
MODULE      sncxxall.c
LINE        1510
DETAIL      SncPAcquireCred
SYSTEM CALL gss_acquire_cred
ERRNO       
ERRNO TEXT  
DESCR MSG NO
DESCR VARGS GSS-API(maj): No credentials were supplied;;;;
;;;;GSS-API(min): No credentials found for this name (not logged on) (USER;;;;
;;;;name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
DETAIL MSG N
DETAIL VARGS
COUNTER     7
<<- ERROR: SncSessionInitiatorAK()==SNCERR_GSSAPI
  'target_acl_key' (addr=01D5F934, len=86) full hexdump
  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
  0x00050  70736572 7632                        pserv2           
*** ERROR => NiSncInitiate: SncSessionInitiatorAK (rc=-4) [nisnc.c      498]
*** ERROR => NiSnc2Connect C0, 194.39.131.34 (rc=-17) [nirout.cpp   2607]

I have tried with both user. the same error is coming into dev_rout file.

>>c::\saprouter\saprouter.exe service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAProuter, OU=0000835750, >>OU=SAProuter, O=SAP, C=DE"

Where i have to add the -G option

Regards,

Subhash

[Former Member · Accepted solution]

Thu Oct 08 14:25:03 2009
*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1510]
      GSS-API(maj): No credentials were supplied
      GSS-API(min): No credentials found for this name (not logged on) (USER=srvsolmgr)
    Could't acquire INITIATING credentials for

This indicates that your service is running as user srvsolmgr and you haven't added user srvsolmgr accordingly.

Try

C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O srvsolmgr

And then restart SAProuter.

That should at least solve that part of the problem.

[Former Member · Accepted solution]

The service marketplace does have a good installation guide (I think this was mentioned before in this message).

[http://service.sap.com/saprouter|http://service.sap.com/saprouter]

Technical Prerequisites

How to establish Internet Connections

SNC: Installtion crypto functions

Read it carefully to check if there's any step you missed.

It is important to set the environment variables on the user that is actually running the service, otherwise it will try to use the wrong path to the credential files etc.

Just for testing purpose, you can add them as system variables so all users have the same value.

For security reasons, this should however not be the final solution, Each user should have their own environment variables.

[former_member72237 · Accepted solution]

Hi subhash,

The log shows that the service run as "srvsolmgr" so i suggest that you run with this user only.

Also -G option you can add in the command line in Service properties following with the path for log file. Eg. c:\saprouter\abc.log.

As suggested by tomas you have to run the command also.

C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O srvsolmgr

regards

Virendra.

Edited by: Virendra Pandya on Oct 8, 2009 3:23 PM

[former_member185031 · Accepted solution]

Hi Tomas,

Thanks for your inputs. I have read the same document multiple time and done everything multiple time. This is the output.

C:\saprouter>sapgenpse.exe seclogin -p c:\saprouter\local.pse -O srvsolmgr
 running seclogin with USER="srvsolmgr"
 creating credentials for user "SAPROUTER\srvsolmgr"...
Please enter PIN:
 Adjusting credentials and PSE ACLs to include "SAPROUTER\srvsolmgr"...
 Oh, you supplied your own name explicitly ... ok.
   C:\saprouter\cred_v2  ... ok.
   C:\saprouter\local.pse  ... ok.
   C:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
   c:\saprouter\local.pse  ... ok.
 Added SSO-credentials for PSE "c:\saprouter\local.pse"
   "CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

user srvsolmgr set in environment variable. When i start the saprouter via command line its working fine and dont have any issue, but when i start from services.msc, the same error is coming into dev_rout file and OSS connection is not working

Regards,

Subhash

[Former Member · Accepted solution]

I'm sorry to put a silly question here, but this message is a little bit hard to get the grip on:

Do you use the same user for both the command prompt and the service?

Also

Can you please post the command which runs successfulll (from the command prompt)

and the complete command for the saprouter-service.

[former_member185031 · Accepted solution]

>

> I'm sorry to put a silly question here, but this message is a little bit hard to get the grip on:
> Do you use the same user for both the command prompt and the service?
Yes I understand it's frustrating now., and Yes i am using the same user srvsolmgr to run from Services.msc and from command prompt also. 
> Also
> Can you please post the command which runs successfulll (from the command prompt) 
> and the complete command for the saprouter-service.

C:\>cd saprouter

C:\saprouter>saprouter -r -G log.txt -R C:\saprouter\saprouttab -S 3299 -K "p:CN
=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

trcfile  dev_rout

logfile log.txt

Connection test OK

u Oct 08 16:03:56 2009
SAP Network Interface Router, Version 37.11

command line arg 0:	saprouter
command line arg 1:	-r
command line arg 2:	-G
command line arg 3:	log.txt
command line arg 4:	-R
command line arg 5:	C:\saprouter\saprouttab
command line arg 6:	-S
command line arg 7:	3299
command line arg 8:	-K
command line arg 9:	p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
SncInit(): Trying environment variable SNC_LIB as a
      gssapi library name: "C:\saprouter\sapcrypto.dll".
  File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
  The internal Adapter for the loaded GSS-API mechanism identifies as:
  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main(): pid = 2776, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
reading routtab: C:\saprouter\saprouttab

Regards,

Subhash

[Former Member · Accepted solution]

ok,

Can you also provide the ImagePath in Regedit:

HKEY_LOCAL_MACHINE

SYSTEM

CurrentControlSet

Services

<SAPROUTER_Service_Name>

Double click "ImagePath"

Copy the "Value Data" and post it here

[former_member185031 · Accepted solution]

This is the value

c:\saprouter\saprouter.exe service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Regards,

Subhash

[Former Member · Accepted solution]

So, the difference is:

service: "p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

command prompt: "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

The value of CN differs and must be equal. Change ImagePath to:

c:\saprouter\saprouter.exe service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Then restart the service.

[former_member185031 · Accepted solution]

Thanks a lot Tomas, I cannot tell you how relax i am now. That was a silly mistake but it was completely 2 working day to solve this issue. Now i am able to test the connection and it is running through Services.msc

Thanks a lot to all for your valuable input and time.

Regards,

Subhash

[former_member80258 · Accepted solution]

Thanks to Subbhash & Tomas.

With this issue track, i done

Erick Verbena

PROLAMSA

[former_member227283]

Hi subash,

If you have set the enviroment in user variable then you have to manually specifiy the user in saprouter service.

As mention by virender.

Thank

Anil

Edited by: Anil Bhandary on Oct 7, 2009 9:39 AM

[former_member185031]

I have specified the user srvsolmgr and password under logon tab, but still this message is coming

>>The SAProuter service failed to start due to the following error:

>>The service did not respond to the start or control request in a timely fashion.

The same is working fine from command prompt

c:\saprouter\saprouter.exe -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Regards,

Subhash

Edited by: Subhash Chandra on Oct 7, 2009 1:18 PM

[former_member72237]

Hi Subhash,

Can you please user -G -T options which will create an trace file and log file in you command parameter in saprouter service properties so that we will get some more clue for failing the service.

Also please cross check the changes you have made as per the discussion you have told that previously it was giving an DLL file error which now is giving some other error.

regards

Virendra

[former_member185031]

Hi All,

With the help of Anil we have done everything from scratch and now the error is something like this.

Wed Oct 07 17:33:58 2009
*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1510]
      GSS-API(maj): No credentials were supplied
      GSS-API(min): No credentials found for this name (not logged on) (USER=srvsolmgr)
    Could't acquire INITIATING credentials for

    name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
*** ERROR => ErrISetSys: error info too large [err.c        931]
Wed Oct 07 17:33:58 2009
LOCATION    SAProuter 37.11 on SAPROUTER
ERROR       GSS-API(maj): No credentials were supplied
GSS-API(min): No credentials found for this name (not logged on) (USER
name="p:CN=SAProuter, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

The same is working from command prompt

Regards,

Subhash

[former_member227283]

Hi subash,

Can you confirm the enviroment variable you have set is system variable or user variable.

Thanks

Anil

Edited by: Anil Bhandary on Oct 7, 2009 9:17 AM

[former_member185031]

This command work fine and my saprouter is running and verified the connection also

C:\saprouter>saprouter.exe -r -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

All the environemnt variables set under User variables.

Regards,

Subhash

[former_member227283]

Hi Subhash,

Output says everything is fine

Can you once restart the saprouter box, also again check envrioment varible are in place.

Then again try to start the saprouter.

Wairing for reply.

Thanks

Anil

[former_member185031]

I have restarted the box multiple time, and modied the environment variable also. but the error message is same. I guess i am missing something.

Regards,

Subhash

[former_member227283]

Hi subash,

If still you get the error , then can u share the output of command

--> sapgenpse get_my_name -v -n Issuer

--> sapgenpse get_my_name

Thanks

Anil

[former_member185031]

C:\saprouter\ntintel>sapgenpse get_my_name -v -n Issuer
 Opening PSE "C:\saprouter\local.pse"...
 PSE (v2) open ok.
 Retrieving my certificate... ok.
 Getting requested information... ok.
SSO for USER "srvsolmgr"
  with PSE file "C:\saprouter\local.pse"

Issuer  : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

C:\saprouter\ntintel>sapgenpse get_my_name
SSO for USER "srvsolmgr"
  with PSE file "C:\saprouter\local.pse"

Subject : CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
Issuer  : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
Serialno: 01:95:D0
KeyInfo : RSA, 1024-bit
Validity  -  NotBefore:   Thu Nov 20 23:52:50 2008 (081120182250Z)
              NotAfter:   Fri Nov 20 23:52:50 2009 (091120182250Z)

Both files are there sncgss32.dll or gssapi32.dll under c:\saprouter\ntintel

Regards,

Subhash

[former_member227283]

Him subash,

can you confirm which is a file present under folder c:\saprouter\nintel\

sncgss32.dll or gssapi32.dll

Thanks

Anil

[former_member227283]

Hi subash,

It is strange problem.

You are able to start the router through command by using -K, but it is not working from windows services.

why the dll is not loading..

Pls try the below enviroment.

SNC_LIB= C:\saprouter\ntintel\sapcrypto.dll;C:\saprouter\ntintel\sncgss32.dll

Thanks

Anil

[former_member227283]

Hi,

If the file sncgss32.dll is not avilable in c:\saprouter , then pls create a copy of file sapcrypto.dll and rename the copy of sapcrypto.dll to sncgss32.dll .

it mean in c:\saprouter there should be sapcrypto.dll & sncgss32.dll file.

Thanks

Anil

[former_member185031]

SNC_LIB= C:\saprouter\ntintel\sapcrypto.dll

SECUDIR= c:\saprouter\

>>it mean in c:\saprouter there should be sapcrypto.dll & sncgss32.dll file.

Yes this file is available under c:\saprouter\ntintel\

But still in event viewer it is not able to load the sncgss32.dll library file

Regards,

Subhash

[former_member227283]

Hi subash,

Pls set the enviroment

SNC_LIB=c:\saprouter\sncgss32.dll

SECUDIR=c:\saprouter

file sncgss32.dll should be present in folder c:\saprouter

above both the enviorment should be set to the user by which you are starting the saprouter or you can also set above both enviroment as system vairable.

Thanks

Anil

Edited by: Anil Bhandary on Oct 7, 2009 7:42 AM

[former_member227283]

Hi subash,

Pls share value of enviroment vairable

1. SNC_LIB

2. SECUDIR

of the user by which you are starting the sap router

Thanks

Anil

[former_member227283]

Hi Subhash,

After you created the saprouter service with the following command.

ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""

Then goto registery and find the saprouter service.

saprouter services registry exact location is My Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\saprouter

on the right side you will get the Value name as ImagePath , double click on that where you will get the value data of ImagePath

Change the Value data as below :-

c:\saprouter\saprouter.exe service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Hope this will resolve your issue.

Thanks

Anil

[former_member185031]

Hi Anil,

Thanks for your support, but the problem is still the same after modifying the registry. I am not able to start the service and getting the same error message.

Error: 997
ERROR       Unable to load the GSS-API DLL
             named "sncgss32.dll"

TIME        Wed Oct 07 10:21:41 2009
RELEASE     640
COMPONENT   NI (network interface)
VERSION     5
RC          -17
MODULE      sncxxdl.c
LINE        342
DETAIL      SncPDLInit
SYSTEM CALL LoadLibrary
COUNTER     1

Regards,

Subhash

[former_member72237]

Hi Subhash,

Please check that without making it as an service does your saprouter work from command line. If it works properly then all your configuration & required files are in proper place as per your environment settings.

Now after creating the service for saprouter, please open the saprouter service properties --> goto Log on tab -->here you will find run as LOCAL SYSTEM (default) here select the option THIS ACCOUNT and select the user ID with which you have tested saprouter from command line. Restart the service and check.

regards

Virendra

[Former Member]

I installed saprouter on windows Server 2012 and Windows 8.1, in the regedit put the word "service" (that has not been, among other commands) and it worked all.

"

D:\usr\sap\saprouter\saprouter.exe service -r -S 3299 -G D:\usr\sap\saprouter\saprouter.log -J 2000000 -R D:\usr\sap\saprouter\saprouttab

"

[former_member227283]

Hi subash,

Above changes is for saprouter windows services & not for command level.

Thanks

Anil

[former_member185031]

>>ntscmgr install saprouter -b c:\saprouter\saprouter.exe "service -r -W 60000 -R c:\saprouter\saprouttab -K"p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""

Create Success

But the error is service didnot respond to start or control request in a timely fashion

Please suggest

Regards,

Subhash

[former_member227283]

Hi Subhash,

Pls follow the below step on server where sap router is running.

1. goto start --> run ---> type regedit

2. on regedit screen search for name of the service of saprouter which you have created.

e.g you have created service as saprouter

3. make change in the value of that service

Earlier value was :- saprouter -r -R C:\saprouter\saprouttab -S 3299 -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

new value should be :- c:\saprouter\saprouter.exe service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

try to start saprouter service now

Pls check this & let me know.

Thanks

Anil

[former_member227283]

Hi subhash,

As you said earlier that you are able to start saprouter using -K option through command prompt.

Then you should also be able to start saprouter using -K thorugh windows services.

Markus: pls correct me if i am wrong

subhash pls share the value of Path of Executable as i mention earlier.

Thanks

Anil

[former_member185031]

This is the command which i used in the PATH of the service.

>>saprouter -r -R C:\saprouter\saprouttab -S 3299 -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

I dont know is this the correct way to start sa service

Regards,

Subhash

[former_member204746]

my saprouter startup command looks like this:

D:\usr\sap\SAProuter\saprouter.exe service -r -R D:\usr\sap\SAProuter\saprouttab -S 3299

do you really need the rest of parameters?

[former_member227283]

Hi subhash,

value of Path to excutable :- < ................... >

Pls follow the below process to get this.

on saprouter server goto start --> Run --> type services.msc

in that double click on your sap router service .. on saprouter service goto GENERAL TAB , in that you will get columen name as

Path to executable .

pls paste the value of path to executable in the forum need to check what is a value written there.

Thanks

Anil

[former_member204746]

does file sncgss32.dll exist on your system?

[anindya_bose]

Hi Subhash

I faced the same problem with SAPOSCOL... Could you please set the environment variable COMSPEC according to https://service.sap.com/sap/support/notes/1139477 and then restart server?

[former_member185031]

Hi Anidya,

I have set the variable and will restart the server also.

Regards,

Subhash

[markus_doehr2]

> RROR Unable to load the GSS-API DLL

> named "sncgss32.dll"

Is that library existing on your system?

Markus

[former_member185031]

Nope. Its a windows 2003 server system and saprouter installed only. so this library file is not there in saprouter directory.

Regards,

Subhash

[markus_doehr2]

> Nope. Its a windows 2003 server system and saprouter installed only. so this library file is not there in saprouter directory.

if you try to encrypt the traffic then you must use the encryption library.

Markus

[former_member185031]

Hi Markus,

Thanks for your input. Now the question is how ? Even i didnot unserstand properly because what i am trying to do is just installing a service through a command with certain parameter, so how it is related to encryption

Regards,

Subhash

Edited by: Subhash Chandra on Oct 6, 2009 5:30 PM

[markus_doehr2]

> Thanks for your input. Now the question is how ? Even i didnot unserstand properly because what i am trying to do is just installing a service through a command with certain parameter, so how it is related to encryption

Because you use the parameters for encryption (-K....)

Check

http://service.sap.com/saprouter-sncdoc

which contains a step-by-step guide how to set that connection up.

Markus

[former_member185031]

saprouter -r -S <port> -K "p:<Distingushed Name>"
               -K tells the saprouter to start with loading the SNC library
 
Example
saprouter -r -K "p:CN=example, OU=0000123456, OU=SAProuter, O=SAP, C=DE"
               If you omit u2013S <port>, the process is being started on default Port u20183299u2019.

But no where is mentioned that from where to get this library or can we register this without -K, becuase we are not using SNC connection right now.

But another point is we are using this command file to start the saprouter and in this case i am not able to find any error in dev_rout file and router is running fine, but i am not able to register as a service with option -K

saprouter -r -G log.txt -R C:\saprouter\saprouttab -S 3299 -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"

Regards,

Subhash

Edited by: Subhash Chandra on Oct 6, 2009 5:56 PM

[markus_doehr2]

> But no where is mentioned that from where to get this library or can we register this without -K, becuase we are not using SNC connection right now.

It's posted at the site/link I mentioned.

> But another point is we are using this command file to start the saprouter and in this case i am not able to find any error in dev_rout file and router is running fine, but i am not able to register as a service with option -K

So you have to decide:

- if you don't want to use encryption omit the "-K" parameters and start without

- if you want to use encryption check the site I mentioned and setup with the certificate

Markus

[former_member185031]

Ok so right now i will not use SNC connection, and i have created the service by this

C:\>ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""

CreateService SUCCESS

But when i start the service still i am getting the same error but now the log file is different.

Error: 997wrong startup parameter

So what is the wrong now

Regards,

Subhash

[markus_doehr2]

> So what is the wrong now

Omit all with CN, OU etc.

Markus

[former_member185031]

Ok now i am able to start the service also. but this is the error of dev_rout file, and rfc connection is also not working, so i think router is not running properly

Tue Oct 06 18:24:34 2009
*** ERROR => NiProcMsg: rc=-94 (NIEROUT_PERM_DENIED) from router [nibuf.c      423]

Tue Oct 06 18:24:43 2009
*** ERROR => NiProcMsg: rc=-94 (NIEROUT_PERM_DENIED) from router [nibuf.c      423]

Do i need to modify the saprouttab file also?

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 172.25.0.113 5631
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 172.25.0.113 3389
P	*	194.39.131.34	3299
P	172.25.0.105	194.39.131.34	3299
	*	*	telnet
P	*	*	*	*
D	*	*	*

Regards,

Subhash