"ERROR: SNC processing failed: SncSessionInitiatorAK"

[Former Member]

Hi,

When I run RFC test connection I get error "ERROR: SNC processing failed: SncSessionInitiatorAK"

Here is my dev_rout says:

• ERROR => SncPAcquireCred()==SNCERR_GSSAPI http://sncxxall.c 1432

GSS-API(maj): No credentials were supplied

GSS-API(min): No credentials found for this name (not logged on) (USER=Unknown)

Could't acquire INITIATING credentials for

name="p:CN=xxx, OU=xxx, OU=xxx, O=SAP, C=DE"

• ERROR => ErrISetSys: error info too large http://err.c 944

Thu Oct 1 10:13:37 2009

ERROR GSS-API(maj): No credentials were supplied

GSS-API(min): No credentials found for this name (not logged on) (USER

name="p:CN=xxx, OU=xxx, OU=xxx, O=SAP, C=DE"

TIME Thu Oct 1 10:13:37 2009

RELEASE 700

COMPONENT SNC (Secure Network Communication)

VERSION 5

RC -4

MODULE sncxxall.c

LINE 1432

DETAIL SncPAcquireCred

SYSTEM CALL gss_acquire_cred

ERRNO

ERRNO TEXT

DESCR MSG NO

DESCR VARGS GSS-API(maj): No credentials were supplied;;;;

;;;;GSS-API(min): No credentials found for this name (not logged on) (USER;;;;

;;;;name="p:CN=xxx, OU=xxx, OU=xxx, O=SAP, C=DE"

DETAIL MSG N

DETAIL VARGS

COUNTER 4371114

<<- ERROR: SncSessionInitiatorAK()==SNCERR_GSSAPI

• ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (rc=-4;1005a9910) http://nisnc.c 1082

• ERROR => NiSnc2Connect C520/-1, 194.39.131.34 (rc=-17) http://nirout.cpp 2816

Edited by: priyarao on May 12, 2010 6:57 AM

[former_member227283 · Accepted solution]

Hi,

It seems , your sap router is not configured properly.

Run following command to resolve your problem.

for running this command you have to login with SIDADM user and scroll to the saprouter folder

sapgenpse seclogin -p local.pse -O <sidadm>

Thanks

Anil

[Former Member · Accepted solution]

Thank you Anil.....This helped me!!!

[Former Member]

Hi,

thanks the problem is solved by running this command you have to login with SIDADM user and scroll to the saprouter folder

sapgenpse seclogin -p local.pse -O <sidadm>

[Former Member]

Hi,

I am getting below error (dev_rout) when starting OSS1 Logon or SAPOSS from SM59.saprouter is started.but getting below error..Please help..

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "720"

---------------------------------------------------

Mon Dec 15 13:21:40 2014

SAP Network Interface Router, Version 40.4

command line arg 0: H:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -W

command line arg 3: 60000

command line arg 4: -R

command line arg 5: H:\usr\sap\saprouter\saprouttab

command line arg 6: -K

command line arg 7: p:CN=CFCECCDEV, OU=0000417796, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

      GetUserName()="ecdadm"  NetWkstaUser="ecdadm"

SncInit(): Trying environment variable SNC_LIB as

    gssapi library name: "H:\usr\sap\Saprouter\sapcrypto.dll".

  File "H:\usr\sap\Saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

  SECUDIR="H:\usr\sap\Saprouter" (from $SECUDIR)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.1) to SAPCRYPTOLIB 5.x

  Product Version = SAPCRYPTOLIB  5.5.5C pl38  (Oct  7 2014) MT,[aesni],NB

main: pid = 3264, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'H:\usr\sap\saprouter\saprouttab'

Mon Dec 15 13:23:57 2014

*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1459]

      GSS-API(maj): No credentials were supplied

      GSS-API(min): No credentials found for this name (not logged on) (USER=ecdadm)

    Could't acquire INITIATING credentials for

    name="p:CN=CFCECCDEV, OU=0000417796, OU=SAProuter, O=SAP, C=DE"

<<- SncSessionInitiatorAK()==SNCERR_GSSAPI

  'target_acl_key' (addr=000000000847C9F4, len=86) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa

  0x00050  70736572 7632                        pserv2          

*** ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (sncrc=-4;000000000850D850) [nisnc.c      1185]

*** ERROR => NiSncHandleForAddr C9/-1, 194.39.131.34 (rc=-17) [nirout.cpp   3321]

*** ERROR => NiRClientHandle: NiRExRouteCon for C9/-1 '10.21.31.53' failed (rc=-17) [nirout.cpp   2690]

Advance Thanks,

Sudarshan

[Former Member]

Login to the System,Execute T-code OSS1> Parameter> Technical Settings & Check the settings as below

SAProuter A Customer Side:-

SAProuter1:

Name : <HOST_NAME OF YOU SAPROUTER>

IP ADDRESS: <LOCAL IP ADDRESS OF YOU SAPROUTER> (There should not be any space before & after this IP address)

Instance No: 99

SAProuter at SAP End

Name : sapserv2

IP Address : 194.39.131.34 (There should not be any space before & after this IP address)

Instance No: 99

SAPnet Message Server

Name: oss001

DB NAME : O01

Instance No: 01

restart the SAProuter.

Edited by: pugazh raj on May 13, 2010 10:15 AM

[JPReyes]

That sounds like the saprouter was started with a user different that the one in the credentials.

Check your certificates and make sure the same user registered is the one you are using to start the router, if not you can either change the service user (if started as a service) or create a new credential for the user.

Regards

Juan