SAProuter SNC processing failed

[Former Member]

Hi All,

I have done all the necessary steps and completed successfully. But when I try to start saprouter using this command saprouter -r -K "p:CN=CORONA391,OU=0001200552,OU=SAProuter,O=SAP,C=DE" I am getting the following error.

trcfile dev_rout

*****************************************************************************

*

• ERROR SNC processing failed:

• SncInit

*

• TIME Wed Jun 15 20:25:52 2011

• RELEASE 701

• COMPONENT NI (network interface)

• VERSION 38

• RC -17

• MODULE nisnc.c

• LINE 646

• DETAIL NiSncInit: sncrc=-1

• COUNTER 3

*

*****************************************************************************

Thanks & Regards

Uday

[Former Member]

Thank you very much Markus, I have opened new thread for SAPROUTTAB file.

[Former Member]

Hi All,

This is dev_rout file

-

---

trc file: "dev_rout", trc level: 1, release: "701"

-

---

Wed Jun 15 20:02:49 2011

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -K

command line arg 3: p:CN=CORONA391,OU=0001200552,OU=SAProuter,O=SAP,C=DE

SncInit(): Initializing Secure Network Communication (SNC)

AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".

• ERROR => DlLoadLib: dlopen()= /usr/sap/saprouter/libsapcrypto.so: wrong ELF class: ELFCLASS32 -> DLENOACCESS (0,Success) [dlux.c 314]

• ERROR => SncPDLInit(): DlLoadLib("/usr/sap/saprouter/libsapcrypto.so")=DLENOACCESS

[sncxxdl.0340]*** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) /usr/sap/saprouter/libsapcrypto.so not loaded

[sncxxdl.0604]<<- SncInit()==SNCERR_INIT

sec_avail = "false"

• ERROR => NiSncInit: SncInit failed (rc=-1) [nisnc.c 647]

• ERROR => main: NiSncInit failed (rc=-17) [nirout.cpp 1219]

*****************************************************************************

*

• ERROR SNC processing failed:

• SncInit

*

• TIME Wed Jun 15 20:02:49 2011

• RELEASE 701

• COMPONENT NI (network interface)

• VERSION 38

• RC -17

• MODULE nisnc.c

• LINE 646

• DETAIL NiSncInit: sncrc=-1

• COUNTER 3

*

*****************************************************************************

<<- ERROR: SncDone()==SNCERR_INIT_FIRST

Please help me in this,

Thanks in advance

Uday

[markus_doehr2]

> SncInit(): Initializing Secure Network Communication (SNC)

> AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

> SncInit(): Trying environment variable SNC_LIB as a

> gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".

> *** ERROR => DlLoadLib: dlopen()= /usr/sap/saprouter/libsapcrypto.so: wrong ELF class: ELFCLASS32 -> DLENOACCESS (0,Success) [dlux.c 314]

for a 64bit saprouter you also need to download the 64bit sapcrypto. The saprouter ininitialization fails because the 64bit saprouter binary can't load the 32bit libsapcrypto.so.

Markus

[Former Member]

Hi Markus,

Thanks for your quick response.

I have downloaded SAP Cryptographic Library Linux Intel x86.

I am trying to install SAProuter on RHEL 5.4 x86_64.

Can you please tell me the file name I should I download?

Thanks in advance

Uday

[markus_doehr2]

> I have downloaded SAP Cryptographic Library Linux Intel x86.

...this is 32bit

> I am trying to install SAProuter on RHEL 5.4 x86_64.

...this is 64bit

You need to download

"SAP Cryptographic Library Linux for X86_64 (AMD64)"

Markus

[Former Member]

Hi Markus,

Thanks Markus, I will try with this one and let you know.

Thanks a lot

Uday

[Former Member]

Hi Markus,

See the below dev_rout file.

-

---

trc file: "dev_rout", trc level: 1, release: "701"

-

---

Thu Jun 16 11:24:43 2011

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3298

command line arg 4: -K

command line arg 5: p:CN=CORONA391, OU=0001200552, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".

File "/usr/sap/saprouter/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 8787, ppid = 6312, port = 3298, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

When I execute saprouter -r -K "Distinguished name" getting the following lines

trcfile dev_rout

no logging active

But not getting out of this command. Showing the same status for a long time.

Thanks in Advance

Uday

[markus_doehr2]

> When I execute saprouter -r -K "Distinguished name" getting the following lines

>

> trcfile dev_rout

> no logging active

>

> But not getting out of this command. Showing the same status for a long time.

This is correct. The saprouter is running - you can now try to connect through it.

Markus

[Former Member]

Hi Markus,

Thanks a lot

192.168.5.15/16 --- Our servers local IPs

183.82.41.2 --- Public IP of router

3297 --- Port number of SAProuter

00, 01, 02 --- Instance numbers of SAP systems

SAProuter String in logon pad : /H/183.82.41.2/S/3297/H/

I created saprouttab file in /usr/sap/saprouter.

Following is the content in saprouttab file.

1. Example saprouttab

1. SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC connection to local system for R/3-Support

2. R/3 Server: 192.168.1.1

3. R/3 Instance: 00

#KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.1 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.5.15 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.5.15 3202

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.5.16 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.5.16 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.5.* *

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 183.82.41.2 194.39.131.34 3299

#P 183.82.41.2 194.39.131.34 *

P 192.168.5.15 194.39.131.34 3299

P * 194.39.131.34 *

P * * 23

P * * *

1. Deny all other connections

#D * * *

But getting the router permisson denied. when i'm trying to connect.

Thanks in advance

Uday

[Former Member]

Hi Markus,

My router string is successfully configured but I was unable to connect using router string.

Can you please look into this.

Thanks & Regards

Uday