How to request a sap router to connect to service market plac

[Former Member]

HI All,

We have currently switched our licence from windows ms-sql to linux maxdb.

we have migrated our entire land scape and also we have installed a fresh installation of solution manager ,

now my question is

we require a sap router to connect to service market place.

how should i request the port .

i have opened one port to connect from GUI ,

This situation raised because we have planned to upgrade one of our system . so we require a sp stack and list of software components which we can get from maintenance optimizer, to upgrade the system

Thanks!

Vardhan

[Former Member]

Vardhan,

These links will help you to plan everything, right from the ports to complete setup

http://wiki.sdn.sap.com/wiki/display/Basis/SAProuterviaSNC

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c06c8846-c160-2d10-d18e-d9961e9c7...

http://www.easymarketplace.de/saprouter.php

Thanks

[Former Member]

HI

Thanks For the reply,

What is this SAP Cryptographic Binary i searched for the same in service market place i didn't found it.

What is this used for.

Thanks!

Vardhan

[Former Member]

Hi

As mentioned in the document i have raised an oss note and got the confirmation.

now i have created the folder /usr/sap/sarouter and extracted Cryptographic Binary in that folder.

now when i rin the command "sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>""

i am getting the following error

ERROR in unix_dlopen(): dlopen("libsapcrypto.so") FAILED:

"libsapcrypto.so: cannot open shared object file: No such file or directory"

Loading of shared library "libsapcrypto.so" failed!

You might need to adjust the shared library search path:

LD_LIBRARY_PATH=/usr/sap/S1D/SYS/exe/run:/sapdb/programs/lib

please help me in fixing that issue

regards!

Vardhan.

[Former Member]

Hi

The above issue is solved i am able to execute that command after adding

"sapgenpse" and "libsapcrypto.so" to your kernel directory

the "ticket" to /usr/sap/<SID>/Dxxxxx/sec

now after entering the pin i get the following error

Got absolute PSE path "/home/s1dadm/sec/local.pse".

Please enter PIN: ****

Please reenter PIN: ****

Supplied distinguished name: "CN=sgtr-s-devs1d, OU=0000858034, OU=SAProuter, O=SAP, C=DE"

Creating PSE with format v2 (default)

get_pse: Can't create PSE.

ERROR in af_create: (4352/0x1100) could not flush : "SW-PSE"

ERROR in create_PSE: (4352/0x1100) could not flush : "SW-PSE"

ERROR in modified_PSEFile: (4352/0x1100) could not flush : "SW-PSE"

ERROR in flush_PSEFile: (1283/0x0503) Can't write file : "/home/s1dadm/sec/local.pse"

ERROR in aux_OctetString2file: (1283/0x0503) Can't write file : "/home/s1dadm/sec/local.pse"

please help in solving

Regards!

Vardhan.

[Former Member]

Hello,

It seems it is not able to create 'sec' folder under /home/s1dadm or not able to access it.

Refer the following similar problem threads, might help you.

http://forums.sdn.sap.com/thread.jspa?threadID=884042

http://forums.sdn.sap.com/thread.jspa?threadID=1492420

http://forums.sdn.sap.com/thread.jspa?threadID=1799061

http://forums.sdn.sap.com/thread.jspa?threadID=1201836

Thanks

[Former Member]

HI

Thanks For the reply after creating " SEC" folder every thing went fine.

i have created certificate imported it in to system.

added credentials to user every thing was fine now.

the problem is when i start sap router using the following command

saprouter -r -S 3299 -V 3 -K "p:CN=<saprouter hostname>, OU=< Customer number >,

OU=SAProuter,O=SAP, C=DE" &

i get the following error message

[1] 22569

sgtr-s-devs1d:s1dadm 52>

trcfile dev_rout

*****************************************************************************

*

• ERROR SNC processing failed:

• SncInit

*

• TIME Wed Sep 14 23:58:54 2011

• RELEASE 700

• COMPONENT NI (network interface)

• VERSION 38

• RC -17

• MODULE nisnc.c

• LINE 646

• DETAIL NiSncInit: sncrc=-1

• COUNTER 3

*

*****************************************************************************

[1] Exit 255 saprouter -r -S 3299 -V 3 -K ...

here i paste the dev_rout file

-

---

trc file: "dev_rout", trc level: 3, release: "700"

-

---

Wed Sep 14 06:48:24 2011

NiHsLInit: alloc host/serv bufs (200/200 entries)

NiIInit: allocated nitab (811 at 0x72a9f0)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrList: got 3 interface(s) from operating system

[ 0-lo ] IPv4-Address: 127.0.0.1 UP

[ 1-lo ] IPv4-Address: 127.0.0.2 UP

[ 2-eth0 ] IPv4-Address: 10.1.1.212 UP

NiIGetServNo: servicename '3299' = port 0C.E3/3299

SAP Network Interface Router, Version 38.10

Compiled Jan 23 2008 17:36:11

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3299

command line arg 4: -V

command line arg 5: 3

command line arg 6: -K

command line arg 7: p:CN=sgtr-s-devs1d, OU=0000858034,OU=SAProuter,O=SAP, C=DE

service : 3299

routtab : ./saprouttab

plug-in : no plug-in

-argument: 'no argument'

clients : 800

max servers : 1

quelength : 1

maxheap : 20000000

timeoutL : 5000

tracefile : dev_rout

logfile : no logging active

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=0x7fff3131a397)

SncInit(): Initializing Secure Network Communication (SNC)

AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying builtin default as a

gssapi library name: "sncgss.so".

• ERROR => DlLoadLib: dlopen()= sncgss.so: cannot open shared object file: No such file or directory -> DLENOACCESS (0,Success) [dlux.c 314]

• ERROR => SncPDLInit(): DlLoadLib("sncgss.so")=DLENOACCESS

[sncxxdl.0340]*** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) sncgss.so not loaded

[sncxxdl.0604]<<- SncInit()==SNCERR_INIT

sec_avail = "false"

• ERROR => NiSncInit: SncInit failed (rc=-1) [nisnc.c 647]

• ERROR => main: NiSncInit failed (rc=-17) [nirout.cpp 1219]

*****************************************************************************

*

• ERROR SNC processing failed:

• SncInit

*

• TIME Wed Sep 14 06:48:24 2011

• RELEASE 700

• COMPONENT NI (network interface)

• VERSION 38

• RC -17

• MODULE nisnc.c

• LINE 646

• DETAIL NiSncInit: sncrc=-1

• COUNTER 3

*

*****************************************************************************

->> SncDone()

<<- ERROR: SncDone()==SNCERR_INIT_FIRST

NiIExit: free nitab 0x72a9f0

Please help me in solving this

Regards!

Vardhan.

[Former Member]

Hi Vardhan,

It seems the environment variables are missing, please refer to the following related threads.

http://forums.sdn.sap.com/thread.jspa?threadID=1490167

http://forums.sdn.sap.com/thread.jspa?threadID=1675816

Thanks

[Former Member]

Hi

Thanks for the reply

After i set my environment variables here is my result of

"sapgenpse get_my_name -v -n Issuer"

Opening PSE "/home/s1dadm/sec/local.pse"...

PSE (v2) open ok.

Retrieving my certificate... ok.

Getting requested information... ok.

SSO for USER "s1dadm"

with PSE file "/home/s1dadm/sec/local.pse"

Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

-> Am i correct with the process

now when i execute

"saprouter -r -S 3299 -V 3 -K "p:CN=sgtr-s-devs1d, OU=0000858034,OU=SAProuter,O=SAP, C=DE" &"

[1] 30680

trcfile dev_rout

*****************************************************************************

*

• LOCATION SAProuter 38.10 on 'sgtr-s-devs1d'

• ERROR service '0.0.0.0:3299' in use

*

• TIME Fri Sep 16 01:34:55 2011

• RELEASE 700

• COMPONENT NI (network interface)

• VERSION 38

• RC -4

• MODULE nixxi.cpp

• LINE 3227

• DETAIL NiIBindSocket

• SYSTEM CALL bind

• ERRNO 98

• ERRNO TEXT Address already in use

• COUNTER 2

*

*****************************************************************************

[1] Exit 255 saprouter -r -S 3299 -V 3 -K ...

here is my "dev_rout" file

File "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

<<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

sec_avail = "true"

->> SncSetMyName(snc_hdl=(nil), myname="p:CN=sgtr-s-devs1d, OU=0000858034,OU=SAProuter,O=SAP, C=DE")

<<- SncSetMyName()==SAP_O_K

in: myname = "p:CN=sgtr-s-devs1d, OU=0000858034,OU=SAProuter,O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off

NiIMyHostName: hostname = 'sgtr-s-devs1d'

main: pid = 30680, ppid = 30394, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiICreateHandle: hdl 0 state NI_INITIAL

NiIInitSocket: set default settings for new hdl 0 / sock 4 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

***LOG Q0I=> NiIBindSocket: bind (98: Address already in use) [nixxi.cpp 3227]

• ERROR => NiIBindSocket: SiBind failed for hdl 0 / sock 4

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:3299) [nixxi.cpp 3227]

NiICloseHandle: closing initial hdl 0

• ERROR => main: NiBufServerHandleForAddr failed (rc=-4) [nirout.cpp 1360]

*****************************************************************************

*

• LOCATION SAProuter 38.10 on 'sgtr-s-devs1d'

• ERROR service '0.0.0.0:3299' in use

*

• TIME Fri Sep 16 01:34:55 2011

• RELEASE 700

• COMPONENT NI (network interface)

• VERSION 38

• RC -4

• MODULE nixxi.cpp

• LINE 3227

• DETAIL NiIBindSocket

• SYSTEM CALL bind

• ERRNO 98

• ERRNO TEXT Address already in use

• COUNTER 2

*

*****************************************************************************

->> SncDone()

DlUnloadLib shared library (/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so), hdl 0

<<- SncDone()==SAP_O_K

NiIExit: free nitab 0x72a9f0

please help me in solving

Regards!

Vardhan.

[Former Member]

my issue is solved

problem with ipaddress and port