OSS1: Cannot connect

[former_member285009]

Hi experts,

I'm having trouble connecting to SAP via OSS1 in my Solution Manager. Can you help?

- SAP SOLUTION MANAGER 7.1

- Saprouter is running with SNC

- Saprouter certificate is ok

- I can ping SAP at 194.39.131.34

- Read SAP note 33135, did not contain my error msg

OSS1 settings:

Error is

Unable to connect to SAPNet message server (Default connection will be used...

Message no. S1452

dev_lg looks as follows:

trc file: "dev_lg", trc level: 1, release: "720"

      [Thr 7916] Thu Sep 06 12:06:29 2012

[Thr 7916] LG-Layer: Release 720, version 5, Dec 21 2009

[Thr 7916]

[Thr 7916] Thu Sep 06 12:06:32 2012

[Thr 7916] *** ERROR => NiBufIProcMsg: hdl 1 received rc=-93 (NIEROUT_INTERN) from peer [nibuf.cpp    2122]

[Thr 7916]

[Thr 7916] *****************************************************************************

[Thr 7916] *

[Thr 7916] *  ERROR       The connection to the specified message server

[Thr 7916] *              (/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

[Thr 7916] *              /S/sapmsO01 / x) failed. Please check the trace file

[Thr 7916] *              of the message server. If a network filter has

[Thr 7916] *              been activated (see message server parameters

[Thr 7916] *              ms/acl_file_...) please check the configuration

[Thr 7916] *

[Thr 7916] *  TIME        Thu Sep 06 12:06:32 2012

[Thr 7916] *  RELEASE     720

[Thr 7916] *  COMPONENT   MS (message handling interface, multithreaded)

[Thr 7916] *  VERSION     4

[Thr 7916] *  RC          -35

[Thr 7916] *  MODULE      msxxi.c

[Thr 7916] *  LINE        2777

[Thr 7916] *  COUNTER     1

[Thr 7916] *

[Thr 7916] *****************************************************************************

[Thr 7916]

[Thr 7916] *** ERROR => MsIAttachEx: MsINiWrite (rc=-35) [msxxi.c      884]

[Thr 7916] *** ERROR => LgIAttach: MsAttach (rc=-35) [lgxx.c       4221]

[Thr 7916] *** ERROR => LgApplSrvInfo: LgIAttach(rc=LGEMSLAYER) [lgxx.c       1554]

[Thr 7916]

[Thr 7916] *****************************************************************************

[Thr 7916] *

[Thr 7916] *  ERROR       The connection to the specified message server

[Thr 7916] *              (/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

[Thr 7916] *              /S/sapmsO01 / x) failed. Please check the trace file

[Thr 7916] *              of the message server. If a network filter has

[Thr 7916] *              been activated (see message server parameters

[Thr 7916] *              ms/acl_file_...) please check the configuration

[Thr 7916] *

[Thr 7916] *  TIME        Thu Sep 06 12:06:32 2012

[Thr 7916] *  RELEASE     720

[Thr 7916] *  COMPONENT   MS (message handling interface, multithreaded)

[Thr 7916] *  VERSION     4

[Thr 7916] *  RC          -35

[Thr 7916] *  MODULE      msxxi.c

[Thr 7916] *  LINE        2777

[Thr 7916] *  COUNTER     1

[Thr 7916] *

[Thr 7916] *****************************************************************************

[Thr 7916]

Any tips as to how to solve this would be greatly appreciated!

Best regards

Martin

[Former Member · Accepted solution]

Hi Martin

Even I was facing issue in OSS1.

I have raised SAP ticket for it. Here the reply in which you might be interested.:

"

Access to SAP

1. Access with TA OSS1

On 3 April 2006, SAPNet - R/3 Frontend was shut down as a user

Interface and is therefore no longer available.

Current customer information can be found in SAP Support Portal at:

http://service.sap.com/supportapps

Therefore you get the error message:

route permission denied (<my ip> to oss001, sapdp01)

This message is now normal and not a mistake.

"

Please let us why you are trying for OSS1, there are other many possible connections types to connect to SAP.

Best Regards

Saurabh

[former_member285009 · Accepted solution]

Hi Saurabh,

thank you!

Here's a bit of background on what I'm trying to do. I need to download support packages for my developer play-and-test NW73 system.

For that, I unfortunately need to configure the Solution Manager system so it can download support packages with MOPZ, because it's not possible to just get them via service.sap.com/swdc anymore.

Now, I'm an absolute Solman rookie, currently I'm trying to get the service connection to SAP to work in order to be able to download SPs.

I thought the best way to to this was in OSS1, but apparently it was not, so your answer was helpful there already. During Solman_setup in activity CHeck service connection, I get the error RFC connection to destination SAPOSS failed, that was my starting point:

So now I'm back to testing in SM59.

SM59 technical settings for SAPOSS:

Target System   OSS

Msg. Server     /H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001/S/

Group           EWA

Trace file dev_rfc1 after connection test:

**** Trace file opened at 20120913 125820 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 000)

Destination: SAPOSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1EE1BFB1FAC4EC41DEB3, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: ED91FDE1EE83F114BEB300505685029D

The error "Hostname or service of the message server unknown" points to a saprouter/SNC issue or to a missing entry in the services file.

So far, it seems that the services file seems to contains all the relevant entries and the saprouter also seems to run fine, except for the issues detailed in my posts above.

I'll keep looking and update this discussion.

Best regards

Martin

[Former Member · Accepted solution]

Hi Martin

Please try n follow this note.

Let me know if you are stuck somewhere.

Note 797001 - SAP Notes - Unable to download an SAP Note with SNOTE

Best Regards

Saurabh

[former_member285009 · Accepted solution]

Hi Saurabh,

thanks a million, problem solved!

In note 797001 it says to use logon group PUBLIC_1, I had used logon group EWA. Changing the logon group solved the problem!

All the best,

Martin

[former_member185257]

Please check that wheather you have an entry named "sapmsO01" in the services file or not?

If you found no entry there, please insert an entry with "sapmsO01     36<instance_no>/TCP".

With regards,

Sunny

[former_member285009]

Hi Sunny,

thanks for your help. No I had not changed either the services or the hosts file. I've done that now:

    services:

     sapmsO01 3601/tcp

     hosts:

    192.168.99.96 winsap2012

    194.39.131.34 sapserv2

Instance for sapmsO01 here would be the instance on SAP side, that's 01, correct? Not my Solution Manager's instance?

Anyway, I still get the same error, after stopping and restarting SAProuter and then trying to log on in OSS1:

[Thr 2472] Thu Sep 06 15:45:40 2012

[Thr 2472] LG-Layer: Release 720, version 5, Dec 21 2009

[Thr 2472]

[Thr 2472] Thu Sep 06 15:45:44 2012

[Thr 2472] *** ERROR => NiBufIProcMsg: hdl 1 received rc=-104 (NIEROUT_SNC_FAILURE) from peer [nibuf.cpp    2122]

[Thr 2472]

[Thr 2472] *

[Thr 2472] *  ERROR       The connection to the specified message server

[Thr 2472] *              (/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

[Thr 2472] *              /S/sapmsO01 / x) failed. Please check the trace file

[Thr 2472] *              of the message server. If a network filter has

[Thr 2472] *              been activated (see message server parameters

[Thr 2472] *              ms/acl_file_...) please check the configuration

[Thr 2472] *

[Thr 2472] *  TIME        Thu Sep 06 15:45:44 2012

[Thr 2472] *  RELEASE     720

[Thr 2472] *  COMPONENT   MS (message handling interface, multithreaded)

[Thr 2472] *  VERSION     4

[Thr 2472] *  RC          -35

[Thr 2472] *  MODULE      msxxi.c

[Thr 2472] *  LINE        2777

[Thr 2472] *  COUNTER     1

[Thr 2472] *

[Thr 2472] *****************************************************************************

[Thr 2472]

[Thr 2472] *** ERROR => MsIAttachEx: MsINiWrite (rc=-35) [msxxi.c      884]

[Thr 2472] *** ERROR => LgIAttach: MsAttach (rc=-35) [lgxx.c       4221]

[Thr 2472] *** ERROR => LgApplSrvInfo: LgIAttach(rc=LGEMSLAYER) [lgxx.c       1554]

[Thr 2472]

[Thr 2472] *****************************************************************************

[Thr 2472] *

[Thr 2472] *  ERROR       The connection to the specified message server

[Thr 2472] *              (/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

[Thr 2472] *              /S/sapmsO01 / x) failed. Please check the trace file

[Thr 2472] *              of the message server. If a network filter has

[Thr 2472] *              been activated (see message server parameters

[Thr 2472] *              ms/acl_file_...) please check the configuration

[Thr 2472] *

[Thr 2472] *  TIME        Thu Sep 06 15:45:44 2012

[Thr 2472] *  RELEASE     720

[Thr 2472] *  COMPONENT   MS (message handling interface, multithreaded)

[Thr 2472] *  VERSION     4

[Thr 2472] *  RC          -35

[Thr 2472] *  MODULE      msxxi.c

[Thr 2472] *  LINE        2777

[Thr 2472] *  COUNTER     1

[Thr 2472] *

[Thr 2472] *****************************************************************************

[Thr 2472]

I also ran lgtst, with this command

lgtst u2013H /H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001/S/sapmsO01 -S x -W 30000

It gave this result:

using trcfile: dev_lg

Test Program for LG-Layer (SAP Login Info), Release 720, version 5, Dec 21 2009

**********************************************************************

* can't connect to message server                                    *

* reason : message server hostname not defined                       *

**********************************************************************

required options

  pf=name           : profile name or

  name=SID          : system sid or

  -H mshost         : hostname of message server and

  -S msserv         : service-name / number of message server

additional options

  -T tracefile      : name of trace file     (default dev_lg)

  -W waittime       : for net-calls          (default 10000 millisecs)

  -D [1|2|3]        : display server and/or logon groups

  -N [1|2|3]        : display sncnames for server and/or logon groups

          1         : display both

          2         : display only server

          3         : display only logon groups

   ( default is -D 1 )

  -E [0|1]          : with SAP J2EE Info

  -G group          : group logon data

  -X group          : group logon detail data

   [-L 1]             group logon data with sncname

  -A name           : sncname of application server via name

  -P ip,port        : sncname of application server via ipadr/port

  -t n              : start n threads

  -C n              : do it n times

  -Y n              : delay n millisecs for each loop

Thanks for your help!

Best regards

Martin

[former_member185257]

please dont forget to reward me if my solution is helpfull to you.

[former_member285009]

Hi Sunny,

it's my first time time here, I marked your answer as helpful, is there anything else I should do?

Cheers

Martin

[Former Member]

Please tell me if you register yourself with Note 28976 - Remote conection data sheet at SAP network?

Regards

Roman

[former_member285009]

Hi Roman,

yes I did. I received a DN, crypto is installed and Saprouter is running with SNC.

Best regards

Martin

[Former Member]

Please check logs from your saprouter to confirm correct saprouttab settings to sapserv2 router

Regards

Roman

[former_member285009]

Hi Roman,

thanks for helping. Here is the content of the dev_rout file (that's the one, right?):

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "710"

---------------------------------------------------

Fri Sep 07 12:27:40 2012

SAP Network Interface Router, Version 39.3 (SP4)

command line arg 0:          saprouter

command line arg 1:          -r

command line arg 2:          -S

command line arg 3:          3299

command line arg 4:          -K

command line arg 5:          p:CN=winsap2012, OU=0000705212, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "C:\usr\sap\saprouter\sapcrypto.dll".

  File "C:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 6972, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

The latest dev_lg entry can be found in my previous post.

Thanks and best regards

Martin

[Former Member]

Try to check OSS1 connection and after that check saprouter.log file for results. Also provide info how you test OSS1 connection

Regards

Roman

[former_member185257]

Please check SAPOSS  and SAPOSS1 RFCs are connected properly or not?

[former_member285009]

Hi Roman

saprouter.log after choosing log on in OSS1:

Fri Sep 07 13:29:08 2012 INIT LOGFILE

Fri Sep 07 13:29:08 2012 READ ROUTTAB ./saprouttab o.k.

Fri Sep 07 13:29:46 2012 CONNECT FROM C9/- host 192.168.99.96/60300 (WINSAP2012)

Fri Sep 07 13:29:46 2012 CONNECT TO   S9/17 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=winsap2012, OU=0000705212, OU=SAProuter, O=SAP, C=DE)

Fri Sep 07 13:29:52 2012 CONNECT ERR  S9/17 NIESNC_FAILURE on 'SAProuter 39.3 (SP4) on 'WINSAP2012''

Fri Sep 07 13:29:52 2012 DISCONNECT   S9/17 host 194.39.131.34/3299 (194.39.131.34)

As for how I test OSS1, I simply choose Parameter -> Techical settings in OSS1 and select Log on.

Before I do that, I check if saprouter is running, of course.

The technical details in OSS1 are maintained as depicted in the screenshot in my original question, see above.

Please let me know if you need further details.

Thanks!

Martin

[Former Member]

According to log you provided you have problems with SNC. In documentation for SAPRouter:

"SNC not active for a backwards connection. The SAProuter on the client side has not activated SNC. Restart the SAProuter on the client side with the option –K mysncname."

Please check your saprouter configuration related to snc.

To be sure please check also SAPOSS (SAPOSS1) RFC connections in SM59.

Regards

Roman

[former_member285009]

Hi Sunny,

no, connection tests for SAP-OSS and SAPOSS both fail.

Technical settting in SM59 for both SAP-OSS and SAPOSS:

Target System   OSS

Msg. Server     /H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001/S/

Group           EWA

Trace file dev_rfc3 after connection test with SAP-OSS:

**** Trace file opened at 20120907 135244 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAP-OSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 001)

Destination: SAP-OSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1ED1BE9BD951016F2968, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: 88E2F8E1859BF195896800505685029D

**** Trace file opened at 20120907 135505 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAP-OSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 001)

Destination: SAP-OSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1ED1BE9BD951016F2968, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: DCE2F8E1A22EF1CC896800505685029D

Thanks and best regards

Martin

[former_member185257]

>>>Hostname or service of the message server unknown

Please delete the RFC SAOOSS and goto OSS1,then

choose Parameter -> Techical settings,goto Edit mode and save again.It will automatically create the RFC.

Check it once.

Regards,

Sunny

[former_member285009]

Hi Sunny,

ok, I've done that now, but I still can't connect.

Trace file dev_rfc7 after connection test with SAPOSS:

**** Trace file opened at 20120910 165231 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 001)

Destination: SAPOSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1ED1BE81539052080968, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: 2557FBE1D42CF13F896800505685029D

So it's still the same error.

Thanks for your help and best regards

Martin

[former_member285009]

Hi Roman,

ok, found the part in the SAProuter documentation. But I'm unsure as to how it helps.

I have restarted the SAProuter a number of times, I always start it with

saprouter -r -S 3299 -K "p:CN=winsap2012, OU=0000705212, OU=SAProuter, O=SAP, C=DE"

So the -K option is definetely always in there.

As for SM59, I checked the SAPOSS connection and even recreated as Sunny (see above) told me, but I still get this error (Trace file dev_rfc7 after connection test with SAPOSS😞

**** Trace file opened at 20120910 165231 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 001)

Destination: SAPOSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1ED1BE81539052080968, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: 2557FBE1D42CF13F896800505685029D

Thanks for your help and best regards

Martin

[former_member185257]

Brother please reinstall the license once again.

Is 3299 port opened in firewall?

[former_member285009]

Hi Sunny,

just to update you:

I re-installed the saprouter license but that did not help.

Port 3299 is open.

I'll keep looking...

Best regards

Martin

[Former Member]

Please check RFC connection SAPOSS again (SM59) and paste results

Regards

Roman

[former_member185257]

Sorry brother , request you to raise a ticket in SMP.

Regards,

Sunny

[former_member209962]

Hi,

I checked your saposs rfc results your string MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001  is incorrect please us as

MSHOST =/H/192.168.99.96/S/3299/H/194.39.131.34/S/3299/H/oss001

and test

Thanks

Tabrayz

[former_member285009]

Hi Tabrayz,

ok, I used your mshost string in SAPOSS in SM59, this is the result I got in the dev_rfc1 trace file:

**** Trace file opened at 20120913 125820 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 000)

Destination: SAPOSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1EE1BFB1FAC4EC41DEB3, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: ED91FDE1EE83F114BEB300505685029D

**** Trace file opened at 20120913 131148 W. Europe Daylight Time, by disp+work

**** Versions SAP-REL 720,0,59 RFC-VER U 3 1179700 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/192.168.99.96/S/3299/H/194.39.131.34/S/3299/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: LUEDECKE (Client: 000)

Destination: SAPOSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)

EPP RootContextId: 00505685029D1EE1BFB1FAC4EC41DEB3, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0

EPP TransactionId: CF93FDE1A724F19DBEB300505685029D

So I'm guessing the service file or my saprouter is the culprit....I just wasn't able to find the error yet.

Thanks and best regards

Martin

[former_member209962]

Dear Martin,

if you see the log its again taking old one =/H/192.168.99.96/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

make sure u keep 3299 in place of sapdp99 

/H/192.168.99.96/S/3299/H/194.39.131.34/S/3299/H/oss001

Thanks

Tabrayz