Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Trust relationship between more SAP Systems

Former Member
0 Kudos

Hi SAP Specialists,

I configured Trust relationship between more SAP Systems. I have the problem that for some systems the trust is not working because the SAPSYS.PSE is not readable.

Trust between SAP NetWeaver AS ABAP 7.31 (lets say system ABC) and SAP SOLUTION MANAGER 7.1 (system DEF) is working fine, but when I try to connect for example a  SAP ECC 6.0 (System GHI) to ABC. I receive an error message at the SSO2 test.

First when I execute the transaction SSO2 in GHI system I get a pop up error saying Internal Error. I confirm the error and receive the usual window with the checks made by the SSO2 transaction, See also in the attached print screen.

I checked the RFC connections, there are all working, also the authorisation test is working fine in both directions.

You can see in the attached print screen that the SAPSYS.PSE file can not be red.

Does anybody know why?

Kind Regards,

Andrei Stefanescu

1 ACCEPTED SOLUTION

Former Member
0 Kudos

I think you need to add the ECC certificate in strustsso2 Tx.

Thanks

Dev

7 REPLIES 7

magexposito
Active Participant
0 Kudos

Hello Andrei,

Did you check in transaction STRUST if the system PSE is available (green icon)? In this transaction you can generate a new .pse file. One thing that seems a little bit strange  is the system is looking for the .pse file in the directory /usr/sap/.../DVEBMGS01/sec/sec where the directory should be /usr/sap/.../DVEBMGS01/sec/. Please check the following information:

http://help.sap.com/saphelp_nw04s/helpdata/en/a6/f19a3dc0d82453e10000000a114084/content.htm

Also, you have to add to the strust transaction the certificate for the SAP ECC 6.0 (System GHI).

Best regards.

0 Kudos

Hi

I did the configuration in STRUST already. See the bellow print screen.  My only problem now is that the System is not finding the SAPSYS.PSE.  Can I set a System variable to point to the SAPSYS.PSE?

0 Kudos

Hello Andi,

Can you please check the value of the operating system parameter SECUDIR with the user sidadm? If should have a value like this:

SECUDIR=/usr/sap/SID/DVEBMGS01/sec

Best regards.

0 Kudos

This was the solution from Andreas Vollmer

http://scn.sap.com/thread/1498988

Thank you guys !

Andrei

Former Member
0 Kudos

I think you need to add the ECC certificate in strustsso2 Tx.

Thanks

Dev

0 Kudos

Hi

Thank you for the quick answer. I already added both Certificates in the Transaction STRUSTSSO2 and added both to the ACL List. See print screen.

Kind Regards,

Andrei

0 Kudos

This was the solution from Andreas Vollmer

http://scn.sap.com/thread/1498988

Thank you guys !

Andrei