OSS1 error SncSessionInitiatorAK

[Former Member]

Hi

I'm having this error when trying to Logon to SAPNet in TRx OSS1. What can I do?

This is de detail.

Thanks!

[former_member206167]

Hi,

   Fisrt check you have environment variables SECUDIR and SNC_LIB pointing to the right path of user <SID>adm

Ex: c\usr\saprouter

Then take a backup of your soaprouttab file and  download files saprouter.sar and sapcrypto.sar  from market place.

Go to service.sap.com/SAPROUTER-SNCADD to get your “Distinguished Name”.

      Generate the certificate Request with the command:
sapgenpse get_pse -v -r certreq -p local.pse
“ <Distinguished Name>”

1. 4. Display the output file "certreq" and
   with copy&paste (including the BEGIN and END statement) insert the
   certificate request into the text area of the same form on the SAP Service
   Marketplace from which you copied the Distinguished Name.
2. 5. In response you will receive the certificate signed
   by the CA in the Service Marketplace. Copy&paste the text to a new local
   file named "srcert", which must be created in the same directory as
   the sapgenpse executable.

Example:

sapgenpse get_pse -v -r certreq -p local.pse
"CN=autdev,OU=0001053079,OU=SAProuter,O=SAP,C=DE"

Be carefull not leaving spaces in Distinguished name which leads on errors later


You will be asked twice for a PIN here. Please choose
a PIN and document it, you have to enter it identically both times. Then you
will have to enter the same PIN every time you want to use this PSE.

Display the output file "certreq" and
with copy&paste (including the BEGIN and END statement) insert the
certificate request into the text area of the same form on the SAP Service
Marketplace from which you copied the Distinguished Name.

In response you will receive the certificate signed
by the CA in the Service Marketplace. Copy&paste the text to a new local
file named "srcert", which must be created in the same directory as
the sapgenpse executable.

With this in turn you can install the certificate
in your saprouter by calling:

sapgenpse import_own_cert -c srcert -p local.pse

C:\saprouter>sapgenpse import_own_cert -c srcert -p
local.pse

Please enter PIN:

CA-Response successfully imported into PSE
"C:\saprouter\local.pse"

Now you will have to create the credentials for the
SAProuter with the same program (if you omit -O <user_for_saprouter>, the
credentials are created for the logged in user account).
sapgenpse seclogin -p local.pse -O <user_for
_saprouter>Note: The account of the service user should always be
entered in full <domainname>\<username>

C:\saprouter>sapgenpse seclogin -p local.pse

running
seclogin with USER="adminmqa"

Please enter PIN:

Added
SSO-credentials for PSE "C:\saprouter\local.pse"

"CN=autdev,
OU=0001053079, OU=SAProuter, O=SAP, C=DE"

8. This will create a file called "cred_v2"
in the same directory as "local.pse"

Check if the certificate has been imported
successfully with the following command:

sapgenpse get_my_name -v -n Issuer

Check if the environment of the user running SAProuter
contains the environment variable SNC_LIB and SECUDIR

Start the SAProuter with the following command line (to start the
SAProuter as a Windows service, please follow the steps described in SAP note
525751):

saprouter -r -S <port> -K "p:<Distingushed Name>"

               -K tells the saprouter to start
with loading the SNC library

HOpe this helps

Example

saprouter
-r -K "p:CN=example, OU=0000123456, OU=SAProuter, O=SAP, C=DE"

[former_member182034]

hi Nahuel,

It is looking that sap router is not configure correctly.

Please login with SIDadm and scroll the to SAProuter folder and run the following command

sapgenpse seclogin -p local.pse -O <sidadm>

Regards,

[Former Member]

Hi Abdul

Thank you very much for the answer.

After running the command it said: Added SSO-credentials for PSE "path" "credentials"

then I restart the SAP Router, but the error continues.

[former_member182034]

hi Nahuel,

would you share the command and its log here.

Please also check the saprouter setting in OSS1.

Regards,

[Former Member]

Hi Abdul

This is the command

I don´t know where to find the log.

This is the OSS1 setting

Thanks for your help.

[former_member182034]

hi Nahuel,

what did you put the PIN code because issue should be resolve after this command

would you confirm me that saprouter already configured on your system or you first time configured it?

Please also run the following command and send me log.

sapgenpse get_my_name -v -n validity

Regards,

[Former Member]

Hi Abdul

in PIN code I put 1234. The same number I used to register the licence.

The saprouter was configured and working, then some day stop working. I don´t realise until I need to use the SNOTE TRx.

Here is the command

Regards

[former_member182034]

hi Nahuel,

Please also run the following command and send me log.

sapgenpse get_my_name -v -n validity

Regards,

[Former Member]

Hi Abdul

Sorry I forget to post the log, here is the print screen.

Regards.

[former_member182034]

Dera Nahuel,

Please login with SIDadm and start the saprouter via saprouter.exe. It is started successfully then check the error again.

pleaase also check that saprouter service is running or not?

Regards,

[Former Member]

Hi Abdul

Thanks for the answer.

Here is what happened when I try to start Saprouter. (printscreen)

Then I check dev_rout

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "700"

---------------------------------------------------

Tue Aug 13 09:52:24 2013

SAP Network Interface Router, Version 38.10

command line arg 0:    saprouter.exe

command line arg 1:    -r

main: pid = 7004, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

*** ERROR => SNC field without SNC active, skip line 2 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 5 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 6 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 7 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 8 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 9 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 10 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 11 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 12 [nirout.cpp   7775]

Something is wrong with the saprouttab, but I don´t know what.(printscreen sapreouttab)

Regards.

[former_member182034]

hi Nahuel,

Please put the P * * * in saprouttab, run following command and share the output.

saprouter.exe -r -K "p:CN=SR-SAP2.hagraf, OU=0001192977, OU=SAProuter, O=SAP, C=DE"

saprouttab should be without any extension.

Regards,

majamil1@gmail.com

[Former Member]

Hi Abdul

Here is the output

Many thanks for your help and patience.

Regards

[Former Member]

Check SNC configuration in saprouttab file on saprouter.

[Former Member]

Hi Roman

Thanks for the answer. I assume the SNC configuration is the first line in saprouttab. It saids:

# SNC-Connection form and to SAP

KT    "p:here my credentials"    194.39.131.34    *