SLD connection does not work

[samantha_nez]

Hi experts,

Our PI system is connected to Solman SLD. This connection was working perfectly, but now SLDCHECK does not work. We have tested the RFC destinations LCRSAPRFC and SAPSLDAPI, and we get the following error:

Logon Connection Error

Error Details Error when opening an RFC connection (CPIC-CALL: 'ThSAPOCMINIT' : cmRc=19 thRc=7

Error Details ERROR: Error (Msg DGW                  748 not found)

Error Details LOCATION: SAP-Server XXXX_00 on host XXXX (wp 3)

Error Details COMPONENT: CPIC

Error Details COUNTER: 7

Error Details MODULE:

Error Details LINE:

Error Details RETURN CODE: 748

Error Details SUBRC: 0

Error Details RELEASE: 721

Error Details TIME: Mon Sep  2 17:07:12 2013

Error Details VERSION:

SLD and JCO RFC Providers service are running, as well as the Programs ID configured. All were stopped and restarted again, included the JCO RFC service. All data are correct (Program ID name, Gateway, and so on), but RFC testing does not work.

Any idea to check?

Thanks in advance,

Samantha.

[iaki_vila · Accepted solution]

Hi Samantha,

Have you checked the SAP Knowledge article 1828815 - SM59 connection test returns "ERROR: SNC disabled to start insecure programs, reject reque...?

Regards

[samantha_nez · Accepted solution]

Hi Iñaki,

Thanks for your reply, but in PI, for RFC destinations SNC is inactive. Anyway, the parameter in Solman is already set as the note explains.

On the other hand, we have checked the connection between Solman and its SLD, and SLDCHECK works correctly...

Any new idea?

Thanks again,

Samantha.

[former_member264034 · Accepted solution]

Hi,

Please also have a look at note 1592493, it says that lines:

P TP=* HOST=internal CANCEL=internal ACCESS=internal
P TP=* HOST=local CANCEL=local ACCESS=local

must be written at the end of reginfo in this order.  The entries
defined by the administrator should always be evaluated first.

Then you should reload the new reginfo with SMGW.

As per the SAP note 63347, the "return code 748" means:

CPIC return code 748 means "Access to registered server denied".

Check in SMGW -> Goto -> Logged on clients

that SAPSLDAPI from server is registered in DGW GW, if not then that's why you get

this error when testing the connection.

Please review your reginfo rules, adjust them accordantly, and then
reload the rules with the following procedure:

1) Access the transaction SMGW, menu Goto -> expert functions ->
   external security -> reload;

2) De-register all the registrations of the involved program (in case
it's registered more than once);

3) Re-register the program.

The steps 2 and 3 are necessary because the already registered programs
will continue to use the old rules, and there is no way to refresh this
information besides de-registering/re-registering the program.

Regards,

Aidan

[Former Member · Accepted solution]

Hi,

If any of the servers are in a DMZ or on a different subnet from each other then you may have the access denied due to the gw/acl_mode parameter. Please see below, hope this helps:

The error "748 Access to registered server denied" is related to gatewaysecurity features. More specifically, to the rules maintained at the

"reginfo" file.

The fastest way to workaround the issue is to deactivate the security

features. This can be done with the following steps:

- ensure that the parameter "gw/acl_mode" is set to 0 (zero);

- if the files "reginfo" and "secinfo" exist (check the parameters

gw/reg_info and gw/sec_info), rename them (or move them to a different folder);

- reload the security rules at the transaction SMGW, menu Goto ->

Expert functions -> external security -> reread.

The more secure solution is to adjust the rules at the reginfo file.

You can refer to the attached SAP notes 1408081 and 1069911 for help

with that.

Regards

Dean Wood

[samantha_nez · Accepted solution]

Hi Aidan,

We checked the reginfo rules and discovered a problem. Basis team modified reginfo and the issue was resolved.

Thanks for your reply.

Samantha.

[former_member229542 · Accepted solution]

Hi Aidan,

Im experiencing same error with SLD_NUC and SLD_UC RFC Connections from an satellite system

I have cleared reginfo file, restarted system set acl_mode = 0, but still no luck

How do you unregister a program from gateway?

[Former Member · Accepted solution]

HI Aidan

in PO 7.4 java only system，there is no need to configure SAPSLDAPI，so what should i do then？

[Former Member]

Please check the following blog for all required SLD settings:

http://scn.sap.com/community/pi-and-soa-middleware/blog/2013/08/23/creation-of-an-sld-connection-fro...

Best Regards

Harald

[manigram]

HI,

Check SLDAPICUST, it showing logon error, So check any user id validity experied or password experied.

Regards,

Manigadnan