unable to connection test by SM59

[Former Member]

Hi Expert!!!

I need urgent help on the problem of that we are not able to connection test of SAPOSS by the sm59.

We implemented the SNC SAPRouter, our remote user and SAP AG are able to connect us but we can't test the connection by the SM59. we never been success by the sm59, but we are going to GOlive check and its required to configure the RFC Connection

we are using NAT ip address in our SAPRouter.

find the OSS1 connection configuration

Customer SAPRouter1

NAME: : SM4

IP ADDRESS : 10.10.10.25 ======> this is NAT address which is defined the firewall, and there is no restriction in our firewall because i have been defined * means all permissions.

Instance No. : 99

SAP SAProuter

NAME : sapserv2

IP ADDRESS : 192.39.131.34

Instance No. : 99

SAPNelt Message Server

Name : Oss001

DB Name: O01

Instance No. 01

We i do try to logon session has been ended with :UNABLE TO CONNECT TO SAPNET MESSAGE SERVER"

==============

1. saprouter -r -S 3299 -K "p:CN=SM4, OU=0000745747, OU=SAProuter, O=SAP, C=DE"

1. SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sm4 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sm4 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" dev 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" dev 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" qas 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" qas 3200

1. SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

2. KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

2. KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

#

P * * *

#P dev 194.39.131.34 3299

#P dev 194.39.131.34 3201

#P qas 194.39.131.34 3299

#P sm4 194.39.131.34 3299

#P 10.10.10.5 10.10.10.1 *

#P 10.10.10.1 194.39.131.34 *

#P 10.10.10.1 10.10.10.5 3201

#P 10.10.10.1 10.10.10.6 3201

#P 10.10.10.1 10.10.10.9 3202

1. deny all other connections

D * * *

[Former Member]

Hi All,

I had the same problem.

Sap suggested the followiong checks:

- Please check if the credentials were created. They are stored in /seculib/etc

- If not, create credentials as described in point 8 'Installing the sapcrypto library and starting SAPRouter'

- If the SAPRouter is started manuel, under which user account is SAPRouter started? It should be started under the same user it was created

- Under which user account did you install local.pse and created credentials?

- Are the credentials created for the same user account as SAProuter is running?

- You can find more information in note 567853 and htp//service.sap.com/saprouter-sncdoc

I was only able to really solve this issue, by using the correct saprouter programs.

I had been using the saprouter kernel patches, but I should have been using the saprouter lib which you can obtain from:

service.SAP.com -> Support Packages and Patches -> Additional Components -> SAPROUTER -> SAPROUTER 7.00 -> <OS>

Hope this helps you,

Paul Hoogendoorn

[Former Member]

Hi I am having the same problem.

Can anybody help resolve this urgently.

[Former Member]

Hi Friends!

I am having the same problem, too.

Can anybody help resolve this urgently.

Thanks in advance.

[Former Member]

could you pl check your sprouttab file i think you have not allows SAP network to connect to your server.

visit service.sap.com/notes --> connect to SAP --> Set up a Remote Network Connection to SAP --> How to configure the SAProuter?

Cheers,

-Sunil

[Former Member]

Sunil

SAP AG are able to connect us, they have been access my system many times upon the complain and also, our remote users are also accessing servers from the outside the office.

Unfortuantely, we are not able to test the connection by the SM59 its giving the error

I am pasting the dev_rfc, and dev_route, saprouttab log file

===========dev_rfc0

.

• Trace file opened at 20070317 165136 Arab Standard T, SAP-REL 700,0,48 RFC-VER 3 816128 MT-SL

==== Delta 0 0 LOG DROPPED

• Trace file opened at 20070317 174548 Arab Standard T, SAP-REL 700,0,48 RFC-VER 3 816128 MT-SL

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2513

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/10.10.10.25/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: /SSA/XAD (Transaction: SE38)

User: ANWER (Client: 300)

Destination: SAPOSS (handle: 2, , )

>TS> Sat Mar 17 17:45:49 2007

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2513

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/10.10.10.25/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: /SSA/XAD (Transaction: SE38)

User: ANWER (Client: 300)

Destination: SAPOSS (handle: 3, , )

>TS> Sat Mar 17 17:45:50 2007

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2513

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/10.10.10.25/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

R3NAME =OSS

GROUP =EWA

ABAP Programm: /SSA/XAD (Transaction: SE38)

User: ANWER (Client: 300)

Destination: SAPOSS (handle: 4, , )

========dev_route============

Sat Mar 17 17:45:50 2007

• ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1432]

GSS-API(maj): No credentials were supplied

GSS-API(min): File is not existing

Could't acquire INITIATING credentials for

name="p:CN=SM4, OU=0000745747, OU=SAProuter, O=SAP, C=DE"

<<- SncSessionInitiatorAK()==SNCERR_GSSAPI

'target_acl_key' (addr=026AF518, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50526f75 .0...U.. ..SAPRou

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

• ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (rc=-4;0023F340) [nisnc.c 1082]

• ERROR => NiSnc2Connect C1/-1, 194.39.131.34 (rc=-17) [nirout.cpp 2816]

• ERROR => NiRClientHandle: NiRExRouteCon for C1/-1 'sm4.AZCS.COM' failed (rc=-17) [nirout.cpp 2243]

========saprouttab log file

Sat Mar 17 17:45:46 2007 CONNECT FROM C1/- host 10.10.10.25/2724 (sm4.AZCS.COM)

Sat Mar 17 17:45:46 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:46 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:46 2007 DISCONNECT C1/-1 host 10.10.10.25/2724 (sm4.AZCS.COM)

Sat Mar 17 17:45:47 2007 CONNECT FROM C1/- host 10.10.10.25/2726 (sm4.AZCS.COM)

Sat Mar 17 17:45:47 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:47 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:47 2007 DISCONNECT C1/-1 host 10.10.10.25/2726 (sm4.AZCS.COM)

Sat Mar 17 17:45:48 2007 CONNECT FROM C1/- host 10.10.10.25/2728 (sm4.AZCS.COM)

Sat Mar 17 17:45:48 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:48 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:48 2007 DISCONNECT C1/-1 host 10.10.10.25/2728 (sm4.AZCS.COM)

Sat Mar 17 17:45:48 2007 CONNECT FROM C1/- host 10.10.10.25/2730 (sm4.AZCS.COM)

Sat Mar 17 17:45:48 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:48 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:48 2007 DISCONNECT C1/-1 host 10.10.10.25/2730 (sm4.AZCS.COM)

Sat Mar 17 17:45:49 2007 CONNECT FROM C1/- host 10.10.10.25/2733 (sm4.AZCS.COM)

Sat Mar 17 17:45:49 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:49 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:49 2007 DISCONNECT C1/-1 host 10.10.10.25/2733 (sm4.AZCS.COM)

Sat Mar 17 17:45:50 2007 CONNECT FROM C1/- host 10.10.10.25/2735 (sm4.AZCS.COM)

Sat Mar 17 17:45:50 2007 CONNECT TO S1/-1 host 194.39.131.34/sapdp99 (194.39.131.34) (p:CN=sapserv2, OU=SAPRouter, O=SAP, C=DE)

Sat Mar 17 17:45:50 2007 CONNECT ERR S1/-1 NIESNC_FAILURE

Sat Mar 17 17:45:50 2007 DISCONNECT C1/-1 host 10.10.10.25/2735 (sm4.AZCS.COM)

Please try to find out the problem.

REgards

Anwer Waseem

[Former Member]

check the error >TS> Sat Mar 17 17:45:49 2007

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2513

LB: Hostname or service of the message server unknown

also *** ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (rc=-4;0023F340) [nisnc.c 1082]

• ERROR => NiSnc2Connect C1/-1, 194.39.131.34 (rc=-17) [nirout.cpp 2816]

• ERROR => NiRClientHandle: NiRExRouteCon for C1/-1 'sm4.AZCS.COM' failed (rc=-17) [nirout.cpp 2243]

Cheers,

-Sunil

[Former Member]

Hi,

Follow as per the note 69455, 812386, 52956 and run report RTCCTOOL

Regards

Christo