7.40 gateway RFC registration (SLD_UC) errors

[Former Member]

Hello Experts!!

We recently upgraded our CRM7.0 from EHP2 to EHP3 (with NW7.40)Pure ABAP AS and PI from 7.11 to NW7.40 Dual Stack. 
The PI system also acts as our SLD system.

Now, I can no longer register my SLD information.

Our CRM system sends it's RZ70 information to our PI system.

On my CRM system, I am getting the following error when I try to test my SLD_UC RFC:

Connection Error
Error when opening an RFC connection (CPIC-CALL: 'ThSAPOCMINIT' : cmRc=19 thRc=7
ERROR: Internal error, session terminated
LOCATION: SAP-Server myCRMsystem_CDM_00 on host myCRMsystem (wp 0)
COMPONENT: CPIC
COUNTER: 49
MODULE:
LINE:
RETURN CODE: 748
SUBRC: 0
RELEASE: 741
TIME: Fri Aug 15 14:41:17 2014
VERSION:

I also see this error in the "work" directory dev_rfc0 log on the system trying to execute the RFC:

**** Trace file opened at 20140815 144243 CDT, by disp+work
**** Versions SAP-REL 741,0,46 RFC-VER U 3 1515209 MT-SL
======> CPIC-CALL: 'ThSAPOCMINIT' : cmRc=19 thRc=748
Internal error, session terminated
ABAP Programm: RSRFCPIN (Transaction: SM59)
User: myUserName (Client: 300)
Destination: SLD_UC (Handle: 2, DtConId: 53EE204B1B681BC0E10080000AE20184, DtConCnt: 0, ConvId: ,)
EPP RootContextId: 8EF52D95010F1EE4899196D21A7F17BC, ConnectionId: 00000000000000000000000000000000, ConnectionCnt: 0
EPP TransactionId: 53EE20481B681BC0E10080000AE20184
Error RFCIO_ERROR_SYSERROR in /bas/741_REL/src/krn/rfc/abrfcpic.c : 1747
CPIC-CALL: 'ThSAPOCMINIT' : cmRc=19 thRc=748
Internal error, session terminated
DEST =SLD_UC
HOST =%%RFCSERVER%%
PROG =SLD_UC
GWHOST =myPIsystem
GWSERV =sapgw00

I see this error in the PI system /usr/sap/SID/DVEBMGS00/work/gw_log-2014-08-15

S Fri Aug 15 2014 14:42:42:736 reginfo denied client: TP=SLD_UC, ACCESS=loopback (127.0.0.1)

My system trying to execute TCP/IP RFC SLD_UC: myCRMsystem

CRM 7.0 EHP3 SP05 (07/2014)
NW 7.4 SP Stack 07 (06/2014)
Kernel 741v46 Unicode
DB Oracle 11.2.0.3
OS AIX 6.1 64-bit

My system trying to receive that information: myPIsystem

SAP PI
NW 7.4 SP Stack 07 (06/2014)
Kernel 741v46 Unicode
DB Oracle 11.2.0.3
OS AIX 6.1 64-bit

I have these parameters set (on both sender and receiver) in RZ10 DEFAULT profiles and the PI java SCS instance profile:

gw/reg_no_conn_info = 0
gw/reg_info =  $(DIR_GLOBAL)/reginfo
gw/sec_info  = $(DIR_GLOBAL)/secinfo
gw/acl_mode  = 0
I have NOT defined the gw/acl_file parameter

I have restarted the systems with these changes

I have generated a reginfo and secinfo file for both systems

For CRM the reginfo looks like this:

#VERSION=2
#
# created by NWELLS at 20140815 094217
#
# local access should be allowed by default
# P TP=* HOST=local
#
# internal (server from the same SID) access should be allowed by default
# P TP=* HOST=internal
#
# list of registered programs form SM59 which must be explicitly defined
#
P TP=Trex_CDM_* HOST=* CANCEL=* ACCESS=*
P TP=SLD_NUC HOST=local CANCEL=local ACCESS=*
P TP=SLD_NUC HOST=internal CANCEL=internal ACCESS=*
P TP=IGS.CDM HOST=local CANCEL=local ACCESS=*
P TP=IGS.CDM HOST=internal CANCEL=internal ACCESS=*
P TP=sapfallback HOST=local CANCEL=local ACCESS=*
P TP=sapfallback HOST=internal CANCEL=internal ACCESS=*
P TP=SLD_UC HOST=local CANCEL=local ACCESS=*
P TP=SLD_UC HOST=internal CANCEL=internal ACCESS=*
P TP=TRILLIUM.CONNECTOR HOST=local CANCEL=local ACCESS=*
P TP=TRILLIUM.CONNECTOR HOST=internal CANCEL=internal ACCESS=*
P TP=VERTEX_M_300 HOST=local CANCEL=local ACCESS=*
P TP=VERTEX_M_300 HOST=internal CANCEL=internal ACCESS=*
P TP=Trex_CDM_20121009111814 HOST=local CANCEL=local ACCESS=*
P TP=Trex_CDM_20121009111814 HOST=internal CANCEL=internal ACCESS=*
P TP=SAPphone HOST=local CANCEL=local ACCESS=*
P TP=SAPphone HOST=internal CANCEL=internal ACCESS=*
P TP=xs-bhm-ccd-1.n3stat.00 HOST=local CANCEL=local ACCESS=*
P TP=xs-bhm-ccd-1.n3stat.00 HOST=internal CANCEL=internal ACCESS=*
P TP=IGS.CDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=VERTEX_M_300 HOST=10.226.1.132 CANCEL=10.226.1.132 ACCESS=*
P TP=* HOST=local CANCEL=local ACCESS=local
P TP=* HOST=internal CANCEL=internal ACCESS=internal

For PI, the reginfo looks like this:

#VERSION=2
#
# created by MYusername at 20140815 094102
#
# local access should be allowed by default
# P TP=* HOST=local
#
# internal (server from the same SID) access should be allowed by default
# P TP=* HOST=internal
#
# list of registered programs form SM59 which must be explicitly defined
#
P TP=Trex_PDM_* HOST=* CANCEL=* ACCESS=*
P TP=SLD_UC HOST=local CANCEL=local ACCESS=*
P TP=SLD_UC HOST=internal CANCEL=internal ACCESS=*
P TP=SLD_UC HOST=xs-bhm-crd-1 ACCESS=loopback
P TP=SLD_NUC HOST=local CANCEL=local ACCESS=*
P TP=SLD_NUC HOST=internal CANCEL=internal ACCESS=*
P TP=AI_RUNTIME_PDM HOST=local CANCEL=local ACCESS=*
P TP=AI_RUNTIME_PDM HOST=internal CANCEL=internal ACCESS=*
P TP=AI_VALIDATION_PDM HOST=local CANCEL=local ACCESS=*
P TP=AI_VALIDATION_PDM HOST=internal CANCEL=internal ACCESS=*
P TP=LCRSAPRFC_PDM HOST=local CANCEL=local ACCESS=*
P TP=LCRSAPRFC_PDM HOST=internal CANCEL=internal ACCESS=*
P TP=SAPSLDAPI_PDM HOST=local CANCEL=local ACCESS=*
P TP=SAPSLDAPI_PDM HOST=internal CANCEL=internal ACCESS=*
P TP=IGS.PDM HOST=local CANCEL=local ACCESS=*
P TP=IGS.PDM HOST=internal CANCEL=internal ACCESS=*
P TP=sapfallback HOST=local CANCEL=local ACCESS=*
P TP=sapfallback HOST=internal CANCEL=internal ACCESS=*
P TP=AI_RUNTIME_PDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=AI_VALIDATION_PDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=SAPSLDAPI_PDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=LCRSAPRFC_PDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=IGS.PDM HOST=127.0.0.1 CANCEL=127.0.0.1 ACCESS=*
P TP=* HOST=local CANCEL=local ACCESS=local
P TP=* HOST=internal CANCEL=internal ACCESS=internal

Both CRM and PI's secinfo look like this:

#VERSION=2
#
# created by myUsername at 20140815 094208
#
# local access should be allowed by default
# P TP=* USER=* USER-HOST=local HOST=local
#
# internal (server from the same SID) access should be allowed by default
# P TP=* USER=* USER-HOST=internal HOST=internal
#
# list of external programs form SM59 which must be explicitly defined
#
P TP=* USER=* USER-HOST=local HOST=local
P TP=* USER=* USER-HOST=internal HOST=internal

I have read these SCN threads and tried their suggestions but Still I have the problem:

http://scn.sap.com/thread/3223922
http://scn.sap.com/thread/3282284
http://scn.sap.com/thread/3513632
http://scn.sap.com/thread/3416202

I read these notes, again, as best I could I attempted these suggestions:

1592493 - GW: Problems during reginfo configuration
1480644 - gw/acl_mode versus gw/reg_no_conn_info
1298433 - Bypassing security in reginfo & secinfo
1408081 - Basic settings for reg_info and sec_info
1592493 - GW: Problems during reginfo configuration
1069911 - GW: Changes to the ACL list of the gateway (reginfo)

I read this sap help URL:

https://help.sap.com/saphelp_nw73/helpdata/en/e2/16d0427a2440fc8bfc25e786b8e11c/content.htm

The secinfo security file is used to prevent unauthorized launching of external programs
File reginfo controls the registration of external programs in the gateway

I get that, and tried to understand, but still, I am not able to successfully execute my SLC_UC RFC on my CRM system to my PI (SLD) system.

I think I've tried everything....Any ideas???

Thanks

NICK

[Former Member · Accepted solution]

Issue is resolved.  I'm not sure which of these things fixed it...but I can now reach the SLD_UC RFC and RZ70 from my CRM to my PI SLD.

1) On my PI/SLD system - I put the gw/acl_mode  = 0 in the INSTANCE PROFILE! (previously, it was in the DEFAULT and SCS01 only.  Now it's in all 3.

2) On my PI/SLD system - I put the following entries at the BOTTOM of the secinfo/reginfo file:

P TP=* HOST=local CANCEL=local ACCESS=local

P TP=* HOST=internal CANCEL=internal ACCESS=internal

3) On my PI/SLD system - I defined the secinfo/reginfo in this manner:

gw/reg_info =  $(DIR_GLOBAL)/reginfo

gw/sec_info  = $(DIR_GLOBAL)/secinfo

4) restarted the PI instance.

Some of these you might notice in my original thread, but anyway, it's ok now.

Thanks,

NICK

[divyanshu_srivastava3 · Accepted solution]

Great..!!

[former_member182657]

Hi Nick,

Please follow SAP Note   1976188 - 748 not found error creating PI RFC's SAPSLDAPI and LCRSAPRFC

1476839 - PI SLD: Error accessing a remote SLD via RFC

and note  1828815 - SM59 connection test returns "ERROR: SNC disabled to start insecure programs, reject reque...

Regards,

Gaurav

[gabriella_kiss]

Hi,

please clarify which gateway belongs to the sld. When this is a PI gateway,

than clarify on which host  resides the CRM system.

Based on the reg_info logs, I cannot see any rules, which allow access from external host:

for SLD_UC only registering internal and local allowed.

Solution: set gw/acl_mode= 1 and maintain a new rule for CRM system's host.

Don't forget the restart gateway, when you are changing the gateway rules.

Regards, Gabriella Kiss

[divyanshu_srivastava3]

Hi Nick,

Good Day..!!

Did you try deleting these RFC and re-registering from RZ20 ?

Also, gw/acl_mode = 0(no reg or sec parameters) only to check where whether it's system or configuration problem.

Regards,

Divyanshu

[Former Member]

Hey Divyanshu,

Yes, I did delete the SLD_UC RFC and let the RZ70 re-create it.  Still, same error.

As I stated above, I have set gw/acl_mode  = 0 already.

NICK

[divyanshu_srivastava3]

Hi Nick,

When you run sldcheck, did you find where it fails ?

Regards

Divyanshu

[Sriram2009]

Hi Nick

Could you refer the SAP link for NW 7.4

Configuring Central System Landscape Directory Usage - Configuring Process Integration After Install...

Information About the SLD Data Supplier Service in SAP NetWeaver Administrator - Configuring, Workin...

BR

SS