SAP Router SNC Problem

[Former Member]

Dear SAP Gurus,

I changed the OS from our SAP Router (Server 2003 to Server 2008) and i tried to reconfigure our Router but now i have the following error in the dev_rout wihl triying to connect via SM59 (SAPOSS):

******* NI-ROUTER LOOP ********

NiIRead: hdl 17 received data (rcd=1803,pac=1,MESG_IO)

->> SncProcessInput(snc_hdl=000000000AD16760, ibuf=0000000003C7A548, ilen=1803, &obuf=00000000020EF230,

          &olen=00000000020EF220, &backbuf=00000000020EF188, &backlen=00000000020EF180)

*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [D:/depot/b 3386]

*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [D:/depot/bas/74 3352]

      GSS-API(maj): A token had an invalid signature

      GSS-API(min): Certification path incomplete

    Unable to establish the security context

    target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

<<- SncProcessInput()==SNCERR_GSSAPI

*** ERROR => NiSncIProcIn: SncProcessInput failed (sncrc=-4;000000000AD16760;1803) [nisnc.c      1003]

NiSelISelectInt: 1 handles selected (1 buffered)

Certificate is new, validity is OK.

SECUDIR=D:\usr\sap\saprouter

SNC_LIB=D:\usr\sap\saprouter\ntintel\sapcrypto.dll

Connection String from SAP side:

/H/<saprouterip>/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

I have nothing changed on SAP side. I have not changed IP-Adresses / Hostnames from the Router.

Firewall settings are still the same.

I am able to ping sapserv2 from the router and i am able to ping the router from the sap servers.

I have no idea what can be wrong. Can anybody help me?

Best regards,

Klaus

[Former Member · Accepted solution]

Hi all,

problem is solved now. It was simple, i used a old version of sapcryptolib.....

Thanks for help.

Best regards,

Klaus

[Former Member]

I use IP 194.39.131.34 (sapserv2) which was given from SAP support.

I already generated a new certificate. I think it is ok. Please see he commands:

sapgenpse get_my_name -n validity

SSO for USER "XXXX"

  with PSE file "D:\usr\sap\saprouter\local.pse"

Validity  -  NotBefore:   Mon Jun 08 14:22:46 2015 (150608122246Z)

              NotAfter:   Tue Jun 07 14:22:46 2016 (160607122246Z)

sapgenpse get_my_name -v -n Issuer

Opening PSE "D:\usr\sap\saprouter\local.pse"...

PSE (v2) open ok.

Retrieving my certificate... ok.

Getting requested information... ok.

SSO for USER "MBADMIN"

  with PSE file "D:\usr\sap\saprouter\local.pse"

Issuer  : CN=SAProuter CA, OU=SAProuter, O=SAP Trust Community II, C=DE

Best regards,

Klaus

[former_member384109]

hi,

are u sure, u put proper ip add of sap router.which given by sap

[former_member384109]

hi Klaus

Please check the port 3299 is open in firewall or not and please share your OSS1 configuration parameter and share SAPOSS rfc configuration info.

[Former Member]

Hi,

OSS1:

Customer Site

Name	<saproutername>
IP Address	<saprouerip>

Instance no.  99

SAP Site:

Name	sapserv2
IP Address	194.39.131.34

Instance no.  99

Message Server:

Name	oss001
DB Name	O01

Instance no.  01

SAPOSS RFC:

I dont understand what you exactly need. Connection string is:

/H/<saprouterip>/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

The firewall guys say that the configuration for 3299 is ok, is there a simple way to test it?

I dont think that there is a problem because it was working before i reinstalled the router.

OSS1 and SM59 also not changed, ao i think i is a problem on the router iself.

Best regards,

Klaus

[former_member182034]

hi Klaus,

Please follow the instruction of this link to resolve this issue.

SAProuter Certificate Expired How to Fix ?

[former_member384109]

Hi Klaus blab,

Please check the SAP OSS connection.pls go to SM59 and check saposs rfc connection.

and also check configuration in oss1, is it ok or not.

[Former Member]

Hi ankit patel,

thanks for your reply.

SM59 tells me:

Logon    Connection Error

Error Details    Error when opening an RFC connection

Error Details    ERROR: SNC processing failed: SncProcessInput

Error Details    LOCATION: SAProuter 40.4 on '<saproutername>'

Error Details    DETAIL: NiSncIProcIn: sncrc=-4;000000000AFA6490

Error Details    COMPONENT: NI (network interface)

Error Details    COUNTER: 51

Error Details    MODULE: D:/depot/bas/742_REL/src/base/ni/nisnc.c

Error Details    LINE: 1000

Error Details    RETURN CODE: -104

Error Details    SUBRC: 0

Error Details    RELEASE: 742

Error Details    TIME: Tue Jun 09 08:29:32 2015

Error Details    VERSION: 40

OSS1 is ok.

Best regards,

Klaus