SAProuter error

[Former Member]

Hi All ,

I am new to SAProuter configuration .

I want to start SAProuter , but while doing so i am facing difficulties .

Here sharing Details -

command to start SAProuter  saprouter -r

Result in command prompt -

saprouttab error

Also tried

command  -   saprouter -r -S 3299 -V 3 –K "p:distinguish name" &

                    saprouter -r -S 3299 -G saprouter.log –K "p:distinguish name"

Result in command prompt -

Getting below documentation , nothing related to router status

Any suggestion will be helpful .

Regards

PKP

[former_member351616]

Hello Prabin,

One suggestion that I would give is never copy and paste the SAPGENPSE command or the contents of the saprouttab file from another source( Especially from PDF files) to your files. Type the contents on your own without copy and paste and check it out as copy and paste might include some garbage or invisible characters. That helped when I did my saprouter configuration.

Regards,

Krishna

[Former Member]

Hi Krishna,

Thanks for the valuable suggestion .

I'll  keep this in mind  .

Regards,

PKP

[former_member182657]

Hi,

You've executed the above command in wrong manner,as i suggested earlier you need to provide/ammend host name of the system as well as your SAP Customer ID according to your env.

For e.g command would be as like

saprouter -r -K "p:CN=solman, OU=000072213, OU=SAProuter, O=SAP, C=DE"

Please re-share the results after providing correct values.

regards,

[Former Member]

I'd changed the respective field as you mentioned .

Just didn't share the actual command .

Anyway , executed command 

c:\saprouter>saprouter -r -K "p:CN=Netsds128, OU=000045677, OU=SAProuter, O=

SAP, C=DE"

of course the result is same .

Regards,

PKP

[former_member182657]

Hi,

Could you try to start the router with below command instead of saprouter -r

saprouter -r -K "p:CN=<Host Name>, OU=<SAPCustomerID>, OU=SAProuter, O=SAP, C=DE"

Please amend host name & SAP Customer Account ID before execution the above command & share the result again.

Regards,

[Former Member]

Here is the response for the command   

saprouter -r -K "p:CN=<Host Name>, OU=<SAPCustomerID>, OU=SAProuter, O=SAP, C=DE"   in cmd

SAP Network Interface Router, Version 40.4

Compiled Jul  3 2015 20:01:27

start router : saprouter -r

stop router  : saprouter -s

soft shutdown: saprouter -p

router info  : saprouter -l (-L)

new routtab  : saprouter -n

toggle trace : saprouter -t

cancel route : saprouter -c id

dump buffers : saprouter -d

flush   "    : saprouter -f

hide errInfo : saprouter -z

start router with third-party library: saprouter -a library

generate encrypted password : saprouter -h password_to_encrypt

additional options

-R routtab   : name of route-permission-file  (default ./saprouttab)

-G logfile   : name of log file               (default no logging)

-T tracefile : name of trace file             (default dev_rout)

-V tracelev  : trace level to run with        (default 1)

-H hostname  : of running SAProuter           (default localhost)

-S service   : service-name / number          (default 3299)

-P infopass  : password for info requests

-C clients   : maximum no of clients          (default 800)

-Y servers   : maximum no of servers to start (default 1)

-K [myname]  : activate SNC; if given, use 'myname' as own sec-id

-A initstring: initialization options for third-party library

-D           : switch DNS reverse lookup off

-E           : append log- and trace-files to existing

-J filesize  : maximum log file size in byte  (default off)

-6           : IPv6 enabled

-Z           : hide connect error information for clients

expert options

-B quelength : max. no. of queued packets per client  (default 1)

-Q queuesize : max. total size for all queues (default 20000000 bytes)

-W waittime  : timeout for blocking net-calls (default 5000 millisec)

-M min.max   : portrange for outgoing connects, like -M 1.1023

-I address   : address for outgoing connects, like -I 155.56.76.6

--sock_buf_size=bufsize : socket send/receive buffer size in bytes

                          (only set if larger than OS defaults)

                          default: 32768

                          valid range: 32768 - 10000000 (0 = OS defaults)

# this is a sample routtab : -----------------------------------------

D     host1                host2     serviceX

D     host3

P     *                    *         serviceX

P     155.56.*.*           155.56

P     155.57.1011xxxx.*

P     host4                host5     *          xxx

P     host6                localhost 3299

P     host7                host8     telnet

S     host9

P0,*  host10

KP    sncname1             *         *

KS    *                    host11    *

KD    "sncname "abc"       *         *

KT    sncname3             host11    *

# deny routes from host1 to host2 serviceX

# deny all routes from host3

# permit routes from anywhere to any host using serviceX

# permit all routes from/to addresses matching 155.56

# permit ... with 3rd byte matching 1011xxxx

# permit routes from host4 to host5 if password xxx supplied

# permit information requests from host6

# permit native-protocol-routes to non-SAP-server telnet

# permit ... excluding native-protocol-routes (SAP-servers only)

# permit ... if number of preceding/succeeding hops (SAProuters) <= 0/*

# permit SNC-connection with partnerid = 'sncname1' to any host

# permit all SAP-SAP SNC-connections to host11

# deny all SNC-connections  with partnerid = 'sncname "abc'

# open connects to host11 with SNC enabled and partnerid = 'sncname3'

# first match [host/sncname host service] is used

# permission is denied if no entry matches

# service wildcard (*) does not apply to native-protocol-routes

# --------------------------------------------------------------------

Regards,

PKP

[Former Member]

Hi,

Check the log file dev_rout in /usr/sap/saprouter folder which will give you exact idea of sap router

log.

And

After importing the certificate create Credential for user <sid>adm who will be responsible to start the stop SAP Router (Run following command to do so)

# sapgenpse  seclogin  –p  local.pse  –O  <sidadm>

Note: If solved share the solution and close the thread.

[Former Member]

Hi Ankit ,

Thanks for the response .

I checked the sap router log and also shared the log detail .

is it  mandatory to create Credential for user <sid>adm ?

Still looking for the solution .

Regards,

PKP

[former_member182657]

Hi,

Could you share dev_rout file for analysis ? In addition share the result for command

sapgenpse get_my_name -v -n Issuer

Regards,

[Former Member]

Hi Gourav ,

Thanks for the response .

I shared the dev_rout file details (in response to BASIS SAP) .

Also i am sharing the result of the command sapgenpse get_my_name -v -n Issuer

Regards,

PKP

[former_member294862]

please confirm ports 3299 is open in firewall

and paste DEV_ROUTE log file

[Former Member]

Hi ,

Thanks for the response .

I checked with admin team .

As firewall is stopped ,  port 3299 is opened automatically .

As requested here i am sharing the DEV_ROUTE log file .

SAP Network Interface Router, Version 40.4

command line arg 0: saprouter

command line arg 1: -r

main: pid = 436, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

*** ERROR => Cannot find source identifyer, skip line 1 [nirout.cpp   10623]

Regards,

PKP

[JPReyes]

Hi Prabin,

Error looks quite basic to me, you have incorrect entries in the saprouttab.

Have you reviewed the entries in the routing table?

Regards, Juan

[Former Member]

Hi Juan ,

Thanks for the response .

saprouttab contains

# SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

# SNC-connection from SAP to local R/3 System fro Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sapsystemip 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sapsystemip 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sapsystemip 50000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sapsystemip 51200

#KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 1503

#KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 23

KP * * *

P * 194.39.131.34 3299

D * * *

I checked the saprouter log file but nothing actually written on to it .

Regards,

PKP

[JPReyes]

Remove or comment out "KP * * *" and try again

the rest looks ok

[isaias_freitas]

hmmmm "KP * * *" should be fine as well (see the saprouter documentation attached to the SAP note 30289 - it's a PDF file).

Is the saprouttab file located at the "c:\saprouter" folder? (ok, obvious question, but doesn't hurt to ask ).

Sharing the dev_rout file (as suggested below) would help .

[Former Member]

Tried , again same issue .

[Former Member]

Hi Isaias Freitas ,

Thanks for the response .

The saprouttab is located at "c:\saprouter" folder .

Never mind ....

I shared the dev_rout file details (in response to BASIS SAP) .

Regards,

PKP

[former_member199290]

Hi Prabin:

- What is the output of the command saprouter.exe -l (Letter 'L')?

[isaias_freitas]

Hello PKP,

Please add "-G saprouterlog.txt -V 2" to your saprouter startup line:

    saprouter -r -G saprouterlog.txt -V 2 -K "p:CN=......"

Then attach the updated "dev_rout" and the "saprouterlog.txt" to this thread.

(there should be an option for you to attach the files themselves instead of having to paste their contents; this will keep the thread cleaner ).

[Former Member]

Hi Mandeep ,

Thanks for the response .

PFA regarding the response of command saprouter.exe -l     

Regards,

PKP

command response.txt.zip

[Former Member]

Hello Isaias,

PFA regarding the response of command  saprouter -r -G saprouterlog.txt -V 2 -K "p:CN=......"

Thanks for the thread cleaner tips .

Regards,

PKP

dev_rout.txt.zip

saprouterlog.txt.zip

[isaias_freitas]

Hello PKP,

You're welcome .

From the dev_rout:

reading routtab: './saprouttab'
*** ERROR => Cannot find source identifyer, skip line 1 [nirout.cpp   10623]
contents of routtab ('./saprouttab', 0 entries):

Not much more than the original post.

Maybe there is an invalid character (like an invisible ASCII character) at the first line of your saprouttab file?

Try creating a new saprouttab file using notepad.

Regards,

Isaías

[former_member199290]

Hi Prabin:

Since the developer trace is not showing much. Could you please check and advise what is the status of the saprouter service? Have you tried starting saprouter using saprouter windows service.

You have to make sure that the service logs on as same account for which you created the credentials when you initially installed the saprouter.

Thanks.

[Former Member]

Hi Mandeep,

As saprouter service was not running ,

I tried to create the same . But i do't see the saprouter service in the services list .

command  executed :

sc create SAPRouter binPath="c:\saprouter\saprouter.exe -r -R c:\sa

prouter\saprouttab"

I am sharing the command response  details as attachment .

Could you please suggest,  how to make sure that the service logs on as same account for which you created the credentials

Regards

response.txt.zip

[former_member199290]

Hi Prabin:

Command to create SAP Rounter as Windows service shuld include distiniguished name as well.

Please see below:

sc.exe create SAPRouter binPath= "<path>\saprouter.exe service -r -W 60000

-R <path>\saprouttab -K ^p:<your_distinguished_name>^" start= auto

obj= "NT AUTHORITY\LocalService"

Please follow complete steps as per SAP Note: 525751
- Installation of the SNC SAPRouter as NT Service

and let us know.

Thanks.

[Former Member]

Hi Mandeep,

As suggested i executed the command

sc.exe create SAPRouter binPath= "<path>\saprouter.exe service -r -W 60000

-R <path>\saprouttab -K ^p:<your_distinguished_name>^" start= auto

obj= "NT AUTHORITY\LocalService"

And as a result , i can see the created saprouter  service  in services list .

But still while starting the saprouter with command

saprouter -r -V 2 -K "p:CN=sapserv236, OU=0000887753, OU=SAProuter, O=SAP, C=DE"

saprouttab error is prompting .

PFA dev_rout , command prompt response & saprouttab file  for the same .

Thanks

PKP

dev_rout1.txt.zip

saprouttab1.txt.zip

CMD.txt.zip

[Former Member]

Hi Isaías,

I created a new saprouttab file and tried to start saprouter again .

Still facing the same issue .

PFA saprouttab file for the same .

Could you pls share a sample saprouttab file

because i guess , i am going somewhere wrong while creating saprouttab file .

Thanks

saprouttab1.txt.zip

[isaias_freitas]

Hello Prabin,

I have put your saprouttab file at a saprouter that I have in a test environment, and the saprouter started fine.

One thing that I've noticed is that the file you have provided is named "saprouttab1.txt", while the screenshot of the error shows that the saprouter is trying to read "saprouttab" (with no file extension!).

Try renaming your "saprouttab1.txt" to the expected name:

rename saprouttab1.txt saprouttab

If the file at the saprouter folder already had the correct name, try confirming that the user ID you are logged on with, when trying to start the saprouter, has full permission at the saprouter folder (including the saprouttab file).

Another option would be to add "-R <complete saprouttab file name>" to your saprouter startup command (but then you would have to delete and recreate the saprouter service as well ).

Regards,

Isaías

[former_member199290]

OK Prabin. Now when you start your SAP Router service what is the error?

Please let us know.

[isaias_freitas]

If manualy starting the saprouter is not working, why would it work when started as a service?

[former_member199290]

Hi Isaias:

Starting the sap router from command line does not say any error as to why the it does not startup. Also I have seen few times even with the kind of laerts that Prabin is saying saprouter does starts up properly.

So when I am telling him to start the router from windows service I want to see if there are any obvious errors that shows up. I think it's worth trying.

[Former Member]

Hi Mandeep,

Now i am able to start the saprouter service from the windows services list .

But while executing the command saprouter -r -V 2 -K "p:CN=sapserv236, OU=0000887753, OU=SAProuter, O=SAP, C=DE" to start the saprouter , the same saprouttab file issue  is there (as mentioned previously ).

And while trying to do the Log on test from sap system by using OSS1 ,

I am getting error prompt saying "Unable to connect to SAPNet message server"  .

Thanks

[Former Member]

Hi Isaías ,

Thanks for the confirmation regarding saprouttab file validation .

The actual file name is saprouttab .

Just i changed the attached text file name to saprouttab1.

My user id has got the full permission for the saprouter folder (including the saprouttab file) .

Otherwise i guess while running the saprouter start command ,

i'd have prompted with the error "Could not open permission table" .

One more thing as i mentioned to Mandeep

i'm facing log on test error in OSS1 tcode.

Regards,

PKP

[former_member199290]

Hi Prabin:

I have to ask you again is the saprouter up and running before you test the connection to SAPNet?

1. Confirm/Check saprouter windows service is running

2. Check the saprouter status using command saprouter -l (Letter 'L')

3. Share the results

[isaias_freitas]

Hello PKP,

I'm getting out of ideas .

Which saprouter are you using? 721? 742? Have you downloaded the latest package available at the SAP Marketplace?

Regards,

Isaías

[Former Member]

Hi Mandeep,

For your confirmation,

1)Saprouter service is running fine .

2)Command saprouter -l  executed and by seeing the response i assume Saprouter has also started & running on port 3299 .

Could you pls confirm if my assumption is correct or not .

But still i doubt if my saprouttab file is correct or not .

As when i run the command

saprouter -r -V 2 -K "p:CN=sapserv236, OU=0000887753, OU=SAProuter, O=SAP, C=DE"

the response still shows saprouttab error .

and that is the reason i guess below error is prompting in OSS1 tcode while testing saprouter connection.

Thanks

[former_member199290]

Hi Prabin:

Yes your SAPRouter is running. For your error in t-code OSS1 please re-check the entries under SAPRouter at Customer site. It should have the IP address of your saprouter. Not the public IP though.

2. Check the saprouter entry under SAProuter and SAP Net Message Server

E.g. I have:

+-SAPRouter and OSS Message Server------------------------------------+

| +-SAPRouter (SAP)--------------+ +-OSS Message Server----------+ |

| |  Name          sapserv2     |    |    Name          oss001         | |

| |   IP address    194.39.131.34  |    |    DB name       O01        | |

| |   Instance no.  99          |    |    Instance no.  01                  | |

| +------------------------------+ +-----------------------------+ |

+---------------------------------------------------------------------+

Rather than using Logon Button from OSS1 you can test your connection through SM59 RFC: SAPOSS

For your error related to saprouttab file - I would start with the default file i.e take a backup of the existing file and then remove all the entries that you created yourself.

Then execute comand: saprouter -n so that saprouter knows that there is new file to be read.

Uses and Functions of SAProuter - Standalone Program SAProuter - SAP Library

24177 - OSS1: Message S1452: Connection to Message Server

Configure OSS1 Connection - Basis Corner - SCN Wiki