Saprouter Niping.exe error : (10060: WSAETIMEDOUT: C nection timed out)

[former_member217141]

Dear Gurus,

We have already installted latest Saprouter of 7.21. Also saprouter NT service is registered and running properly.

After installation we want to test our saprouter working or now with ;

niping.exe -c -H /H/SAP ROUTER IP/H/194.39.131.34/H/localhost

---------------------------------------------------------------------------------------------

We have already checked :

- telnet 194.39.131.34(SAP IP) 3299 (working)

- sapgenpse get_my_name -v -n Issuer  (working)

- env. variable SNC_LIB and SECUDIR set.

- sapgenpse get_my_name -n validity

- SAPROUTER and windows already restarted..

-----------------------------------------------------------------

dev_rout ;

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "721"

---------------------------------------------------

Fri Jan 08 17:41:41 2016

SAP Network Interface Router, Version 40.4

command line arg 0: C:\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -W

command line arg 3: 60000

command line arg 4: -R

command line arg 5: C:\saprouter\saprouttab

command line arg 6: -K

command line arg 7: p:CN=p:CN=xxxxxxx, OU=xxxxxxx, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

      GetUserName()="xxxxxxxx"  NetWkstaUser="xxxxxxx"

SncInit(): Trying environment variable SNC_LIB as

    gssapi library name: "C:\saprouter\sapcrypto.dll".

  File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

  SECUDIR="C:\saprouter\" (from $SECUDIR)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib

  Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.47 pl40 (Nov 30 2015) MT-safe

main: pid = 2808, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'C:\saprouter\saprouttab'

What could be the wrong ?

Best regards

[former_member217141 · Accepted solution]

It is resolved. After deleted Saprouter service and re-create below command ;

sc.exe create SAPRouter binPath= "C:\saprouter\saprouter.exe service -r -S 3299 -W 60000 -R C:\saprouter\saprouttab -K ^p:CN=xxxxxx, OU=0001xxxxxx, OU=SAProuter, O=SAP, C=DE^"

referance :

Now i can access to SAPOSS.

-----------------------------

I dont know why, but it is not worked for me : 41054 - Installation of SAProuter as Windows service

Best Regards

[former_member227283]

Hi Ertas,

Just to confirm, can you telnet on your SAProuter ip address with port 3299 and share the result .

telnet <SAProuter ip> 3299

Regards,

Anil

[isaias_freitas]

Hello,

The IP shown at the error message (that you have "obfuscated") is the IP of your own saprouter?

And it seems you were testing from the saprouter server itself, correct?

Was the saprouter really up and running at that time?

What about the Windows firewall? Did you open the saprouter port there?

Regards,

Isaías

[former_member217141]

Hi,

Yes it is PUBLIC IP of saprouter.

Yes it is testing itself in saprouter.

Saprouter service is running, also tried manually start saprouter command ; saprouter -r -K "p:CN=host, OU=000XXXXXX, OU=SAProuter, O=SAP, C=DE"    There is no problem..

@Anil BHandary, telnet 3299 port to SAP Global and telnet 3299 to saprouter is ok.

Best Regards

[former_member227283]

Hi Kemal,

Try perform test with one of the Abap server.

Configure SAProuter details in OSS1 tcode and then test SAP OSS RFC.

RFC result will give you exact picture of SAP router function status.

Once RFC is tested, you should be able to see the logs in DEV_ROUT, if there are any errors.

Logically niping should not generate logs in dev_route.

Regards,

Anil

[former_member217141]

Dear Anil,

Here is dev_rout from SAP system to SAP Global ;

Sat Jan 09 00:30:15 2016

*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [sncxxall.c 3585]

*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [sncxxall.c 3551]

      GSS-API(maj): No credentials were supplied

    Unable to establish the security context

    target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

<<- SncProcessOutput()==SNCERR_GSSAPI

*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;00000000023F5890) [nisnc.c      1202]

*** ERROR => NiSncHandleForAddr C88/-1, 194.39.131.34 (rc=-17) [nirout.cpp   3997]

*** ERROR => NiRClientHandle: NiRExRouteCon for C88/-1 'xxxxxxx' failed (rc=-17) [nirout.cpp   3364]

String : /H/INTERNAL IP OR PUBLIC IP OF ROUTER/S/3299/H/194.39.131.34/S/sapdp99/H/oss001

[former_member227283]

Hi Kemal,

*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [sncxxall.c 3551]

      GSS-API(maj): No credentials were supplied

    Unable to establish the security context

We can see the above error in the dev_rout, you need to generate the credentials for the user by which you have started the saprouter.

Run below command by user which is defined in NT SAP router service.

sapgenpse seclogin -p local.pse

Regards,

Anil

[former_member217141]

Dear Anil,

Output of command is ;

C:\saprouter>sapgenpse seclogin -p local.pse

running seclogin with USER="kxxxxr"

Please enter PSE PIN/Passphrase: ****

Warning: credentials already existing

- for the same user and with the same password

Added SSO-credentials for PSE "C:\saprouter\local.pse"

Result is same ; (after command saprouter service restarted)

Sat Jan 09 00:58:20 2016

*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [sncxxall.c 3585]

*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [sncxxall.c 3551]

      GSS-API(maj): No credentials were supplied

    Unable to establish the security context

    target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

<<- SncProcessOutput()==SNCERR_GSSAPI

*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;0000000008845B10) [nisnc.c      1202]

*** ERROR => NiSncHandleForAddr C9/-1, 194.39.131.34 (rc=-17) [nirout.cpp   3997]

*** ERROR => NiRClientHandle: NiRExRouteCon for C9/-1 'xxxxxx' failed (rc=-17) [nirout.cpp   3364]

Regards