on 01-08-2016 3:45 PM
Dear Gurus,
We have already installted latest Saprouter of 7.21. Also saprouter NT service is registered and running properly.
After installation we want to test our saprouter working or now with ;
niping.exe -c -H /H/SAP ROUTER IP/H/194.39.131.34/H/localhost
---------------------------------------------------------------------------------------------
We have already checked :
- telnet 194.39.131.34(SAP IP) 3299 (working)
- sapgenpse get_my_name -v -n Issuer (working)
- env. variable SNC_LIB and SECUDIR set.
- sapgenpse get_my_name -n validity
- SAPROUTER and windows already restarted..
-----------------------------------------------------------------
dev_rout ;
---------------------------------------------------
trc file: "dev_rout", trc level: 1, release: "721"
---------------------------------------------------
Fri Jan 08 17:41:41 2016
SAP Network Interface Router, Version 40.4
command line arg 0: C:\saprouter\saprouter.exe
command line arg 1: -r
command line arg 2: -W
command line arg 3: 60000
command line arg 4: -R
command line arg 5: C:\saprouter\saprouttab
command line arg 6: -K
command line arg 7: p:CN=p:CN=xxxxxxx, OU=xxxxxxx, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="xxxxxxxx" NetWkstaUser="xxxxxxx"
SncInit(): Trying environment variable SNC_LIB as
gssapi library name: "C:\saprouter\sapcrypto.dll".
File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="C:\saprouter\" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib
Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.47 pl40 (Nov 30 2015) MT-safe
main: pid = 2808, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: 'C:\saprouter\saprouttab'
What could be the wrong ?
Best regards
It is resolved. After deleted Saprouter service and re-create below command ;
sc.exe create SAPRouter binPath= "C:\saprouter\saprouter.exe service -r -S 3299 -W 60000 -R C:\saprouter\saprouttab -K ^p:CN=xxxxxx, OU=0001xxxxxx, OU=SAProuter, O=SAP, C=DE^"
Now i can access to SAPOSS.
-----------------------------
I dont know why, but it is not worked for me : 41054 - Installation of SAProuter as Windows service
Best Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Ertas,
Just to confirm, can you telnet on your SAProuter ip address with port 3299 and share the result .
telnet <SAProuter ip> 3299
Regards,
Anil
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
The IP shown at the error message (that you have "obfuscated") is the IP of your own saprouter?
And it seems you were testing from the saprouter server itself, correct?
Was the saprouter really up and running at that time?
What about the Windows firewall? Did you open the saprouter port there?
Regards,
Isaías
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
Yes it is PUBLIC IP of saprouter.
Yes it is testing itself in saprouter.
Saprouter service is running, also tried manually start saprouter command ; saprouter -r -K "p:CN=host, OU=000XXXXXX, OU=SAProuter, O=SAP, C=DE" There is no problem..
@Anil BHandary, telnet 3299 port to SAP Global and telnet 3299 to saprouter is ok.
Best Regards
Hi Kemal,
Try perform test with one of the Abap server.
Configure SAProuter details in OSS1 tcode and then test SAP OSS RFC.
RFC result will give you exact picture of SAP router function status.
Once RFC is tested, you should be able to see the logs in DEV_ROUT, if there are any errors.
Logically niping should not generate logs in dev_route.
Regards,
Anil
Dear Anil,
Here is dev_rout from SAP system to SAP Global ;
Sat Jan 09 00:30:15 2016
*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [sncxxall.c 3585]
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3551]
GSS-API(maj): No credentials were supplied
Unable to establish the security context
target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
<<- SncProcessOutput()==SNCERR_GSSAPI
*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;00000000023F5890) [nisnc.c 1202]
*** ERROR => NiSncHandleForAddr C88/-1, 194.39.131.34 (rc=-17) [nirout.cpp 3997]
*** ERROR => NiRClientHandle: NiRExRouteCon for C88/-1 'xxxxxxx' failed (rc=-17) [nirout.cpp 3364]
String : /H/INTERNAL IP OR PUBLIC IP OF ROUTER/S/3299/H/194.39.131.34/S/sapdp99/H/oss001
Hi Kemal,
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3551]
GSS-API(maj): No credentials were supplied
Unable to establish the security context
We can see the above error in the dev_rout, you need to generate the credentials for the user by which you have started the saprouter.
Run below command by user which is defined in NT SAP router service.
sapgenpse seclogin -p local.pse
Regards,
Anil
Dear Anil,
Output of command is ;
C:\saprouter>sapgenpse seclogin -p local.pse
running seclogin with USER="kxxxxr"
Please enter PSE PIN/Passphrase: ****
Warning: credentials already existing
- for the same user and with the same password
Added SSO-credentials for PSE "C:\saprouter\local.pse"
Result is same ; (after command saprouter service restarted)
Sat Jan 09 00:58:20 2016
*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [sncxxall.c 3585]
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3551]
GSS-API(maj): No credentials were supplied
Unable to establish the security context
target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
<<- SncProcessOutput()==SNCERR_GSSAPI
*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;0000000008845B10) [nisnc.c 1202]
*** ERROR => NiSncHandleForAddr C9/-1, 194.39.131.34 (rc=-17) [nirout.cpp 3997]
*** ERROR => NiRClientHandle: NiRExRouteCon for C9/-1 'xxxxxx' failed (rc=-17) [nirout.cpp 3364]
Regards
User | Count |
---|---|
96 | |
11 | |
11 | |
10 | |
9 | |
7 | |
6 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.