Connecting External System with SAP ABAP Server using SNC

[Former Member]

Hi Esxperts,

We have our SAP servers configured with SNC. And we want to connect external GRC tool with SAP server.

Please let me know how to configure external GRC application to use with SNC connection to the SAP server.

We have enable SNC with sap sso security product in SAP ABAP system.

What are the required configuration from External system side?

Thanks,

sanket.

[former_member202592 · Accepted solution]

Hello Sanket,

This external GRC application is a SAP product?

How are you planning to connect to this external system? RFC?

Cheers,

Filipe Santos

[Former Member · Accepted solution]

Hi Fillipe,

We have same issue. We have .NET application which is connecting to SAP using RFC call with connection parameters Username, pass, Host, sys no and client. Now we are enabling SNC in .NET application.SAP environment is configured with SNC (without SSO similar to ) . At client side (SAP GUI) instead of SCE library file we have used Secure login client 1.0 library files and configured SNC between SAPGUI --> AS ABAP.

Same like to configure SNC between .NET application --> AS ABAP we are using additional connection parameters SNC_MODE, SNC_QOP, SNC_PARTNERNAME, SNC_LIBRARY.

but getting below issue while connecting from .net application.

**** Trace file opened at 2016-04-25 18:51:01 (UTC+05:30 India Standard Time)

SAP .NET Connector 3.0 with file version 3.0.5.0 running on 64-bit .NET Framework 4.0.30319.42000

Program: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug\NCO test.vshost.exe

Working dirctory: C:\Users\kginnela\Desktop\NCO test\NCO test\bin\Debug

Operating system: Windows 7 Enterprise 64-bit Service Pack 1

Processor: 4x AMD64 (or x64)

SAP release: 720, Kernel release: 720, Kernel patch level: 111

Hostname: INPUNKGINNELA1, IP address: 10.82.23.21, IP_v6 address:

Default trace level: None

>> Error entry 2016-04-25 18:51:01.936

Failure to create pool for destination 6be87c8c-4a9a-4450-ba85-00181306983d [NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM]

SAP.Middleware.Connector.RfcCommunicationException:

LOCATION    CPIC (TCP/IP) with Unicode

ERROR       GSS-API(maj): Miscellaneous failure

            GSS-API(min): A2210223:A2210223

            target="p:CN=SAP/KerberosSC2@DOMAIN.COM"

TIME        Mon Apr 25 18:51:01 2016

RELEASE     720

COMPONENT   SNC (Secure Network Communication)

VERSION     5

RC          -4

MODULE      sncxxall.c

LINE        3345

DETAIL      SncPEstablishContext

SYSTEM CALL gss_init_sec_context

COUNTER     3

   at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)

   at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)

   at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)

   at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)

   at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)

   at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)

>> Error entry 2016-04-25 18:51:02.128

NAME=6be87c8c-4a9a-4450-ba85-00181306983d USER=kginnela CLIENT=501 LANG= ABAP_DEBUG=NONE TRACE=NONE ASHOST=USALVWSSC703D SYSNR=00 SNC_MODE=1 SNC_QOP=8 SNC_LIB=C:\Program Files\sap\FrontEnd\SecureLogin\lib\secgss.dll SNC_PARTNERNAME=p:CN=SAP/KerberosSC2@DOMAIN.COM

SAP.Middleware.Connector.RfcCommunicationException:

LOCATION    CPIC (TCP/IP) with Unicode

ERROR       GSS-API(maj): Miscellaneous failure

            GSS-API(min): A2210223:A2210223

            target="p:CN=SAP/KerberosSC2@DOMAIN.COM"

TIME        Mon Apr 25 18:51:01 2016

RELEASE     720

COMPONENT   SNC (Secure Network Communication)

VERSION     5

RC          -4

MODULE      sncxxall.c

LINE        3345

DETAIL      SncPEstablishContext

SYSTEM CALL gss_init_sec_context

COUNTER     3

   at SAP.Middleware.Connector.CpicConnection.CpicReceive(Int32 timeout)

   at SAP.Middleware.Connector.CpicConnection.Read(Byte* buffer, Int32 offset, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadBytes(Byte* buffer, Int32 count)

   at SAP.Middleware.Connector.RfcConnection.ReadRfcIDBegin(Int32& length)

   at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)

   at SAP.Middleware.Connector.RfcConnection.RfcReceive(RfcFunction function)

   at SAP.Middleware.Connector.RfcConnection.ConnectAsClient(RfcConfigParameters options)

   at SAP.Middleware.Connector.RfcConnectionPool..ctor(RfcDestination destination, Boolean forRepositoryCalls)

   at SAP.Middleware.Connector.RfcConnectionPool.GetPool(RfcDestination destination, Boolean forRepository, Boolean create)

   at SAP.Middleware.Connector.RfcDestination.GetClient(Boolean forRepository)

   at SAP.Middleware.Connector.RfcDestination.Ping()

Please help what is wrong with the connection and how it can be resolved.

Thanks,

krishna

[Former Member · Accepted solution]

All,

The issue is resolved after using SLL library files at client side. i.e .NET application server side.

Thanks,

Krishna

[donka_dimitrova]

Hello Sanket,

In the J2EE Engine the RFC functions are implemented by the JCo RFC Provider service, which is used for processing ABAP to Java requests. A feature is provided for receiving calls from the SAP systems – this is done by registering the J2EE Engine as a RFC destination.

The JCo RFC Provider service also provides you the possibility to define particular RFC destinations to use Secure Network Connection (SNC). For more information, see

JCo RFC Provider Service - Administration Manual - SAP Library

If you want to find more help on the JCo RFC Provider service, the best will be to post your questions on the SAP NetWeaver community.

Regards,

Donka Dimitrova

[Former Member]

Hi DONKA,

Does secure login client 1.0 supports kerberos protocol to enable  secure communication between .NET application and AS ABAP?

Thanks,

Krishna