SAP Router service not working

[Former Member]

Hi Experts,

Getting the below error when we are starting the saprouter service.

[root@hostname saprouter]# saprouter -r

trcfile  dev_rout

no logging active

*** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   11019]

WARNING: wildcard character used in route target.

==========================================================

[root@hostnamesaprouter]# saprouter -s

Thu Apr 21 19:10:10 2016

SAP Network Interface Router, Version 40.4

***LOG Q0I=> NiPConnect2: 127.0.0.1:3299: connect (111: Connection refused) [/bas/742_REL/src/base/ni/nixxi.cpp 3324]

*** ERROR => NiPConnect2: SiPeekPendConn failed for hdl 1/sock 3

    (SI_ECONN_REFUSE/111; I4; ST; 127.0.0.1:3299) [nixxi.cpp    3324]

*** ERROR => RTADMINREQ::sendAdminReq: NiBufConnect failed (rc=-10) [nirout.cpp   8260]

*****************************************************************************

*

*  LOCATION    SAProuter 40.4 on 'hostname'

*  ERROR       partner '127.0.0.1:3299' not reached

*

*  TIME        Thu Apr 21 19:10:10 2016

*  RELEASE     742

*  COMPONENT   NI (network interface)

*  VERSION     40

*  RC          -10

*  MODULE      /bas/742_REL/src/base/ni/nixxi.cpp

*  LINE        3324

*  DETAIL      NiPConnect2: 127.0.0.1:3299

*  SYSTEM CALL connect

*  ERRNO       111

*  ERRNO TEXT  Connection refused

*  COUNTER     2

The router validity is there.

Attaching the dev_rout traces.

Kindly help on the above issue.

Regards,

Ganesh

dev_rout.txt.zip

[mamartins]

Hi there,

Your SAPROUTTAB entries are using SNC, but you aren't invoking the SAPROUTER correctly.

Please start it like this:

saprouter -r -S 3299 -K "p:CN=[SAPROUTER_NAME], OU=[YOUR_ORGANIZATION_CODE], OU=SAProuter, O=SAP, C=DE"

Please check http://service.sap.com/saprouter-sncadd

[Former Member]

Hi Manuel,

Sorry for delayed reply.

As suggested have started the saprouter

"saprouter -r -S 3299 -K "p:CN=[SAPROUTER_NAME], OU=[YOUR_ORGANIZATION_CODE], OU=SAProuter, O=SAP, C=DE"

It is getting connected for some seconds and error traces are generating in dev_rout.

And when I am pinging to the appication server from saprouter packet loss trace is seen.

PING fqdn.com (xx.x.xx.xxx) 56(84) bytes of data.

--- fqdn.com ping statistics ---

61 packets transmitted, 0 received, 100% packet loss, time 60042ms

Is it to with any network/firewall issue or something else.

Attaching the latest dev_rout traces:-

=========================

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "742"

---------------------------------------------------

Tue Apr 26 11:29:15 2016

SAP Network Interface Router, Version 40.4

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -K

command line arg 3: p:CN=router hostname, OU=xxxxxxx, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      AMD/Intel x86_64 with Linux (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

      UserId="root" (0), envvar USER="root"

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".

  File "/usr/sap/saprouter/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  SECUDIR="/usr/sap/saprouter" (from $SECUDIR)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib

  Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.37 pl40 (May 12 2015) MT-safe

main: pid = 11639, ppid = 11499, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Tue Apr 26 11:29:18 2016

*** ERROR => NiHLGetHostName: NiPGetHostByAddr failed (rc=-1) [nixxhl.cpp   503]

Tue Apr 26 11:29:19 2016

*** ERROR => NiHLGetHostName: NiPGetHostByAddr failed (rc=-1) [nixxhl.cpp   503]

Tue Apr 26 11:31:40 2016

*** ERROR => NiHLGetHostName: NiPGetHostByAddr failed (rc=-1) [nixxhl.cpp   503]

Regards,

Ganesh

[mamartins]

You have to replace the text inside the [] to your particular company definitions.

Regards,

MM

[Former Member]

Hi Manuel,

I have given the content as per company definitions.

But after executing the above command it is starting for some duration but when I am checking the saprouter status : saprouter -l i am getting

***LOG Q0I=> NiPConnect2: 127.0.0.1:3299: connect (111: Connection refused) [/bas/742_REL/src/base/ni/nixxi.cpp 3324]

*** ERROR => NiPConnect2: SiPeekPendConn failed for hdl 1/sock 3

    (SI_ECONN_REFUSE/111; I4; ST; 127.0.0.1:3299) [nixxi.cpp    3324]

*** ERROR => RTADMINREQ::sendAdminReq: NiBufConnect failed (rc=-10) [nirout.cpp   8260]

*****************************************************************************

*

*  LOCATION    SAProuter 40.4 on 'hostname'

*  ERROR       partner '127.0.0.1:3299' not reached

*

*  TIME        Tue Apr 26 17:00:01 2016

*  RELEASE     742

*  COMPONENT   NI (network interface)

*  VERSION     40

*  RC          -10

*  MODULE      /bas/742_REL/src/base/ni/nixxi.cpp

*  LINE        3324

*  DETAIL      NiPConnect2: 127.0.0.1:3299

*  SYSTEM CALL connect

*  ERRNO       111

*  ERRNO TEXT  Connection refused

*  COUNTER     2

Regards,

Ganesh

[mamartins]

Something is seriously wrong in your configuration, and I can't give more help without knowing your particular infrastructure.

Please understand first all documentation available on SAProuter | SAP Support Portal

There also multiple threads here on SCN regarding this issue. In last resort, please open an incident on SAP Support.

Regards,

MM

[isaias_freitas]

Hello Ganesh,

About the "ping" issue, involve your network/firewall team(s).

About the saprouter issue, the error seen when you executed "saprouter -l" indicates that the saprouter is not running.

About the dev_rout entries:

*** ERROR => NiHLGetHostName: NiPGetHostByAddr failed (rc=-1) [nixxhl.cpp   503]

These are reverse DNS failures (NiPGetHostByAddr).

Your DNS team needs to maintain the missing reverse DNS entries.

However, these should not be causing any harm.

Regards,

Isaías

[Former Member]

Hello All,

Thanks to all for assisting

Issue got resolved after executing the start command as below:-

nohup ./saprouter –r –K "p:CN=routerhostname, OU=0000xxxxx, OU=SAProuter, O=SAP, C=DE" &

Regards,

Ganesh.

[mamartins]

Hello,

Good to know. Please don't forget to close the thread and reward the help received.

Regards,

MM

[Sriram2009]

Hi Ganesh.

Check this SAP Note 1932555

Regards

SS

[former_member204080]

Hi ,

Can you cross check your saprouttab if the entries are correct . There seems to be some special character maintained

Please also check below link

Installing the sapcrypto library and starting the SAProuter | SAP Support Portal

Regards,

Murali