Problem connecting to OSS

[Former Member]

Hello,

We have the SAP Router configured and the connection to the OSS also established some time back. But now for the last two days, when we get into SM59 and do a connection test to the SAPOSS, we get an error message saying SNC Processing failed.

We have tried pinging from router to the sap server, router to OSS server and all possible methods.

Still we are not getting connected.

Below is the dEV_rout

OCATION SAProuter 38.10 on 'hpgsaprt'

ERROR GSS-API(maj): No credentials were supplied

GSS-API(min): No credentials found for this name (not logged on) (USER

name="p:CN=hpgsaprt, OU=0000860616, OU=SAProuter, O=SAP, C=DE"

TIME Fri Jul 06 12:29:35 2007

RELEASE 700

COMPONENT SNC (Secure Network Communication)

VERSION 5

RC -4

MODULE sncxxall.c

LINE 1432

DETAIL SncPAcquireCred

SYSTEM CALL gss_acquire_cred

ERRNO

ERRNO TEXT

DESCR MSG NO

DESCR VARGS GSS-API(maj): No credentials were supplied;;;;

;;;;GSS-API(min): No credentials found for this name (not logged on) (USER;;;;

;;;;name="p:CN=hpgsaprt, OU=0000860616, OU=SAProuter, O=SAP, C=DE"

DETAIL MSG N

DETAIL VARGS

COUNTER 9

<<- ERROR: SncSessionInitiatorAK()==SNCERR_GSSAPI

'target_acl_key' (addr=00D1F46C, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

• ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (rc=-4;0022F298) [nisnc.c 1082]

• ERROR => NiSnc2Connect C1/-1, 194.39.131.34 (rc=-17) [nirout.cpp 2816]

• ERROR => NiRClientHandle: NiRExRouteCon for C1/-1 'hpgsapsn' failed (rc=-17) [nirout.cpp 2243]

[Former Member]

Hi Tanuj

Thanks for the reply.

Still the same error persists. i am running the SAPROUTER as the same user who created the SAPGENPSE.

when i test from SM59, i still get an error.

Still something to do with credentials. See the below dev_rout

Thanks in advance...

Sun Jul 08 11:34:18 2007

• ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1432]

GSS-API(maj): No credentials were supplied

GSS-API(min): No credentials found for this name (not logged on) (USER=srtadm)

Could't acquire INITIATING credentials for

name="p:CN=hpgsaprt, OU=0000860616, OU=SAProuter, O=SAP, C=DE"

• ERROR => ErrISetSys: error info too large [err.c 944]

Sun Jul 08 11:34:18 2007

LOCATION SAProuter 38.10 on 'hpgsaprt'

ERROR GSS-API(maj): No credentials were supplied

GSS-API(min): No credentials found for this name (not logged on) (USER

name="p:CN=hpgsaprt, OU=0000860616, OU=SAProuter, O=SAP, C=DE"

TIME Sun Jul 08 11:34:18 2007

RELEASE 700

COMPONENT SNC (Secure Network Communication)

VERSION 5

RC -4

MODULE sncxxall.c

LINE 1432

DETAIL SncPAcquireCred

SYSTEM CALL gss_acquire_cred

ERRNO

ERRNO TEXT

DESCR MSG NO

DESCR VARGS GSS-API(maj): No credentials were supplied;;;;

;;;;GSS-API(min): No credentials found for this name (not logged on) (USER;;;;

;;;;name="p:CN=hpgsaprt, OU=0000860616, OU=SAProuter, O=SAP, C=DE"

DETAIL MSG N

DETAIL VARGS

COUNTER 3

<<- ERROR: SncSessionInitiatorAK()==SNCERR_GSSAPI

'target_acl_key' (addr=00D1F46C, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

• ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (rc=-4;0022F268) [nisnc.c 1082]

• ERROR => NiSnc2Connect C1/-1, 194.39.131.34 (rc=-17) [nirout.cpp 2816]

• ERROR => NiRClientHandle: NiRExRouteCon for C1/-1 'hpgsappr.hoshandubai.local' failed (rc=-17) [nirout.cpp 2243]

[Former Member]

Hi,

Please check the configuration on router system. If it is properly connecting with SAP systems then check with RFC communications.

Thanks

[Former Member]

Hi,

Check if you are able to run these commands .. with the user you have started the saprouter.

Some other commands that are useful in Router maintenance.

--> sapgenpse

-->sapgenpse get_my_name

-->sapgenpse get_my_name –v –n Issuer

--> sapgenpse get_my_name –v –n validity

If you are able to get the output for the blow commands .. this proves that we have started the router with the correct user.

Award points if helpful.

Thanks,

Tanuj

[Former Member]

Hi,

Hope you have started the SAPROUTER .

But Just in case ..........These are the commands for start of the SAP Router.

Start SAPROUTER.

saprouter -r -V 2 -K "p:<Distinguished Name>"

Whenever saprouttab file is changed Please run the following command

saprouter -n -V 2 -K "p:<Distinguished Name>"

Log can be seen in dev_rout file.

You should start saprouter only with the user you have installed because while installation you would have run this coomand.

<u>Setting Secured Login to SAPROUTER</u>

D:\saprouter>sapgenpse seclogin -p local.pse

<u>Output</u>

running seclogin with USER="<b>sapuser</b>"

Added SSO-credentials for PSE "d:\saprouter\local.pse"

"CN=hostname, OU=0000500195, OU=SAProuter, O=SAP, C=DE"

So from the above coomand , we can understand that only sapuser can start the router and no other user.

Thanks,

Tanuj