SAP Gateway: Authentication errors

[former_member185954]

Hi All,

I see the following trace in my SAP Gateway(smgw transaction) trace.

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

Mon Jan 7 13:15:48 2008

*** Trace for external programs activated (2) ***

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

Mon Jan 7 13:17:06 2008

*** Trace for external programs deactivated ***

warning: You have no controlling tty. Cannot read confirmation.#

warning: Authentication failed.#

Disconnected (local); key exchange or algorithm negotiation failed (Key exchange failed.).#

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

You have no controlling tty and no DISPLAY. Cannot read passphrase.

warning: Authentication failed.#

Disconnected (local); authentication cancelled by user (Authentication cancelled by user.).#

Using the <sid>adm userid at UNIX level I am able to read the dev_rd trace, so there is no OS authentication issue. Also I am using an id with SAP_ALL so there is no authorization issue.

Has anyone faced this issue earlier ?

Regards,

Siddhesh

[former_member185954]

Check previous comment

[markus_doehr2]

Apparently someone is trying to start an X programm via gateway - which will of course not work.

Markus

[former_member185954]

Hi Markus,

It seems pretty evident from the 'DISPLAY' variable, however I am sure nobody is using X term.This error occurs even when i try to connect to a remote system via RFC connection.

Regards,

Siddhesh

[markus_doehr2]

Do you have a "setenv DISPLAY..." or an "export DISPLAY=" in your .profile (or .cshrc) for that specific user?

Markus

[former_member185954]

Hi Markus,

We do not need X windows so we do not have DISPLAY variable set in any of the profiles.

This looks like something else.

Regards,

Siddhesh

[markus_doehr2]

I´m not saying that you need it - I was just thinking that someone is setting it explicitly.

Markus

[former_member185954]

Okay.. point noted, however this trace record occurs even if i try to test a RFC connection via gateway.

[markus_doehr2]

Yes - because the system will also logon then - and process .cshrc/.profile.

Markus

[former_member185954]

Good thought Markus, however i double checked and that doesn't seem to be a problem.

I did a env | grep -i DISPLAY for the <sid>adm user however it doesn't show any DISPLAY variable set.

So that shouldn't be the problem.

Regards,

Siddhesh

[former_member185954]

Also , I think I need to focus on the other part of the message, cannot read passphrase.. we have SSH as the remsh value so maybe something to do with SSH.

The problem is that I do not have root access to troubleshoot SSH issues.

Regards,

Siddhesh

[markus_doehr2]

If you logon as <sid>adm using SSH, do you get the same error?

ssh -X -l <sidadm> <server>

Markus

[former_member185954]

Hi Markus,

I had tried that yesterday and its fine.

Anyways, I found the issue.. the issue is caused because of incorrect permissions on /dev/tty

/dev/tty had incorrect permissions, it should have 0666 permissions.

After having those permissions changed the error/warning has vanished!

Thanks for following up anyways.

Regards,

Siddhesh

[Former Member]

Hi Siddhesh,

Sometimes, I'm happy to use Windows instead of Unix...

your problem was very weird !

Regards,

Olivier

[markus_doehr2]

Indeed... someone has maybe done a "chmod -Rf 600" on the root filesystem - usually those permissions get never touched.

Markus

[former_member185954]

ha ha... windows has its own share of issues.. i somehow like UNIX..