Starting SAProuter

[Former Member]

Hi everyone,

in order to make a remote SNC connection between SAP and our company,

i already made a remote connection data sheet and SAP sent me back the installation procedure. Also, i have the SAP Cryptolib Software CD installation. Regarding to this, i created the SAProuter Certificate for Support Connections. I have checked if the certificate has been imported correctly and the name of the Issuer is: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

After checking all th previous procedure, i have to start the SAProuter. When i enter the command : saprouter -r

there is an error message :

trcfile dev_rout

no logging active

in the dev_rout file :

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Mon Mar 17 12:48:11 2008

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

main: pid = 3692, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Could you please tell me why there is no logging active?

Thanks a lot.

EDIT :

PS :

1. I already have installed the latest cryptolib via a CD sent by SAP AG

2. In the path E:\usr\sap\saprouter, there are all the files (sapgenpse.exe, saprouter.exe, sapcrypto.dll, saprouttab, dev_rout etc.

3. The environment variables SECUDIR are located in E:\usr\sap\saprouter and SNC_LIB also in E:\usr\sap\saprouter\sapcrypto.dll

4. The command sapgenpse get_my_name -v -n Issuer displays Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

[Former Member · Accepted solution]

Hi. If you use SNC you need to run saprouter with "saprouter -r -K <SNC name>".

Also chek maybe the certificate validity is expired.

.

Also the

trcfile dev_rout

no logging active

means the saprouter is up and running only you not use the logging mode :

If you need to use the logging mode create for example the file "con.log"

and start suprouter with "saprouter -r -G con.log"

Regards

Edited by: Sergo Beradze on Mar 18, 2008 8:05 AM

[Former Member · Accepted solution]

Hi,

thank you for your quick response. Yes i know that i have to start the saprouter with the command "saprouter -r -K <SNC name>" but there is this error message appearing with a simple command "saprouter -r"

I generated a *.log and a *.trc file and there is this error message on the .trc file :

DlLoadFunc: GetProcAddress(sapsnc_init_adapter) Error 127

Error 127 = "The specified procedure could not be found."

How can i check if my certificate validity is expired? because i made the "Request Certificate for SAProuter" fews days ago.

Thanks a lot.

Best Regards.

Pascal.

[Former Member · Accepted solution]

Hi again.

I do not understand you. You have asked :

"Could you please tell me why there is no logging active?"

The answer is :

If you need to use the logging mode create for example the file con.log

and start suprouter with saprouter -r -G con.log

Regards.

[Former Member · Accepted solution]

Hi,

try following

Saprouter -r -S <port> -K "p: <Your Distingiushed Name>"

-K tells the saprouter to start with loading the SNC library.

Example: saprouter -r -S 3299 –K "p:CN=KPL60020486, OU=0000036946,

OU=SAProuter, O=SAP, C=DE"

provide your saprouttab entry.

regards,

kaushal

Edited by: kaushal malavia on Mar 18, 2008 2:21 PM

[Former Member · Accepted solution]

Hi,

here is the command "saprouter -r -G saprouter.log" and there is this message :

trcfile dev_rout

logfile saprouter.log

• ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp 7998]

Regarding to the dev_rout file:

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Tue Mar 18 10:16:26 2008

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -G

command line arg 3: saprouter.log

main: pid = 4088, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

• ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 14 [nirout.cpp 7767]

saprouttab file:

line 6 : KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Solution Manager IP Adress> <Solution Manager Port>

line 14 : KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

Thanks

[Former Member · Accepted solution]

Hi, this is what ' have done before and there is still the message :

trcfile dev_rout

no logging active

Thanks

[Former Member · Accepted solution]

Hi,

rcfile dev_rout

no logging active -. you are not running using log mode

run following with SNC and log mode.

Saprouter -r -S <port> -G saprouter.log -K "p: <Your Distingiushed Name>"

-K tells the saprouter to start with loading the SNC library.

Example: saprouter -r -S 3299 -G saprouter.log –K "p:CN=KPL60020486, OU=0000036946,

OU=SAProuter, O=SAP, C=DE"

regards,

kaushal

[Former Member · Accepted solution]

Hi,

after entering the command "saprouter -r -S 3299 -G saprouter.log –K "p:CN=<Hostname of my SAProuter>, OU=<Customer number>, OU=SAProuter, O=SAP, C=DE"" in the trcfile dev_rout, there is this message:

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "E:\usr\sap\saprouter\sapcrypto.dll".

File "E:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 4024, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

What does that mean and how can i know if the connexion is established?

Thank a lot.

Pascal.

[Former Member · Accepted solution]

Hi,

SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "E:\usr\sap\saprouter\sapcrypto.dll".
File "E:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main: pid = 4024, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'

that's means the sap router with snc is running successfully.

What does that mean and how can i know if the connexion is established?

-> are you talking about which connection? connection with sapnet?

do you have direct internet connection on host where sap router is running? or do you used VPN connection to connect with sapnet?

regards,

kaushal

[Former Member · Accepted solution]

Hi,

i'm so glad to here this good news about the SNC running successfully. Thanks again for your help.

At the beginning, i sent a documentation "remote connection data sheet" to SAP AG and they sent me back a procedure installation. My goal is to connect SAP AG via sapserv2 (194.39.131.34) with our SAProuter. Actually, i want my solution manager connected to SAP in order to make all the update and to get back some software.

Here is a small description of our structure:

SAP AG (sapserv2) <-> INTERNET <-> SAProuter (my saprouter server) <-> SOLUTION MANAGER (my solman server)

With that installation procedure i made, is my company comunicated with SAP? and is SAP communicated with my company?

Thank you very much for all your help and your availability.

Best regards.

Pascal.

Edited by: François-Xavier LEVY on Mar 18, 2008 11:17 AM

[Former Member · Accepted solution]

Hi,

perform connection test using following way

1)

run oss1 in sap system

first do following settings.

oss1 -> parameter -> technical settings

fill the information about sap router.

logon to sap net

2)

run SM59 -> expand ABAP Connections -> double click on SAPOSS and test connection

regards,

kaushal

[Former Member · Accepted solution]

Hi,

after configuring parameters:

Unable to connect to SAPNet message server

Is problem from the saprouttab file?

Here is my configuration of my saprouttab file :

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <SAProuter's Server IP Adress> <Port Number>

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

P <SAProuter's Server IP Adress> 194.39.131.34 3299

D * * *

Thank you again for your help.

[Former Member · Accepted solution]

Hi. I'm think you need to close this thread , award points to kaushal malavia for best help, and if you need to open new thread : because the "Starting SAProuter" is complet.

About "Unable to connect to SAPNet message server"

read the note 96655 , and first chek the OSS Message Server -->

DB name: O01 (must capital "O" zero one) one.

Regards.

[Former Member · Accepted solution]

Hi,

yes you right, i m going to close this thread and open another.

Thank for you two kaushal malavia and Sergo Beradze for your greatful help.

Thanks again.

Best Regards.

Pascal.