OSS1 connection failing.

[Former Member]

Dear All,

Thread started by Pushp got closed .. no idea how. So here it goes again.

I have installed saprouter on my ecc6 server and as directed by SAP, using CryptoLib installed certificates. SAPRouter is running now. But OSS1 is failing, so is rfc test.

dev_rout has:

ERROR => SNC field without SNC active, skip line 6 http://nirout.cpp 9101

Wed Apr 30 17:21:05 2008

• ERROR => NiBufIProcMsg: hdl 20 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2115]

*************************************************************

I am listing my saprouttab file here:

SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KT "p:CN=sapserv2a, OU=SAProuter, O=SAP, C=DE" 147.104.100.36 *

SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.240.96 00

SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.240.96 1503

SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.240.96 23

Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 192.168.240.96 194.39.131.34 3299

#Temporary measure to start saprouter and setup remote connection

P * * * *

P * 194.39.131.34 3299

*****************************************************************

I have assigned a public ip and registered it with SAP. Our internal IP is 192.168.240.96

When I'm trying to connect it gives me following error:

sapserv2a: route permission denied (221.134.109.219 to oss001, sapdp01)

I asked my network fellow and he said the IP 221.134.109.219 belongs to firewall.

I've read previous threads and links mentioned in them, but no help so far. Please suggest.

regards, Sean.

[Former Member]

The issue has been resolved.

[former_member185954]

there was holiday here yesterday, how was the issue resolved ?

[Former Member]

Hi Siddhesh,

Issue was resolved by changing IP address assigned to my server. Our network guy had to make some changes in firewall as well. From basis perspective, everything was right fortunately.

thanks for your time.

regards, Sean

[former_member185954]

Hello Shantanu,

If you are going to use SNC, you need to start your SAPROUTER using special option + you need special entries.

http://help.sap.com/saphelp_nw04/helpdata/en/4f/992d65446d11d189700000e8322d00/frameset.htm

In your post you have mentioned that you have put proper SNC entries in the saprouttab which is fine.

However you also need to start the saprouter with -K option as shown in the above mentioned link.

I think that's what the system is complaining about.

ERROR => SNC field without SNC active

Regards,

Siddhesh

Edited by: Siddhesh Ghag on Apr 30, 2008 3:18 PM

Edited by: Siddhesh Ghag on Apr 30, 2008 3:19 PM

[Former Member]

Hi Siddhesh,

I do run saprouter with -K "p:distinguished name" parameter. One thing though, when I run the command from cmd prompt, it just hangs around. Being windows, in Services I do not see it running, so I again start it with same parameters there.

When I am checking SAPOSS RFC, it end in a error:

Logon Connection Error

Error Details Error when opening an RFC connection

Error Details ERROR: timeout while pending for route completion

Error Details LOCATION: SAP-Server rtsandbox01_RTX_00 on host rtsandbox01 (wp 1)

Error Details DETAIL: NiErrSet

Error Details COMPONENT: NI (network interface)

Error Details COUNTER: 51

Error Details MODULE:

Error Details LINE:

Error Details RETURN CODE: -12

Error Details SUBRC: 0

Error Details RELEASE: 700

Error Details TIME: Fri May 02 11:53:32 2008

Error Details VERSION: 38

Please note that IP for host for ECC6 and saprouter both is same [ 221.134.109.222 ] and is registered with SAP [Customer saprouter IP address : 221.134.109.222]

I can't understand where is the problem.

Need help urgently fellows.

regards, Sean.

[former_member185954]

Hello shantanu,

Running the saprouter in a command window won't help. You need to start it up in Windows Services with the option i suggested.

Now, what does your saprouter trace file say ?

Regards,

Siddhesh

[Former Member]

Hi,

The output from router trace:

-

---

trc file: "dev_rout", trc level: 1, release: "710"

-

---

Fri May 02 14:51:01 2008

SAP Network Interface Router, Version 39.1 (SP3)

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3299

command line arg 4: -K

command line arg 5: p: CN=RTSANDBOX01, OU=0000848098, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "D:\usr\sap\saprouter\sapcrypto.dll".

File "D:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 1860, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

From what I learnt so far, it's working fine. I have a other doubt.

For SAPOSS to work fine, do I need to specify S user and password anywhere in my server???

Also, I noticed SNC status in SM59 is inactive and cannot be changed (the radio buttons are inactive).

********************************************************************

After a instance restart, router trace file entries have changed:

Mon May 05 09:20:16 2008

SAP Network Interface Router, Version 39.1 (SP3)

command line arg 0: D:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -R

command line arg 3: D:\usr\sap\saprouter\SAPROUTTAB

main: pid = 1844, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'D:\usr\sap\saprouter\SAPROUTTAB'

• ERROR => SNC field without SNC active, skip line 2 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 3 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 9 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 12 [nirout.cpp 9101]

Any ideas?

regards, Sean.

Edited by: Shantanu Bansal on May 5, 2008 6:24 AM