Sap router renewal

Hi,
i have executed the following command for sap router renewval
"sapgenpse get_pse -v -r certreq1 -p local.pse"
After that it asking please enter PIN:I gave the enter,
Reenter PIN:again i gave the enter.
get_pse:Distinguished name of PSE owner: gave the enter
get_pse:an empty subject distinguished name is not supported..
Finally certreq1 fine not created..
Please help me..
Regrads,
Manjini

after this enter any PIN too, following may help
http://sapgoogle.blogspot.com/2008/12/sap-router.html

Similar Messages

  • Error while importing SAP Router renew Certificate

    Hi Gurus,
    My sap router certificate got expired and got mail from SAP to renew, so I decided to renew it and followed link http://wiki.sdn.sap.com/wiki/display/Basis/HowtorenewtheSAPRouterlicense to renew saprouter certificate. All the steps were executed fine But I got below error while importing certificate from srcert file.
    C:\saprouter>sapgenpse import_own_cert -c srcert -p local.pse
    Please enter PIN:
    import_own_cert: Installation of certificate failed
    ERROR in ssf_install_CA_response: (1280/0x0500) No certficate with your
    public key found
    Please advise me to solve this issue.
    Thanks,
    Venkat

    Hi Deepak,
    thanks for your reply.
    yes i have entered correct Pin and in the first step i have moved local.pse and cred_v2, certreq, srcert files to C:/saprouter/backup folder
    After executing import command it has given error first time so i copied local.pse file to C:\saprouter folder and executed but same error result.
    please help me to solve it.
    Thanks,
    Venkat

  • Renewal of SAP Router Certificate

    How can I renew the SAP Router Certificate?Do I have to create another new request or can I renew the existing one?
    Thanks

    Hi Sandipan,
    you must apply for a new certificate in the Marketplace. You can find useful the instructions detailed in this link:
    http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000234692&_SCENARIO=01100035870000000202&_OBJECT=011000358700000866032001E
    Please kindly regard with points if this answer was helpful.
    Regards,
    Gustavo

  • Host did not respond error in connecting the SAP Router from SERVICE PLACE

    Dear Sir,
    We renew the Router Certificate by October 2008.  We are using broadband connection in our office with firewall (ISA) .
    When we try to connect the sap router from SAP Service Market Place, It is connected and after some time, status is changing to Host did not respond due to timeout.
    We checked the SAP Router Tab File also. It is correct.  Guide us to solve this issue
    With Regards
    K.Natarajan

    Hi
    This type of error occurs maximum,only when there is no proper connection between the systems.So,my suggestion is to check with the connection between the systems with the help of Basis person.
    regards
    krishna

  • SAP router certificate

    Hi Gurus;
    I want to re-generate my SAp certificate .
    Please elloaborate the process to follow.
    Thanks and regards
    Tushar Pathak

    Dear,
    This is the procedure that I got from SDN, last December when  have to renew my certificate, I got the success by following these steps, you can also try.
    Here were my steps to get it sucessfully working:
    1. Logon to host with username and password of SAP router service credentials
    2. Stop the Saprouter service
    3. Make a backup of the folder E:\usr\sap\saprouter
    3a. This can be deleted after a successful upgrade
    4. Delete this 4 files in E:\usr\sap\saprouter
    4a. certreq
    4b. cred_V2
    4c. localpse
    4d. srcert
    5. Generate the certificate request using the following command
    5a. E:\usr\sap\saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse "CN=sapslm01.oii.dom, OU=0000810973, OU=SAProuter, O=SAP, C=DE"
    5b. Enter a PIN of 1234
    6. Copy the contents of certreq to the clipboard
    7. Go to http://www.service.sap.com/saprouter-sncadd
    8. Paste the contents of the clipboard into the form
    9. This will generate a new certificate, copy its contents into a file called srcert
    9a. You will have to create srcert
    10. Then import the certificated using the following command
    10a. E:\usr\sap\saprouter>sapgenpse import_own_cert u2013c srcert u2013p local.pse
    10b. Enter the PIN of 1234
    11. The setup the logon using the following command
    11a. E:\usr\sap\saprouter>sapgenpse seclogin u2013p local.pse
    11b. This will create a file called cred_V2
    12. Check if the certificate has been loaded correctly by using the following command
    12a. E:\usr\sap\saprouter>sapgenpse get_my_name u2013v u2013n Issuer
    13. Start the Saprouter service

  • SAP router Certificate Expire End of month

    Hi Dear,
    Please, Our SAP Router Certificate expire end of this month. can any body suggest me , Is it any amount for Renew Sap Router Certificate ? if yes then how much Amount  I Paid to SAP ?
    and how to renew SAP Router certificate.
    I am very-2 thank full to you.
    Arpan Saini

    Hi,
    The problem is that you are using two different pins.THe pin which you used for generation the certificate and the pin you use for importing the certifcate are different.
    sapgenpse get_pse -v -r certreq -p local.pse "CN=tdep, OU=0000xxxx, OU=SAProuter, O=SAP, C=DE"
    then it will generate the file and it asks for the pin you just give this pin and remember.
    Then paste contnet of the "certreq" file which will be generated in the saprouter folder in the market place and select continue
    this will generate the new certificate for you.Copy the content and then paste it to srcert.txt file.
    Now you import the certificate using the command
    sapgenpse import_own_cert -c srcert -p local.pse
    here you have enter the pin which you have used for generating the file certreq file.
    Regards,
    Vamshi.

  • SAP router service is not running.

    Hi Everyone.,
    Today I have tried to renew the certificate in windows system every thing went well till the end but after importing newly generated certificate sap router service failed to start. Below is the error message when i try to start the service.
    D:\usr\sap\SOL\SYS\exe\uc\NTI386>saprouter -r -S 3299 -K "p:CN=SOLMGR, OU=000086
    1986, OU=SAPRouter, O=SAP, C=DE"
    trcfile  dev_rout
    no logging active
    DEV_rout
    trc file: "dev_rout", trc level: 1, release: "700"
    Sat Dec 04 09:30:26 2010
    SAP Network Interface Router, Version 38.0
    command line arg 0:     saprouter
    command line arg 1:     -r
    command line arg 2:     -S
    command line arg 3:     3299
    command line arg 4:     -K
    command line arg 5:     p:CN=SOLMGR, OU=0000861986, OU=SAPRouter, O=SAP, C=DE
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/32/32)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "D:\usr\sap\SOL\SYS\exe\uc\NTI386\sapcrypto.dll".
      File "D:\usr\sap\SOL\SYS\exe\uc\NTI386\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
    main: pid = 7560, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    reading routtab: './saprouttab'
    When i tried to start the service manually then service is starting fine but when i tried to check OSS-001 connection in SM59 it says routtab permission failed rc-94.
    Please suggest if any one ever faced this issue.
    REgards,
    Vinod

    Hi Sunil,
    I have cross checked the orutab file. Please see below routab file and sugegst me incase if you find mistakes.
    SNC connection to and from SAP
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
    SNC-connection from SAP to your system SOL with SAPGUI
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 88.85.224.92 3200
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" solmgr 3200
    SNC-connection from SAP to your system SOL with WTS
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 88.85.224.92 3389
    SNC-connection from SAP to your system ECC DEV with SAPGUI
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.128.2.239 3200
    SNC-connection from SAP to local R/3-System for PCANYwhere
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 5631
    SNC-connection from SAP to local R/3-System for saptelnet
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
    Access from your local Network to SAP R/3 Frontend (OSS)
    P * 194.39.131.34 3299
    deny all other connections
    D * * *
    Also today i recieved a mail saying that client has chnaged the IP address of the saolution manager recently. Do they need to re register the IP with sap again. But i am able to telnet sapserv2 server IP using 3299 port and also able to ping the server. Please suggest.
    Regards,
    Vinod

  • Is this possible: SNC connection from SAP GUI to SAP Router, and ...

    Hi,
    I have (stupid perhaps) question.
    Is this scenario possible:
    SNC connection from SAP GUI to SAP Router, and non-SNC connection from SAP Router to SAP System.
    I know how to set up scenario like this:
    SAP System --- (non-SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP GUI.
    Best regards,
    Marek Majchrowski

    Wolfgang,
    To be sure myself and Marek understand, can you confirm the different scenarios supported:
    Scenario 1:
    SAP GUI --- (non SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP System
    With this scenario, it would be possible for a user to logon using SAP GUI onto the SAP System, but without SAP GUI SNC.
    Scenario 2:
    SAP GUI --- (SNC conn) --- saprouter1 --- (non SNC conn) --- saprouter2 --- (SNC conn) --- SAP System
    With this scenario it would be possible to logon to the SAP System using SAP GUI, and using SNC authentication.
    Also, with this scenario the SAP GUI software and SAP System software would consider this to be similar to:
    SAP GUI -- (SNC conn) -- SAP System
    Scenario 3:
    This is the scenario mentioned by Marek in his initial question:
    SAP GUI -- (SNC conn) -- saprouter1 -- (non SNC conn) -- SAP System
    With this scenario it will not be possible to logon to SAP System using SNC, and only possible if the SAP GUI is configured to not use SNC. In other words the SNC connection between SAP GUI and saprouter1 is available, but cannot be used.
    Thanks,
    Tim
    Edited by: Tim Alsop on Feb 25, 2008 5:24 PM

  • SAP router error on windows server 2008 64bit

    Hi All,
    I am installing sap router on windows 2008 server 64 bit.
    While trying to generate certificate request it showing below error.
    E:\usr\sap\saprouter\nt-x86_64>sapgenpse get_pse -v -r certreq -p local.pse "CN=
    solman, OU=000XXXXXXX, OU=SAProuter, O=SAP, C=DE"
    Got absolute PSE path "C:\Users\soladm\sec\local.pse".
    Please enter PIN:
    Please reenter PIN:
    Supplied distinguished name: "CN=solman, OU=000XXXXXXX, OU=SAProuter, O=SAP, C=
    DE"
    Creating PSE with format v2 (default)
    get_pse: Can't create PSE.
    ERROR in af_create: (4352/0x1100) could not flush : "SW-PSE"
    ERROR in create_PSE: (4352/0x1100) could not flush : "SW-PSE"
    ERROR in modified_PSEFile: (4352/0x1100) could not flush : "SW-PSE"
    ERROR in flush_PSEFile: (1283/0x0503) Can't write file : "C:\Users\soladm\sec\lo
    cal.pse"
    ERROR in aux_OctetString2file: (1283/0x0503) Can't write file : "C:\Users\soladm
    \sec\local.pse"
    I couldn't find the cryptography software specifically for windows 2008 server 64 bit ? So I downloaded the software for windows server 64 bit platform.
    Do any one have idea on this...
    Please reply..
    Regards
    Vinay

    Hi,
    Yes, there is no specific cryptography software for windows server 2008 and whatever u have chosen is correct.
    Fom the following error message I could see where the issue arises.
    Can't write file : "C:\Users\soladm\sec\local.pse"
    I think you have not set the following ENV variable for the SAPRouter admin user (in your case soladm) and hence the sapgenpse tries to import the certificate in the SOLADM user's document folder.
    Set the following variables for the user SOLADM and then try to import the certificate as mentioned in the [link|http://service.sap.com/saprouter-sncdoc].
    SECUDIR = E:\usr\sap\saprouter
    SNC_LIB = E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll
    Hope this resolves ur issue.
    Regards,
    Varadharajan M

  • JCO Creation error using SAP router string

    Hi All,
    I have created technical system using customer system IP. After that I have created the JCO
    I have given the details while creating a JCO:
    JCO Name : <Name>
    Client detail:  <Client>
    Message Server :< hostname>
    Logon Group :<SPACE>
    SAP Router String :< /H/<host IP>/H/S/<message server port number>
    User Name :<User name>
    Password :<***>
    I have updated the Host and service file in the portal server.
    When I am testing the JCO I got an exception:
    com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to message server host failed Connect_PM  TYPE=B MSHOST=dicisap1 GROUP=PUBLIC R3NAME=DCD MSSERV=sapmsDCD SAPROUTER_STRING=/H/<RouterIP>/S/3600  PCS=1 LOCATION    SAProuter 37.11 on SOLNMAN ERROR       timeout occured TIME        Wed Nov 05 17:42:31 2008 RELEASE     640 COMPONENT   NI (network interface) VERSION     37 RC          -93 COUNTER     4825
    How to resolve this problem ?
    Regards,
    Boopathi M

    Hi
    Check out these thread
    /message/5401584#5401584 [original link is broken]
    JCO$Exception: (102) RFC_ERROR_COMMUNICATION: CPIC-CALL: 'SAP_CMACCPTP'
    Thanks

  • SAP Router start issue

    Hello All
    We are facing the following issue while starting the SAP router. The router just hangs with the following statement in the command prompt.
    trcfile dev_rout
    no logging active
    upon providing trace level 3 and looking into the dev_route file, the following information is found.
    Please help in suggesting possible resolution.
    trc file: "dev_rout", trc level: 3, release: "742"
    Thu Apr 23 19:06:49 2015
    NiIHSBufInit: initialize hostname buffer (IPv4)
    NiHLInit: alloc host buf (200 entries)
    NiSrvLInit: alloc serv bufs (200 entries)
    NiIInit: allocated nitab (811 at 00000000041A2610)
    NiIInit: host/serv bufs already initialized
    SAP Network Interface Router, Version 40.4
    Compiled Mar 30 2015 18:27:50
    command line arg 0: saprouter
    command line arg 1: -r
    command line arg 2: -V
    command line arg 3: 3
    command line arg 4: -K
    command line arg 5: p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE
    service   : 3299
    routtab   : ./saprouttab
    plug-in   : no plug-in
    -argument: 'no argument'
    clients   : 800
    max servers  : 1
    quelength : 1
    maxheap   : 20000000
    timeoutL  : 5000
    tracefile : dev_rout
    tracefile limit : 0 byte
    tracefile maxcnt : 0
    socket buffer size : 32768
    logfile   : no logging active
    portrange : no portrange active
    local address : default address
    ->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=000000000213F148)
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
          GetUserName()="um1adm"  NetWkstaUser="um1adm"
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".
    DlLoadLib success: LoadLibrary("E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"), hdl 0, count 1, addr 0000000010000000
        using "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): failed GetProcAddress("sapsnc_init_adapter") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
            with error 127 = "The specified procedure could not be found."
    DlLoadFunc(): successful GetProcAddress("gss_acquire_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    Thu Apr 23 19:06:49 2015
    DlLoadFunc(): successful GetProcAddress("gss_init_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_accept_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_process_context_token") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_delete_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_context_time") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_get_mic") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_verify_mic") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_wrap") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_unwrap") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_display_status") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_indicate_mechs") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_compare_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_display_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_import_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_buffer") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_oid_set") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_cred_by_mech") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_wrap_size_limit") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_export_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_import_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_names_for_mech") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_mechs_for_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_canonicalize_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_export_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
      File "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
    DlLoadFunc(): successful GetProcAddress("sapcr_get_version") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("sapcr_get_secudir") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
      SECUDIR="E:\usr\sap\saprouter" (from $SECUDIR)
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.1) to SAPCRYPTOLIB 5.x
      Product Version = SAPCRYPTOLIB  5.5.5C pl38  (Oct  7 2014) MT,AESNI,NB
      <<- SncPDLInit()==SAP_O_K
    <<- SncInit()==SAP_O_K
             sec_avail = "true"
    ->> SncSetMyName(snc_hdl=0000000000000000, myname="p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE")
    <<- SncSetMyName()==SAP_O_K
         in: myname = "p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE"
    NiBufISetParam: set max heap to 20000000
    Thu Apr 23 19:06:49 2015
    NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)
    NiSetParamEx: set NIP_SOCK_BUFFER_SIZE 32768
    NiMyHostName: hostname = 'USCINSAPSVR10'
    main: pid = 13232, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    NiSelICreateSet: new set0
    SiSelNInit: allocate 172528 bytes for FI (811)
    NiSelIInit: size of set0 is 811
    NiICreateHandle: hdl 1 state NI_INITIAL_LIS
    NiIInitSocket: set default settings for new hdl 1/sock 508 (I4; ST)
    Windows Version 6.1, Build 7601
    Running on Windows Vista
    NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val
    NiIBind: hdl 1 bound to 3299 (IP only)
    NiIBlockMode: set blockmode for hdl 1 FALSE
    NiIListen: state of hdl 1 NI_LISTEN
    SiSelNSet: sock 508 added to set pos 0
    NiSelIAddMsg: added hdl 1 to set0
    SiSelNSet: set events of sock 508 to: rp-
    reading routtab: './saprouttab'
    <<- SncNameToAclKey_r()==SAP_O_K
         in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      'aclkey ' (addr=0000000003E5FF60, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
    NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)
    <<- SncNameToAclKey_r()==SAP_O_K
         in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      'aclkey ' (addr=0000000003E5FF60, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
    addrinfo of 'USCINSAPSVR09':
    0: 192.168.120.19:0 Thu Apr 23 19:06:49 2015
    'USCINSAPSVR09' <unknown socket type 0> (0-2-0-0-16)
    1: 192.168.120.19:0 <unknown socket type 0> (0-2-0-0-16)
    NiHLGetNodeAddr: got hostname 'USCINSAPSVR09' from operating system
    NiIGetNodeAddr: hostname 'USCINSAPSVR09' = addr 192.168.120.19
    NiIGetServNo: servicename '3200' = port 3200
    NiStrToAddrMask: '192.168.*.*' -> 192.168.0.0/16 (0/1)
    NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)
    contents of routtab ('./saprouttab', 3 entries):
    KT*,*<<- SncAclKeyToName()==SAP_O_K
      'aclkey ' (addr=00000000042354D4, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
        out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      p:CN=sapserv2, OU=SAProuter, O=  194.39.131.34/32                *         *
    KP*,*<<- SncAclKeyToName()==SAP_O_K
      'aclkey ' (addr=000000000423599C, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
        out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
    Thu Apr 23 19:06:49 2015
      p:CN=sapserv2, OU=SAProuter, O=  192.168.120.19/32               3200      p
    P*,*  192.168.0.0/16                   194.39.131.34/32                *         *
    ******* NI-ROUTER LOOP ********
    SiSelNSelect: start select (timeout=-1)

    ** Trace file opened at 20150417 112112 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =CONNECTION_PING
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_DSMOP_RFC_WATCHER==========CP (Transaction: )
    er: SOLMAN_BTC (Client: 100)
    stination: SAP-OSS (Handle: 1, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)
    P RootContextId: 74D4356C5F6B1ED4B6E3593B0548B699, ConnectionId: 74D4356C5F6B1ED4B6E35960B5B7D699, ConnectionCnt: 1
    P TransactionId: 5B15E5E476B3F1738EAD74D4356C5F6B
    ** Trace file opened at 20150417 112113 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =SAP-OSS
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_SM_DATA_SENDER_RFC=========CP (Transaction: )
    er: SOLMAN_BTC (Client: 100)
    stination: SAP-OSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)
    P RootContextId: 74D4356C5F6B1ED4B6E3593B0548B699, ConnectionId: 74D4356C5F6B1ED4B6E35960B5B7D699, ConnectionCnt: 1
    P TransactionId: 5B15E5E476B3F1738EAD74D4356C5F6B
    ** Trace file opened at 20150417 112113 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =SAP-OSS
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_SM_DATA_SENDER_RFC=========CP (Transaction: )

  • Connection to R/3 with SAP Router

    Hello,
    I want a connecton from XI 3.0 to R/3 with SAP Router.
    But if i want to import the RFCs i become no connection.
    I Edit Software Component Version, but there is it not possible to set any Sap Router String.
    For Connection Data you can only set System, Client, Message Server and
    Group.
    I have also test to write the Router String before the Message Server IP without any sucess. Not enough Place to write the holfe Path in the Field.
    I become no connection to the R/3 to import the RFCs.
    Regards,
    Robin

    pls check correct port number..
    basis will give u this information. or u use tcode SCOT.

  • What's SAP Router String for?

    Hi,
    I can not find proper module for me to post this message, so I post it here.
    When we create a new item in the SAP logon screen , we need to specify the following parameters:
    1) System description
    2) Message server
    3) SAP Router String (optional)
    4) System ID
    5) System Number
    4) Group
    My question is, what's SAP router string for? How to define a new SAP router string?
    Because sometimes we don't need to input SAP router string, and we can still logon to the system successfully.
    So, If I need to create a new SAP router string, where to define?
    Thanks.

    Hi
    A route string describes the stations of a connection required between two hosts. A route string has the syntax
    (/H/host/S/service/W/pass)*
    It consists of any number of substrings in the form /H/host/S/service/W/pass .
    A route string contains a substring for each SAProuter and for the target server.
    Each substring contains the information required by SAProuter to set up a connection in the route: the host name, the port name, and the password, if one was given.
    Syntax for substrings:
    ·        /H / indicates the host name‑{}‑
    Note that the host name must be at least two characters long.
    ·        /S/ is used for specifying the service (port); it is an optional entry, the default value is 3299
    ·        /W/ indicates the password for the connection between the predecessor and successor on the route and is also optional (default is u201Cu201D, no password)
    In earlier Releases (<4.0A), the password entry was made one substring later and with the letter /P/.
    New: /H/saprouter/W/pass/H/targetserver
    Old: /H/saprouter/H/targetserver/P/pass
    (Here pass is the password which is checked by the SAProuter on host saprouter to set up or prohibit the connection from the source host to the target host.)
    Due to downward compatibility, the old password entry form is still possible.
    Thenaks & Regards
    Kishore

  • SAP Router internal error

    Hello
    I have installed solution manager 7.0 and then sap router is also configured on the same box.
    1. To generate a certificate request,
    sapgenpse get_pse -v -r D:\usr\sap\saprouter\certreq -p D:\usr\sap\saprouter\local.pse "CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE"
    2. Then you have to request the certificate from
    http://service.sap.com/tcs -> Download Area -> SAProuter Certificate
    3. Create a file D:\usr\sap\saprouter\srcert and copy the requested
    certificate into this file. :
    sapgenpse import_own_cert -c D:\usr\sap\saprouter\srcert -p
    D:\usr\sap\saprouter\local.pse
    4. To generate credentials for the user that's running the SAProuter
    service:
    sapgenpse seclogin -p D:\usr\sap\saprouter\local.pse -O sapadmin
    (this will create the file "cred_v2")
    5. Check the configuration:
    sapgenpse get_my_name -v -n Issuer
    (Result:  "CN=SAProuter CA, OU=SAProuter,
    O=SAP, C=DE")
    6. Create SAProuter service on Windows :
    ntscmgr install SAProuter -b D:\usr\sap\saprouter\saprouter.exe -p
    "service -r -R D:\usr\sap\saprouter\saprouttab -W 60000 -K "CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE"
    7. Edit the Windows Registry key :
    MyComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SAProuter\ImagePath
    8. Start the SAProuter service  -- success
    9. Enter the parameters in OSS1 -> Technical Settings -->
    hostname : sbsapmgrapp01
    IP: 10.1.0.112
    instance : 00
    SAP host name : sapserv2
    IP: 194.39.131.34
    instance:99
    10. saprouttab
    SNC-connection from and to SAP
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
    SNC-connection from SAP to local R/3-System for Support
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.0.112 3200
    Access from the local Network to SAPNet - R/3 Frontend (OSS)
    P 10.1.0.112 194.39.131.34 3299
    deny all other connections
    D * * *
    when I check the sap-oss connection i am getting internal error. Any help would be appreciate..
    Thanks
    seshu

    Hi Rahu
    Thanks for your response. Here is my saprouttab entry's
    SNC-connection from and to SAP
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
    SNC-connection from SAP to local  Solman System for Support
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.0.112 3200
    Access from the local Network to SAPNet - R/3 Frontend (OSS)
    P     10.1.0.112     194.39.131.34     3299
    P     10...*     194.39.131.34     *
    Here is my dev_rout file..
    trc file: "dev_rout", trc level: 1, release: "700"
    Thu Oct 16 02:08:22 2008
    SAP Network Interface Router, Version 38.10
    command line arg 0:     D:\usr\sap\saprouter\saprouter.exe
    command line arg 1:     -r
    command line arg 2:     -R
    command line arg 3:     D:\usr\sap\saprouter\saprouttab
    command line arg 4:     -W
    command line arg 5:     60000
    command line arg 6:     -K
    command line arg 7:     p:CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "D:\usr\sap\saprouter\sapcrypto.dll".
      File "D:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
    main: pid = 1684, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    reading routtab: 'D:\usr\sap\saprouter\saprouttab'
    Thu Oct 16 09:14:17 2008
    ***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]
    ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256
        (SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp    2823]
    Thu Oct 16 09:14:20 2008
    ***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]
    ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256
        (SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp    2823]
    Kindly suggest the changes in my saprottab file..
    Thanks
    seshu
    Issue resloved..
    Edited by: Seshagiri Rao Myneni on Oct 16, 2008 7:31 PM

  • Setting up SAP Router for SNC ... error...

    Hi,
    My SAP Router is installed on a server that is Linux based. (IP address is 10.11.0.24)
    I'm not sure if is saprouttab or saprouter itself having issue.
    I started the saprouter via this command: saprouter -r -G routerlog -W 60000 -S 3299 -K "p:CN=XXXXXXXX, OU=ZZZZZZZZZZ, OU=SAProuter, O=SAP, C=DE"
    saprouttab
    # SNC connection to and from SAP
    KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 169.145.197.110 *
    KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3200
    # SNC connection to local system for R/3-Support for support
    KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3200
    KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3201
    KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.23 3200
    # Access from local network to SAPNet (OSS)
    P 10.11.0.* 169.145.197.110 3299
    P * 10.11.0.* * *
    # deny all other connections
    D * * *
    Troubleshooting steps taken:
    Running niping -s on SAP Router Server & niping.exe -c -H 10.11.0.24 is successful, self-test is okay but... when running both niping -s & saprouter -r on SAP Router Server is giving me the following error:
    C:\test>niping.exe -c -S 3299 -H 10.11.0.24
    Wed Feb 05 14:51:29 2014
    connect to server o.k.
    Wed Feb 05 14:51:30 2014
    *** ERROR => NiBufIProcMsg: hdl 1 received rc=-93 (NIEROUT_INTERN) from peer [nibuf.cpp    2146]
    *** ERROR => NiTClientLoop: NiTReadLoop (rc=-93) [nixxtst.cpp  2590]
    *  LOCATION    SAProuter 40.4 on 'XXXXXXXX'
    *  ERROR       internal error
    *  TIME        Wed Feb  5 14:51:29 2014
    *  RELEASE     720
    *  COMPONENT   NI (network interface)
    *  VERSION     40
    *  RC          -93
    *  MODULE      nirout.cpp
    *  LINE        2698
    *  DETAIL      NiRClientHandle: route expected
    *  COUNTER     2
    C:\Users\tohcy\Desktop\test>niping.exe -c -S 3299 -H /H/10.11.0.24/H/10.11.0.24
    Wed Feb 05 15:01:00 2014
    *** ERROR => NiBufIProcMsg: hdl 1 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp    2146]
    *** ERROR => NiBufIConnect: route connect for non-buffered hdl 1 failed (rc=-94;/H/10.11.0.24/H/10.11.0.24); pong not received [nibuf.cpp    4801]
    *** ERROR => NiTClientLoop: NiHandle (rc=-94) [nixxtst.cpp  2590]
    *  LOCATION    SAProuter 40.4 on 'XXXXXXXX'
    *  ERROR       XXXXXXXX: route permission denied (YYY to 10.11.0.24, 3299)
    *  TIME        Wed Feb  5 15:00:59 2014
    *  RELEASE     720
    *  COMPONENT   NI (network interface)
    *  VERSION     40
    *  RC          -94
    *  COUNTER     7

    Hi Deepak,
    I've changed to the P * * *
    I run the command: niping.exe -c -S 3299 -H /H/10.11.0.24/H/10.11.0.23
    Can I check if this command is correct?
    Router is 10.11.0.24 trying to reach sap server 10.11.0.23.
    Error:
    Thu Feb 06 09:20:17 2014
    *** ERROR => NiBufIProcMsg: hdl 1 received rc=-5 (NIETIMEOUT) from peer [nibuf.cpp    2146]
    NiBufIConnect: route connect of non-buffered hdl 1 to '/H/10.11.0.24/H/10.11.0.23' timeout
    *** ERROR => NiTClientLoop: NiHandle (rc=-5) [nixxtst.cpp  2590]
    *  ERROR       timeout occured
    *  TIME        Thu Feb 06 09:20:17 2014
    *  RELEASE     720
    *  COMPONENT   NI (network interface)
    *  VERSION     40
    *  RC          -5
    *  MODULE      nibuf.cpp
    *  LINE        4795
    *  DETAIL      NiBufIConnect: route connect '/H/10.11.0.24/H/10.11.0.23'
    *              timeout
    *  COUNTER     1
    routerlog:
    Thu Feb  6 09:27:21 2014 CONNECT FROM C19/- host 10.11.0.181/50107
    Thu Feb  6 09:27:21 2014 CONNECT TO   S19/12 host 10.11.0.23/3299
    Thu Feb  6 09:28:21 2014 CONNECT ERR  S19/12 could not establish connection within 60s
    Thu Feb  6 09:28:21 2014 DISCONNECT   S19/12 host 10.11.0.23/3299
    10.11.0.181 is my computer current IP address.
    Any other clues/hint?

Maybe you are looking for