Starting SAProuter
Hi everyone,
in order to make a remote SNC connection between SAP and our company,
i already made a remote connection data sheet and SAP sent me back the installation procedure. Also, i have the SAP Cryptolib Software CD installation. Regarding to this, i created the SAProuter Certificate for Support Connections. I have checked if the certificate has been imported correctly and the name of the Issuer is: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
After checking all th previous procedure, i have to start the SAProuter. When i enter the command : saprouter -r
there is an error message :
trcfile dev_rout
no logging active
in the dev_rout file :
trc file: "dev_rout", trc level: 1, release: "700"
Mon Mar 17 12:48:11 2008
SAP Network Interface Router, Version 38.10
command line arg 0: saprouter
command line arg 1: -r
main: pid = 3692, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'
Could you please tell me why there is no logging active?
Thanks a lot.
EDIT :
PS :
1. I already have installed the latest cryptolib via a CD sent by SAP AG
2. In the path E:\usr\sap\saprouter, there are all the files (sapgenpse.exe, saprouter.exe, sapcrypto.dll, saprouttab, dev_rout etc.
3. The environment variables SECUDIR are located in E:\usr\sap\saprouter and SNC_LIB also in E:\usr\sap\saprouter\sapcrypto.dll
4. The command sapgenpse get_my_name -v -n Issuer displays Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
Hi,
here is the command "saprouter -r -G saprouter.log" and there is this message :
trcfile dev_rout
logfile saprouter.log
ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp 7998]
Regarding to the dev_rout file:
trc file: "dev_rout", trc level: 1, release: "700"
Tue Mar 18 10:16:26 2008
SAP Network Interface Router, Version 38.10
command line arg 0: saprouter
command line arg 1: -r
command line arg 2: -G
command line arg 3: saprouter.log
main: pid = 4088, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'
ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 7767]
ERROR => SNC field without SNC active, skip line 14 [nirout.cpp 7767]
saprouttab file:
line 6 : KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Solution Manager IP Adress> <Solution Manager Port>
line 14 : KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299
Thanks
Similar Messages
-
Not able to start Saprouter from services.msc
Hi,
We have installed a saprouter into Windows 2003 Server. It is running fine. When we start the system then we need to manually start the saprouter by a batch file, so i am trying to register a service so that we need not to start the router manually.
i have read the note 525751 and install a new service by this command
ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""
Service successfully created. I have followed the note and done everything as per the note, but when i try to start the service i am getting this error couldnot start saprouter service on local computer, error 1067 process terminated unexpectedly
When i checked the event log i found this message.
RROR Unable to load the GSS-API DLL
named "sncgss32.dll"
TIME Tue Oct 06 16:30:17 2009
RELEASE 640
COMPONENT NI (network interface)
VERSION 5
RC -17
MODULE sncxxdl.c
LINE 342
DETAIL SncPDLInit
SYSTEM CALL LoadLibrary
COUNTER 1
I have checked some thread on related to issue but not able to solve the problem. Could you please assist what's wrong.
Regards,
Subhash>
Tomas Gustafsson wrote:
> I'm sorry to put a silly question here, but this message is a little bit hard to get the grip on:
> Do you use the same user for both the command prompt and the service?
Yes I understand it's frustrating now., and Yes i am using the same user srvsolmgr to run from Services.msc and from command prompt also.
> Also
> Can you please post the command which runs successfulll (from the command prompt)
> and the complete command for the saprouter-service.
C:\>cd saprouter
C:\saprouter>saprouter -r -G log.txt -R C:\saprouter\saprouttab -S 3299 -K "p:CN
=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
trcfile dev_rout
logfile log.txt
Connection test OK
u Oct 08 16:03:56 2009
SAP Network Interface Router, Version 37.11
command line arg 0: saprouter
command line arg 1: -r
command line arg 2: -G
command line arg 3: log.txt
command line arg 4: -R
command line arg 5: C:\saprouter\saprouttab
command line arg 6: -S
command line arg 7: 3299
command line arg 8: -K
command line arg 9: p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "C:\saprouter\sapcrypto.dll".
File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main(): pid = 2776, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
reading routtab: C:\saprouter\saprouttab
Regards,
Subhash -
Error in starting SAProuter.
Hi! Gurus,
To establish remote connection for SAP Support I have installed SAProuter in our ECC Server host. But when I am trying to start the service it cannot start. self testing is OK. I cannot cerate SAProuter (file / table ?) Not sure about really how to create it. I have checked related
notes and manual. Still it is not clear to me .
Please help me.
error files are attached.
trc file: "dev_rout", trc level: 1, release: "640"
Fri Jun 02 04:05:45 2006
SAP Network Interface Router, Version 37.0
command line arg 0: saprouter
command line arg 1: -r
main(): pid = 4712, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
ERROR => fopen ./saprouttab (2: No such file or directory) [nirout.cpp 7549]
**LOG Q0I=> NiRRouttab: fopen (2: ENOENT: No such file or directory OR: The system cannot find the file specified. ) [nirout.cpp 7550]
cannot open './saprouttab': all routing disabled!!!
Could not open permission table
With Thanks and regards,
Pratip BhattacharyyaHi! Barry,
Rightly you have detected my problem. Yes , I am trying to create a route permission table.
But, unfortuanetly I am not able to do it till now. Even the PDF reffered by you and it's earlier documents. As per the doc (pg 25.) I have already created a txt file named as saprouttab.txt in d:\usr\sap\saprouter folder. Our Server is in Windows 2003. I have tried with defferent combination of connect string. But nothing working. I cannot understand the the problem. Am I doing anything wrong or missed something ?
I simply want to establish a connection in-between SAP Support server and our ECC server.
Awaiting for your advise.
With regards,
Pratip Bhattacharyya -
Error while starting saprouter service
i am narayana. i have installed saprouter service.it is successfully installed.i had changed the logon as <SID>adm.
while starting the saprouter service it is giving the following error message.
Could not start the saprouter service on Local Computer. Error 2: The system cannot find the file specified.
can anybody help me.it is urgent for me.please help as early as possible
thank youhi
thanks for responding with usufull information.
now while starting service 'SAPRouter' i am not getting any error.
for command "saprouter -r" at command level output is
" trcfile dev_rout
no logging active
WARNING :wildcard character used in route terget
my "saproutetab" file is as follows
P * * *
this is the only entry i have given.
and my dev_rout file is as follows
trc file: "dev_rout", trc level: 1, release: "640"
Mon Oct 22 12:06:50 2007
SAP Network Interface Router, Version 37.12
command line arg 0: saprouter
command line arg 1: -r
main(): pid = 228, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
reading routtab: ./saprouttab
I WANT TO GIVE PERMISSION TO SAP TO WATCH MY SYSTEM
HOW CAN I GIVE THE ENTRY IN SAPROUTETAB
because of some problem in my system we raised a customer message.Sap responded that to configure saprouter. so to allow sap what is the entry to give in saprouttab.what is the ip-address of sap system?
please respond as early as possible
thank you -
As per the saprouter documents I have gone upto the registery MYCOMPUTER/HKEY_LOCAL_MACHINE/Currentcontrolset/Services/saprouter, unable to understand what to do next -
edit ^to" under Imagepath. Can anyone guide me.
And kindly explain how to move on saprouttab.
Gone through almost all the sites for help. Request help from the person who had configured.
Thanks.Further to this the event log states as below :
An anonymous session connected from 61.109.248.120 has attempted to open an LSA policy handle on this machine. The attempt was rejected with STATUS_ACCESS_DENIED to prevent leaking security sensitive information to the anonymous caller.
The application that made this attempt needs to be fixed. Please contact the application vendor. As a temporary workaround, this security measure can be disabled by setting the \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock DWORD value to 1. -
Saprouter doesn't start as service
Hello!
We faced with some troubles with our system (based on MSWin2003).
Our saprouter worked correct before using SNC connect to SAP.
Now, when we try to start saprouter via services.msc we get
error 1053 the service did not respond to the start or control request in a timely fashion
On MS site I have found article where describes the same problem with other service. Article told us that the problem in Framework.NET and recommends to upgrade it. Here is the link [NET Framework|http://support.microsoft.com/kb/839174]
Now saprouter works only in console mode.
d:\saprouter\saprouter.exe -r -K "p:CN=<our_servername>, OU=<our_cust_numb>, OU=SAProuter, O=SAP, C=DE"
With the same string in services saprouter doesn't work.
Thanks
ArtemHi Artem,
1st - when I start saprouter error 1053 occured: the service did not respond to the start or control request in a timely fashion. It must start by sidadm user.
This seems that the user you are trying to start the router does not have the permissions at os level so user <sidadm> to start the router.
2nd - you told me that I can use "service" parameter in command line. And I ask you: Will saprouter appear in services.msc as service or will it be work in "background" without appear in services.msc?
Normally we start the router at command prompt by using the command saprouter -r <parameters> at the os level in the folder usr/sap/saprouter
But as you want to make it as windows service you have to first install it as a service then only you can use it as a service.Simply typing service in the command can not make the router to be installed as service.If you want to install this as a service then you have to execute the command which i have posted in my previous post.
Hope this helps!!!
Reward points if helpfull.
Regards,
Vamshi. -
SAProuter Service Is Not Starting
Hi,
I have installed saprouter on my end.service is created sucessfully.
when i am start saprouter service its given me
error SAProuter Service Is Not Starting locally error 1067.
I am tried to start this service windows administrator as well sncadm.its give me same error.
Regards
AmolHi Amol,
Read,
Re: SAPROUTER
http://sap.ittoolbox.com/documents/popular-q-and-a/saprouter-service-is-not-starting-4447
regards
Juan
PS: Hi Abinash,
GREAT COPY AND PASTE JOB...! -
Hi All,
I configured saprouter in solman server(windows) iam unable start saprouter . I gave the follwoing command its not giving any output.
C:\saprouter\ntintel>saprouter -r -G routlog -S 3299 -K "p:CN=solman, OU=SAProut
er, O=SAP, C=DE"
trcfile dev_rout
logfile routlog
Regards
SivaHi All,
I ran this command. saprouter -r -V 3 -K "p:<Distinguished name>"
I get the following message in a 'trace file'
trc file: "dev_rout", trc level: 3, release: "700"
Thu Oct 23 09:22:28 2008
NiHsLInit: alloc host/serv bufs (200/200 entries)
NiIInit: allocated nitab (811 at 02CA02C8)
NiIInit: host/serv bufs already initialized
NiPGetNodeAddrList: got 1 interface(s) from operating system
[0] IP-Address: 10.14.147.32
SAP Network Interface Router, Version 38.10
Compiled May 22 2007 00:31:59
command line arg 0: saprouter
command line arg 1: -r
command line arg 2: -V
command line arg 3: 3
command line arg 4: -K
command line arg 5: p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE
service : 3299
routtab : ./saprouttab
plug-in : no plug-in
-argument: 'no argument'
clients : 800
max servers : 1
quelength : 1
maxheap : 20000000
timeoutL : 5000
tracefile : dev_rout
logfile : no logging active
portrange : no portrange active
local address : default address
->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=0157F6BF)
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/32/32)
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "C:\saprouter\ntintel\sapcrypto.dll ".
load shared library (C:\saprouter\ntintel\sapcrypto.dll ), hdl 0
using "C:\saprouter\ntintel\sapcrypto.dll"
DlLoadFunc: GetProcAddress(sapsnc_init_adapter) Error 127
Error 127 = "The specified procedure could not be found."
load shared func (gss_acquire_cred) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_release_cred) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_init_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_accept_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_process_context_token) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_delete_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_context_time) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_get_mic) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_verify_mic) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_wrap) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_unwrap) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_display_status) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_indicate_mechs) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_compare_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_display_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_import_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_release_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_release_buffer) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_release_oid_set) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_inquire_cred) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_add_cred) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_inquire_cred_by_mech) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_inquire_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_wrap_size_limit) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_export_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_import_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_create_empty_oid_set) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_add_oid_set_member) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_test_oid_set_member) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_inquire_names_for_mech) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_inquire_mechs_for_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_canonicalize_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_export_name) from C:\saprouter\ntintel\sapcrypto.dll
load shared func (gss_duplicate_name) from C:\saprouter\ntintel\sapcrypto.dll
File "C:\saprouter\ntintel\sapcrypto.dll " dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
<<- SncPDLInit()==SAP_O_K
<<- SncInit()==SAP_O_K
sec_avail = "true"
->> SncSetMyName(snc_hdl=00000000, myname="p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE")
<<- SncSetMyName()==SAP_O_K
in: myname = "p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE"
NiBufISetParam: set max heap to 20000000
NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)
NiIMyHostName: hostname = 'solman'
main: pid = 1032, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
NiICreateHandle: hdl 0 state NI_INITIAL
NiIInitSocket: set default settings for new hdl 0 / sock 876 (I4; ST)
NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val
NiIBind: hdl 0 bound to 3299 (IP only)
NiIBlockMode: set blockmode for hdl 0 FALSE
NiIListen: state of hdl 0 NI_LISTEN
NiIListen: listen for client requests on hdl 0
NiSelICreateSet: new set0
SiSelNInit: allocate 134560 bytes for FI (811)
NiSelIInit: size of set0 is 811
SiSelNSet: sock 876 added to set pos 0
NiSelIAddMsg: added hdl 0 to set0
SiSelNSet: set events of sock 876 to: rp-
reading routtab: './saprouttab'
NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
NiStrToAddrMask: '10.14.147.32' -> 10.14.147.32 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
NiIGetServNo: servicename '3200' = port 0C.80/3200
NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
NiIGetServNo: servicename '3299' = port 0C.E3/3299
NiStrToAddrMask: '10.14.147.32' -> 10.14.147.32 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
NiIGetServNo: servicename '3299' = port 0C.E3/3299
contents of routtab ('./saprouttab', 4 entries):
P, 194.117.106.129 ffff:ffff:ffff: 10.14.147.32 ffff:ffff:ffff: 3200 *
P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 194.117.106.129 ffff:ffff:ffff: 3299 *
P, 10.14.147.32 ffff:ffff:ffff: 194.117.106.129 ffff:ffff:ffff: 3299 *
D, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *
NI-ROUTER LOOP ********
SiSelNSelect: start select (timeout=-1)
Regards
Siva -
Hi guys,
Im trying to setup an saprouter for my solution manager system, my solution manager is not yet ready but im through with the saprouter configuration.
When i try to start the saprouter, this is the error i got
"trcfile dev_rout
logfile routerlog
routtab cannot open './saprouttab': EXIT PROGRAM !!!
(running without saproutab is no longer supported for security reasons)
Could not open permission table"
I would appreciate any help you can offer.
Regards.Hi,
You need to create the saprouttab file which I think is missing. Please go throuhg the below threads which will help you in resolving the issue.
SAP Router error
error while configuring saprouter
configure maintenance optimizer
Unable to start SAProuter
Regards,
Sharath -
Error while configuring saprouter
Hi,
I m getting error while configuring saprouter.
When i run the command get_pse -v -r certreq -p local.pse"DN name".I get the following error.
get_pse: Malformed distinguished name "pqprojsrv CN=pqprojsrv, OU=0000756782, O
U=SAProuter, O=SAP, C=DE"
ERROR in Name2DName: (12321/0x3021) problem parsing DName : "unknown key or malf
ormed OID"
ERROR in aux_Name2ObjId: (1/0x0001) unknown algorithm : "PQPROJSRV CN"
Please suggest on this .
Thanks in advance.
Regards,
AmitHi,
I resolved tht issue.but now when im starting saprouter it gives me following error :
trcfile dev_rout
no logging active
routtab cannot open './saprouttab': EXIT PROGRAM !!!
(running without saproutab is no longer supported for security reasons)
Could not open permission table
saprouttab is nt created in saprouter directory.
Please suggest
Thanks in advance.
Regards,
Amit -
Hi All,
I have installed SAP Router before but this time when I installed and tried to start SAP Router its not getting started, and also not giving any error log file in SAP Router directory.
Please check the below command and correct me if I am wrong.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\sap_admin>cd \
C:\>cd SAPRTR
C:\SAPRTR>saprouter -r -S 3299 -K "p:CN=<MyRouterHOSTNAME>, OU=<Cust_NUM>, OU=SAProuter,
O=SAP, C=DE"
SAP Network Interface Router, Version 38.10
Compiled Oct 7 2009 03:08:09
start router : saprouter -r
stop router : saprouter -s
soft shutdown: saprouter -p
router info : saprouter -l (-L)
new routtab : saprouter -n
toggle trace : saprouter -t
cancel route : saprouter -c id
dump buffers : saprouter -d
flush " : saprouter -f
hide errInfo : saprouter -z
start router with third-party library: saprouter -a library
additional options
-R routtab : name of route-permission-file (default ./saprouttab)
-G logfile : name of log file (default no logging)
-T tracefile : name of trace file (default dev_rout)
-V tracelev : trace level to run with (default 1)
-H hostname : of running SAProuter (default localhost)
-S service : service-name / number (default 3299)
-P infopass : password for info requests
-C clients : maximum no of clients (default 800)
-Y servers : maximum no of servers to start (default 1)
-K [myname] : activate SNC; if given, use 'myname' as own sec-id
-A initstring: initialization options for third-party library
-D : switch DNS reverse lookup off
-E : append log- and trace-files to existing
-J filesize : maximum log file size in byte (default off)
-6 : IPv6 enabled
-Z : hide connect error information for clients
expert options
-B quelength : max. no. of queued packets per client (default 1)
-Q queuesize : max. total size for all queues (default 20000000 bytes)
-W waittime : timeout for blocking net-calls (default 5000 millisec)
-M min.max : portrange for outgoing connects, like -M 1.1023
-I address : address for outgoing connects, like -I 155.56.76.6
this is a sample routtab : -----------------------------------------
D host1 host2 serviceX
D host3
P * * serviceX
P 155.56.. 155.56
P 155.57.1011xxxx.*
P host4 host5 * xxx
P host6 localhost 3299
P host7 host8 telnet
S host9
P0,* host10
KP sncname1 * *
KS * host11 *
KD "sncname "abc" * *
KT sncname3 host11 *
deny routes from host1 to host2 serviceX
deny all routes from host3
permit routes from anywhere to any host using serviceX
permit all routes from/to addresses matching 155.56
permit ... with 3rd byte matching 1011xxxx
permit routes from host4 to host5 if password xxx supplied
permit information requests from host6
permit native-protocol-routes to non-SAP-server telnet
permit ... excluding native-protocol-routes (SAP-servers only)
permit ... if number of preceding/succeeding hops (SAProuters) <= 0/*
permit SNC-connection with partnerid = 'sncname1' to any host
permit all SAP-SAP SNC-connections to host11
deny all SNC-connections with partnerid = 'sncname "abc'
open connects to host11 with SNC enabled and partnerid = 'sncname3'
first match [host/sncname host service] is used
permission is denied if no entry matches
service wildcard (*) does not apply to native-protocol-routes
C:\SAPRTR>
Rg
RameshHello my friend
It could be certificate didn't import properly or routtab content is not correct. Here's your checklist:
Creating the certificate request
1) As user <snc_adm> set the environment variables SNC_LIB and SECUDIR
2) Change to the alias SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant u201CDistinguished Nameu201D.
3) Generate the certificate Request with the command:
sapgenpse get_pse -v -r certreq -p local.pse u201C<Distinguished Name>u201D
You will be asked twice for a PIN here. Please choose a PIN and document it, you have to enter it identically both times. Then you will have to enter the same PIN every time you want to use this PSE.
4) Display the output file "certreq" and with copy&paste (including the BEGIN and END statement) insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.
5) In response you will receive the certificate signed by the CA in the Service Marketplace. Copy&paste the text to a new local file named "srcert", which must be created in the same directory as the sapgenpse executable.
6) With this in turn you can install the certificate in your saprouter by calling:
sapgenpse import_own_cert -c srcert -p local.pse
7) Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user_for_saprouter>, the credentials are created for the logged in user account).
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
Note: The account of the service user should always be entered in full <domainname>\<username>
8) This will create a file called "cred_v2" in the same directory as "local.pse"
9) Check if the certificate has been imported successfully with the following command:
sapgenpse get_my_name -v -n Issuer
The name of the Issuer should be:
CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
10) If this is not the case, delete the files "cred_v2"and "local.pse" and start over at Item 3.
Additional actions necessary before you can start SAProuter
1. Check if the environment of the user running SAProuter contains the environment variable SNC_LIB and SECUDIR
2. Start the SAProuter with the following command line (to start the SAProuter as a Windows service, please follow the steps described in SAP note 525751):
saprouter -r -S <port> -K "p:<Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
3. The corresponding file "saprouttab" should look like:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *
SNC-connection from SAP to telnet in your network
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P * 194.39.131.34 3299
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your IP> <port>
Regards,
Effan
DON'T KNOW WHY THE FORMAT MESSED UP, PLEASE USE QUOTE ORIGINAL IN REPLY MODE TO READ THE CORRECT FORMAT CONTENT. SORRY! -
Error in SAProuter installation
Hi to all,
I have followed all step for install a saprouter, but i have the follow error message:
(when i start the service in "Computer Management")
"Could not start saprouter service on local computer
Error 14001: This application has failed to start because the application configuration is incorrect. Reinstalling application may fix the problem."
(in cmd)
C:\>saprouter -r
trcfile dev_rout
no logging active
ERROR => invalid lines in ./saprouttab, see dev_rout [nirout.cpp 8009]
WARNING: wildcard character used in route target
C:\>saprouter -l
Tue Dec 04 10:18:40 2007
SAP Network Interface Router, Version 37.12
Tue Dec 04 10:18:41 2007
***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection ref
used) [nixxi.cpp 8724]
ERROR => RTADMINREQ::execClientReq: NiBufConnect (rc=-10) [nirout.cpp 6713
ERROR partner not reached (host 127.0.0.1, service 3299)
TIME Tue Dec 04 10:18:41 2007
RELEASE 640
COMPONENT NI (network interface)
VERSION 37
RC -10
MODULE nixxi.cpp
LINE 8724
DETAIL NiPConnect2
SYSTEM CALL SiPeekPendConn
ERRNO 10061
ERRNO TEXT WSAECONNREFUSED: Connection refused
COUNTER 1
the saprouttab file is in the same foleder of saprouter and there is only a line (ex."P 10.0.1.132 10.0.1.211 3299")
Where is the problem?hi franco,
please check your network card. It seems that you have problem with your network card since it's only show loopback address.
ardhian
http://sapbasis.wordpress.com -
Hi guys,
I am getting an error in my sap router as my network team made some changes in the VPN connections
SAP Network Interface Router, Version 34, August 30 1999
command line arg 0: saprouter
command line arg 1: -r
ERROR => fopen ./saprouttab (2: No such file or directory) [nixxrout.c 2666]
***LOG Q0I=> NiRRouttab: fopen (2: No such file or directory) [nixxrout.c 2667]
cannot open ./saprouttab: all routing disabled!!!
Could not open permission table
Please reply with ur suggestions.
Thank you,
Irshad MohammedWhen i m trying to start saprouter from saprouter utility im getting this error
External Call
0
31 Could not open permission table
0
17 trcfile dev_rout
17 no logging active
51 routtab cannot open ./saprouttab: EXIT PROGRAM !!!
0
80 (running without saproutab is no longer supported for security reasons)
46 External program terminated with exit code 255 -
Configuration of saprouter.
Hello,
I have reinstalled the saprouter but after configuring the saprouter, it's giving error while starting saprouter.
The error is as follows :
$ ./saprouter -l
SAP Network Interface Router, Version 40.4
***LOG Q0I=> NiPGetHostByName: 'localhost' not found: getaddrinfo [niuxi.c 1759]
*** ERROR => NiGetLoopbackAddr: NiIGetNodeAddr failed (rc=-2) [nixx.c 2179]
Mon Jun 16 16:53:40 2014
peer SAProuter with NI version 40 ...
send info-request to running SAProuter ...
SAP Network Interface Router running on port 3299 (PID = 132)
Started on: Mon Jun 16 16:12:14 2014
ID CLIENT | PARTNER service
-----------------------------------+---------------------------------------
9 127.0.0.1 | (no partner)
Total no. of clients: 1
Working directory : /usr/sap/saprouter
Routtab : ./saprouttab
Please help.Hi,
I have configured SAP Router on Windows. When i start the router i am getting error like as below.
trcfile dev_rout
ERROR SNC processing failed:
SncInit
TIME Tue Sep 30 10:32:29 2008
RELEASE 700
COMPONENT NI (network interface)
VERSION 38
RC -17
MODULE nisnc.c
LINE 646
DETAIL NiSncInit: sncrc=-1
COUNTER 3
Please any body give the solution.
Thanks,
Regards,
venkat -
Hello Guru,
Well after configuring the SAP Router and doing everything possible to let it run.
When, I finally tested it with the SAPOSS-connection it didn't work at all.
In fact I'm getting an error msg fron sap serv2a with my external ip address, where the connection has been refused.
ERROR : " sapserv2a router permission denied (XX.XX.XX.XX to oss001,sapmsOSS) "
Now, I wonder why it's not working.
Another problem that the OU name of my Distinguish name of my saprouter is different from my super user logon in sap marketplace, why is it different, it should be actually the same, unfortunatelly I can't change it because only SAP could (because of the certificat).
A third and last problem is also the fact that my sap router name is actually named e.g. ROUTI but the Distinguish name contain the name SAProuter, I only added a line containing the saprouter name i.e. SAProuter with it's ip adresse on windows-file hosts (C:\WINDOWS\system32\drivers\etc)
Please, let me now, if you have any idea.
Best Regards,
KaisUse these commands if you encounter problems connecting to OSS or sapserv4.
Stop saprouter
1. logon to system as <sid>adm
2. ps -ef|grep saprouter - should show process as saprouter -r
3. saprouter -s - this will STOP saprouter service
4. ps -ef|grep saprouter - should not show saprouter process
Start saprouter
1. logon to system as <sid>adm
2. ps -ef|grep saprouter - should not show saprouter process, cd /usr/sap/saprouter
3. nohup saprouter -r & or nohup saprouter -r -G /usr/sap/saprouter/saprout.log (Saprouter start with Log / command has been incluede in the /etc/init tab to start with the OS / server) (wait a few seconds then press <enter> to return to prompt...this will start saprouter service in the background)
4. ps -ef|grep saprouter - should show process as saprouter -r
5. Logon to to OSS to test (should work from tcode OSS1 and from OSS entry on saplogon screen)
Maybe you are looking for
-
Cost Center Error while releasing Billing document to Accounting
Hi SAP Gurus, Our user raised an issue that when he had released billing document to accounting, the system threw error message "Cost center xxxx (CO area)/xxxx(Cost center) does not exist on date 11/16/2011". Message No. KI 222. But the cost center
-
New HP Pavillion All-in-one PC 20-b014 ( and moving information from old computer)
Hello, I apologize if this has been asked before....but would appreciate some assistance. I currently have a HP Pavilion Slimline s5310y desktop PC (running Windows 7) and just purchased the HP Pavillion All-in-one PC 20-b014(Windows 8). I was wonde
-
Chinese Character Printing in Smartform (Different Question)
Hi all, Can anyone explain to me further the OSS Note 776507 that Anji Reddy Vangala recently posted? It involves the preview and printing of different character sets. Currently I've managed to preview my form correctly, but it still prints out #'s
-
How do I transfer music from htc one phone to hp envy
how can I transfer my music playlist from my htc one to my hp envy laptop This question was solved. View Solution.
-
Organize discoverer workbooks saved to database
I may be confusing this with another Oracle product, but I seem to recall hearing something about an enhancement to Discoverer relational that would allow creation of folders/directories to help organize workbooks when saving to the database. Has any