Wrong Distinguished Name for SAP-Router

Hello Everybody,
I have a Problem about the Distinguish name of my sap router.
The Problem, when I go to sap to look for my Distinguish name and therefore to generate the saprouter certificat.
I found something totally wrong :
e.g. CN=SAProuter, OU=0000755120, OU=SAProuter, O=SAP, C=DE
but it muss be like this e.g. CN=Routi, OU=0003380660, OU=SAProuter, O=SAP, C=DE
How can I change this, I don't want to start my saprouter with the wrong Distinguish name.
Thanks in Advance.
Best Regards,
Kais

Hello,
Is your SAPRouter in the DMZ ?
In that case, you have to open the firewall port.
Regards,
Abhilash

Similar Messages

DNS Domain Name for SAP System

Hi,
I am installing BI7.1 , it is asking for DNS Domain Name for SAP System.
What to give i dont know please some one help
Thanks,
Jack

Hi,
Pls chk this link;
http://en.wikipedia.org/wiki/Domain_name_system
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/994a06ed-0c01-0010-878b-e796a9060209
Regards
CSM Reddy

Public-real IP changed for SAP Router

Hello,
The real IP for SAP Router system has changed, therefore I would need to re configure the same.
I have gone through existing threads, but not throwing much light related to my query.
I tried to reconfigure, but when generating the certificate I get below error. The /usr folder is the old folder of the router and am trying to reconfigure in folder is /newrouter. The OS is windows server 2008.
D:\NewRouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=<hostname>,
OU=0000872340, OU=SAProuter, O=SAP, C=D"
Got absolute PSE path "D:/usr\local.pse".
get_pse ERROR: PSE already exists "D:/usr\local.pse"
I have already changed the environment variables for SECU_DIR and LIB one.
My questions are :
1) Is there any way to just update the ip address on the market place by just opening the ticket at XX-SER-NET OR do I need to perform the whole procedure after uninstalling previous configuration.
2) What is the method for uninstallation of SAP Router?
Thanks.
Sat

Hi,
Thanks for your reply.
Actually I changed the env variables and after restarting the sapgenpse command worked.
But I did not proceed further.
I have informed SAP to update the new ip address.
My query is what action should I perform at my end instead of reconfiguring the router again.
Thanks.
Sat

LDAP OID Distinguished Name for Groups

Hi, Can I use another "Distinguished Name for Groups" in LDAP (OID) configurazion in BIP Admin?
Watching the user guide http://download.oracle.com/docs/cd/B40078_02/doc/bi.1013/b40017/T421739T475591.htm#T434695
Distinguished Name for Groups
For example: cn=Groups, dc=us,dc=oracle,dc=com
The default value is cn=OracleDefaultDomain,cn=OracleDBSecurity,cn=Products,cn=OracleContext,dc=example,dc=com
If a try to use the dn cn=RoleNames,cn=SIM,dc=example (instead of "example" I use the real name of dc), LDAP integration doesn't function.
Do you know why?
Thank you,
R.

Hi
We're facing a similar issue in our environment in that users authenticate with their SAMAccount names, which are FirstInitial+Lastname, eg. jdoe (John Doe). LDAP requires us to use the full DN name in certain domains (not all) to login, which is rather irritating.
There are several domains. In windows we all login with the samaccount name, which follows the same principle for everyone. So DomainXYZ\jdoe .
In LDAP though, it appears that for DomainABC it needs CN=John Doe, whereas for DomainXYZ it will accept CN=jdoe etc.
Would you mind elaborating on how you managed to search LDAP for your purposes? I hope to get some insights in how to use the package dbms_ldap, because I'm rather new to APEX and with a growing userbase I'd like to move away from Apex user accounts.
Thank you
Tom

Can we create BS name is different name for SAP rather than SID

Hi All,
Business system 'A' is configured for SAP system and some IDOCS interfaces are running on with this busiess system name.
but actually business system 'A' name is not the SAP system ID(lets say 'B').
Now Client proxy scenario is configured. Its taking business system 'B' which is system id when testing from SAP to XI.
But its taking business system 'A' when sending any IDOCs from SAP to XI.
How is this possible. It should actually determine the system ID as business system ID.
And also what will happen to the existing interfaces if we delete and create the bsuiness system as system ID('B')
Your help would be highly appreciated.
Regards,
Sekhar D

Hi sekhar,
correct my understanding if wrong,
Do u have two different BS maintained in SLD for same SAP system? and for BS A there are already some IDOc scenario's in place.And now BS is created with sys ID and you want to migrate the earlier scenarios ot new BS "B".
I think for BS A you will have the SWCV, you can associate that SWCV to the new BS in SLD , then the exsiting objects will come under BS B. and then you can delete the earlier BS and configure the ID part .
Regard,
Srinivas

Wrong Component Version for sap system

Hi All,
I upgraded CRM 7.01 to EHP3 / NW 7.40.
But in System -> Status Component version is SAP System Component version is EHP7 for SAP ERP 6.0 and not SAP CRM ABAP 7.01 EHP3.
The upgrade was successfull and APPL component is at 7.40 04.
I need to correct SAP System Component version. This made some confusion for my college.
Is any body has the same problem.
Thanks for any help.

Hello Reagan,
Here is result and explanation .

Register IP address and host name of SAP Router

Does anyone think there would be a problem if we register one IP address now and then register another one later, replacing the first?
Thanks.

I think that It isn't problem
Check SAP Note 126645 - SAP provider remote connection data sheet
In the message explain your question
Regards
William Neira

I changed my e-mail (due to a move) and now I'm unable to connect my ipod. I get the "wrong user name" for all three of the family ipods.

I've checked the Apple site as well as performed a Google search to no avail. Anyone out there able to help?

Hello,
Open Keychain Access in Utilities, use Keychain First Aid under the Keychain Menu item, then either check the Password under that item, change it, or delete it and start over.
You may have multiple entries.
Open Keychain Access in Utilities, enter the part after the @ sign in the search bar, hit enter

Pre requisites for installing SAP Router

Hi Friends,
As i am going through the implementation phase, I have to install sap router which i am new at. Also i am doing it because i have to connect Maintenance Optimizer to Sap service Market place for which Router would be essentially required.
I have some questions to put forth.
1. what are the pre requisites for SAP Router
2. Do we require Public IP and what would be the use of this ip
3. how to configure the SAP Router
4. Can i install the SAP router on the same host on which we have Solution manager, is it advisable. or we should go for a seperate host.
Regards
Aayush

Installing the sapcrypto library and starting the SAProuter
Contents
u2022     Downloading necessary software components from SAP Service Marketplace
u2022     Creating the certificate request
u2022     Additional actions necessary before you can start saprouter
This section describes the necessary steps to download and install the sapcrypto library for use with saprouter. The saprouter must be started with the options described later in this section.
The license for the sapcrypto library covers saprouter connections between saprouters at SAP and the first saprouter on customer sites and backend connections within the customer`s network. For all other purposes the library CANNOT be used!
Downloading necessary software components from SAP Service Marketplace
1.     Login to the SAP Service Marketplace with the Service Marketplace USERID which is assigned to your installation.
2.     Change to the alias SAPROUTER-SNCADD. Before you can download the software components two preconditions must be met.
     a.     You must have been allowed to download the software. This authorization is added as soon as SAP has received a positive statement from the "Bundesausfuhramt". This procedure is necessary since the software falls under EU regulations.
     b.     For more information on how to obtain authorization if download is not possible see note 397175.
     c.     You must accept that you must follow the regulations imposed by the EU on the use and distribution of the cryptographic software components downloaded from the SAP Service Marketplace.
3.     The acceptance of the terms and conditions is logged with your USERID and stored for reporting purposes to the "Bundesausfuhramt".
4.     Accepting with the button on the web-based form takes you to the folder where you can download the Software components.
These are packed into a single CAR file sapcrypto.car
5.     Copy the file to the direcory where the saprouter executable is located
6.     You can get the file car.exe/sapcar.exe, which is necessary to unpack the archive from any Installation Kernel CD.
Executing the command car -xvf SAPCRYPTO.CAR will unpack the following files:
[lib]sapcrypto.[dll|so|sl]
sapgenpse[.exe]
ticket
Creating the certificate request
1.     As user <snc>adm set the environment variables
SECUDIR = <directory_of_saprouter>
2.     Change to the Shortlink SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant "Distinguished Name"
3.     Generate the certificate Request with the command
sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
4.     Alternatively use the two commands:
sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>"
sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
5.     Display the output file "certreq" and with copy&paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name
6.     In response you will receive the certificate signed by the CA in the Service Marketplace, cut&paste the text to a local file named srcert
7.     With this in turn you can install the certificate in your saprouter by calling
sapgenpse import_own_cert -c srcert -p local.pse
8.     now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
9.     This will create a file called cred_v2 in the same directory.
For increased security please check that the file can only be accessed by the user running the SAProuter.
Do not allow any other access (not even from the same group)!
On UNIX this will mean permissions being set to 600 or even 400!
On NT check that the permissions are granted only to the user the service is running as!
1.     Check if the certificate has been imported correctly
sapgenpse get_my_name -v -n Issuer
The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
2.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 4. If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands
4.,7.,8. and 10.
Additional actions necessary before you can start saprouter
1.     The environment variable SNC_LIB needs to be set for the user account SAProuter is running under.
SNC_LIB has the form
UNIX      <path_to_libsecude>/<name_of_sapcrypto_library>
Windows NT, Windows 2000     <drive>:\<path_to_libsecude>\<name_of_sapcrypto_library>
2.     Check if the environment of the user running saprouter contains the environment variable SNC_LIB
UNIX     printenv
Windows NT     System environment variable
3.     start the saprouter with the following command line:
saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
the corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
Example
For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Lalit Kumar

Changing SAP Router to different System

HI Experts,
                SAP Router is installed in our Develpoment system can it be possible for us to install this on the solution manager System. Is this advisable to change the SAP router to a different machine. If so How is that possible?
Regards,
Vamshi.

Hi,
Please use the following step.
Installation Steps
1.1     Downloading necessary software components from SAP Service Marketplace:
1.     SAProuter
Use the latest SAProuter version (37.x), which can be downloaded from
SAP Service Marketplace under the following link.
http://service.sap.com/swdc
     Download
     Support Packages and Patches
     Entry by Application Group
     Additional Components
     SAPROUTER
     SAPROUTER 6.40
SAPROUTER 6.40
From the available list of SAProuters, select the SAProuter for your OS platform.
2.     SNC Libraries (SAPcryptolib) download:
http://service.sap.com/swdc
     Download
     SAP Cryptographic Software
Select the SAPcrytoLib libraries compatible with your Operating System.
Note: Please also download the SAPCAR.exe file from the above location to extract the SAProuter archive files.
3.     Create a folder in /usr/sap with the name as: saprouter.
4.     Extract both the files i.e. SAProuter.SAR and Cryptolib.CAR files into saprouter folder using the command:
SAPCAR -xvf SAProuterxxx.SAR
SAPCAR -xvf CRYPTOLIBxxx.CAR
1.2     Creating the certificate request
1.     As user <snc>adm set the environment variables:
SECUDIR = /usr/sap/saprouter
SNC_LIB = /usr/sap/saprouter/libsapcrypto.so
2.     Go to the Trust Center Service - Download Area and get the "Distinguished Name" for your SAProuter from the list of SAProuters registered for your installation.
3.     Generate the certificate Request with the command:
./sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
P.S: We can also get the distinguished name from SAP itself when we register for the remote service connection.
4.     Display the output file "certreq" using the command:
cat certreq
and with copy & paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.
1.3     Importing the certificate request
1.     With this in turn you can install the certificate in your saprouter by calling
./sapgenpse import_own_cert -c srcert -p local.pse
1.4     Setting secured login to SAProuter
1.     Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
2.     This will create a file called cred_v2 in the same directory.
3.     Check if the certificate has been imported correctly
./sapgenpse get_my_name -v -n Issuer
4.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 3 of 4.2 . If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands 3 of 4.2, 4.3, and 4.4.
1.5     Additional actions necessary before you can start saprouter
1.     Logon to the system as <sid>adm, here sa1adm.
2.     The environment variables SECUDIR, SNC_LIB and USER needs to be set for the user account SAProuter is running under using the commands:
setenv SECUDIR <path_to_libsecude>
i.e. setenv SECUDIR /usr/sap/saprouter
setenv SNC_LIB <path_to_libsecude>/<name_of_sapcrypto_library>
i.e. setenv SNC_LIB /usr/sap/saprouter/libsapcrypto.so
setenv USER sa1adm
3.     Check if the environment of the user running saprouter contains the environment variable SECUDIR, SNC_LIB and USER using : printenv
4.     Start the saprouter with the following command line:
#./saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
Eg. ./saprouter -r -S 3299 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -R /usr/sap/saprouter/saprouttab -G log.txt -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
5.     The corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
6.     Example: For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Thanks,
Harshal

Sap router renewal

Hi,
i have executed the following command for sap router renewval
"sapgenpse get_pse -v -r certreq1 -p local.pse"
After that it asking please enter PIN:I gave the enter,
Reenter PIN:again i gave the enter.
get_pse:Distinguished name of PSE owner: gave the enter
get_pse:an empty subject distinguished name is not supported..
Finally certreq1 fine not created..
Please help me..
Regrads,
Manjini

after this enter any PIN too, following may help
http://sapgoogle.blogspot.com/2008/12/sap-router.html

Creating model + SAP Router

Hello, i'm trying to develop the Flights Example fron help.sap.com but at home i have access to sap system via SAP Router. In the step where i tell the application the R/3 connection parameters (adaptative RFC model) there's no option for SAP Router.
Does Anyone know how can i accomplish this?
Thanks in advance.

I found:
Define the message server, system name and the logon group used by the JCO connection.
Message Server L01_lab4
System Name L01
Logon Group PUBLIC
Use SAP Router (UNCHECKED)
SAP Router String BLANK
on this link
Re: Issue with Adaptive RFC Configuration in SLD
but i don't know where to set that... can anyone help please?
Thanks in advance.

Mac Mail Wrong Display Name

My Mac mail app for my icloud account has the wrong display name for the account. About three years ago, I bought my mac on the company credit card, and had to use our accounting director's name for the billing address. (We'll call him Richard Nicks). Three years later, I open Mac mail and HIS name is the display name for my icloud email!
Of course it's grayed out, so I have to change it in the icloud account. But when I go log into icloud, his name does not show up anywhere. I've confirmed the email addresses are all the same so I know I don't have multiple accounts or anything. I've closed mail, resynchronized it, rebuilt the database, no joy. Where in the world is it getting his name from and how can I change that?
Thanks
OS X 10.9.5

Thanks for the response.
In Account Preferences, the name and email address are grayed out so I cannot change those.
I looked in my contacts, go under All iCloud, and there's only one contact. The picture is of a piano that says Me, so I assume that is my Me card. This has my correct name.
Interesting to note, when I send an email from iCloud on my iPhone, it comes across with the correct display name.
I'm at a loss on where else to check. Thanks for the help!

Managed System Setup: SAP Router

Hello!
We are trying to execute managed system configuration for some sattelite system that we access over SAP Router.
Which ports (inbound/outound) do we need to open in order to install Diagnostic Agent and connect it to Solution Manager?
Thank you!

Hello Alex,
Please check this conversation External diagnostic agent and note 1886060 - System Monitoring Setup for SAP Router.
BR,

SAP Router timeouts

Hi Team,
We have installed a new sap router in our landscape, Now across all the systems SAP is getting timeout issue from our router.
If i am changing it to old router everything works fine.
My query is what all commands need to check for network timeout issue, then is there any timeout parameter need to set after installation of new router in windows server 2008 for SAP Router.
Kindly suggest on this .
Thanks,
Pradeep.

Hi Nirav,
Verify if saprouter.exe and niping.exe is placed under directory E:USRSAPSAPROUTER and same path is mentioned in windows services.
If path is correct one then you need to modify registry
Under HKEY_LOCAL_MACHINE ® SYSTEM ® CurrentControlSet ® Services ® Event Log ® Application enter the key saprouter and define the following values for it:
EventMessageFile (REG_SZ): ....saproutersaprouter.exe
TypesSupported (REG_DWORD): 0x7
I hope this will help you.
Regards,
Rupali Bajpai

Wrong Distinguished Name for SAP-Router

Similar Messages

Maybe you are looking for