Reply from EJ1 on Jun 19 at 11:52 AM Sorry for the delay I wear several hats and needed to focus on some other issues.
I opened the dev_rout file, stopped the router deleted the trace.log file as well as the dev_rout file restarted the router with the following command.
saprouter -r -K "p:CN=vm-bet-saprtr, OU=0000275347, OU=SAProuter, O=SAP, C=DE" -R "c:\usr\sap\saprouter\saprouttab" -T "c:\usr\sap\saprouter\trace.log"
I tried connecting from our dev box and it failed with the following:
Logon Connection Error
Error Details Error when opening an RFC connection
Error Details ERROR: The connection to the specified message server (/H/10.8.2.44/S/sapdp99
Error Details LOCATION: SAP-Server VM-BET-SAPDEV_D3V_00 on host VM-BET-SAPDEV (wp 6)
Error Details COMPONENT: MS (message handling interface, multithreaded)
Error Details COUNTER: 90
Error Details MODULE: msxxi.c
Error Details LINE: 2787
Error Details RETURN CODE: -35
Error Details SUBRC: 0
Error Details RELEASE: 721
Error Details TIME: Fri Jun 19 11:36:08 2015
Error Details VERSION: 4
I wanted to paste the dev_out file but none exists. Here is what I found in the trace.log file:
-----
trc file: "trace.log", trc level: 1, release: "742"
-----
Fri Jun 19 11:34:13 2015
SAP Network Interface Router, Version 40.4
command line arg 0: saprouter
command line arg 1: -r
command line arg 2: -K
command line arg 3: p:CN=vm-bet-saprtr, OU=0000275347, OU=SAProuter, O=SAP, C=DE
command line arg 4: -R
command line arg 5: c:\usr\sap\saprouter\saprouttab
command line arg 6: -T
command line arg 7: c:\usr\sap\saprouter\trace.log
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="SAPServicePRE" NetWkstaUser="SAPServicePRE"
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "C:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".
File "C:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="c:\usr\sap\saprouter" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to SAPCRYPTOLIB 5.x
Product Version = SAPCRYPTOLIB 5.5.5C pl38 (Oct 7 2014) MT,AESNI,NB
main: pid = 1336, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: 'c:\usr\sap\saprouter\saprouttab'
Fri Jun 19 11:36:08 2015
*** ERROR => NiBufIProcMsg: hdl 17 received rc=-104 (NIEROUT_SNC_FAILURE) from peer [nibuf.cpp 1984]
| | | ---------------Original Message---------------
From: EJ1
Sent: Wednesday, June 17, 2015 9:13 AM
Subject: SAP via SNC Fails With A Connection Error
I've searched for an answer to my issue, tried following Note 33135 to no avail. I feel I've successfully followed the guide "Installing the SAPCRYPTO LIBRARY and Starting the saprouter."
However, If I go to transaction SM59 on any server within our landscape and attempt to test my connection to SAP via SNC, it fails with a connection error. I used tcode oss1 to configure the parameters for the OSS connection. Not sure if I put in the public or private ip address for our saprouter. I've seen conflicting information about this.
People can connect from outside our private network to SAP using our router so this seems to be an outbound issue only.
I asked our network person if our firewall could be at fault and was told we do not block anything outbound but our SAP Router server's public ip only allows inbound traffic on ports 3299. I recently updated our SNC certificate and believe I have installed this correctly. Any help would greatly be appreciated. If I need to copy log files here or provide any additional information to help resolve this I will do so. I have opened a system message with SAP, but I we all know how long it takes since this is not a production down situation.
I discovered this issue while attempting setup of a new Solution Manager 7.1 Server in step 2 of SOLMAN_SETUP when it failed on Check Service Connection.
In the saprouttab, for the SNC entry to SAP should I use the sapserv2 ip or "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"?
Thanks in advance for everyone's help and guidance! |
| Reply to this email to post your response. __.____._ | In the Spotlight Become a blogger at Toolbox.com and share your expertise with the community. Start today.   _.____.__ |
