on 01-20-2017 11:48 PM
Hello SAP Hana Experts,
We have a fresh installation of HANA 1.0 SPS 12 in AWS Cloud. My issue is that I am not able to start the SAP Hana instance.
If I go to /usr/sap/hostctrl/exe directory and issue the ./sapcontrol -nr 00 -function GetProcessList I get an error:
GetProcessList
FAIL: NIECONN_REFUSED (Connection refused), NiRawConnect failed in plugin_fopen()
I have read lots of threads and I noticed that the file /usr/sap/sapservices is empty.
I assume that this could be a port issue but I would like to know if any one has had this issue with HANA using AWS? Also, do I need to have entries in /usr/sap/sapservices?
Hello Michael,
We instantiated a new HANA Platform Edition 1.0 SP 12 instance in CAL however this time we choose the Instance Type r3.8xlarge. Afterwards everything came right up when starting HANA with this 'instance type'. Thanks for you assistance!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
In your $PATH environment variable on your 'client' machine, does it have the directory in which your CommonCrypto Library exists?
My assumption at the moment is that the client does not have access to CommonCrypto Library so it is defaulting to using MSCrypto.
The next thing on the checklist is to have SECUDIR environment variable set on your client machine. SECUDIR should point to the path that the keystore (.pse) file is located.
Other things to try:
1. Generate a new SAPCLI.pse file from your server.
2. Place this file in on your client in the $SECUDIR directory.
3. Add in the parameters:
sslCryptoProvider=commoncrypto
sslKeyStore=<path>\sapcli.pse
sslTrustStore=<path>\sapcli.pse
4. Verify that your sapcrypto.dll folder is accessable from a location in $PATH
5: try start again.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Matang, not sure to be honest with the new community but no reward is needed, just happy to help.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Is there a way to award points for assistance?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Michael,
I tried by setting thee SECUDIR path using the command
hdbadm@sid-hdb:/usr/sap/HDB/home> export SECUDIR=/usr/sap/HDB/HDB00/vhcalhdbdb/sec
hdbadm@sid-hdb:/usr/sap/HDB/home> echo $SECUDIR
/usr/sap/HDB/HDB00/vhcalhdbdb/sec
However, when I try to start HANA with HDB start it still throws and exception as shown below:
addr=10.0.34.7/vhcalhdbdb.dummy.nodomain, family=AF_INET/AF_INET, protocol=IPPROTO_IP, sockettype=SOCK_RAW, flags=AI_CANONNAME, AI_V4MAPPED, AI_ALL, a ddrlen=16/16
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.489601 i Daemon NetworkListener.cpp(00895) : default IPv4 interface: eth0 10.0.34.7 ipv4 up broadcast running multicast
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.490272 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.490285 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.490296 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.490301 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.901394 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.901405 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.901413 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environme nt
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.901423 e Crypto Configuration.cpp(00233) : Configuration::getProviderType: crypto provider 'commoncryp to' not available
[7628]{-1}[-1/-1] 2017-01-22 01:18:10.901543 e Daemon Main.cpp(01802) : Failure: /sapmnt/ld7272/a/HDB/jenkins_prod/workspace/HANA__FA_CO_LIN 64GCC48HAPPY_rel_fa~hana1sp12/s/TrexDaemon/Main.cpp:1802 in "int main(int, char**)". Exception caught: exception 1: no.300001 (Crypto/Configuration/ Configuration.cpp:234)
Invalid SSL configuration: crypto provider 'commoncrypto' not available
The interesting thing is that in the daemon log I can see where it setting the other environment parameters:
[7628]{-1}[-1/-1] 2017-01-22 01:18:09.968286 i Daemon Main.cpp(00689) : - SAP_DIR_GLOBAL=/usr/sap/HDB/SYS/global
[7628]{-1}[-1/-1] 2017-01-22 01:18:09.968288 i Daemon Main.cpp(00689) : - SAP_DIR_INSTANCE=/usr/sap/HDB/HDB00
[7628]{-1}[-1/-1] 2017-01-22 01:18:09.968289 i Daemon Main.cpp(00689) : - SAP_DIR_EXECUTABLE=/usr/sap/HDB/SYS/exe/run
Hi Michael,
I tried setting the environment of SECUDIR using the commands below:
hdbadm@sid-hdb:/usr/sap/HDB/home> export SECUDIR=/usr/sap/HDB/HDB00/vhcalhdbdb/sec
hdbadm@sid-hdb:/usr/sap/HDB/home> echo $SECUDIR
/usr/sap/HDB/HDB00/vhcalhdbdb/sec exception in the daemon log.
However when I try starting HANA I am still get an exception for SECUDIR. Do you know where the startup script looks for the environment parameters?
In the trace file I can it appears the startup goes thru a process and sets the environment profile parameters, but it is not doing it for SECUDIR.
25068]{-1}[-1/-1] 2017-01-23 13:37:37.831411 i Daemon Main.cpp(00592) : * DIR_INSTANCE=/usr/sap/HDB/HDB00/
[25068]{-1}[-1/-1] 2017-01-23 13:37:37.831417 i Daemon Main.cpp(00592) : * SAP_RETRIEVAL_PATH=/usr/sap/HDB/HDB00/vhcalhdbdb/
[25068]{-1}[-1/-1] 2017-01-23 13:37:37.831418 i Daemon Main.cpp(00592) : * DIR_EXECUTABLE=/usr/sap/HDB/HDB00/exe/
Missing SECUDIR....
Thanks!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
I would try setting a different SECDIR path in the environment variables or check if it even exists at all?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I did find SAPENV.SH in
/hana/shared/HDB/global/hdb/install/support
<hostname>:/hana/shared/HDB/global/hdb/install/support # ls -lrt
total 140
-r--r--r-- 1 root root 30493 Apr 20 2016 hdbcheck.xml
-r-xr-xr-x 1 root root 3714 Apr 26 2016 xterms
-r-xr-xr-x 1 root root 1902 Apr 26 2016 waitforhdb
-r-xr-xr-x 1 root root 12235 Apr 26 2016 sapinit
-r-xr-xr-x 1 root root 3412 Apr 26 2016 killemall.py
-r-xr-xr-x 1 root root 5745 Apr 26 2016 installsapinit.sh
-r-xr-xr-x 1 root root 10407 Apr 26 2016 hdbenv.sh
-r-xr-xr-x 1 root root 6964 Apr 26 2016 hdbenv.csh
-r-xr-xr-x 1 root root 159 Apr 26 2016 SAPSRC.SH
-r-xr-xr-x 1 root root 176 Apr 26 2016 SAPSRC.CSH
-r-xr-xr-x 1 root root 2692 Apr 26 2016 SAPENV.SH
-r-xr-xr-x 1 root root 2657 Apr 26 2016 SAPENV.CSH
-r-xr-xr-x 1 root root 1791 Apr 26 2016 PROFILE
-r-xr-xr-x 1 root root 2199 Apr 26 2016 HDBSettings.sh
-r-xr-xr-x 1 root root 1627 Apr 26 2016 HDBSettings.csh
-r-xr-xr-x 1 root root 538 Apr 26 2016 HDBAdmin.sh
-r-xr-xr-x 1 root root 11990 Apr 26 2016 HDB
-r-xr-xr-x 1 root root 2495 Apr 26 2016 CSHRC
-r-xr-xr-x 1 root root 2256 Apr 26 2016 BASHRC
-rw-r----- 1 hdbadm sapsys 299 Aug 12 11:49 cfg
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi MIchael,
I took at look at this note. However in my /hana/shared/HDB/HDB00 I do not have the
.sapenv.shscript
When I do a
hdbadm@<hostname>:/hana/shared/HDB/HDB00> echo $DIR_INSTANCE
hdbadm@<hostname>:/hana/shared/HDB/HDB00>
Nothing is returned.
hdbadm@<hostname>:/hana/shared/HDB/HDB00 > ls -lrt
total 72
-r-xr-xr-x 1 hdbadm sapsys 3714 Aug 12 11:29 xterms
-r-xr-xr-x 1 hdbadm sapsys 2199 Aug 12 11:29 HDBSettings.sh
-r-xr-xr-x 1 hdbadm sapsys 1627 Aug 12 11:29 HDBSettings.csh
-r-xr-xr-x 1 hdbadm sapsys 10408 Aug 12 11:29 hdbenv.sh.nack
-r-xr-xr-x 1 hdbadm sapsys 10408 Aug 12 11:29 hdbenv.sh.back
-r-xr-xr-x 1 hdbadm sapsys 10408 Aug 12 11:29 hdbenv.sh
-r-xr-xr-x 1 hdbadm sapsys 6974 Aug 12 11:29 hdbenv.csh
-r-xr-xr-x 1 hdbadm sapsys 538 Aug 12 11:29 HDBAdmin.sh
-r-xr-xr-x 1 hdbadm sapsys 11990 Aug 12 11:29 HDB
lrwxrwxrwx 1 hdbadm sapsys 22 Aug 12 11:29 exe -> ../exe/linuxx86_64/hdb
drwxrwx--x 4 hdbadm sapsys 27 Aug 12 11:30 backup
drwxr-x--- 2 hdbadm sapsys 6 Aug 12 11:49 work
drwxr-x--- 9 hdbadm sapsys 144 Aug 12 11:54 vhcalhdbdb
drwx------ 2 hdbadm sapsys 6 Jan 21 21:45 sec
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
This note explains your issue.
Ignore the Backup name, looking at the errors you reported it seems to be the same.
2099478 - Backup fails with error message: crypto provider 'commoncrypto' not available
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Michael,
In the trace directory, the nameserver log is not created. I do have a daemon log.
There are no errors however there are exceptions:
[3787]{-1}[-1/-1] 2017-01-21 21:53:27.397196 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environment
[3787]{-1}[-1/-1] 2017-01-21 21:53:27.397201 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environment
[3787]{-1}[-1/-1] 2017-01-21 21:53:28.559740 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environment
[3787]{-1}[-1/-1] 2017-01-21 21:53:28.559762 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environment
[3787]{-1}[-1/-1] 2017-01-21 21:53:28.559772 e Crypto CommonCryptoLib.cpp(00295) : SECUDIR unknown or default SECUDIR not found in environment
[3319]{-1}[-1/-1] 2017-01-21 21:45:08.946161 e Crypto Configuration.cpp(00233) : Configuration::getProviderType: crypto provider 'commoncrypto' not available
[3319]{-1}[-1/-1] 2017-01-21 21:45:08.946318 e Daemon Main.cpp(01802) : Failure: /sapmnt/ld7272/a/HDB/jenkins_prod/workspace/HANA__FA_CO_LIN64GCC48HAPPY_rel_fa~hana1sp12/s/TrexDaemon/Main
.cpp:1802 in "int main(int, char**)". Exception caught: exception 1: no.300001 (Crypto/Configuration/Configuration.cpp:234)
Invalid SSL configuration: crypto provider 'commoncrypto' not available
exception throw location:
In the profile the SECUDIR is set as
SECUDIR = $(SAP_RETRIEVAL_PATH)/sec
Not sure is this is related to my issue but one thing I want to add is that when I logon as hdbadm, it appears the environment is not set for the user. For example I am not able to cdpro.
hdbadm@<hostname>:/usr/sap/HDB/home> cdpro
-sh: cdpro: command not found
Thanks again!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Can you paste what you see in the nameserver + daemon logs? Also check the var/log/messages for any errors.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Just as an update. I updated /usr/sap/sapservices with the needed entries. Now when I try starting the instance I get:
21.01.2017 21:53:39 StartWait FAIL: process hdbdaemon HDB Daemon not running
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Michael,
When I entered the command as your recommended. I am returned with:
hdbadm@sid-hdb:/usr/sap/HDB/HDB00/exe> ./sapcontrol -nr 00 -function StartService HDB StartService FAIL: Service definition not found in /usr/sap/sapservices. hdbadm@sid-hdb:/usr/sap/HDB/HDB00/exe>
Any ideas?
Thanks again!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Oliver!
Thanks for your reply. I will be sure to check out the template. One thing I would like to add is that when I go to /usr/sap/HDB/HDB00 and issue the ./HDB start command - it returns:
hdbenv.sh: Host name not found out of /usr/sap/sapservices, defaulting to local physical host hdbenv.sh: Did not find directory /usr/sap/HDB/HDB00/sid-hdb: Wrong host 'sid-hdb' -- you must source ~/hdbenv.sh [<virt hostname>] ERROR: SAP_RETRIEVAL_PATH missing:
Any ideas?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Martang,
I have played around a bit with HANA on AWS using the CloudFormation Quickstart template, and I have not encountered such problems.
So I'm afraid I can't help you with that particular problem. Maybe it would be worth a shot to download the template and check out how it configures the network interfaces. Or deploy a quickstart instance and then compare the setup with yours.
One thing: what OS user did you use to execute the command. Have you tried this as <sid>adm?
Best regards,
Oliver
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
81 | |
24 | |
11 | |
9 | |
7 | |
5 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.