Problem in RFC SAPOSS

[Former Member]

Hello experts,

im trying to get my SAPOSS RFC running but i always get an error which i simply cannot explain to myself.

So i set up the SAProuter (on a LINUX System, i installed the newest version and added the SNC-Certificate)

The SAProuter works fine, im able to access to my systems from outside my network.

So when i now try to setup the OSS1 with the following Parameters:

SAProuter1:

Name : <SAP_ROUTER_NAME>

IP-Address: <IP_ADDRESS_where_my_SAProuter_is_located>

Instance No.:99

SAPRouter at SAP side:

Name: sapserv2

IP-Address: 194.39.131.34

InstanceNo. : 99

SAPNet Message Server:

Name: oss001

DB-Name: O01

InstanceNo: 01

i get this error when i try to establish the RFC-Connection:

Anmeldung	Verbindungsfehler
Fehlerdetails	Fehler beim Öffnen einer RFC-Verbindung (LB: Hostname or service of the message
Fehlerdetails	ERROR: The connection to the specified message server (/H/<IP_ADDRESS_where_my_SAProuter_is_located>/S/sap
Fehlerdetails	LOCATION: SAP-Server MSM_MSM_00 on host MSM (wp 7)
Fehlerdetails	COMPONENT: MS (message handling interface, multithreaded)
Fehlerdetails	COUNTER: 1435
Fehlerdetails	MODULE: msxxi.c
Fehlerdetails	LINE: 2783
Fehlerdetails	RETURN CODE: -35
Fehlerdetails	SUBRC: 0
Fehlerdetails	RELEASE: 721
Fehlerdetails	TIME: Thu Sep 24 12:32:04 2015
Fehlerdetails	VERSION: 4

Im able to Telnet my SAProuter from my SAP-Server and im able to Telnet the SAProuter at SAP-Side from my SAP-Server. So the Problem seems to be anywhere else.

Has anyone an Idea how to fix this error and establish the Connection via SAPOSS?

Regards!

Sascha

[former_member182657 · Accepted solution]

Hi,

Could you share dev_w7,dev_rout log file for analysis ?

Regards

[Former Member · Accepted solution]

dev_w7 Log looks like this:

M Thu Sep 24 12:32:04 2015

M  *** ERROR => NiBufIProcMsg: hdl 23 received rc=-104 (NIEROUT_SNC_FAILURE) from peer [nibuf.cpp    2146]

M  {root-id=00155D0178041ED598D4E4812D113DED}_{conn-id=00000000000000000000000000000000}_0

M

M  *****************************************************************************

M  *

M  *  LOCATION    SAP-Server MSM_MSM_00 on host MSM (wp 7)

M  *  ERROR       The connection to the specified message server

M  *              (/H/<sapRouterIP>/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

M  *              / sapmsOSS) failed. Please check the trace file

M  *              of the message server. If a network filter has

M  *              been activated (see message server parameters

M  *              ms/acl_file_...) please check the configuration

M  *

M  *  TIME        Thu Sep 24 12:32:04 2015

M  *  RELEASE     721

M  *  COMPONENT   MS (message handling interface, multithreaded)

M  *  VERSION     4

M  *  RC          -35

M  *  MODULE      msxxi.c

M  *  LINE        2783

M  *  COUNTER     1435

M  *

M  *****************************************************************************

There is no dev_rout log file in transaction ST11.

thanks for your help!

[isaias_freitas · Accepted solution]

Hello!

The dev_rout trace will be located at your saprouter server .

Regards,

Isaías

[Former Member · Accepted solution]

Hi Sascha

You will be able to find the dev_rout log file in your SAPRouter server.

Also , please check below points:

1) Once you start the router at command prompt , does it start successfully or gives any error.

2) Recheck your saprouttab file whether details are mapped correctly.

This issue mainly comes when saprouttab is not maintained correctly , or there is some port issues whether at Client side or at SAP side. ( Incase they are not informed).

Regards

Urvish

[Former Member · Accepted solution]

Hi Urvish,

this is the dev_rout log:

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "721"

---------------------------------------------------

Thu Sep 24 14:06:10 2015

SAP Network Interface Router, Version 40.4

command line arg 0:     /usr/sap/saprouter/saprouter

command line arg 1:     -r

command line arg 2:     -R

command line arg 3:     /usr/sap/saprouter/saprouttab

command line arg 4:     -K

command line arg 5:     p:CN=MSM, OU=0000235096, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      Intel x86 with Linux (st,ascii,SAP_UC/size_t/void* = 8/32/32)

      UserId="root" (0), envvar USER="root"

SncInit(): Trying environment variable SNC_LIB as

    gssapi library name: "/usr/lib/libsapcrypto.so".

  File "/usr/lib/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  SECUDIR="/root/sec" (from $HOME)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.1) to SAPCRYPTOLIB 5.x

  Product Version = SAPCRYPTOLIB  5.5.5C pl22  (Nov  9 2007) MT-safe

main: pid = 5786, ppid = 1, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: '/usr/sap/saprouter/saprouttab'

we even tried to fill route tab with:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP,C=DE" 194.39.131.34 *

P * * *

KP * * *

the RFC still fails with the error.. Any ideas?

[Former Member · Accepted solution]

Its now working.

In the Start Script of SAProuter we used an outdated Crypto-Lib. Thanks for your Support guys!

[isaias_freitas · Accepted solution]

Cool!

Since it is working, please mark the thread as "answered" .

PS: I noticed that you are running the saprouter as root, which is probably not a very good idea .

Nothing should run as root .