SAP Router startup error in AIX 7.1

[Former Member]

Dear Experts,

I moved the router from linux to aix.

I configured every thing good. I got ok when applying the certificate.

While starting the router I got a error. I am pasting the dev_rout log

I am starting with command : ./saprouter -r -S 3299 -K "p:CN=Hostname, OU=0000549912, OU=SAProuter, O=SAP, C=DE" &

> more dev_rout

---------------------------------------------------

trc file: "dev_rout", trc level: 3, release: "745"

---------------------------------------------------

Wed Jul 20 09:16:28 2016

NiIHSBufInit: initialize hostname buffer (IPv4)

NiHLInit: alloc host buf (200 entries)

NiSrvLInit: alloc serv bufs (200 entries)

NiIInit: allocated nitab (811 at 1101331b0)

NiIInit: host/serv bufs already initialized

NiIGetServNo: servicename '3299' = port 3299

SAP Network Interface Router, Version 40.4

Compiled Jan 26 2016 19:26:52

command line arg 0:     ./saprouter

command line arg 1:     -r

command line arg 2:     -S

command line arg 3:     3299

command line arg 4:     -V

command line arg 5:     3

command line arg 6:     -K

command line arg 7:     p:CN=Hostname, OU=0000869912, OU=SAProuter, O=SAP, C=DE

service   : 3299

routtab   : ./saprouttab

plug-in   : no plug-in

-argument: 'no argument'

clients   : 800

max servers  : 1

quelength : 1

maxheap   : 20000000

timeoutL  : 5000

tracefile : dev_rout

tracefile limit : 0 byte

tracefile maxcnt : 0

socket buffer size : 32768

logfile   : no logging active

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=ffffffffffff1f0)

SncInit(): Initializing Secure Network Communication (SNC)

      IBM RS/6000 with AIX (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

      UserId="SIDadm" (203), envvar USER="sidadm"

SncInit(): Trying environment variable SNC_LIB as

    gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".

DlLoadLib() success: dlopen("/usr/sap/saprouter/libsapcrypto.so"), hdl 0, count

1, addr 3

DlLoadFunc: dlsym(sapsnc_init_adapter)= Function not implemented (sapsnc_init_ad

apter) -> DLENOACCESS

DlLoadFunc (gss_acquire_cred) from /usr/sap/saprouter/libsapcrypto.so

Wed Jul 20 09:16:28 2016

DlLoadFunc (gss_release_cred) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_init_sec_context) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_accept_sec_context) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_process_context_token) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_delete_sec_context) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_context_time) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_get_mic) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_verify_mic) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_wrap) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_unwrap) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_display_status) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_indicate_mechs) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_compare_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_display_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_import_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_release_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_release_buffer) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_release_oid_set) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_inquire_cred) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_inquire_cred_by_mech) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_inquire_context) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_wrap_size_limit) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_export_sec_context) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_import_sec_context)

Wed Jul 20 09:18:12 2016

shutdown message received, good bye ...

es_for_mech) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_inquire_mechs_for_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_canonicalize_name) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (gss_export_name) from /usr/sap/saprouter/libsapcrypto.so

  File "/usr/sap/saprouter/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

Wed Jul 20 09:16:29 2016

DlLoadFunc (sapcr_get_version) from /usr/sap/saprouter/libsapcrypto.so

DlLoadFunc (sapcr_get_secudir) from /usr/sap/saprouter/libsapcrypto.so

  SECUDIR="/usr/sap/saprouter" (from $SECUDIR)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib

  Product Version = CommonCryptoLib 8.4.49 (Mar  4 2016)

  <<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

         sec_avail = "true"

->> SncSetMyName(snc_hdl=0, myname="p:CN=Hostname, OU=0000869912, OU=SAProuter, O=SA

P, C=DE")

<<- SncSetMyName()==SAP_O_K

     in: myname = "p:CN=Hostname, OU=0000869912, OU=SAProuter, O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off

NiSetParamEx: set NIP_SOCK_BUFFER_SIZE 32768

NiMyHostName: hostname = 'Hostname'

main: pid = 21364968, ppid = 7209200, port = 3299, parent port = 0 (0 = parent i

s not a saprouter)

NiSelICreateSet: new set0

SiSelEPInit: allocate 172528 bytes for FI (811)

NiSelIInit: size of set0 is 811

NiICreateHandle: hdl 1 state NI_INITIAL_LIS

NiIInitSocket: set default settings for new hdl 1/sock 4 (I4; ST)

NiITraceByteOrder: CPU byte order: big endian, network, high val..low val

***LOG Q0I=> NiIBindSocket: bind (67: Address already in use) [/bas/745_REL/src/

base/ni/nixxi.cpp 3831]

*** ERROR => NiIBindSocket: SiBind failed for hdl 1/sock 4

    (SI_EPORT_INUSE/67; I4; ST; 0.0.0.0:3299) [nixxi.cpp    3831]

NiICloseHandle: closing initial hdl 1

*** ERROR => main: NiBufServerHandleForAddr failed (rc=-4) [nirout.cpp   2207]

*****************************************************************************

*

*  LOCATION    SAProuter 40.4 on 'Hostname'

*  ERROR       service '0.0.0.0:3299' in use

*

*  TIME        Wed Jul 20 09:16:29 2016

*  RELEASE     745

*  COMPONENT   NI (network interface)

*  VERSION     40

*  RC          -4

*  MODULE      /bas/745_REL/src/base/ni/nixxi.cpp

*  LINE        3831

*  DETAIL      NiIBindSocket

*  SYSTEM CALL bind

*  ERRNO       67

*  ERRNO TEXT  Address already in use

*  COUNTER     2

*

*****************************************************************************

SiSelEPRemoveAll: removed all sockets

->> SncDone()

DlUnloadLib shared library ("/usr/sap/saprouter/libsapcrypto.so"), hdl 0

<<- SncDone()==SAP_O_K

NiIExit: free nitab 1101331b0

Thanks in Advance.

Thanks & Regards,

Madan

[former_member185239]

Hi Madan,

The port 3299 is getting used by some process , as a result your saprouter is not starting.

*** ERROR => NiIBindSocket: SiBind failed for hdl 1/sock 4

    (SI_EPORT_INUSE/67; I4; ST; 0.0.0.0:3299) [nixxi.cpp    3831]

NiICloseHandle: closing initial hdl 1

Run the below command to get the process which is using the port.

netstat -anp| grep 3299

With Regards

Ashutosh Chaturvedi

[Former Member]

Hi All,

Thanks for your help. After I made entry of the full host name in host file then the router started.

Now sap oss rfc is working and oss1 is also working. But when I try to access our system using sap router string then it showing partner public ip:3299 not reached.

Thanks&Regards

Madan

[former_member182034]

dear,

Check the entries and permission in rout tab file which should be configured properly and port 3299 must be opened. Please have a look at below SAP note.

Note 24177 - OSS1: Message S1452: Connection to Message Server

Regards,

[Former Member]

Hi Madan,

Check below ,

1) Hostname is redirecting with Local IP , if not update your hosts file.

2) Check if 3299 service is being used by some other application and if yes stop the application and retry

3) Check for the user environemnt variable SNC_LIB=/usr/sap/saprouter/ libsapcrypto.so is set properly.

Regards

Bhupesh A

[Former Member]

Hi,

Could you please try to start the router with only "./saprouter -r" (without any additional parameter) and check the dev_rout log?

Regards,

Ganesan

[former_member229432]

Hello Madan,

from the log it seems something is already occupying the 3299 port on the system. ("Address already in use" error in the log).

On AIX you can check with:
netstat -aAn | grep LISTEN | grep 3299

This will give yu the socket address of the process using the port (the long number/letter combination in the first field)

Resolve it to the actual process with:

rmsock <socket address> tcpcb

Best regards

Adam