Skip to Content

SAP ANANLYTICS FOR CLOUD CONNECTION TO LIVE SAP HANA

Hello Experts,

I am trying to create a Live connection from SAC to my on-premise Live HANA Database.

I have assigned the needed roles to the SYSTEM user and I have imported certificate successfully.

I have also done the XS classic activities and also done the needed CORS settings as shown attached.

Below is my PSE settings successfully done as shown below;

When I log in to the cloud platform to connect to my HANA DB I get the below error ;

Connections steps;

Error;

I have checked my CORS settings as shown below;

Any help on what is missing and how to make connection from SAC go through directly to my on-premise HANA system

Regards

Justice

Add a comment
10|10000 characters needed characters exceeded

Related questions

7 Answers

  • Posted on Oct 15, 2019 at 10:50 AM

    Hi,

    Can you cross check the following

    1. SAP HANA User (SYSTEM) Password

    2. Use this HTTPS service port to navigate to the URL and test the InA connection and the JSON response: https://<hanahost>:<port>/sap/bc/ina/service/v2/GetServerInfo

    Note - If you see the sign Secure in green next to the “https://”, then your server is configured for HTTPS with secured/signed SSL certificate.

    Thanks
    Ashraf

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 15, 2019 at 10:53 AM

    Hi Justice,

    Can you open the Developer Tools (via F12) in Chrome before you try to connect to your HANA system and check the network and console tab? Please share the result here. Did you check the SSL certificate on the HANA system is valid. What happens if you browse to HANA XS page?

    Kind regards,

    Martijn van Foeken | Interdobs

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 15, 2019 at 11:39 AM

    Hello Martijn van Foeken,

    Please find below as requested;

    My server is a Suse Linux server, Please can you direct me on how to check from the Linux server/HANA system the SSL certificate validity?

    Any command or query to run to share results with you?

    Regards


    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 15, 2019 at 11:41 AM

    Hello Mohammed,

    Please find below as requested, the result from running the URL;

    Please can you share with me a command or query to check if my certificate generated is valid on the HANA system?

    Regards


    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 16, 2019 at 07:54 AM

    Hi Justice,

    I have posted a blog on this topic that goes through this step-by-step, including troubleshooting steps:

    The CORS error message is fairly generic.

    The error contains a message about the allowed origin. Try if your configuration works when allowing traffic from everywhere. If not, check your host name.

    CN=SAP-SAPHANA-VM.persolgh.com in certificate (FQDN with uppercase hostname)

    sap-saphana-vm (lowercase host without domain) in SAC Live configuration. I would configure this matching 1:1 (case and all).

    Add a comment
    10|10000 characters needed characters exceeded

    • Can I create my certificate CN=SAP-SAPHANA-VM in this form without the domain name? So that I can have a matching 1:1?

      Example: CN=SAP-SAPHANA-VM, OU=HANA, O=SAP, C=EN, DNS=SAP-SAPHANA-VM: SAP-SAPHANA-VM

      Is the above right?

      I will go through your blog as well.

      My Allowed origin should be my SAC account / URL assigned to my company Persol right?

      Regards

      Justice

  • Posted on Oct 16, 2019 at 10:04 AM

    For test/dev, no need to populate all the values, CN suffices, any name will do.

    Certificate > CN=sap-saphana-vm

    Live connection configuration > sap-saphana-vm

    1:1

    Add a comment
    10|10000 characters needed characters exceeded

    • In my environment, I do not have a public URL to map to my local SAP HANA server. I rather have a public IP address.

      Should I generate my certificate with the Public IP and also open ports 43<Instance number> and 80<instance number>?

      That is how I can access my on-premise SAP HANA system via SAC?

      SAP-SAPHANA-VM is my HANA server Local name.

      Please advice.

  • Posted on Oct 16, 2019 at 10:12 AM

    You are on release SAP HANA 1.0?

    Assume this should work.

    The InA protocol goes back to 2012, or so (SP04/05) and relies on HANA XS classic.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.