cancel
Showing results for 
Search instead for 
Did you mean: 

Cannot start SAPRouter after certificate imported

former_member367733
Participant
0 Kudos

Hi! Gurus,

To establish remote connection for SAP Support I have installed SAProuter in our Solution Manager Server host. When I am trying to start the service, it cannot start and system didn't have response to me. I have checked related notes and manual. Still it is not clear to me.

Please help me. Does the saprouttab have any problem or SNC_LIB's version is not correct?
Many thanks.

BR

Alex

Server: windows sever 2008 R2
Netweaver version: 7.0

Solution Manager: 7.1

SECUDIR and SNC_LIB successfully set and I register my system into sap system.

Distinguished name:

Certificate successfully imported:


My saprouttab:

# SNC connection to and from SAP
KT "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 147.204.2.5 *
# SNC-connection from SAP to local system for R/3-Support
KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.97.93.47 3210
# Access from your local Network to SAP
P 10.97.93.47 147.204.2.5 3299
# All other connections will be denied
D * * *

Run start saprouter command;

dev_rout log file:

---------------------------------------------------
trc file: "dev_rout", trc level: 1, release: "745"
---------------------------------------------------

Thu May 04 10:02:08 2017
SAP Network Interface Router, Version 40.4

command line arg 0: saprouter.exe
command line arg 1: -r
command line arg 2: -K
command line arg 3: p:CN=mo-212618ea2, OU=0000033018, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="S0017449477" NetWkstaUser="S0017449477"
GetUserNameEx(SamCompat)="MO-212618EA2\S0017449477"
GetUserNameEx(UserPrinc) failed with 0x00000534
SncInit(): Trying environment variable SNC_LIB_64 as
gssapi library name: "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll".
File "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="E:\SolMan_Media\SAPRouter" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib
Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.18 pl40 (Apr 14 2014) MT-safe
main: pid = 10004, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'

Accepted Solutions (0)

Answers (4)

Answers (4)

aderohunmu
Discoverer
0 Kudos

Hi Kattari,

Apologies for just responding now. I hope you already found a fix for the issue. The issue was "space", yes "space" in the command line. My fix is basically these steps:

1) Delete the the service created in windows and remove the parameters in Windows Registry

2) Recreate the service from the cmd, and make sure no space exists in your command/script that creates the service e.g.

sc.exe create SAPRouter binPath= "X:\usr\sap\saprouter\saprouter.exe service -r -W 60000 -R X:\usr\sap\saprouter\saprouttab -K ^SAPRouter^" start= auto obj= "NT AUTHORITY\LocalService"

I wish you luck!

Cheers,

Femi

aderohunmu
Discoverer
0 Kudos

Dear Alex, Dear Cesar,

I am currently facing exactly the same issue. Could you both point me to what resolved yours? I already tried with the wildcard as suggested by Alex but still the same issue persists.

Thank you and regards,

Femi

shyamk
Explorer
0 Kudos

Kindly help to share if you find the fix.

Former Member
0 Kudos

Hi Alex, I am experiencing the same issue as you. Did you find a way to solve the issue?

Thank you and Regards,
Cesar Rodriguez

former_member367733
Participant
0 Kudos

Hi Cesar,

Change the saprouttab to this:

# SNPC connection to and from SAP 
P * * *

It allows all IP to access your system.


BR

Alex


patelyogesh
Active Contributor
0 Kudos