Skip to Content
0

Cannot start SAPRouter after certificate imported

May 04, 2017 at 09:56 AM

535

avatar image

Hi! Gurus,

To establish remote connection for SAP Support I have installed SAProuter in our Solution Manager Server host. When I am trying to start the service, it cannot start and system didn't have response to me. I have checked related notes and manual. Still it is not clear to me.

Please help me. Does the saprouttab have any problem or SNC_LIB's version is not correct?
Many thanks.

BR

Alex

Server: windows sever 2008 R2
Netweaver version: 7.0

Solution Manager: 7.1

SECUDIR and SNC_LIB successfully set and I register my system into sap system.

Distinguished name:

Certificate successfully imported:


My saprouttab:

# SNC connection to and from SAP
KT "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 147.204.2.5 *
# SNC-connection from SAP to local system for R/3-Support
KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.97.93.47 3210
# Access from your local Network to SAP
P 10.97.93.47 147.204.2.5 3299
# All other connections will be denied
D * * *

Run start saprouter command;

dev_rout log file:

---------------------------------------------------
trc file: "dev_rout", trc level: 1, release: "745"
---------------------------------------------------

Thu May 04 10:02:08 2017
SAP Network Interface Router, Version 40.4

command line arg 0: saprouter.exe
command line arg 1: -r
command line arg 2: -K
command line arg 3: p:CN=mo-212618ea2, OU=0000033018, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="S0017449477" NetWkstaUser="S0017449477"
GetUserNameEx(SamCompat)="MO-212618EA2\S0017449477"
GetUserNameEx(UserPrinc) failed with 0x00000534
SncInit(): Trying environment variable SNC_LIB_64 as
gssapi library name: "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll".
File "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="E:\SolMan_Media\SAPRouter" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib
Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.18 pl40 (Apr 14 2014) MT-safe
main: pid = 10004, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Yogesh Patel
May 05, 2017 at 02:24 PM
0

Please look at document below. This might help you

Getting Started with SAProuter – Tutorials

OR

https://blogs.sap.com/2014/12/15/saprouter-installation/

-Yogesh

Share
10 |10000 characters needed characters left characters exceeded
avatar image
Former Member Sep 22, 2017 at 12:19 AM
0

Hi Alex, I am experiencing the same issue as you. Did you find a way to solve the issue?

Thank you and Regards,
Cesar Rodriguez

Show 1 Share
10 |10000 characters needed characters left characters exceeded

Hi Cesar,

Change the saprouttab to this:

# SNPC connection to and from SAP 
P * * *

It allows all IP to access your system.


BR

Alex


0