Skip to Content

Cannot start SAPRouter after certificate imported

Hi! Gurus,

To establish remote connection for SAP Support I have installed SAProuter in our Solution Manager Server host. When I am trying to start the service, it cannot start and system didn't have response to me. I have checked related notes and manual. Still it is not clear to me.

Please help me. Does the saprouttab have any problem or SNC_LIB's version is not correct?
Many thanks.

BR

Alex

Server: windows sever 2008 R2
Netweaver version: 7.0

Solution Manager: 7.1

SECUDIR and SNC_LIB successfully set and I register my system into sap system.

Distinguished name:

Certificate successfully imported:


My saprouttab:

# SNC connection to and from SAP
KT "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 147.204.2.5 *
# SNC-connection from SAP to local system for R/3-Support
KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.97.93.47 3210
# Access from your local Network to SAP
P 10.97.93.47 147.204.2.5 3299
# All other connections will be denied
D * * *

Run start saprouter command;

dev_rout log file:

---------------------------------------------------
trc file: "dev_rout", trc level: 1, release: "745"
---------------------------------------------------

Thu May 04 10:02:08 2017
SAP Network Interface Router, Version 40.4

command line arg 0: saprouter.exe
command line arg 1: -r
command line arg 2: -K
command line arg 3: p:CN=mo-212618ea2, OU=0000033018, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="S0017449477" NetWkstaUser="S0017449477"
GetUserNameEx(SamCompat)="MO-212618EA2\S0017449477"
GetUserNameEx(UserPrinc) failed with 0x00000534
SncInit(): Trying environment variable SNC_LIB_64 as
gssapi library name: "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll".
File "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="E:\SolMan_Media\SAPRouter" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib
Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.18 pl40 (Apr 14 2014) MT-safe
main: pid = 10004, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • May 05, 2017 at 02:24 PM

    Please look at document below. This might help you

    Getting Started with SAProuter – Tutorials

    OR

    https://blogs.sap.com/2014/12/15/saprouter-installation/

    -Yogesh

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 22, 2017 at 12:19 AM

    Hi Alex, I am experiencing the same issue as you. Did you find a way to solve the issue?

    Thank you and Regards,
    Cesar Rodriguez

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Cesar,

      Change the saprouttab to this:

      # SNPC connection to and from SAP 
      P * * *

      It allows all IP to access your system.


      BR

      Alex