SAP Router Error Pls help

[Former Member]

Hi Friends,

i have installed SAP Router on my machine, and

while i was trying to generate the certificate request with the command

sapgenpse get_pse -v -noreq -p local.pse "<YourDistinguished Name>" on the command prompt screen

I am getting the following error as shown below.

Also the PIN number i entered below is 1234(which is not visible)

D:\usr\sap\saprouter\ntintel>sapgenpse get_pse -v -noreq -p local.pse "CN=VEL-HO

-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

Got absolute PSE path "C:\Documents and Settings\somadm.VEL\sec\local.pse".

Please enter PIN:

Please reenter PIN:

Supplied distinguished name: "CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=

SAP, C=DE"

Creating PSE with format v2 (default)

No License ticket file found (trying D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

get_pse: Can't create PSE.

ERROR in af_create: (18946/0x4a02) Ticket error : "No License ticket file found

(trying D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

ERROR in ??: (18946/0x4a02) Ticket error : "No License ticket file found (trying

D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

Kindly suggest the solution

Regards

Ayush Johri

[Former Member]

Dear Kaushal,

I'm trying to configure SAP Router through VPN connection in RHEL5 on Solman7.0

Is the above process applicable to linux systems also!! or will there be any changes?

Your suggestions would be appreciated in this regard.

Thanks & Regards,

Balamuralikrishna.R

[Former Member]

Hi,

The given method is for sap router running on windows machine

if you are planning to run sap router on linux machine the procedure is almost same but differs in terms of path of SNC_LIB

regards,

kaushal

[nelis]

No License ticket file found (trying D:\usr\sap\saprouter\ntintel\ticket):
No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti
cket):
No License ticket file found (trying C:\secude\etc\ticket):

The error looks clear to me, it can't find the ticket file. Does it exist in the above location where it is looking ?

D:\usr\sap\saprouter>sapcar -xvf sapcrypto.CAR
processing archive sapcrypto.CAR...
...
x ntintel/sapgenpse.exe
x ticket

You extracting it to D:\usr\sap\saprouter and C:\saprouter ...it is not looking for it here. Put it somewhere where it can find it.

Regards,

Nelis

[Former Member]

HI,

while i was trying to generate the certificate request with the command
sapgenpse get_pse -v -noreq -p local.pse "<YourDistinguished Name>" on the command prompt screen

the correct command is

sapgenpse get_pse -v -r certreq -p local.pse "Distinguished Name"

regards,

kaushal

[Former Member]

Hi Kaushal,

So i typed the right command

The distinguished name would be replaced by the name mentioned below in the command

sapgenpse get_pse -v -noreq -p local.pse "CN=VEL-HO

-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

Kindly check

Ayush

[Former Member]

Hi,

Following is wrong.

sapgenpse get_pse -v -noreq -p local.pse "CN=VEL-HO

-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

command to generate the certificate is

sapgenpse get_pse -v -r certreq -p local.pse "Distinguished Name"

in your case it is

sapgenpse get_pse u2013v -r certreq -p local.pse "CN=VEL-HO

-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

regards,

kaushal

[Former Member]

Hi Kaushal,

I am still getting the same error after uding the command specified by you, i tried executing the command several times but everytime i am getting the same error.

D:\usr\sap\saprouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=VE

L-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

Got absolute PSE path "C:\Documents and Settings\somadm.VEL\sec\local.pse".

Please enter PIN:

Please reenter PIN:

Supplied distinguished name: "CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=

SAP, C=DE"

Creating PSE with format v2 (default)

No License ticket file found (trying D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

get_pse: Can't create PSE.

ERROR in af_create: (18946/0x4a02) Ticket error : "No License ticket file found

(trying D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

ERROR in ??: (18946/0x4a02) Ticket error : "No License ticket file found (trying

D:\usr\sap\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

Kindly suggest where am i going wrong.

Regards

Ayush

[Former Member]

Due you think this error might be because i havent copied the SAPCRYPTO.CAR to exe/run directorty

What i have done is -> i have made a seperate directory "saprouter" in usr\sap -> so the directory is like "usr\sap\saprouter", and copied the sapcrypto.car in "usr\sap\saprouter" and extracted in the same directory

as shown below

D:\usr\sap\saprouter>sapcar -xvf sapcrypto.CAR

processing archive sapcrypto.CAR...

x Changelog.txt

x LEGAL.TXT

x LICENSE.TXT

x Ver555.pl24

x WHICH.TXT

x nt-x86_64

x nt-x86_64/sapcrypto.dll

x nt-x86_64/sapcrypto.lst

x nt-x86_64/sapgenpse.exe

x ntia64

x ntia64/sapcrypto.dll

x ntia64/sapcrypto.lst

x ntia64/sapgenpse.exe

x ntintel

x ntintel/sapcrypto.dll

x ntintel/sapcrypto.lst

x ntintel/sapgenpse.exe

x ticket

So what i am thinking is instead of creating a seperate directory "saprouter" i should have copied the sapcrypto.car in exe\run directory and should hve extracted there.... If you believe the problem is because of this reason then please suggest me what might be done,,,

Regards

Aayush

[Former Member]

Hi,

Follow the steps.

1) downloaded the SAP cryptographic software from service.sap.com/tcs . select the correct one for your platfrom

2) Extract it with sapcar -xvf filename.sar

for windows /ntintel directory would be created and the following files would be extracted

for example

C:\saprouter\ntintel\sapcrypto.dll

C:\saprouter\ntintel\sapgenpse.exe

C:\saprouter\ticket

3) It is necessary to define the environment variable for u201CSECUDIRu201D and u201CSNC_LIBu201D under system account.

the SNC_LIB path may be vary if you are using 64 bit windows server following is for 32 bit windows server.

SECUDIR -> C:\saprouter\

SNC_LIB -> C:\saprouter\ntintel\sapcrypto.dll

4) Check if the environment of the user running saprouter contains the environment variable SNC_LIB

5) now apply for a SAProuter certificate from the SAP Trust Center Service of SAP service marketplace

service.sap.com/tcs -> SAP Trust Center Service in Detail -> SAProuter Certificates

so you get your Distinguished Name.

6) Execute the following command in the \saprouter\ntintel directory in order to generate your certificate to be exchanged with SAP

sapgenpse get_pse -v -r certreq -p local.pse "Distinguished Name"

follow the above steps for generate your certificate

regards,

kaushal

[Former Member]

Hi kaushal,

I tried follwowing your steps as you mentioned, i created the new "saprouter" directory in C:\

i also extracted the "sapcrypto.sar" in "saprouter" directory

But i am again getting the same error

Below i have shown how i have extrated and executed command sapgenpse get_pse -v -r certreq -p local.pse "CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

C:\>cd saprouter

C:\saprouter>sapcar -xvf SAPCRYPTO.SAR

SAPCAR: processing archive SAPCRYPTO.SAR (version 2.00)

x Changelog.txt

x LEGAL.TXT

x LICENSE.TXT

x Ver555.pl24

x WHICH.TXT

x nt-x86_64

x nt-x86_64/sapgenpse.exe

x nt-x86_64/sapcrypto.dll

x nt-x86_64/sapcrypto.lst

x ntia64

x ntia64/sapgenpse.exe

x ntia64/sapcrypto.dll

x ntia64/sapcrypto.lst

x ntintel

x ntintel/sapgenpse.exe

x ntintel/sapcrypto.dll

x ntintel/sapcrypto.lst

x ticket

SAPCAR: 18 file(s) extracted

C:\saprouter>cd ntintel

C:\saprouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=VEL-HO-SAP

-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

Got absolute PSE path "C:\Documents and Settings\somadm.VEL\sec\local.pse".

Please enter PIN:

Please reenter PIN:

Supplied distinguished name: "CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=

SAP, C=DE"

Creating PSE with format v2 (default)

No License ticket file found (trying C:\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

get_pse: Can't create PSE.

ERROR in af_create: (18946/0x4a02) Ticket error : "No License ticket file found

(trying C:\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

ERROR in ??: (18946/0x4a02) Ticket error : "No License ticket file found (trying

C:\saprouter\ntintel\ticket):

No License ticket file found (trying C:\Documents and Settings\somadm.VEL\sec\ti

cket):

No License ticket file found (trying C:\secude\etc\ticket):

"

But i am not able to find out where am i going wrong.

Please help.

Regards

ayush

Edited by: Ayush Johri on Jul 2, 2008 11:50 AM

[Former Member]

Hi,

you did not follow step 3.

following is missing in environment variable under system account.

SECUDIR -> C:\saprouter\

SNC_LIB -> C:\saprouter\ntintel\sapcrypto.dll

Window NT environment variable setup :

Right-clicked the icon of My Computer

Property -> details -> environment variable

and add above two variable under system account

I tested following without this variable and I get following.

C:\Saprouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=BCINICSSM0
01, OU=0000733303, OU=SAProuter, O=SAP, C=DE"
 Got absolute PSE path "C:\Documents and Settings\sapinst\sec\local.pse".
Please enter PIN:
Please reenter PIN:
 Supplied distinguished name: "CN=BCINICSSM001, OU=0000733303, OU=SAProuter, O=S
AP, C=DE"
 Creating PSE with format v2 (default)
No License ticket file found (trying C:\Saprouter\ntintel\ticket):
No License ticket file found (trying C:\Documents and Settings\sapinst\sec\ticke
t):
No License ticket file found (trying C:\secude\etc\ticket):
get_pse: Can't create PSE.
ERROR in af_create: (18946/0x4a02) Ticket error : "No License ticket file found
(trying C:\Saprouter\ntintel\ticket):
No License ticket file found (trying C:\Documents and Settings\sapinst\sec\ticke
t):
No License ticket file found (trying C:\secude\etc\ticket):
"
ERROR in ??: (18946/0x4a02) Ticket error : "No License ticket file found (trying
 C:\Saprouter\ntintel\ticket):
No License ticket file found (trying C:\Documents and Settings\sapinst\sec\ticke
t):
No License ticket file found (trying C:\secude\etc\ticket):

once I put the above variable I get certificate.

regards,

kaushal

Edited by: Kaushal Malavia on Jul 2, 2008 12:16 PM

[Former Member]

I have one doubt here, when we download the saprouter.sar file and then we unzip it we get two files out of it niping.exe and saprouter.exe

now my question is how to install saprouter as a service by double clicking "saprouter.exe" file or by the command(which i have read from help.sap.com)

ntscmgr install SAProuter -b C:\saprouter\saprouter.exe -p "service -r <paramater>"

here i am not talking bout how to install sap router certificate, what i am talking about is how to install saprouter.exe as a windows service

Regards

ayush

[Former Member]

Hey thanks bro,

Finally i have been able to resolve the issue, i generated the certificate request successfully, but now when i copy and paste the text into sap site, and click the "request certificate" i am getting an error as shown below

Error - Applying for a certificate for SAProuter

The certificate for SAProuter cannot be issued.

The submitted Distiguished Name (DN) does not match the DN contained in the request for the SAProuter certificate.

Click on Go back.

What should i do know, why is it saying so when i have used the correct DN

please suggest

Regards

ayush

[Former Member]

Hi,

You are using SNC router and you want to run this SNC router as service.

check Note 525751 - Installation of the SNC SAPRouter as NT Service

provide me the following details.

login into

http://service.sap.com/tcs -> SAP Trust Center Service in Detail -> SAProuter Certificates

Click the button Apply Now

and provide me Distinguished Name (Parameter for SAPGENPSE) which is displayed under Confirm SAProuter

regards,

kaushal

[Former Member]

Hi kaushal,

I have successfully imported the the certificate and got over with all the command execuation steps. So far i havet faced any issues....

Now i have to edit the "saprouttab" and i am unable to find this file,

Please tell me the location of this file or is it somthng i have to create it manually and then configure it

Regards

Ayush

[Former Member]

Hi,

create saprouttab file manually with following entries ( for example only value many be differ for you)

1. SNC-connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>

1. SNC-connection from SAP to local R/3-System for pcANYWHERE, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 5631

1. SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P <IP-addess of a local PC> 194.39.131.34 3299

1. deny all other connections

D * * *

put saprouttab file in c:\saprouter

regards,

kaushal

[Former Member]

Hi Kaushal

My saprouter has been successfully installed through certificate requests, now i have to maintain the SAPROUTTAB and eventually install the saprouter as NT Service.

For that i need you help if you can review my saprouttab and tell me wether i have configured it correctly or not.

below is the saprouttab

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 59.160.14.213 10

P 10.54.145.22 194.39.131.34 3299

D * * *

*where 59.160.14.213 is the Public IP from our side*

*where 10.54.145.22 is the IP-addess of a local PC (which i could see from "ipconfig" command on command prompt)*

Regards

Ayush johri

Edited by: Ayush Johri on Jul 3, 2008 12:08 PM

Edited by: Ayush Johri on Jul 3, 2008 12:09 PM

[Former Member]

Hi,

it's seems to be ok

check saposs connection in SM59.

regards,

kaushal

Edited by: Kaushal Malavia on Jul 3, 2008 12:18 PM

[Former Member]

Hi kaushal,

Checking SAPOSS connection in SM59 would be a later thing, what i am more concerned about is how to start the SAPROUTER service in the NTServices.

Everthing has been done correctly following the documents and as we have mentioned so far. But still i have not been able to start SAPROUTER from NTServices

1. i have used the follwing command to install SAPROUTER

With the following command you can newly define the service from the command line:

ntscmgr install saprouter -b <path>\saprouter.exe -p "service -r -W 60000 -R <path>\saprouttab -K ^{p:<your_distinguished_name>}"

2. After this i have made the following settings (shown below)

Edit the string in the registry under

MyComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ saprouter

and change ^ to " under ImagePath.

3. Additionally you'll have to do the following steps to make

SAPCRYPTOLIB credentials available to a process that runs as an NT

service

Run the command:

sapgenpse seclogin -p <path>\<psefile> -O <SNC_admin>

Note:

The account of the service user should always be entered in full

<domainname>\<username>

for the above mentioned command i have executed

C:\saprouter\ntintel>sapgenpse seclogin - p C:\saprouter\local.pse -O VEL\somadm

============================

Kindly review it and let me know if have made any mistake anywhere... because still after this i have not been able to start saprouter service.. before doing maintaining sm59 for SAPOSS connection

4. Also i have not created any sndadm user specifically for saprouter, since i have instlled it on the machine where i have Solution manager (its sap user is SOMADM) so i used the same somadm as a user in the above command, and i want that somadm should be used both for starting solution manager instance and saprouter.

Regards

Ayush

Edited by: Ayush Johri on Jul 3, 2008 1:53 PM

[Former Member]

When i am trying to start saprouter service in NTServices, everytime i am getting the same error as mentioned below..

could not start the saprouter service on Local Computer.

Error 1067: The process terminated unexpectedly

Now can you tell me what might be the possible reason for that. Or if you could suggest me which user i should use to start the saprouter service

[Former Member]

Hi,

If service is failed to start then check event viewer for log.

follow all the steps described in note Note 525751 - Installation of the SNC SAPRouter as NT Service

hi please paste your complete command

ntscmgr install saprouter -b <path>\saprouter.exe -p "service -r -W 60000 -R <path>\saprouttab -K p:<your_distinguished_name>"

with distinguished_name

regards,

kaushal

Edited by: Kaushal Malavia on Jul 3, 2008 2:26 PM

[Former Member]

1. i check the event log, the error that i am getting is mentioned below from which i coulnt understand much

Event Type: Error

Event Source: saprouter

Event Category: None

Event ID: 1

Date: 7/3/2008

Time: 1:45:14 PM

User: N/A

Computer: VEL-HO-SAP-01

Description:

The description for Event ID ( 1 ) in Source ( saprouter ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Error: 997,

ERROR Unable to load the GSS-API DLL

named "sncgss32.dll"

TIME Thu Jul 03 13:45:14 2008

RELEASE 640

COMPONENT NI (network interface)

VERSION 5

RC -17

MODULE sncxxdl.c

LINE 342

DETAIL SncPDLInit

SYSTEM CALL LoadLibrary

COUNTER 1

.

2. Also i have read the complete note which u have suggested to me

3. The complete real command that i have executed with the paramaters is menioned below..

ntscmgr install saprouter -b C:\saprouter\saprouter.exe -p "service -r -W 60000 -R C:\saprouter\saprouttab -K p:CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

(p:CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE...this section of the command is between ^ codes)

See if you think theres anythng wrong,

Regards

Ayush

Edited by: Ayush Johri on Jul 3, 2008 2:55 PM

Edited by: Ayush Johri on Jul 3, 2008 2:56 PM

[Former Member]

I have also installed SAP Service Connector, but still i am not able to start the saprouter service...

Do you think that saprouter could be started manually from NTServices or it could only be started from the command mentioned below.

saprouter -r -S 3299 -K "p:CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE"

But so far i havent yet used the above command to start the saprouter, i am trying to start it manually but no success.

Regards

Ayush

[Former Member]

Hi,

copy gssapi32.dll file from your kernel directory to C:\saprouter\ntintel\

log off and login again then try to start saprouter service.

regards,

kaushal

[Former Member]

HI

Even after copying gssapi32.dll file your kernel directory to C:\saprouter\ntintel\

After copying i tried starting saprouter manually in the NTServices.

I am still getting the same error,

The description for Event ID ( 1 ) in Source ( saprouter ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Error: 997,

ERROR Unable to load the GSS-API DLL

named "sncgss32.dll"

TIME Thu Jul 03 16:40:02 2008

RELEASE 640

COMPONENT NI (network interface)

VERSION 5

RC -17

MODULE sncxxdl.c

LINE 342

DETAIL SncPDLInit

SYSTEM CALL LoadLibrary

COUNTER 1

Please help me out as what is to be done...

Regards

Ayush

[Former Member]

Hi,

Add following in environment variable of user which run saprouter i.e sidadm

SNC_LIB -> C:\saprouter\ntintel\sapcrypto.dll

and edit the PATH variable and enter the path for your kernel directory

regards,

kaushal

[Former Member]

Hi kaushal,

SNC_LIB envrnt variable is already there but i have not configured the PATH.

Can you tell me how should i edit it, currently the setting is as shown below

Variable Name: Path

Variable value: F:\oracle\ECC\102\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Java\j2re1.4.2_17\bin;

Now what you want me to add in the variable value extention to the one shown above.

Do you want me to add "D:\usr\sap\SOM\SYS\exe\uc\NTI386;"

Pls Help

Regards

Ayush

[Former Member]

Hi,

Run the following command and provide the result

1) sapgenpse get_my_name -v -n Issuer

2) sapgenpse

3) sapgenpse get_my_name

one more query pc where saprouter is running is a local or it is in domain?

problem with execution of sapgenpse seclogin -p <path>\<psefile> -O <SNC_admin> command.

regards,

kaushal

Edited by: Kaushal Malavia on Jul 3, 2008 6:25 PM

[Former Member]

Hi kaushal,

My SAP Router has started successfully as a NT service, Also i have configured the saprouttab, which i have shown above and also would ask you once again to ensure whether Public IP and R/3 server IP has been put at right place in the saprouttab.

What all configuration is reuquired to be done on R/3 level in oss1 technical settings...

Pls suggest

Thanks

Ayush

[Former Member]

Hi,

What all configuration is reuquired to be done on R/3 level in oss1 technical settings...

Execute OSS1 -> parameter -> technical settings

under sap router at customer side

Saprouter 1

Name: host name where sap router is running

IP address : IP address of host ( local IP)

Instance No. : 99

under saprouter and sap net message server at SAP

saprouter at sap : sapservX

IP Address: IP of sapservX

Instance No.: 99

SAP Net Message Server

Name: oss001

DB name : O01 ( 'O' zero one )

Instance No. : 01

Entry in saprouttab ( for example only)

#SNC-connection to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 * 

#SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" X.X.X.X <instance_number>


#Access from the local Network to SAPNet - R/3 Frontend (OSS)
 P X.X.X.X 194.39.131.34 3299


#SNC-connection from SAP to local R/3-System for saptelnet
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" X.X.X.X  23

#deny all other connections
D * * *

X.X.X.X indicate IP address of your SAP system.

regards,

kaushal

[Former Member]

Hi Kaushal,

I maintained the Technical settings in oss1 as suggested by you

Saprouter 1

Name: host name where sap router is running

IP address : IP address of host ( local IP)

Instance No. : 99

under saprouter and sap net message server at SAP

saprouter at sap : sapservX

IP Address: IP of sapservX

Instance No.: 99

SAP Net Message Server

Name: oss001

DB name : O01 ( 'O' zero one )

Instance No. : 01

================================

Actual Entry in saprouttab

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 59.160.14.213 10

P 10.54.145.22 194.39.131.34 3299

D * * *

where 59.160.14.213 is a public IP and 10.54.145.22 is a local IP of a server.

But i have some doubts to clarify here (regaring saprouttab)

1. What should be the IP (Public 59.160.14.213 / local pc 10.54.145.22 ) in KP line above

2. What should be the IP (Public 59.160.14.213 /local pc 10.54.145.22 ) in P line above

3. Also check whether the entries i have made in the saprouttab are in proper order or not.

Regards

Ayush

Edited by: Ayush Johri on Jul 8, 2008 3:46 PM

[Former Member]

Hi,

You need to define Local IP address only in saproutab.

In you case it is following

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"  10.54.145.22 10

P 10.54.145.22 194.39.131.34 3299
D * * *

you need to define all sap system in your landscape with there local IP address. same as above only change in IP address and instance number.

regards,

kaushal

[Former Member]

Hi Kaushal,

I am really thankful for the way u have been helping me out relentlessly.

As of now i just want solution manager to access the SAPNet through OSS1 since we havent yet set up DEV, QAC and PRD. So once they would be up and running i would maintain the saprouttab accordingly with all the 3 ip addresses.

But after maintaining the settings in OSS1 and when i am tryin to log on to the SAPNet, I am getting an error "Unable to connect to SAPNet message server"

Now what could be the cause for this and how can i troubleshoot it, if you can suggest somthng would be awesome.

Regards

Ayush

[Former Member]

Here is the trace file as shown below

----

---

trc file: "dev_rout", trc level: 1, release: "640"

----

---

Tue Jul 08 16:45:55 2008

SAP Network Interface Router, Version 37.11

command line arg 0: C:\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -W

command line arg 3: 60000

command line arg 4: -R

command line arg 5: C:\saprouter\saprouttab

command line arg 6: -K

command line arg 7: p:CN=VEL-HO-SAP-01, OU=0000851877, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void = 8/32/32)*

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\saprouter\ntintel\sapcrypto.dll".

File "C:\saprouter\ntintel\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main(): pid = 2276, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)

reading routtab: C:\saprouter\saprouttab

Tue Jul 08 16:46:50 2008

• ERROR => SISEL_SEL_NT::next: an error occurred in socket 240 [sixxsel.cpp 2545]*

***LOG Q0I=> NiPConnect2: SiPeekPendConn (4271185: ) [nixxi.cpp 8684]

Tue Jul 08 16:47:13 2008

• ERROR => SISEL_SEL_NT::next: an error occurred in socket 240 [sixxsel.cpp 2545]*

[Former Member]

Hi,

first ping sapserv2 (194.39.131.34) from your saprouter host (10.54.145.22). is it ping?

then check saposs RFC destination using SM59. if RFC failed then check technical settings for RFC.

you need to resolved RFC connection issue.

regards,

kaushal

[Former Member]

Hi pls try using the following command to start may router service may be this could help in pinging sapserver through SM59

saprouter -r -V 3 -K "your distinguish name"

[Former Member]

Hi Kaushal,

I'm facing the same issue and I have added the lines in my routetab entries

P <My Ip address> 194.39.131.34 3299

but still the same problem

when I hit OSS1 T-code it is asking me to select from PUBLIC,DO_NOT_USE, EWA ETC I have choosen EWA and tried

same problem, I tried with all options but no use,

One doubt in OSS1 t-code tech settings at the bottom what should be selected CURRENT OR ALTERNATIVE?

Option Current---> C:\Program Files\SAP\FrontEnd\sapgui\SAPGUI.EXE says this path do my router system

SAPGui should be installed?

Let me know if u got any other way

Please suggest...

Thanks In Advance

HariKrishna

[Former Member]

Hi,

I have the same problem similar to yours. I am unable to start SAProuter as an NT service. I always get the error: "Could not start the SAProuter service on Local Computer. Error 1067: The process terminated unexpectedly."

May I ask what you did to get your SAProuter to start as a service?

Thanks in anticipation.

Regards,

A.S