08-01-2008 2:17 PM
Hi Wolfgang,
I was wondering if you would mind answering a question on SNC setup for a backend R/3 system with multiple application servers.
Is the SNC PSE system-wide or instance specific? We have a system with a CI and 1 additional app server and wish to activate SNC. On the CI, snc/identity/as is set to CN=hostname1, OU=XYX, O=XYZ and on the app server snc/identity/as is set to CN=hostname2, OU=XYX, O=XYZ. If I log onto the CI and create the SNC PSE, the DN is taken from the snc/identity/as profile parameter. If I then add the certificate to the PSE, the entries for both app servers under SNC (Cryptolib) are green, but only the DN for the for the CI is visible. How do I add the DN entry for the addional application server? I have the problem that the CI will start, but the app server will not and I get a 'no Accepting credentials found..' in the trace files. Indeed in cred_v2 only the DN of the CI is entered, not the DN of the additional app server, so I guess when seclogin tries to find the snc/identity/as value (of the additional app server) in the cred_v2 file it cannot find it so the app server does not start.
Regards,
08-04-2008 11:23 AM
I am not Wolfgang, but it is my recommendation to use the SAME PSE on all instances.