SAProuter: trcfile dev_rout no logging active

[Former Member]

Dear All,

Thanks in advance.

i am configuring the SAProuter. i have created new admin user as RTRADM in windows 2008 server and followed all the steps as shown in the

https://websmp106.sap-ag.de/saprouter-sncdoc

my envirionment; Windows 2008, processor intel core i7,

i am using sapcar 710, SAPCRYPTOLIB_32-10010888.SAR SAPCRYPTOLIB 5.5.5,

when iam trying to start the saprouter with the command saprouter -r -S 3299 -V 3 -K "p:CN=qnccsaprouter, OU=0001112500, OU=SAProuter,O=SAP, C=DE" &     i am getting as

trcfile  dev_rout

no logging active

routtab file:

# Outbound connections to sapserv2 will use SNC

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

# Inbound connections MUST use SNC

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.10.10.252 3218

# Permission entries to check if connection is allowed at all

P 12.77.213.230 194.39.131.34

# All other connections will be denied

D * * *

i am pasting log file here...

---------------------------------------------------

trc file: "dev_rout", trc level: 3, release: "710"

---------------------------------------------------

Mon Aug 20 11:23:39 2012

NiHsLInit: alloc host/serv bufs (200/200 entries)

NiIInit: allocated nitab (811 at 0000000002477300)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrListInit: use GetAdaptersAddresses implementation (03)

NiPGetNodeAddrList03: adapter: 'Local Area Connection' (Intel(R) 82579LM Gigabit Network Connection / 6)

NiPInsertSockAddr: got address '10.10.10.253' (unicast)

NiPGetNodeAddrList03: adapter: 'Loopback Pseudo-Interface 1' (Software Loopback Interface 1 / 24)

NiPInsertSockAddr: got address '127.0.0.1' (unicast)

NiPGetNodeAddrList03: got 2 interface(s) from operating system

                    [0] IP-Address: 10.10.10.253

                    [1] IP-Address: 127.0.0.1

NiIGetServNo: servicename '3299' = port 3299

SAP Network Interface Router, Version 39.3 (SP4)

Compiled May 24 2010 22:38:35

command line arg 0:          saprouter

command line arg 1:          -r

command line arg 2:          -S

command line arg 3:          3299

command line arg 4:          -V

command line arg 5:          3

command line arg 6:          -K

command line arg 7:          p:CN=qnccsaprouter, OU=0001112500, OU=SAProuter,O=SAP, C=DE

service   : 3299

routtab   : ./saprouttab

plug-in   : no plug-in

-argument: 'no argument'

clients   : 800

max servers  : 1

quelength : 1

maxheap   : 20000000

timeoutL  : 5000

tracefile : dev_rout

logfile   : no logging active

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=000000000202F638)

SncInit(): Initializing Secure Network Communication (SNC)

      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".

DlLoadLib success: LoadLibrary("R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"), hdl 0, addr 0000000010000000

    using "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc failed GetProcAddress("sapsnc_init_adapter") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

        with error 127 = "The specified procedure could not be found."

DlLoadFunc successful GetProcAddress("gss_acquire_cred") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_release_cred") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_init_sec_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_accept_sec_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_process_context_token") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_delete_sec_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_context_time") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_get_mic") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_verify_mic") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_wrap") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_unwrap") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_display_status") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_indicate_mechs") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_compare_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_display_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_import_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_release_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_release_buffer") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_release_oid_set") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_inquire_cred") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_inquire_cred_by_mech") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_inquire_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_wrap_size_limit") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_export_sec_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_import_sec_context") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_inquire_names_for_mech") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_inquire_mechs_for_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_canonicalize_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

DlLoadFunc successful GetProcAddress("gss_export_name") from "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"

  File "R:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

  <<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

         sec_avail = "true"

->> SncSetMyName(snc_hdl=0000000000000000, myname="p:CN=qnccsaprouter, OU=0001112500, OU=SAProuter,O=SAP, C=DE")

<<- SncSetMyName()==SAP_O_K

     in: myname = "p:CN=qnccsaprouter, OU=0001112500, OU=SAProuter,O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)

NiMyHostName: hostname = 'qnccsaprouter'

main: pid = 2356, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiSelICreateSet: new set0

SiSelNInit: allocate 141808 bytes for FI (811)

NiSelIInit: size of set0 is 811

NiICreateHandle: hdl 1 state NI_INITIAL_LIS

NiIInitSocket: set default settings for new hdl 1/sock 324 (I4; ST)

Windows Version 6.1, Build 7601

Running on Windows Vista

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

NiIBind: hdl 1 bound to 3299 (IP only)

NiIBlockMode: set blockmode for hdl 1 FALSE

NiIListen: state of hdl 1 NI_LISTEN

SiSelNSet: sock 324 added to set pos 0

NiSelIAddMsg: added hdl 1 to set0

SiSelNSet: set events of sock 324 to: rp-

reading routtab: './saprouttab'

<<- SncNameToAclKey_r()==SAP_O_K

     in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

  'aclkey ' (addr=00000000025DFE60, len=86) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa

  0x00050  70736572 7632                        pserv2          

NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)

NiIGetServNo: servicename '3299' = port 3299

<<- SncNameToAclKey_r()==SAP_O_K

     in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

  'aclkey ' (addr=00000000025DFE60, len=86) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa

  0x00050  70736572 7632                        pserv2          

NiStrToAddrMask: '10.10.10.252' -> 10.10.10.252/32 (0/0)

NiIGetServNo: servicename '3218' = port 3218

NiStrToAddrMask: '127.0.0.1' -> 127.0.0.1/32 (0/0)

NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)

contents of routtab ('./saprouttab', 4 entries):

KT*,*<<- SncAclKeyToName()==SAP_O_K

  'aclkey ' (addr=00000000024EBE48, len=86) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa

  0x00050  70736572 7632                        pserv2          

    out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

  p:CN=sapserv2, OU=SAProuter, O=  194.39.131.34/32                3299      *

KP*,*<<- SncAclKeyToName()==SAP_O_K

  'aclkey ' (addr=00000000024EC2B0, len=86) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa

  0x00050  70736572 7632                        pserv2          

    out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

  p:CN=sapserv2, OU=SAProuter, O=  10.10.10.252/32                 3218      *

P*,*  127.0.0.1/32                     194.39.131.34/32                *         *

D*,*  ::/0                             ::/0                            *         *

******* NI-ROUTER LOOP ********

SiSelNSelect: start select (timeout=-1)

[Former Member]

It's all in the manual.
Or try the online help:
saprouter -h

This will tell you, in section 'additional options':
-G logfile   : name of log file               (default no logging)

[Former Member]

Hi Joe,

Thanks very much for your reply..

i created one empty file & i executed as saprrouter -r -G saprouterlog.

it is showing as: *** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   9615]

this is my rouutab: please suggest..

# Outbound connections to sapserv2 will use SNC

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

# Inbound connections MUST use SNC

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.10.10.252 3218

# Permission entries to check if connection is allowed at all

P 212.77.213.230 194.39.131.34

# All other connections will be denied

D * * *

this is saproputerlog file

Mon Aug 20 12:37:59 2012 INIT LOGFILE

Mon Aug 20 12:37:59 2012 READ ROUTTAB ./saprouttab o.k.

this is dev_rout file...

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "710"

---------------------------------------------------

Mon Aug 20 12:37:59 2012

SAP Network Interface Router, Version 39.3 (SP4)

command line arg 0:          saprouter

command line arg 1:          -r

command line arg 2:          -G

command line arg 3:          saprouterlog

main: pid = 3040, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

*** ERROR => SNC field without SNC active, skip line 2 [nirout.cpp   9264]

*** ERROR => SNC field without SNC active, skip line 4 [nirout.cpp   9264]

[Former Member]

How exactly did you call saprouter this time?

-G option was meant to be added to your previous options from above, not to replace them ....

[Former Member]

hi Joe,

this is the 1st time i am configuring the saprouter, can you please explain how should i execute the command. i tried in several ways but it is resulting the same error. please suggest.

Thanks: kishore ch

[Former Member]

Hi

try to give full path and re-execute

example c:\saprouter -r c:\saprouttab -G c:\saprouterlog.

follow the below link and documentation, SAP note 30289,

if confused at any step please write back and we can guide you and this configured and make it working if you have all the required Hardware Enabled already and working.

https://websmp103.sap-ag.de/saprouter

Learn more

• Uses of SAProuter
• How Does SAProuter Process Route Strings?
• Configuring SAProuter
• Documentation

Regards

Raj