Hi
We are trying to connect to our SAP Server via SAProuter using a 3rd party app.
There's a SAProuter instance running on the SAP side, and one running on the 3rd party app side.
Certificates have been exchanged between the two.
If we connect from the 3-rd party server directly to the SAP router (i.e. not using the SAProuter on the 3-rd party server), then it works.
But when we try connecting like:
/H/3rd-party_ip/H/SAProuter/H/SAP IP then it fails with error:
GSS-API(maj): No credentials were supplied
Could't acquire ACCEPTING credentials for
Now normally this will indicate the certificates does not match up.
Here's the funny thing:
The saprouter on the SAP server's side is starting with the following params. Note the cert name:
SAP Network Interface Router, Version 40.4
command line arg 0: C:\SAP\saprouter\saprouter.exe
command line arg 1: -r
command line arg 2: -W
command line arg 3: 60000
command line arg 4: -R
command line arg 5: C:\SAP\saprouter\saprouttab
command line arg 6: -K
command line arg 7: p:CN=XYZRPDMZ01P, OU=0001152479, OU=SAProuter, O=SAP, C=DE
That is also the certificate name installed on the 3rd party server.
But when we connect the error is as below.
Note the target certificate name. Why is the target this name (the sapserv2 cert) since neither of the SAProuters are starting up with this name?
*** ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE' [D:/depot/b 3638]
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [D:/depot/bas/75 3604]
GSS-API(maj): No credentials were supplied
Unable to establish the security context
target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
<<- SncProcessOutput()==SNCERR_GSSAPI
*** ERROR => NiSncIInitHdlSecurity: SncProcessOutput failed (sncrc=-4;000000F576ABA730) [nisnc.c 1202]
*** ERROR => NiSncHandleForAddr C10/-1, 194.39.xyz.xx (rc=-17) [nirout.cpp 4130]
*** ERROR => NiRClientHandle: NiRExRouteCon for C10/-1 'zasmapxyz.ogl.int' failed (rc=-17) [nirout.cpp 3489]
*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI [D:/depot/bas/75 1465]
GSS-API(maj): No credentials were supplied
Could't acquire ACCEPTING credentials for
name="p:CN=XYZRPDMZ01P, OU=0001152479, OU=SAProuter, O=SAP, C=DE"
<<- SncProcessInput()==SNCERR_GSSAPI
*** ERROR => NiSncIProcIn: SncProcessInput failed (sncrc=-4;000000F576ABA730;1789) [nisnc.c 1003]
*** ERROR => NiSncIProcOpcode: NiSncIProcIn failed (rc=-17) [nisnc.c 337]
*** ERROR => NiBufIIn: NiBufIProcMsg failed (rc=-17) [nibuf.cpp 2828]
*** ERROR => NiBufReceive C11/-1 '52.169.123.456 failed (rc=-17) [nirout.cpp 3326]
Bluesky
