JCO SNC Connection Problems (wrong User)

[#1]

Hi,

We use a JCO Connection from a Java System (MULE 3.8.7) to our SAP System for 10 years. Now we try to secure this connection. We followed Note 2473413 and installed the latest SapCryptoLib for Linux, use the latest sapjcoLib and interchanged the certificates.

When we try to connect to our SAP System it only works when the SNC_MODE is set to "0". When we activate the SNC_MODE with "1" we got the error "JCO_ERROR_LOGON_FAILURE : name or password is incorrect". But the crendentials are correct. They fit perfectly when setting SNC_MODE to "0".

We found out, that the Linux User running the jvm is used for establishing the connection and is rejected by the SAP System. This user is not set in the JCO settings - so why is he used?

What did we wrong?

Regards,
Michael Lanser

[HAL9000]

I recommend to drop parameter jco.client.snc_myname if using the SAP Common Crypto Lib. And by the way, also jco.client.snc_partnername is superfluous if using parameter jco.client.mshost.
Anyway, if that does not help, I guess that you maybe have not set the OS environment variable SECUDIR to your PSE directory, its certificate store is empty, the file(s) are missing completely, or your OS user does not have read permission to it.

For getting support on issues with the SAP Common Crypto Lib please use support component BC-IAM-SSO-CCL. Your root cause error message "No credentials were supplied" does not stem from JCo, but from the used SNC library.

[MichaelLanser]

Hi Stefan,

i dropped both parameters (snc_myname, snc_partnername) - with no effect. I try to forward the incident to your proposed component.

Reagards,

Michael