SNC Error SncPAcquireCred()==SNCERR_GSSAPI

[Former Member]

Dear Experts Teams.

I have question about the SNC connection settings SAPRouter to SAPRouter previously.

http://scn.sap.com/thread/3616730

Run this procedure was the SNC set to SAPRouter to SAPRouter, but an error has occurred.

http://wiki.scn.sap.com/wiki/display/Basis/How+to+setup+SNC+connection+between+SAProuters

==========dev_rout==========

*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1459]

      GSS-API(maj): No credentials were supplied

      GSS-API(min): No credentials found for this name (not logged on) (USER=<User Name>)

    Could't acquire INITIATING credentials for

    name="p:CN=SNC201306-09"

<<- SncSessionInitiatorAK()==SNCERR_GSSAPI

  'target_acl_key' (addr=000000000203C374, len=111) full hexdump

  0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...

  0x00010  005d305b 310b3009 06035504 06130244  .]0[1.0. ..U....D

  0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1

  0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu

  0x00040  74657231 13301106 0355040b 130a3030  ter1.0.. .U....00

  0x00050  30303635 37393834 31153013 06035504  00657984 1.0...U.

  0x00060  03130c53 4e433230 30363130 2d3036    ...SNC20 0610-06

*** ERROR => NiSncIInitHdlSecurity: SncSessionInitiatorAK failed (sncrc=-4;00000000029D3360) [nisnc.c      1185]

*** ERROR => NiSncHandleForAddr C11/-1, <SAProuterA IP> (rc=-17) [nirout.cpp   3321]

*** ERROR => NiRClientHandle: NiRExRouteCon for C11/-1 '<SAPRouterB FQDN>' failed (rc=-17) [nirout.cpp   2690]

==========dev_rout==========

Please Help.

Regards.

Jun

[Former Member]

I'm trying to achieve, attach the access path.

[Sriram2009]

Hi Jun

Could you check this thread with same issue

BR

SS

[Former Member]

Hi Sriram

Thanks for reply.

Will be described below the results of running the command.

==SAPRotuerA side==

C:\usr\sap\saprouter\ntintel>sapgenpse seclogin -p local.pse -O sts

running seclogin with USER="sts"

creating credentials for user "200610-06\sts"...

Adjusting credentials and PSE ACLs to include "200610-06\sts"...

Oh, you supplied your own name explicitly ... ok.

   C:\usr\sap\saprouter\cred_v2  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

Added SSO-credentials for PSE "C:\usr\sap\saprouter\local.pse"

   "CN=SNC200610-06, OU=0000657984, OU=SAProuter, O=SAP, C=DE"

==SAPRouterB side==

C:\usr\sap\saprouter\ntintel>sapgenpse seclogin -p local.pse -O jy-takahashi

running seclogin with USER="jy-takahashi"

creating credentials for user "STSDOMAIN\jy-takahashi" (yourself)...

Adjusting credentials and PSE ACLs to include "STSDOMAIN\jy-takahashi"...

Oh, you supplied your own name explicitly ... ok.

   C:\usr\sap\saprouter\cred_v2  ... ok.

   C:\usr\sap\saprouter\local.pse  ... ok.

Updated SSO-credentials (#0) for PSE "C:\usr\sap\saprouter\local.pse"

   "CN=snc201306-09"

=====================================================

User is different in SAPRouterB and SAPRouterA in my environment, but must be the same user?

Regards,

Jun

[Sriram2009]

Hi Jun

You can refer the SCN Link page number 3

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c06c8846-c160-2d10-d18e-d9961e9c7...

BR

SS

[Former Member]

Hi Sriam

I have not heard of the SAPRouter connection with the OSS.

As in the image, it is desired to connect the SAPRouter that exist in different NW.

attached a list of files SAPRouter directory.

wonder if there are files missing?

Regards,

Jun

[former_member182034]

hi Jun,

Please follow the instruction of below help.

Making Sure the Credentials are Accessible - Cookbook: Configuring SNC for the AGate / SAP System Co...

Regards,

[Former Member]

Hi Abdul.

Thanks for reply.

I set the environment variables, file permissions to the user is also set.

User is different in SAPRouterB and SAPRouterA in my environment, but must be the same user?

Regards,

Jun