Unable to connect backend SAP instance at AWS from local system

[former_member394313]

Hi

I'm trying to connect SAP GUI and Hana Studio on my laptop to the backend system running in AWS. I've opened all required ports listed in the CAL documentat but no luck. Even worse, when I tried to check settings with putty client, it reported it couldn't use the private key in .PERM file I downloaded from the CAL site:

Unable to use key file "C:\Temp\hana\AWS\Instance of SAP Application Server ABAP 7.4 SP5 incl. Business Warehouse on SAP HANA 1.0 SP7 [Developer Edition].pem" (OpenSSH SSH-2 private key)

Using username "root".

Using keyboard-interactive authentication.

Password:

Please help me to resolve the issue.

Thanks

s0002762191

[stanimir_eisner · Accepted solution]

Hi Victor,

Regarding how to connect to a running instance in AWS via the secure shell protocol (SSH), you may find the details at the bottom of

Regarding the SAP GUI connectivity, could it be the case that you are behind a corporate firewall that does not allow to connect to port 3200.

Best regards,

Stanimir

[former_member394313 · Accepted solution]

Thanks for the response. Following your advice, I tried to use command-line putty with the newly regenerated private key and got the same result. I'm not at  a corporate network and I can connect non-AWS Hana and SAP at a third-party company. Can't access AWS Hana from my local system either.

Victor

[stanimir_eisner · Accepted solution]

Hi Victor,

The pem extension of the key file and the error message make me consider that the key was not converted in PuTTY’s native format (*.PPK). Could you please double check whether it has the same format as the sample bellow?

Best regards,

Stanimir

PuTTY-User-Key-File-2: ssh-rsa

Encryption: none

Comment: imported-openssh-key

Public-Lines: 6

AAAAB3NzaC1yc2EAAAADAQABAAABAQCpXaiuHyFoKS5Ct9VZ1LKWXdA0Hkb44CD3

dFqQzIWy/sPqhtH9nRN2+pHCutZ5rroUCsWli+2zM1xYe/vIgMZzgB9TqPB11zGH

kMoNXy/hIct9FmIpunyCt2v23nw1+DpIz5+G/pUsFMG1l/KTy2bNSDpx8VYgmS4E

VW7Jag4LdX9Zyqz8etYsdfsg2rr3DzXVUYJfqU3Zw7c3hHygJxqyXDVBs5jLg2yG

sGLmSgdmYBWKxrGTSqWme8wWE43Rj+QB6A+oz7Ei4EMFNkSKFTP1RT6JJJi0o2si

hZOTXW96RcKKCbgVAnttwNUNZ887SEz5we5V212diekdkcJm2rhD

Private-Lines: 14

AAABAHR7LrS6Qk6R6/gE2N4UU9LoqHX/0M3/z4yA4HyvvNAzOWkF2kxziFyOzkrA

FxvPGLkKA47soslZbIyKkMsADfyHxIPUL7TMEIttABmcOqC6jmn0SATs9g8suTsr

HwA7PVKwQMYmN0/+4o7S9wnAnW5X26Jb2eFHmIdwfmZV41zrDiNkmnkaAOVDkbU7

1TrsH4ZWzHxV8XOzY+ychviPsIsE0WNIQasTDhwjKgCqOXQ3ci6kFkmRT/KpkrAL

aOXhnZTk4E6O4mzmAeLH5NvaV0+9SXSBEsHTq5JV4bN37jB5pIFUN3SqT5vX0b9n

UYRuB5FPEQ5QijflxiayFSu7bFfghthCBAOE5LL1kniYV3jPJsnxVazN81HJ3mQcB

MKw1kwifCLusJ3Z9rzBDNK21qgKAo0mH9wqDFuNNZQUdEC4CTraEU8HIpkWKhTO3

auAT4mzWii0tw1klMuwx8VncIG9aVZZLItYb8XDzSEC0eEyfRgvwnpBhcY4Ng7Fs

5veQho8RVujHAAAAgQDAgnZQtLqpDCRTpQiiduYrTgqxBtnFJZ69VRRnDeCKqbAQ

ztsmxXNsdcptQb+yjtyCNMax/ApvJAvsoRn0+2YzTiN4ZBlJeBChWicg6Hn8jL35

fH0Ue7UHrpYN/ZPx98n39b/xbopsCKj4cBRjPn0GvEv6W9CPvO4hfYxbaqPQpQAA

AIBNzSMAN7NU1jFodL5tkSie5oFFhibT5rR6oqiA3twolrX0THYpDcZmNvuPqG0r

Ei3FNG5X92id1t4Dl500/7a2+VIxWSEDlu/gDOfiM11dvXVKN/ybrBsY9NdqUWjt

3ziBzRUUeSE//vTnKE1sAxa/3mB/dEIOYw7rD6aSqrVHDA==

Private-MAC: de9c61fe764ad2bff7e1a89b3d5f4482a094475

[former_member394313 · Accepted solution]

Hi Stanimir,

It's an excelllent finding. It did the trick and I managed to connect to the backend. I have checked open ports and found that port 50214 seems to be closed even though it's listed as open at the CAL website. I don't know if this is the cause of my issue with SAP and Hana.

Honestly, I don't want to waste any more time on that thing.

I appreciate all your help.

Victor

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name

tcp        0      0 0.0.0.0:50001           0.0.0.0:*               LISTEN      13959/icman

tcp        0      0 0.0.0.0:3601            0.0.0.0:*               LISTEN      12374/ms.sapA4H_ASC

tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      4853/sshd

tcp        0      0 127.0.0.2:30200         0.0.0.0:*               LISTEN      5408/hdb.sapHDB_HDB

tcp        0      0 127.0.0.1:30200         0.0.0.0:*               LISTEN      5408/hdb.sapHDB_HDB

tcp        0      0 127.0.0.2:30201         0.0.0.0:*               LISTEN      6126/hdbnameserver

tcp        0      0 127.0.0.1:30201         0.0.0.0:*               LISTEN      6126/hdbnameserver

tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      6250/master

tcp        0      0 127.0.0.2:30202         0.0.0.0:*               LISTEN      6804/hdbpreprocesso

tcp        0      0 127.0.0.1:30202         0.0.0.0:*               LISTEN      6804/hdbpreprocesso

tcp        0      0 127.0.0.2:30203         0.0.0.0:*               LISTEN      6836/hdbindexserver

tcp        0      0 127.0.0.1:30203         0.0.0.0:*               LISTEN      6836/hdbindexserver

tcp        0      0 0.0.0.0:59804           0.0.0.0:*               LISTEN      6467/jstart

tcp        0      0 0.0.0.0:3901            0.0.0.0:*               LISTEN      12374/ms.sapA4H_ASC

tcp        0      0 127.0.0.2:30205         0.0.0.0:*               LISTEN      6839/hdbstatisticss

tcp        0      0 127.0.0.1:30205         0.0.0.0:*               LISTEN      6839/hdbstatisticss

tcp        0      0 0.0.0.0:50013           0.0.0.0:*               LISTEN      5826/sapstartsrv

tcp        0      0 0.0.0.0:50014           0.0.0.0:*               LISTEN      5826/sapstartsrv

tcp        0      0 127.0.0.2:30207         0.0.0.0:*               LISTEN      6842/hdbxsengine

tcp        0      0 127.0.0.1:30207         0.0.0.0:*               LISTEN      6842/hdbxsengine

tcp        0      0 0.0.0.0:3200            0.0.0.0:*               LISTEN      13915/dw.sapA4H_DVE

tcp        0      0 0.0.0.0:40000           0.0.0.0:*               LISTEN      13919/igsmux_mt

tcp        0      0 127.0.0.1:30208         0.0.0.0:*               LISTEN      6842/hdbxsengine

tcp        0      0 0.0.0.0:40001           0.0.0.0:*               LISTEN      13920/igspw_mt

tcp        0      0 0.0.0.0:3201            0.0.0.0:*               LISTEN      12375/en.sapA4H_ASC

tcp        0      0 0.0.0.0:50113           0.0.0.0:*               LISTEN      6054/sapstartsrv

tcp        0      0 0.0.0.0:40002           0.0.0.0:*               LISTEN      13921/igspw_mt

tcp        0      0 0.0.0.0:8002            0.0.0.0:*               LISTEN      8247/sapwebdisp_hdb

tcp        0      0 127.0.0.2:30210         0.0.0.0:*               LISTEN      6807/hdbcompileserv

tcp        0      0 127.0.0.1:30210         0.0.0.0:*               LISTEN      6807/hdbcompileserv

tcp        0      0 0.0.0.0:3300            0.0.0.0:*               LISTEN      13958/gwrd

tcp        0      0 0.0.0.0:8101            0.0.0.0:*               LISTEN      12374/ms.sapA4H_ASC

tcp        0      0 0.0.0.0:59813           0.0.0.0:*               LISTEN      5398/sapstartsrv

tcp        0      0 0.0.0.0:50213           0.0.0.0:*               LISTEN      5073/sapstartsrv

tcp        0      0 127.0.0.1:64998         0.0.0.0:*               LISTEN      13959/icman

tcp        0      0 0.0.0.0:30215           0.0.0.0:*               LISTEN      6836/hdbindexserver

tcp        0      0 0.0.0.0:64999           0.0.0.0:*               LISTEN      5873/jc.sapDAA_SMDA

tcp        0      0 127.0.0.1:65000         0.0.0.0:*               LISTEN      8247/sapwebdisp_hdb

tcp        0      0 0.0.0.0:1128            0.0.0.0:*               LISTEN      4955/sapstartsrv

tcp        0      0 0.0.0.0:30217           0.0.0.0:*               LISTEN      6839/hdbstatisticss

tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      2698/rpcbind

tcp        0      0 0.0.0.0:50000           0.0.0.0:*               LISTEN      13959/icman

tcp        0      0 0.0.0.0:40080           0.0.0.0:*               LISTEN      13919/igsmux_mt

udp        0      0 127.0.0.1:20802         0.0.0.0:*                           13970/dw.sapA4H_DVE