Hello Everyone,
I'm an Oracle DBA / Basis Admin and am new to configuring SNC. So far I've been able to configure SAPgui sessions to communicate with systems using SNC but am having difficulty locating documentation to tell me how to get systems to use SNC with their RFC communication. Everything seems to assume you already have the prerequisite configuration complete and just says to go to SM59, go to the Logon & Security tab and click the SNC button. I, however, believe I'm missing the steps where I'm guessing I need to install a certificate for the other server/system.
I've exported different certificates out of STRUST on one system (SBX) and imported them into SNC SAPCryptolib on the other (SD2) and vice versa, and restarted the ICM each time but the connection test failes with this error:
| Logon | Cancel |
| Error Details | GSS-API(maj): Miscellaneous failure GSS-API(min): A221021F:Server refuses certif |
| Error Details | ERROR: GSS-API(maj): Miscellaneous failure GSS-API(min): A221021F:Server refu |
| Error Details | LOCATION: SAP-Server SSBX4_SBX_00 on host SSBX4 (wp 4) |
| Error Details | DETAIL: SncPEstablishContext |
| Error Details | CALL: gss_init_sec_context |
| Error Details | COMPONENT: SNC (Secure Network Communication) |
| Error Details | COUNTER: 43 |
| Error Details | MODULE: sncxxall.c |
| Error Details | LINE: 3551 |
| Error Details | RETURN CODE: -4 |
| Error Details | SUBRC: 0 |
| Error Details | RELEASE: 721 |
| Error Details | TIME: Tue Apr 05 09:12:25 2016 |
| Error Details | VERSION: 6 |
I don't even know if the partner name specified on the Logon & Security tab for the RFC definition under the SNC button is correct. I at least no longer get the "Unable to Determine Canonical SNC Name RC= 4-" error that I used to get but have no indication if what I do have is correct: The format for the Partner name that I'm using is:
p:CN=<FQDN>, OU=<SAP Customer ID>, OU=<Long Company Name>, O=<Short Company Name>, L=<City>, SP=<State>, C=<Country>
This partner name matches the X.509 name used in the other system's SSL server Standard PSE in STRUST.
Can someone help me with this, please, either by pointing me to documentation and/or by giving me a step by step for what to do to get this working?
Please let me know if there's any other information you need to help with this.
Thanks in advance!
Jeff