saprouteer安裝配置文檔

sap snc-saprouter安裝配置

1.環境
centos6.5

2.下載saprouter和SAPCRYPTOLIB_36-10010845.SAR
下載路徑，下載最新版的
http://service.sap.com/swdc
Navigate to “Support Packages and Patches” -> “Browse our Download Catalog” -> “Additional Components” -> “SAPROUTER”
Navigate to “Support Packages and Patches” -> “Browse our Download Catalog” -> “Additional Components” -> “SAPCRYPTOLIB”

全部解壓放到/opt/saprouter下

配置環境變數
useradd sncadm
su – sncadm
vi .bash_profile
SECUDIR=/opt/saprouter
SNC_LIB=/opt/saprouter/libsapcrypto.so
export SECUDIR SNC_LIB

vi /etc/ld.so.conf.d/sap.conf
/opt/saprouter/

ldconfig

3.參考文檔
https://websmp107.sap-ag.de/saprouter-sncdoc
https://websmp107.sap-ag.de/saprouter-sncadd

 

4.發message給SAP，申請SNC connection to SAP Support
SAP會提供一個專用Distinguished Name，通過這個DN再去產生認證
下面是SAP給我的：CN=slm, OU=0001134674, OU=SAProuter, O=SAP, C=DE
su – sncadm
cd /opt/saprouter
./sapgenpse get_pse -v -r certreq -p local.pse “CN=slm, OU=0001134674, OU=SAProuter, O=SAP, C=DE”
#PIN不要設定
./sapgenpse get_pse -v -onlyreq -r certreq -p local.pse

#請求SAP認證
https://websmp107.sap-ag.de/saprouter-sncadd
cat certreq #將這個複製到上面網址進行操作
將產生好的認證複製到1.txt
vi 1.txt
匯入認證
./sapgenpse import_own_cert -c 1.txt -p local.pse
成功匯入：
CA-Response successfully imported into PSE “/opt/saprouter/local.pse”

5.添加使用者
./sapgenpse seclogin -p local.pse -O sncadm

6.驗證配置是否OK
./sapgenpse get_my_name -v -n Issuer

正確將會輸出下面內容：
Issuer  : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

7.配置saprouttab
vi saprouttab
# SNC connection to and from SAP
KT “p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE” 169.145.197.110 *

# SNC connection to local system for R/3-Support
# R/3 Server: 192.168.1.1
# R/3 Instance: 00
KP “p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE” * 3200

# Access from local network to SAP
P * 169.145.197.110 3299

# SNC connection to local Portal system for URL access, if applicable
# Portal server: myserver.mydomain
# Port number: 50003
KP “p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE” slm.kemiya.net 50003

# Access all
P * * *

# deny all other connections
D * * *

8.啟動saprouter
cd /opt/saprouter
screen ./saprouter -r -S 3299 -K “p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE”

9.測試
./niping  -c -H /H/113.105.144.50/H/169.145.197.110/H/localhost

Mon Jun 23 11:42:42 2014
connect to server o.k.

Mon Jun 23 11:42:43 2014
send and receive 10 messages (len 1000)

——- times —–
avg    48.726 ms
max    49.472 ms
min    47.557 ms
tr     40.084 kB/s
excluding max and min:
av2    48.779 ms
tr2    40.040 kB/s

 

sap messages內容
snc router connection
ip:113.105.144.50
sap router port:3299
hostname:slm.kemiya.net
customernumber:s0007231085
installation number:0020708951

完成