SAP router installation for Linux

SAP router installation

SAP支持提供：
You can test the connection with the following parameter:

Destination IP address at SAP side: 169.145.197.110
Hostname of this machine : sapserv9

Customer data
Hostname SAProuter : hostname
IP address SAProuter : xxx.xxx.xxx.xxx
Your Distinguished Name:
“CN=hostname, OU=0000xxxxxxxx, OU=SAProuter, O=SAP, C=DE”

1、下载saprouter和sapcrypto

创建saprouter目录
mkdir /usr/sap/saprouter

并将下载的软件包解压到此目录

2、环境变量设置

SAP 推荐使用CSH，CSH下面设置环境变量的命令：
>setenv SECUDIR /usr/sap/saprouter/
>setenv SNC_LIB /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

3、生成证书
>./sapgenpse get_pse -v -r certreq -p local.pse “CN=sapslm, OU=0000870197, OU=SAProuter, O=SAP, C=DE”
Got absolute PSE path “/usr/sap/saprouter/local.pse”.
Please enter PIN: ********
Please reenter PIN: ********
Supplied distinguished name: “CN=sapslm, OU=0000870197, OU=SAProuter, O=SAP, C=DE”
Creating PSE with format v2 (default)
Generating key (RSA, 1024-bits) … succeeded.
certificate creation… ok
PSE update… ok
PKRoot… ok
Generating certificate request… ok.

4、生成srcert密钥
复制certreq文本内容https://websmp207.sap-ag.de/saprouter-sncadd生成

(注意：certreq 、srcert两个文件都没有后缀)

5、证书导入
> ./sapgenpse import_own_cert -c srcert -p local.pse
Please enter PIN: ********
CA-Response successfully imported into PSE “/usr/sap/saprouter/local.pse”

6、SAProuter证书和系统账号关联
>./sapgenpse seclogin -p local.pse
running seclogin with USER=”slmadm”
Please enter PIN: ********
Added SSO-credentials for PSE “/usr/sap/saprouter/local.pse”
“CN=hostname, OU=0000xxxxxx, OU=SAProuter, O=SAP, C=DE”
这里会生成cred_v2文件，将在下一步检查证书时使用

7、检查证书
>./sapgenpse get_my_name -v -n Issuer
Opening PSE “/usr/sap/saprouter/local.pse”…
PSE (v2) open ok.
Retrieving my certificate… ok.
Getting requested information… ok.
SSO for USER “slmadm”
with PSE file “/usr/sap/saprouter/local.pse”
Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

至此，SAProuter与sapcrypto安装成功

8、启动SAProuter之前的其他准备工作
在saprouter目录下，创建saprouttab文件(SAP会提供最初的内容信息).
检查services文件相对应的3299端口。
检查环境变量是否正确。

启动saprouter
> ./saprouter -r -K “p:CN=hostname, OU=0000xxxxxx, OU=SAProuter, O=SAP, C=DE”

SAP 配置

1、OSS1
T_code:OSS1
Parameter –>Technical setting 配置如下信息后，保存。

2、OSS连接配置
T_code:SM59
ABAP Connections — > SAPOSS

Technical Settings
Target System:OSS
Msg.server:/H/LAN IP/S/sapdp99/H/server9 IP/S/sapdp99/H/oss001
Group:EWA
IP Address:/H/LAN IP/S/sapdp99/H/server9 IP/S/sapdp99/H/oss001

Logon & security
Language：EN
Client：001
User ：OSS_RFC
Password：CPIC

完成后，点击Connection Test.

Had refer : https://websmp202.sap-ag.de/saprouter-sncdoc.