How to Install saprouter on Ubuntu Server (without any SAP installation)

12/11/2012 [D_A] Linux, Tehniline, 0

Hi,

Firstly you have need for SAPCAR, saprouter and sapcrypto.
All of the above you can find from SW download centre from SAP:
http://service.sap.com/swdc/

Then:
Note: You will be asked for a PIN code. Just pick your own 4 numbers, but
you’ll have to use the same PIN every time you’re asked to enter one.

1. Send a customer message to SAP Support (component XX-SER-NET-OSS-NEW) and tell them to register the hostname and IP of your new SAProuter.
   You have to register it with a official IP address (no internal IP’s allowed), but it’s allowed to use NAT in the firewall/router.
2. Install Saprouter – Download, Extract, copy to right place (in right case: /usr/sap/saprouter/ in my case it was /usr/local/sbin/)
3. Extract sapcrypto: SAPCAR -xvf SAPCRYPTOLIB_XX-XXXXXXXX.SAR (where XXX are version and date numbers)
4. Copy sapcrypto files where you had installed saprouter – In my case it was /usr/local/sbin/
5. Copy libsapcrypto.so to /usr/lib/
6. Set up SNC_LIB & SECUDIR environment variables (if you are using bash) like:
   vi ~/.bashrc
   Insert following:
   export SECUDIR=/usr/local/sbin/
export SNC_LIB=/usr/local/sbin/libsapcrypto.so – In my case path was where I installed saprouter and copied libsapcrypto.so
   :wq – Save and close
   Make variables to work: source ~/.bashrc
7. Make folder “sec” under your user with you’ll be running saprouter …
8. Create new certificate request’s and new local PSE’s file command:
   sapgenpse get_pse -v -r certreq -p local.pse “CN=<your sap router ip>, OU=<your ou_number>, OU=SAProuter, O=SAP, C=DE”
   just press Enter for the PIN – You will get new certreq file
9. Edit certreq – copy all text inside it
10. Open browser and go to address https://service.sap.com/saprouter-sncadd.Choose “Apply Now”
11. Choose “SAProuter” and click “Continue”
12. Copy-paste the content of file certreq into text area, and click “Request Certificate”.
13. The web page will create the certificate response (inside text area).
14. If srcert file exists – delete the current srcert file. Create the new srcert file, and fill with the above certificate response.
15. Import the response into the local PSE.
    sapgenpse import_own_cert -c srcert -p local.pse
16. Create the credential for <sid>adm user (Or user under which you are running saprouter – in my case it was root)
    sapgenpse seclogin -p local.pse -O <sid>adm
17. Registering with the local PSE
    sapgenpse get_my_name -v -n Issuer
18. Restart saprouter if needed or start it fo first time (in my case):
    /usr/local/sbin/saprouter -r -E -G /var/log/saprouter.log -R /etc/saprouter/saprouttab -K "p:CN=, OU=, OU=SAProuter, O=SAP, C=DE" &

🙂

For reference:

http://sapbasis.wordpress.com/tag/sapgenpse/
http://sapbasistips.com/blogs/?tag=local-pse

libsapcrypto, Linux, SAPCAR, sapgenpse, saprouter, saprouter sertificate, Secudir, secure sap connection, SNC, Ubuntu, Ubuntu Server

Mida enam sel sajandil ei kuule… VI commands on Linux