Hello Filipe,
Thank you for your response. I had seen that page before and, while it may have helped with determining the format for SNC names, it doesn't say anything about certificates and whether or not it is necessary to loadcertsfrom other systems that each system will be communicating with. Does that mean that loading these other certificates isn't necessary?
I stated in my original post that I attempted to load thecerts for SBX into SD2 and loaded thecerts for SD2 into SBX. This morning, after following the link you provided, I decided to go into SNC0 and define all systems and servers for our environment. For systems with more than just the Central Instance, I defined all of the app servers for that system there. They were all defined using the same format that I mentioned before:
p:CN=<FQDN>,OU=<SAP Customer ID>,OU=<Long Company Name>,O=<Short Company Name>,L=<City>,SP=<State>,C=<Country>
I then went back to SM59 and tested the connection again. This time the error was slightly different:
Logon | Cancel |
Error Details | GSS-API(maj): Miscellaneous failure GSS-API(min): A2200202:Actual server namedi |
Error Details | ERROR: GSS-API(maj): Miscellaneous failure GSS-API(min): A2200202:Actualserv |
Error Details | LOCATION: SAP-Server SSBX4_SBX_00 on host SSBX4 (wp4) |
Error Details | DETAIL: SncPEstablishContext |
Error Details | CALL: gss_init_sec_context |
Error Details | COMPONENT: SNC (Secure Network Communication) |
Error Details | COUNTER: 7 |
Error Details | MODULE:sncxxall.c |
Error Details | LINE: 3551 |
Error Details | RETURN CODE: -4 |
Error Details | SUBRC: 0 |
Error Details | RELEASE: 721 |
Error Details | TIME: Thu Apr 07 14:06:09 2016 |
Error Details | VERSION: 6 |
So, now, instead of "A221021F:Server refuses certif", I'm receiving "A2200202:Actual server name di" which, when not cut off, is "A2200202:Actual server name differs fromrequested one.". I don't understand whichnames it's talking about. I assume one is the SNC Partner name I gave after I clicked on the SNC button, but what is it comparing itwith? Do I need to change the format for the SNC Partner name, whatever it's comparing it with, or both?
Any help you can provide is, of course, muchappriciated.
Thanks,
Jeff