1. Configuring the SAP User Management Application
  2. Troubleshooting the SAP User Management Connector

10 Troubleshooting the SAP User Management Connector

This chapter provides solutions to problems you might encounter after you deploy or while using the SAP User Management connector.

The following table provides solutions to common SNC errors:

Table 10-1 Common SNC Errors

Problem Description Solution

Trying to connect to SAP through SNC.

Returned Error Message:

SAP Connection JCO Exception

Returned Error Code

SNC required or this connection

Ensure that the values for the following IT resource parameters are correctly specified as shown in the following example:

  • sncName: p:CN=TST,OU=SAP, O=ORA,c=IN

  • snc_PartnerName: p:CN=I47, OU=SAP, O=ORA, C=IN

  • sncLib: The following are examples of sncLib paths for Windows and Linux:
    • For Windows: sncLib: C://usr//sap//sapcrypto.dll
    • For Linux: sncLib: //home/oracle/sec/sapcrypto.so

  • useSNC: True

When you try to connect to SAP through SNC

Returned Error Message:

SAP Connection JCO Exception

Returned Error Code

SNC required or this connection

Ensure that values for the following basic configuration parameters are correctly specified:

  • SAPsnc_myname: p:CN=win2003, OU=SAP, O=ORA, C=IN

  • SAPsnc_qop: 3

  • SAPsnc_partnername: p:CN=I47, OU=SAP, O=ORA, C=IN

The following are examples of sncLib paths for Windows and Linux:

  • For Windows: SAPsnc_lib: C://usr//sap//sapcrypto.dll

  • For Linux: SAPsnc_lib: //home/oracle/sec/sapcrypto.so

When you try to provision account or lookup recon in SNC mode

Returned Error Message:

No suitable SAP user found for X.509-client certificate

Returned Error Code:

JCO_ERROR_LOGON_FAILURE

Set up a mapping between the Distinguished Name provided by a X.509 Certificate and an ABAP User in view VUSREXTID in transaction SM30. Choose external ID type as DN.

When you try to provision account or lookup recon in SNC mode

Returned Error Message:

SNC name of partner system not in the ACL system

Returned Error Code:

JCO_ERROR_LOGON_FAILURE

Maintain SNC names of the system from which RFC and CPIC connections are to be accepted in view VSNCSYSACL for External type ACL entry.

When you try to provision account or lookup recon in SNC mode

Returned Error Message:

Reconcillation via TRFC fails when SNC is enabled

Returned Error Code:

JCO_ERROR_SYSTEM_FAILURE

 Program ID must have SNC enabled in transaction SM59.