Showing posts with label Linux. Show all posts
Showing posts with label Linux. Show all posts

Friday, 13 October 2017

How to fix System administrator is not allowed to remote login issue in Suse Linux


How to fix System administrator is not allowed to remote login issue in Suse Linux

I’m using SuSe Linux 12 SP1 for my SAP Application through VNC viewer but getting error “System administrator is not allowed to remote login” error



System administrator is not allowed to remote login

use Putty to login to suse linux server.

Goto --> cd etc/sysconfig

Edit --> vi displaymanager

you will see the DISPLAYMANAGER_ROOT_LOGIN_LOCAL is “no”, modify it to “yes”.

press ESC button

:wq

Save the file and try to access the system using VNC, it will work.



Friday, 4 August 2017

How to install and configure SAP Router in SUSE Linux


SAP Router Install and configuration:

Pre-request Steps:

1. Login to root user.

2.Create the directory usr/sap/saprouter

3. Download the following files and extract to /saprouter directory


4.Create saprouttab file and maintain the permission for your networks.

5. following is an example content of saprouttab


  <SAP server IP> is ip address of the server which is need to be access via SAP ROUTER

  <Port> is port of sap application for access 

  D**** Means Deny all the connection accept the entry of the server IP in which mention   saprouttab

 Configuration :

6. Set the environment variable

     export SECUDIR = /usr/sap/saprouter
     export SNC_LIB = /usr/sap/saprouter/libsapcrypto.so

7. Generate Certificate

     Execute the below commands generate certificate.

   ./sapgenpse get_pse -v -r certreq -p local.pse "CN=<Hostname> , OU = <ou number> ,OU =      SAProuter ,O=SAP,C=DE"

Result: (give password >


8. Now certificate has been generated now open the certreq file and crtl +A and ctrl+C

9. Update certificate request in SAP Market place and paste and generate it.

10.Now import the generated certificate from SAP market place.

Execute below commands to import the certificate file.

 ./sapgenpse import_own_cert -c srcert -p local.pse 

  srcert file will be generated.


11 . Now open the srcert file paste the generated certificate from SAP market place.
      save it.

12. Now we eill have to create the credentials for SAP router Execute below commands to assign the       user to SAP Router.
     
     ./sapgenpase seclogin -p local.pse -0 root


13. Check if the certificate has been imported successfully with following command:

    ./sapgenpse get_my_name -v -n Issuer

14. Get the below result


15. Start Router

   ./saprouter -r -K "p:CN=<sap router hostname>,OU=<Customer Name>,OU=SAProuter,O=SAP,U=DE"




Friday, 7 July 2017

Change SAPOSCOL owner,group and permission in Linux and Unix


1. Change to root user and go to /usr/sap/<SID>/sys/run.
    
    Change directory 

     cd /usr/sap/<SID>/sys/run

2. Change the saposcol owner to root

    chown root saposcol

3. Change the saposcol group to sapsys

    chgrp sapsys saposcol

4. Change the saposcol permission

    chmod 4750 saposcol

5. Verify the file properties 

    Change the directory to /usr/sap/<SID>/sys/run
    type ls -la
    
   rwsr-x  root sapsys 43212 jul 05 20;19 saposcol