SAP Netweaver installation issue - Primary Application Server

[HemantVaswani]

I need to setup a fresh SAP S4 HANNA 2022 distributed system which comprises 3 servers HANA DB, ASCS and PAS.

Of three above,

the S4 HANA DB is up and running. Instance 02

ASCS is installed on instance 00. ABAP message port 3600 and internal port 3900

While installing the PAS server, I select the instance 01, message port 3601 and internal port 3901. However the PAS server installation is not getting completed. It is held up at 70%

I am using swpm tool for above installations

The pas server installation is stuck up at step where it is not able to test the start and stop the 01 instance.

My findings are

From PAS to ASCS , port 3600 is working ok

3601 and 3901 are saying connection refused

For above reasons, the disp+work service in sapcontrol command output shows YELLOW continuously

I have been trying to resolve the port issue for past several days with none useful result

Attached installation logs of SWPM for referencesapinst-dev-log.txtsapinst-log.txt

[Sandra_Rossi]

Could you post the logs please?

[HemantVaswani]

Hi , Kindly refer the screenshot of log of dev_w12 and dev_disp, i wish if it helps

[HemantVaswani]

Kindly refer the attached screenshot of the error faced in SWPM console

[Sandra_Rossi]

Please either edit your question (Actions > Edit)

or use the COMMENT button for comments, asking for complements, adding details, replying to a comment or a proposed solution or to the OP question, etc., ANSWER is only to propose a solution, dixit SAP text at the right of the answer area.

[Sandra_Rossi]

The screenshot doesn't help.

What helps is this file:

[HemantVaswani]

could you suggest which file to refer from the path mentioned in the above shared error screenshot. there several number of files present here

[Sandra_Rossi]

Only those just written during installation. I guess you know how to do it.

[HemantVaswani]

Yes, i found the following in the latest log of dev_webdisp

[Thr 140291608672000] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7f981c007870)==SSSLERR_ALERT_CERTIFICATE_UNKNOWN

[Thr 140291608672000] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStartNB returned (-127): SSSLERR_ALERT_CERTIFICATE_UNKNOWN [icxxconn.c 2020]

[Thr 140291607086848] SSL_get_state()==0x11c0 "TLS read finished A"

[Thr 140291607086848] *** ERROR in secussl_read: SSL_read() lasterr 0x20001046

[Thr 140291607086848] => "received a fatal TLS certificate unknown alert message from the peer"

[Thr 140291607086848] srv SSL session PSE "/root/.sapinst/sappas/sec/SAPSSLS.pse" (load=Sun Jan 7 14:28:24 2024, rcnt=1)

[Thr 140291607086848] Subject : CN=abcdef.ec2.internal

[Thr 140291607086848] Issuer : CN=abcdef.ec2.internal

[Thr 140291607086848] SerialNo: 0A:20:23:12:28:10:49:11

[Thr 140291607086848] Validity - NotBefore: Thu Dec 28 10:49:11 2023 (231228104911Z)

[Thr 140291607086848] NotAfter: Fri Jan 1 00:00:01 2038 (380101000001Z)

[Thr 140291607086848] SSL_CTX ciphersuites=545:PFS:HIGH::EC_P256:EC_HIGH

[Thr 140291607086848] Server SSL_CTX 7f9830320c00 pvflags=513 (TLSv1.2,BC)

[Thr 140291607086848] TLSextSNI server_name="abcdef.ec2.internal"

[Thr 140291607086848] secussl_read: SSL_read() failed (536875078/0x20001046)

[Thr 140291607086848] => "received a fatal TLS certificate unknown alert message from the peer"

[Thr 140291607086848] SSL NI-hdl 82: local=abcdef:4237 peer=rdphost:50680

[manojsomkuwar]

Please share *sapinst* files.

Also, you can do ls -ltr to view the latest modified files in descending order instead of plain ls command.

Regards,

Manoj Somkuwar

[HemantVaswani]

Hi , I have attached the required logs, can you please check now and suggest

sapinst-dev-log.txtsapinst-log.txt

[Sandra_Rossi]

Better post them in the question (Actions > Edit), nobody else will see them.

[Sriram2009]

Hi Hemant

Could you share the log file /tmp/sapinst_instdir/s4hana2022/core/hdn/install/distributed/abap/app1

Regards

SS

[HemantVaswani]

sandra.rossi can you elaborate the steps to do this or share some link

[HemantVaswani]

s.sriram I have shared above

[Sriram2009]

Hi

Where is the log file attached? you have shared screenshot.

Regards

SS

[Sandra_Rossi]

hemantvaswani Could you pleaes attach the logs in the question (Actions > Edit), see how people don't find the log, which should have posted in your question, not lost in a comment, and repeated for each people asking.

Thank you.

[HemantVaswani]

Ok, I have updated the logs in the Question. Thanks

[Sandra_Rossi]

hemantvaswani Nice, thank you! 🙂

[Sriram2009]

Hi Hemant,

1. Could you share the dev_ms

2. In PAS logon to SIDADM and then type r3trans -d share the screenshot and attach the r3trans.log.

Regards

SS

[HemantVaswani]

Hi Sriram,

dev-ms.txt

- for security reasons, i have replaced the SID with the SID itself

[Sriram2009]

Hi Hemant,

Thanks for your information, Check this SAP note 2597444 and follow the parameters as mentioned in the SAP note

Regards

SS

[HemantVaswani]

Hi Sriram,

As per the SAP Note 2597444 , I have updated the value in DEFAULT.PFL as : system/secure_communication = OFF, re-started the HDB, ASCS and PAS, still the output of sapcontrol -nr nn -function start in the PASI is as :

name, description, dispstatus, textstatus, starttime, elapsedtime, pid

disp+work, Dispatcher, YELLOW, Server not attached to message server, 2024 01 10 15:14:26, 0:16:58, 3193

igswd_mt, IGS Watchdog, GREEN, Running, 2024 01 10 15:14:26, 0:16:58, 3194

gwrd, Gateway, GREEN, Running, 2024 01 10 15:14:34, 0:16:50, 3220

icman, ICM, GREEN, Running, 2024 01 10 15:14:34, 0:16:50, 3221

I will try to resume the SWPM install with above and post update shortly.

Thanks. Hemant

[HemantVaswani]

unfortunately, I am still facing the same error as of now

will freshly installing the ASCS on instance 01 and PAS on instance 03, as HDB is on 02 , do you think this is goin to help to address the above faced issues, kindly suggest

[Sriram2009]

Hi

Check this SAP note 2179550 for the following error message.

__________________

TRACE 2024-01-07 14:34:50.578 (root/sapinst) (startInstallation) [SLPGuiEngine.cpp:214] SLPGuiEngine::showMessageBoxHandleButtonImpl()

<html> <head> </head> <body> An exception occurred while connecting to the message server instance TS2/ASCS03 on host sapascs, port 3.<br>DIAGNOSIS: The original exception was: wapsmod.ms.MsAttachFailed:

Connect to message server (sapascs/3) failed: MSENILAYER..<br>SOLUTION: Make sure that the message server is started. </body></html>

_________________

Regards

SS

[HemantVaswani]

Ok, I am checking on the mentioned SAP note.

[HemantVaswani]

Hi SS, Refer to the SAP Note 2179550, while reaching the step of checking (using the sidadm user) the output of msmon pf=/sapmn/SID/profile/DEFAULT.PFL is showing status as "Starting", kindly suggest.

Message Server monitor, connected to sapascs / sapmsSID (Wed Jan 10 06:37:41 2024)

--------------------------------------------------------------------------------

INFO CLIENT-NAME HOST SERVICE (NET) IP-ADRESS (IPv6) IP-ADRESS (IPv4 SERVN STATE SERVICES (SAP)

--------------------------------------------------------------------------------

LIST - 127.0.0.1 - 127.0.0.1 127.0.0.1 0 STARTING -

LIST - 127.0.0.1 - 127.0.0.1 127.0.0.1 0 STARTING -

--------------------------------------------------------------------------------

m - menu

q - quit

->

output of the command niping -c -S 3900 is also showing message "connect to server o.k.", keeping apart few error messages , the note says to ignore those messages

[Sriram2009]

Hi Hemant,

Could you share the OS details on PAS and DB?

Regards

SS

[HemantVaswani]

Hi Sriram,

HANA DB Host and PAS host both having following OS :

Operating System: SUSE Linux Enterprise Server 15 SP4

Kernel: Linux 5.14.21-150400.24.100-default

Thanks, Hemant

[Sriram2009]

Hi Hemant

1. Could you share the log file /tmp/sapinst_instdir/s4hana2022/core/hdn/install/distributed/abap/app1

2. From PAS to DB instance network connectivity correct? is this any firewall blocking? In one of the log connectivity from PAS to DB instance getting time out.

3. Can the PAS system restart and retry the same installation phase?

Regards

SS

[HemantVaswani]

Hi SS, pl find update for each of the query above.

1. pl find the logs here

sapinst-log.txt

sapinst-dev-log.txt

2. at OS level, i am able to find normal ping response from PAS to DB host

3. I have tried earlier on 7th Jan with no luck,

Thanks

Hemant

[manojsomkuwar]

Hi, Ideally PAS will not have Message Server Ports 36** and 39** running as ASCS Instance is separately available.

Could you please share the error screenshot and also the logs.

Regards,

Manoj Somkuwar