{"id":19723,"date":"2014-10-23T08:00:31","date_gmt":"2014-10-23T06:00:31","guid":{"rendered":"http:\/\/192.168.20.3\/?p=19723"},"modified":"2024-12-13T12:01:39","modified_gmt":"2024-12-13T11:01:39","slug":"configuracion-sap-snc-sin-single-sign-on-en-linuxunix-22","status":"publish","type":"post","link":"https:\/\/orekait.com\/es\/configuracion-sap-snc-sin-single-sign-on-en-linuxunix-22\/","title":{"rendered":"Configuraci\u00f3n SAP SNC<br><span class=\"font-300\">sin Single Sign-On en Linux\/UNIX (2\/2)<\/span>"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; admin_label=&#8221;section&#8221; _builder_version=&#8221;4.25.2&#8243; global_colors_info=&#8221;{}&#8221;][et_pb_row admin_label=&#8221;Imagen principal&#8221; _builder_version=&#8221;4.25.2&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; custom_padding=&#8221;|||&#8221; global_colors_info=&#8221;{}&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_image alt=&#8221;cloud-public&#8221; title_text=&#8221;SAP-PP-1&#8243; admin_label=&#8221;Imagen principal&#8221; module_class=&#8221;post-img&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=&#8221;Cuerpo&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text content_last_edited=&#8221;off|desktop&#8221; admin_label=&#8221;Texto&#8221; _builder_version=&#8221;4.25.2&#8243; header_2_font_size=&#8221;24px&#8221; header_3_font_size=&#8221;20px&#8221; header_4_font_size=&#8221;17px&#8221; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; width=&#8221;%22671%22&#8243; height=&#8221;%22251%22&#8243; global_colors_info=&#8221;{}&#8221; content__hover_enabled=&#8221;off|hover&#8221;]<\/p>\n<div id=\"toolbar-b1e269a7-0ccd-4165-b4ba-53519522baee\" class=\"block-library-classic__toolbar has-advanced-toolbar\" data-placeholder=\"Cl\u00e1sico\">\n<div id=\"mceu_51\" class=\"mce-tinymce mce-tinymce-inline mce-container mce-panel\" style=\"border-width: 1px; left: 0px; top: 0px; width: 0px; height: 0px;\" tabindex=\"-1\" role=\"application\">\n<div id=\"mceu_51-body\" class=\"mce-container-body mce-abs-layout\" style=\"width: 0px; height: 0px;\">\n<div id=\"mceu_52\" class=\"mce-toolbar-grp mce-container mce-panel mce-abs-layout-item mce-first mce-last\" style=\"left: 0px; top: 0px; width: 0px; height: 0px;\" tabindex=\"-1\" role=\"group\">\n<div id=\"mceu_52-body\" class=\"mce-container-body mce-stack-layout\" style=\"width: 0px; height: 0px;\">\n<div id=\"mceu_55\" class=\"mce-container mce-toolbar mce-stack-layout-item mce-last\" role=\"toolbar\">\n<div id=\"mceu_55-body\" class=\"mce-container-body mce-flow-layout\">\n<div id=\"mceu_56\" class=\"mce-container mce-flow-layout-item mce-first mce-last mce-btn-group\" role=\"group\">\n<div id=\"mceu_56-body\">\n<div id=\"mceu_40\" class=\"mce-widget mce-btn mce-first\" tabindex=\"-1\" role=\"button\" aria-pressed=\"false\" aria-label=\"Tachado (Shift+Alt+D)\">\u00a0<\/div>\n<div id=\"mceu_41\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-label=\"L\u00ednea horizontal\">\u00a0<\/div>\n<div id=\"mceu_42\" class=\"mce-widget mce-btn mce-splitbtn mce-colorbutton\" tabindex=\"-1\" role=\"button\" aria-haspopup=\"true\" aria-label=\"Color de texto\">\u00a0<\/div>\n<div id=\"mceu_43\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-pressed=\"false\" aria-label=\"Pegar como texto\">\u00a0<\/div>\n<div id=\"mceu_44\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-label=\"Borrar los formatos\">\u00a0<\/div>\n<div id=\"mceu_45\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-label=\"Caracter especial\">\u00a0<\/div>\n<div id=\"mceu_46\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-label=\"Reducir la sangr\u00eda\">\u00a0<\/div>\n<div id=\"mceu_47\" class=\"mce-widget mce-btn\" tabindex=\"-1\" role=\"button\" aria-label=\"Aumentar la sangr\u00eda\">\u00a0<\/div>\n<div id=\"mceu_48\" class=\"mce-widget mce-btn mce-disabled\" tabindex=\"-1\" role=\"button\" aria-label=\"Deshacer (Ctrl+Z)\" aria-disabled=\"true\">\u00a0<\/div>\n<div id=\"mceu_49\" class=\"mce-widget mce-btn mce-disabled\" tabindex=\"-1\" role=\"button\" aria-label=\"Rehacer (Ctrl+Y)\" aria-disabled=\"true\">\u00a0<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"editor-b1e269a7-0ccd-4165-b4ba-53519522baee\" class=\"wp-block-freeform block-library-rich-text__tinymce mce-content-body html5-captions mce-edit-focus\" style=\"position: relative;\" contenteditable=\"true\">\n<p>En el\u00a0<a title=\"Configuraci\u00f3n SAP SNC sin Single Sign-On en Linux\/UNIX (1\/2)\" href=\"https:\/\/orekait.com\/blog\/configuracion-sap-snc-sin-single-sign-on-en-linuxunix-12\/\">anterior art\u00edculo<\/a>\u00a0sobre la\u00a0<strong>configuraci\u00f3n del SAP SNC sin Single Sing-On en Linux\/Unix<\/strong>\u00a0se detall\u00f3 como descargar los paquetes de librer\u00edas del marketplace, descomprimirlos en el servidor y crear un usuario en el Active Directory. En esta ocasi\u00f3n, se van a explicar los pasos para\u00a0<strong>configurar el SNC en el servidor ABAP<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>1. Configuraci\u00f3n de certificados en servidor ABAP<\/strong><\/h2>\n<ul>\n<li>En primer lugar, hay que\u00a0<strong>establecer la variable de entorno\u00a0<em>SECUDIR<\/em><\/strong>\u00a0al directorio\u00a0<em>\/usr\/sap\/&lt;SID&gt;\/&lt;Instancia&gt;\/sec.<\/em><\/li>\n<li>Despu\u00e9s, acceder al directorio\u00a0<em>\/usr\/sap\/&lt;SID&gt;\/&lt;Instancia&gt;\/SLL<\/em>\u00a0para\u00a0<strong>crear el entorno PSE<\/strong>.<\/li>\n<li><strong>Crear una entrada para el SPN<\/strong>\u00a0creado antes. Para ello se ejecuta \u201c.<em>\/snc crtkeytab -s &lt;SPN&gt;@&lt;DominioActiveDirectory&gt;<\/em>\u201d. La contrase\u00f1a que se solicita debe ser la misma que la del usuario creado en el dominio. Hay que tener en cuenta que la parte de<em>\u00a0&lt;DominioActiveDirectory&gt;<\/em>\u00a0debe ir en may\u00fasculas.<\/li>\n<\/ul>\n<h2><strong>2. Configuraci\u00f3n de par\u00e1metros de perfil<br \/><\/strong><\/h2>\n<p>A continuaci\u00f3n se detallan los valores que se deben configurar en los distintos\u00a0<strong>par\u00e1metros de perfil<\/strong>:<\/p>\n<pre>snc\/permit_insecure_start = 1\nsnc\/accept_insecure_cpic = 1\nsnc\/r3int_rfc_qop\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = 8\nsnc\/r3int_rfc_secure\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = 0\nsnc\/data_protection\/use\u00a0\u00a0\u00a0\u00a0 = 3\nsnc\/data_protection\/min\u00a0\u00a0 = 2\nsnc\/data_protection\/max\u00a0\u00a0 = 3\nsnc\/identity\/as \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0= p:CN=&lt;SPN&gt;@&lt;ActiveDirectoryDomain&gt;\nsnc\/gssapi_lib\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = \/usr\/sap\/&lt;SID&gt;\/&lt;Instance&gt;\/SLL\/libsecgss.so\nsnc\/enable\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = 0\nsnc\/force_login_screen\u00a0\u00a0\u00a0\u00a0 = 1\nsnc\/accept_insecure_rfc\u00a0\u00a0 = 1\nsnc\/accept_insecure_gui\u00a0\u00a0 = 1\nssf\/name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = SAPSECULIB\nssf\/ssfapi_lib\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = $(ssl\/ssl_lib)\nssl\/ssl_lib = $(DIR_EXECUTABLE)$(DIR_SEP)$(FT_DLL_PREFIX)sapcrypto$(FT_DLL)\nsec\/libsapsecu\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = $(ssl\/ssl_lib)\n<\/pre>\n<ul>\n<li>Con el par\u00e1metro\u00a0<em>snc\/enable<\/em>\u00a0desactivado (valor 0) se\u00a0<strong>reinicia la instancia<\/strong>\u00a0para que los par\u00e1metros tengan efecto.<\/li>\n<li>Se accede al sistema y en la transacci\u00f3n\u00a0<em>STRUST<\/em>\u00a0se debe<strong>\u00a0crear el certificado PSE<\/strong>\u00a0en el nodo \u201c<em>SNC Cryptolib<\/em>\u201d. El valor viene dado por los par\u00e1metros indicados.<\/li>\n<li>A continuaci\u00f3n se\u00a0<strong>reinicia de nuevo la instancia<\/strong>, esta vez con el par\u00e1metro snc\/enable activo (valor 1).<\/li>\n<\/ul>\n<h2><strong>3. Activar configuraci\u00f3n de seguridad SCN<br \/><\/strong><\/h2>\n<p>En el cliente del usuario, el programa<strong>\u00a0SAP GUI<\/strong>\u00a0en Windows, tras instalar el paquete\u00a0<em>SNC CLIENT ENCRYPTION<\/em>\u00a0hay que modificar la entrada del SAP Logon para activar la\u00a0<strong>parametrizaci\u00f3n de seguridad SNC<\/strong>:<\/p>\n<p><a href=\"https:\/\/orekait.com\/blog\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-19726 size-full\" src=\"https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-1.jpg\" alt=\"\" width=\"450\" height=\"229\" srcset=\"https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-1.jpg 450w, https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-1-300x153.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>Tras realizar estos pasos de configuraci\u00f3n, podremos observar que al acceder al SAP GUI aparecer\u00e1 el candado que indica el estado del SNC cerrado, y por lo tanto dispondremos del\u00a0<strong>Secure Network Communication activado<\/strong>.<\/p>\n<p><a href=\"https:\/\/orekait.com\/blog\/wp-content\/uploads\/2014\/10\/configuracion-snc-sap-gui.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-19730 size-full\" src=\"https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-2.jpg\" alt=\"\" width=\"321\" height=\"191\" srcset=\"https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-2.jpg 321w, https:\/\/orekait.com\/wp-content\/uploads\/2014\/10\/parametrizacion-de-seguridad-scn-2-300x179.jpg 300w\" sizes=\"auto, (max-width: 321px) 100vw, 321px\" \/><\/a><\/p>\n<\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=&#8221;M\u00e1s informaci\u00f3n&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"morado\">M\u00e1s informaci\u00f3n:<\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;https:\/\/orekait.com\/es\/area-administracion-sistemas&#8221; button_text=&#8221;M\u00e1s informaci\u00f3n&#8221; module_class=&#8221;entrada-btn&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_color=&#8221;#8156EA&#8221; button_bg_color=&#8221;RGBA(255,255,255,0)&#8221; button_border_color=&#8221;#8156EA&#8221; button_border_radius=&#8221;30px&#8221; button_font=&#8221;Plus Jakarta Sans|600|||||||&#8221; button_icon=&#8221;&#x24;||divi||400&#8243; button_icon_color=&#8221;#8156EA&#8221; button_on_hover=&#8221;off&#8221; hover_enabled=&#8221;0&#8243; global_colors_info=&#8221;{}&#8221; button_text_color__hover_enabled=&#8221;on|desktop&#8221; button_text_color__hover=&#8221;#8156EA&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color__hover=&#8221;#8156EA&#8221; button_bg_enable_color__hover=&#8221;on&#8221; button_icon_color__hover_enabled=&#8221;on|hover&#8221; button_icon_color__hover=&#8221;#ffffff&#8221; url_new_window=&#8221;on&#8221; sticky_enabled=&#8221;0&#8243;][\/et_pb_button][et_pb_divider show_divider=&#8221;off&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; custom_margin=&#8221;||40px||false|false&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=&#8221;on&#8221; admin_label=&#8221;Noticias relacionadas titulo&#8221; module_id=&#8221;fondo-articulos&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#f7f7f7&#8243; width=&#8221;100%&#8221; collapsed=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_divider show_divider=&#8221;off&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;RGBA(255,255,255,0)&#8221; custom_margin=&#8221;||40px||false|false&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][et_pb_heading title=&#8221;Quizas te pueda interesar&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; title_level=&#8221;h2&#8243; title_text_align=&#8221;center&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_heading][et_pb_divider show_divider=&#8221;off&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; custom_margin=&#8221;||30px||false|false&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=&#8221;Noticias relacionadas&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; width=&#8221;100%&#8221; custom_margin=&#8221;-150px||||false|false&#8221; custom_margin_tablet=&#8221;0px||||false|false&#8221; custom_margin_phone=&#8221;0px||||false|false&#8221; custom_margin_last_edited=&#8221;on|desktop&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_blog fullwidth=&#8221;off&#8221; posts_number=&#8221;3&#8243; include_categories=&#8221;current&#8221; show_author=&#8221;off&#8221; show_date=&#8221;off&#8221; show_pagination=&#8221;off&#8221; _builder_version=&#8221;4.25.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_blog][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 En el\u00a0anterior art\u00edculo\u00a0sobre la\u00a0configuraci\u00f3n del SAP SNC sin Single Sing-On en Linux\/Unix\u00a0se detall\u00f3 como descargar los paquetes de librer\u00edas del marketplace, descomprimirlos en el servidor y crear un usuario en el Active Directory. En esta ocasi\u00f3n, se van a explicar los pasos para\u00a0configurar el SNC [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"Lorem ipsum dolor sit amet consectetur adipiscing elit congue montes, imperdiet taciti erat elementum fermentum sem ante ultrices ridiculus, sagittis sociis egestas quisque ac semper quis odio. Aenean hendrerit ac metus dis nascetur aliquet mollis integer, rutrum vel laoreet posuere proin sagittis luctus est, tempus duis nisl ultrices parturient tempor praesent. Dignissim curabitur nascetur pellentesque augue fringilla pulvinar eros, tempus fames vehicula maecenas cubilia id, rutrum euismod integer ut scelerisque mus.\r\n\r\nVivamus auctor odio aenean rhoncus natoque dictum purus, volutpat pellentesque laoreet ridiculus consequat nisi varius euismod, augue platea convallis curae magnis taciti. Imperdiet nibh curabitur quisque orci consequat aenean pellentesque, cubilia duis senectus felis sed posuere tortor, magnis enim diam a odio sociis. Enim tellus nisl nec molestie augue luctus tempor habitant, nunc dictumst phasellus volutpat sem facilisis taciti, habitasse laoreet at turpis vel fermentum vulputate.","_et_gb_content_width":"","footnotes":""},"categories":[48,57],"tags":[],"class_list":["post-19723","post","type-post","status-publish","format-standard","hentry","category-administracion-de-sistemas","category-sap-netweaver"],"_links":{"self":[{"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/posts\/19723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/comments?post=19723"}],"version-history":[{"count":4,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/posts\/19723\/revisions"}],"predecessor-version":[{"id":22677,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/posts\/19723\/revisions\/22677"}],"wp:attachment":[{"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/media?parent=19723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/categories?post=19723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/orekait.com\/es\/wp-json\/wp\/v2\/tags?post=19723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}