Dear Experts,
yesterday I tried to enable error tracing for new Secure Login Library 2.0 SP1 on a Windows x64 based SAP AS ABAP 7.31. I was not able to do so
. During this I faced several issues, which I like to share with you and maybe someone can help me? :-)
In SP1 sources of SLL I have taken the windows-x86-64. Confusing for me is the fact, that after extraction (SAPCAR -xvf <Archive>) there are several sub directories, compared to SP0 this seems to be new?! In the root the sapgenpse executable and SNC library are is located (sapcrypto.dll or libsapcrypto.*) then there is a subdirectory called "sll" which contains lots of resource files and libraries like SSF etc. as well as the crl executable. Within this directory there are additional two directories "fips" and "defaults". First contains the FIP140-2 crypto-kernel and second the xml configuration files as well as the sectrace.ini which is the trace configuration file.
Result after extraction of SECURELOGINLIB.SAR for windows-x86-64 to /usr/sap/<SID>/DVEBMGS<xx>/SLL
. = sapcrypto* / libsapcrypto.*
./sll = crl.exe, secssf.dll/libs*
./sll/fips = fips libs
./sll/defaults = xml and ini config files
If I do the same for SECURELOGINLIB.SAR from the SP0 package all files e.g. executables, libraries and configuration files (base.xml, sectrace.ini etc.) are in the same directory and there is only one subdirectory "fips". Is there any documentation available about this?
QUESTION1:
At the moment i must assume SAP has changed its directory structure since SP1. Maybe i need to copy the files out from ./defaults into the "sll" subdirectory, but as this isn't documented anywhere (?) i only guess. Please let me know how this will work and where the library does expect its configuration files??
QUESTION2:
According to the documentation there is no need to restart SAP service after enabling traces. Is this correct?
QUESTION3:
Is it required to create the Trace directory "SLLTrace" or will this directory be created automatically?
My sectrace.ini looks like this:
[trace]
Directory = %.BINDIR.%/../SLLTrace (also tried with full path e.g. /usr/sap/<SID>/DVEBMGS<xx>/SLLTrace)
Level = 3
RotateFileSize = 10000000
RotateFileNumber = 10
Hope my questions are clear, if not please let me know. Thanks for your support!
Kind regards,
Carsten