SAP Knowledge Base Article - Preview

3490378 - SAP Cloud Connector - HA cannot be established if client certificate authentication is enabled on cloud connector version 2.17.0

Symptom

If client certificate authentication is enabled on both the Master and Shadow instances, the message "Push from master to shadow failed, see logs on master side for details" appears in the Shadow Instance when establishing the connection.
The Login Screen Information was set before enable the HA mode.
 
In the Master node trace, There are many  "failed with 403 () csrf attack detected - no token" were created 
 
WARN#com.sap.scc.ha#scc-init-push-232fwd7w#          #master 232fwd7w: Initial push failed: Data transfer to shadow system failed. See 'Log And Trace Files' and in particular scc_core.trc for details. Associated entries were logged on
com.sap.scc.ha.PushRequestException: com.sap.scc.ha.HaHttpClientException: request https://xxxxxxx:8443/shadow failed with 403 () csrf attack detected - no token
    at com.sap.scc.ha.PushRequest.failed(PushRequest.java:107)
    at com.sap.scc.ha.PushRequest.execute(PushRequest.java:70)
    at com.sap.scc.ha.PushRequestChain.execute(PushRequestChain.java:18)
    at com.sap.scc.ha.PushToShadow.lambda$createInitPushAction$2(PushToShadow.java:168)
    at java.lang.Thread.run(Thread.java:838)
Caused by: com.sap.scc.ha.HaHttpClientException: request https://xxxxxxxx:8443/shadow failed with 403 () csrf attack detected - no token
    at com.sap.scc.ha.HaHttpClientSession.checkStatusCode(HaHttpClientSession.java:193)
    at com.sap.scc.ha.HaHttpClientSession.execute(HaHttpClientSession.java:118)
    at com.sap.scc.ha.PushRequest.execute(PushRequest.java:66)
    ... 3 common frames omitted


Read more...

Environment

SAP Cloud Connector 2.17.0

Product

SAP Business Technology Platform all versions

Keywords

SCC, Cloud connector, Client certificate, HA, Master, Shadow , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.