Basis Errors and Solutions

Symptom

You want to ensure that no intruder calls external commands in your system.

Other terms

sapxpg, SNC, Secure Network Communication

Reason and Prerequisites

An authentication of the caller is missing in the previous security measure that is described in Note 866732.

Solution

You can now authenticate the caller of an external command using SNC (Secure Network Communication).
(Technical information: Since an external command is always called via the RFC server program sapxpg, the caller is authenticated by sapxpg.)
You must activate the new function because it is not the default setting.
To use the new function, you must make settings on the calling side (SAP system) and on the target side (sapxpg). The attached document describes this topic in detail.
The following prerequisites must be met:
Kernel:
7.00 Patch 204
7.01 Patch 38
7.10 Patch 147
7.11 Patch 34
Support Package level SAP_BASIS:
Release 7.00 Support Package 20
Release 7.01 Support Package 5
Release 7.02 Support Package 2
Release 7.10 Support Package 9
Release 7.11 Support Package 4
sapxpg:
7.00 Patch 12
7.01 Patch x
7.10 Patch x
7.11 Patch x