OS Logon Failure during Extraction

[Former Member]

Hello All,

During Extraction Phase I aske for OS password, Put I got this error.

Your system is running in a distributed environment or you are running a migration scenario. To be able to proceed, the pj1adm user is required. Enter the password for the user VESTAS\pj1adm.

We have a failover claster with the same password.

Any body had the same problem.

Thanks for any advice.

Reza

[former_member185239 · Accepted solution]

Hi Reza,

Kindly check the sapnote

1715038 - <SID>adm user can not be verified in a distributed environment

1. Set the parameter service/protectedwebmethods = DEFAULT in all the profiles(DEFAULT , Instance profile , start profile of CI ,SCS). Even set the parameter in ERS .

2. Restart the services for the SID from services.msc on each node.

Follow the sapnote    1563660 - sapcontrol, <sid>adm authorization issues (SUM)

With Regards

Ashutosh Chaturvedi

[Former Member · Accepted solution]

Hi Ashutosh,

I will try and come back with result,

Thanks

[Former Member · Accepted solution]

Hi,

I had set the paramter on start profile: Set service/protectedwebmethods = SDEFAULT

We have to colaster for this installation, command  sapcontrol -nr 01 -function RestartService run correcet on active colaster

But I had tried to run command on claster but I got:

sapcontrol -nr 01 -function RestartService

C:\usr\sap\PJ1\D01\exe>sapcontrol -nr 01 -function RestartService

21.06.2014 17:49:07
RestartService
FAIL: HTTP error, HTTP/1.1 401 Unauthorized

C:\usr\sap\PJ1\D01\exe>

Thanks

[divyanshu_srivastava3 · Accepted solution]

Hi Reza,

Set service/protectedwebmethods = NONE (in start profile releases < 7.10 or in instance profile in releases > or = 7.10 and try again).

Divyanshu

[Sriram2009 · Accepted solution]

This message was moderated.

[Former Member · Accepted solution]

Hi Divyanshu,

I was tried   service/protectedwebmethods = NONE , DEFAULT, SDEFAULT, not Works

Thanks

Reza

[divyanshu_srivastava3 · Accepted solution]

Hi Reza,

Let's do everything again. Step-by-step. May be we are missing something thing and this is why it's not working in your case. Just stop and kill everything, if possible, and start afresh  Meanwhile, you should also raise a message with SAP for the same.

Regards,

Divyanshu

[former_member185239 · Accepted solution]

Hi Reza,

You need to define service/protectedwebmethods = DEFAULT not SDEFAULT.

You can check the behavior by opening the JSPM.

Try to restart the SAPPJ1_<xx> on both the cluster node after setting the parameter

service/protectedwebmethods = DEFAULT

Then take the restart of SAP system.

Also paste the screenshot jspm.

Its a known issue and it will get resolved if you follow the instruction prperly.

With Regards

Ashutosh Chaturvedi

[Former Member · Accepted solution]

Hi Ashutosh,

Thanks for reply,

I had change the service/protectedwebmethods = DEFAULT paraemter on start profile.

The problem is I canot  restart the SAPPJ1_01 on cluster node after setting the parameter

I get this error.

C:\usr\sap\PJ1\D01\exe>sapcontrol -nr 01 -function RestartService

21.06.2014 17:49:07
RestartService
FAIL: HTTP error, HTTP/1.1 401 Unauthorized

C:\usr\sap\PJ1\D01\exe>

Thanks

Reza

[Sriram2009 · Accepted solution]

This message was moderated.

[Former Member · Accepted solution]

Hello Yes i did,

My problem is the cluster node. Sum can not get any authorization on this closter node.

Thanks

[former_member185239 · Accepted solution]

Hi Reza,

is it a production system?

Follow the below steps :

1. set the parameter in all the profiles not only in start profile.

2. You need to restart the SAPPJ1_<xx> services on both the cluster node.

3. Then take a restart of the SAP system.

You can check the error , when you try to open the JSPM.

Its only the solution. If its a production system then take a downtime and perform the activity.

Can you please paste the screenshot of JSPM.

With Regards

Ashutosh Chaturvedi

[Former Member · Accepted solution]

Hi Ashutosh,

Undfortunately it is Production server. My problem is  I can not rester both cluster by using  sapcontrol -nr 01 -function RestartService command, it is the problem, This installation is just abap and there is no JSPM for that.

I will set the parameter in all the profiles and find out a time for restart server later, if Its only the solution.

Thanks Again for help and reply.

I will come back with result.

Thanks

Reza

[divyanshu_srivastava3 · Accepted solution]

Hi,

If you have multiple application server on each node then take a restart of one instance from each node by disabling it from load balancer,  if there is.

Divyanshu

[former_member185239 · Accepted solution]

Hi Reza,

PJ1 sounds like a java system. If its a ABAP system, then set the parameter

service/protectedwebmethods = NONE

then follow the steps as mentioned in my last post. It will surely resolve your error

i face the same issue several time.

With Regards

Ashutosh

[Former Member · Accepted solution]

Hello,

Thanks for all your help.

At last I could restart sapcontroæ on culster node  by using:

sapcontrol -nr 01 -user sidadm password -function RestartService

Thanks

Reza

[divyanshu_srivastava3 · Accepted solution]

That's good.

[Former Member]

Dear all,

I stuck in SUM upgrade for double-stack in step - specify credentials for sidadm.

Password is ok.

I tried many notes as for example :

1563660 - sapcontrol, <sid>adm authorization issues (SUM)

1600846 - JSPM/SUM calls sapcontrol without user credentials

1715038 - <SID>adm user can not be verified in a distributed environment

927637 - Web service authentication in sapstartsrv as of Release 7.00

Kernel upgraded to 721_ext_rel from 217 to 300. SUM is newest SP11_1 HP-UX.

Parameter is now set to service/protectedwebmethods = SDEFAULT

When I set it to NONE - SUM asked me to set it to DEFAULT,

on DEFAULT value :

/SUM/sdt/log/SUM/INPUT-OS-USER-PASSWORDS_9.log

Execution of the specified command Stop is not allowed for the instance with number ...

on SDEFAULT value:

/SUM/sdt/log/SUM/INPUT-OS-USER-PASSWORDS_10.log

Error while obtaining the INSTANCE_NAME parameter value from the instance with number ...

What is strange :

sap38:s0iadm 3> sapcontrol -nr 11 -user s0iadm <pass> -function AccessCheck Stop

No match.

give me back No match. Other systems gives :

AccessCheck

OK

or

FAIL: Invalid Credentials

but for S0I system No match.

User is distributed as domain user.

Any advice I will appreciate .

Thanks in advance.

Norbert

[Reagan]

Restart the sapstartsrv process and see if that helps.

[divyanshu_srivastava3]

Hi,

Check this 1715038 - <SID>adm user can not be verified in a distributed environment

It has resolution for your same issue.

Regards,

Divyanshu

[Former Member]

Hi,

Yes I did when I run:

sapcontrol -nr 01 -user pj1adm <password> -function AccessCheck Start

heck Start

22.06.2014 15:57:48
AccessCheck
OK

Thanks

Reza

[Reagan]

If this is a distributed setup the set the sidadm password on both the nodes the same and enter that password for the upgrade tool.

[Former Member]

Hello Reagan,

Thanks for reply,

Yes it the distributed setup. We have the same password for both sidadm nodes.

Strang.

Thanks Reza

[Sriram2009]

Hi Reza

1. SIDADM (PJ1ADM) & SAPServiceSID user ID part of  local administrator group of Cluster & DB ?

2. If you want to change the password kindly check this SAP link

https://help.sap.com/saphelp_nwmobile71/helpdata/en/aa/1dc94af0fa11d3a6510000e835363f/content.htm

3. Could you explain in details ?

BR

SS

[Former Member]

Hi Sriram,

No user not a part of local administrator, but doman. I had treid to added to local but did not help.

The upgrade failed in PREP_INPUT/INSTANCELIST_PRE phase with:

whit; ERROR: OS user password does not work, please reenter.

Thanks Reza