Sol Man 7.0 Install Issue: FSL-01011 Unable to check password ErrorNo=1788

[Former Member]

Hello Gurus

I am stumped here. I have performed numerous installations of Solution Manager in the past; however I did have a handy Windows Admin.

I have followed the install guide line item by line item, so not sure what I may have missed.

Environment: W23K Standard Edition (64 Bit), SQL server 2005 Ent Edition SP2 (installed). SAP software trying to install Solution Manager 7.0 SR3.

I have created the required SAP_<sid>_GlobalAdmin group and the 2 user accounts (<sid>adm, SAPService<SID>).

Provided the users all the necessary permissions as required (actually added the globaladmin to all the admin groups u2013 enterprise admin, domain admin, etc.).

Will Award points!

Here are the logs (short version - to the error message point) - sapinst_dev.log and sapinst.log underneath

TRACE      2008-08-06 11:24:23.500 
2008-08-06 11:24:23.500 NWUsers.getMasterPassword() done: XXXXX (master password is set)

TRACE      2008-08-06 11:24:23.500 
2008-08-06 11:24:23.500 NWUsers._useMasterPasswordForAccountData(SIDAdm)

TRACE      2008-08-06 11:24:23.500 
2008-08-06 11:24:23.500 NWUsers._useMasterPasswordForAccountData() done: false

TRACE      2008-08-06 11:24:23.500 
2008-08-06 11:24:23.500 NWUsers.getAccountData(): {
  role:SIDAdm
  type:USER
  systems:os
  id:S-1-5-21-1723351840-2378121884-2011665280-1124
  name:BIZSOL\smpadm
  comment:SAP System Administrator
  home:
  shell:
  privileges:SeTcbPrivilege,SeServiceLogonRight,SeAssignPrimaryTokenPrivilege,SeIncreaseQuotaPrivilege
  exists:true
  client:
  host:undefined
  instancenumber:undefined
  locked:false
  password:XXXXXX
  groups:BIZSOL\SAP_SMP_GlobalAdmin,BIZSOL\Domain Users,Administrators
}

ERROR      2008-08-06 11:24:23.531 [synxcuser.cpp:481]
           bool CSyUserImpl::testLogon(const iastring &) const 
FSL-01011  Unable to check password for account BIZSOL\smpadm. ErrorNo=1788

TRACE      2008-08-06 11:24:23.640 [iaxxejsbas.hpp:408]
           handleException<ESyException>() 
Converting exception into JS Exception ESyException.

TRACE      2008-08-06 11:24:23.640 
Function setMessageIdOfExceptionMessage: modlib.jslib.caughtException

TRACE      2008-08-06 11:24:23.687 [iaxxgenimp.cpp:752]
            CGuiEngineImp::showMessageBox 

And the sapinst.log

INFO 2008-08-06 11:23:54.140
Creating file C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\FormalPasswordCheck.log.

INFO 2008-08-06 11:23:54.140
Output of D:\j2sdk1.4.2_18-x64\bin\java.exe -classpath "C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\exception.jar;C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\logging.jar;C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\tc_sec_compat.jar" com.sap.security.tools.FormalPasswordCheck -a check -s abap -u SAPJSF -message_file FormalPasswordCheck.message -p XXXXXX is written to the logfile FormalPasswordCheck.log.

INFO 2008-08-06 11:23:54.390
Execution of the command "D:\j2sdk1.4.2_18-x64\bin\java.exe -classpath "C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\exception.jar;C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\logging.jar;C:\Program Files\sapinst_instdir\SOLMAN\SYSTEM\MSS\CENTRAL\AS\installsec\tc_sec_compat.jar" com.sap.security.tools.FormalPasswordCheck -a check -s abap -u SAPJSF -message_file FormalPasswordCheck.message -p XXXXXX" finished with return code 0. Output: 
Aug 6, 2008 11:23:54 AM  Info: Formal password check tool (com.sap.security.tools.FormalPasswordCheck) called for action "check"
Aug 6, 2008 11:23:54 AM  Info: Called for user "SAPJSF"
Aug 6, 2008 11:23:54 AM  Info: Stack type: ABAP
Aug 6, 2008 11:23:54 AM  Info: Performing check for username
Aug 6, 2008 11:23:54 AM  Info: Performing check for password
Aug 6, 2008 11:23:54 AM  Info: Operation executed successfully
Aug 6, 2008 11:23:54 AM  Info: Leaving with return code 0

INFO 2008-08-06 11:23:54.562
Execute step setDefaults of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_GetSidNoProfiles|ind|ind|ind|ind|2|0|NW_GetUserParam11:28 AM 8/6/2008eter|ind|ind|ind|ind|1|0|NW_GetUserParameterWindows|ind|ind|ind|ind|1|0

INFO 2008-08-06 11:23:56.937
Execute step askDomain of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_GetSidNoProfiles|ind|ind|ind|ind|2|0|NW_GetUserParameter|ind|ind|ind|ind|1|0|NW_GetUserParameterWindows|ind|ind|ind|ind|1|0

INFO 2008-08-06 11:23:57.265
Execute step askPasswords of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_GetSidNoProfiles|ind|ind|ind|ind|2|0|NW_GetUserParameter|ind|ind|ind|ind|1|0|NW_GetUserParameterWindows|ind|ind|ind|ind|1|0

ERROR 2008-08-06 11:24:23.531
FSL-01011  Unable to check password for account BIZSOL\smpadm. ErrorNo=1788

[Former Member]

The problem is related to child domain. More than one domain has to be addressed as a cluster installation

[Former Member]

Do you have windows service pack 2 installed in this server??

If yes, try again after removed the service pack 2.

[Former Member]

I am able to log in as the <sid>adm into the domain on the box and also as a local. I think it is a trust issue. Will continue trying to it figure out

[Former Member]

Forgot mention, this will be a domain installation. This is on a child domain.

[markus_doehr2]

So there is something wrong in the trust configuration. Unfortunately that is a windows problem and is not related to SAP

Check your trust relationships between the domains and if the user can logon to the child domain (not administrator).

Markus

[markus_doehr2]

Is this a local or a domain installation?

Error 1788 is "The trust relationship between the primary domain and the trusted domain failed"

Markus