SAP Knowledge Base Article - Preview

3147884 - Manual Installation Steps for NetWeaver Java on Azure Files SMB

Symptom

When installing SAP NetWeaver Java application server using a SAPMNT share on Azure Files SMB, SWPM will fail with an error.

The message in SWPM will be similar to:

Last error reported by the step: Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied

Analysis of the sapinst_dev.log will show of the error messages below:

 Copying file \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.security to \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.1.security

'\\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security', , ATL::CSid &, bool & ownerChanged

Cannot set the owner of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security to S-1-5-21-2936895289-852576116-2267775737-1150 because the latter is neither the current user nor the Administrators group. The Administrators group will be set as owner.

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

Failed action:  with parameters

Error number 5 error type WIN32_ERROR

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

 

Trying to take the ownership of the file will fail, if Windows Explorer or the takeown.exe command-line tool is used:

Explorer:

pic1.png

Takeown.exe:

pic2.png


Read more...

Environment

Windows Server 2016, 2019 and 2022.  Azure Files SMB connected using Azure Active Directory Authentication.

For more information on Azure Files SMB with Azure Active Directory review

Active Directory Domain Services Overview | Microsoft Docs

Azure VMs HA for SAP NW on Windows with Azure Files (SMB) - Azure Virtual Machines | Microsoft Docs

Keywords

swpm, access denied, azure files smb, azure, cluster, mscs, sapglobalhost, java, error 5, sapinst, sapinst.exe, take ownership, java security , KBA , BC-OP-NT-AZR , Windows on Microsoft Azure , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.