Symptom
When installing SAP NetWeaver Java application server using a SAPMNT share on Azure Files SMB, SWPM will fail with an error.
The message in SWPM will be similar to:
Last error reported by the step: Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied”
Analysis of the sapinst_dev.log will show of the error messages below:
Copying file \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.security to \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.1.security
'\\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security', , ATL::CSid &, bool & ownerChanged
Cannot set the owner of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security to S-1-5-21-2936895289-852576116-2267775737-1150 because the latter is neither the current user nor the Administrators group. The Administrators group will be set as owner.
Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.
Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.
Failed action: with parameters
Error number 5 error type WIN32_ERROR
Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.
Trying to take the ownership of the file will fail, if Windows Explorer or the takeown.exe command-line tool is used:
Explorer:
Takeown.exe:
Read more...
Environment
Windows Server 2016, 2019 and 2022. Azure Files SMB connected using Azure Active Directory Authentication.
For more information on Azure Files SMB with Azure Active Directory review
Active Directory Domain Services Overview | Microsoft Docs
Azure VMs HA for SAP NW on Windows with Azure Files (SMB) - Azure Virtual Machines | Microsoft Docs
Keywords
swpm, access denied, azure files smb, azure, cluster, mscs, sapglobalhost, java, error 5, sapinst, sapinst.exe, take ownership, java security , KBA , BC-OP-NT-AZR , Windows on Microsoft Azure , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.