3231944 - Unknown error 902 in SM69/SM49

Unknown error 902 occurs whenever you start an external operating system command in the transaction SM49/SM69. The issue can occur randomly and be Intermittent.

The RFC and Developer traces will be updated with the information below if the trace for external programs is active in the Gateway.

Scenario 1

dev_rfcXX:

**** Trace file opened at 20220802 153620 UTC, by disp+work
**** Versions SAP-REL 753,0,1000 RFC-VER U 3 2119750 MT-SL
======> CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_PRODUCT_SPECIFIC_ERROR (cmRc=20), taskhandler rc:
GW_SECURITY_ERROR (thRc=676)
Program cannot be started on the host; no authorization <- root cause
ABAP Programm: SAPLCRFC (Transaction: SM49)
User: USER_ABC (Client: <client_number> )
Destination: %_TCPIP_%2 (Handle: 4, DtConId: 62E9925537BD2511E100000093A7CD41, DtConCnt: 0, ConvId: ,)
EPP RootContextId: 0050560840551EED84CF1AA4ECFD7F0D, ConnectionId: 00000000000000000000000000000000,
ConnectionCnt: 0
EPP TransactionId: B6648AA4B45A0180E0062E937B625A50
Error RFCIO_ERROR_SYSERROR in /bas/753_REL/src/krn/rfc/abrfcpic.c : 1780
CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_PRODUCT_SPECIFIC_ERROR (cmRc=20), taskhandler rc:
GW_SECURITY_ERROR (thRc=676)
Program cannot be started on the host; no authorization
DEST =%_TCPIP_%2
HOST = <host name>
PROG = /usr/sap/<SID>/<Instance_Number>/exe/sapxpg (Linux)
or
D:\usr\sap\<SID>\<Instance_Number>\exe\sapxpg.exe (Windows NT)

dev_wXX:

M * LOCATION SAP-Gateway on host <SAPLOCALHOSTFULL> / sapgwXX
M * ERROR user < USER > is not authorized to start TP
M * /usr/sap/<SID>/<Instance_Number>/exe/sapxpg on host
M * <SAPLOCALHOSTFULL> (SAPLOCALHOST)
M * RC 676
M * MODULE /bas/753_REL/src/krn/si/gw/gwr3cpic.c
M * LINE 7362

Scenario 1a — Windows NT variant (when SAP Note 2199759 is applied): On Windows systems where Note 2199759 is implemented, sapxpg is called with its full executable path. If the secinfo file contains only the short-name entry (TP=sapxpg), the full-path call will not match and the gateway blocks the start. In this case the dev_rfcXX and dev_wXX traces show a different signature:

dev_rfcXX:

CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_RESOURCE_FAILURE_NO_RETRY (cmRc=26),
taskhandler rc: FORK_FAILED (thRc=635)
Partner program fork failed
PROG = F:\usr\sap\<SID>\<Instance>\exe\sapxpg.exe

dev_wXX:

M * LOCATION SAP-Gateway on host <hostname> / sapgwXX
M * ERROR Start of TP F:\usr\sap\<SID>\<Instance>\exe\sapxpg.exe failed
M * RC 667
M * COMPONENT SAP-Gateway
M * SYSTEM CALL GwStartProgram
M * MODULE gwntrd.c
The root cause and resolution are the same as Scenario 1 — see the Resolution section for the Windows-specific secinfo entry format.

Scenario 2

dev_rfcXX:

**** Trace file opened at 2024XXXX XXXXXX UTC, by disp+work
**** Versions SAP-REL 789,0,212 RFC-VER U 3 LATEST_CHANGE MT-SL
======> CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_PRODUCT_SPECIFIC_ERROR (cmRc=20), taskhandler rc:
GW_REM_PRGM_DISABLED (thRc=732)
You are not allowed to start remote programs
ABAP Programm: SAPLCRFC (Transaction: SM49)
...
DEST =%_TCPIP_%1
HOST =<host name/IP address>
PROG =sapxpg

dev_wXX:

M * LOCATION SAP-Gateway on host <Local hostname> / sapgwXX
M * ERROR start remote programs is disabled (gw/rem_start=DISABLED)
M * RC 732
M * MODULE /bas/789_REL/src/krn/si/gw/gwr3cpic.c
M * LINE 6704
...
L SXPG: rc = Error 1007

Scenario 3 - Download SAP Note using SNOTE transaction = File <Note_number> is inconsistent; check the application log

SLG1 -> 16.02.2024 15:14:16 USERNAME 2 CWB_DS_Log CWBDS SNOTE R_SCWN_NA_NT_BRWSR Dialog processing 00000000000000827546
BTCOPTION SAPXPG with parameter UNICODE was not found
File <note_number> is inconsistent; check the application log

Additional symptom in SNOTE: "Message incomplete (severity, area, number, or exception missing)"

dev_rfcXX:

**** Trace file opened at 20240216 150159 CET, by disp+work
**** Versions SAP-REL 793,0,60 RFC-VER U 3 LATEST_CHANGE MT-SL
======> CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_DEALLOCATED_ABEND (cmRc=17), taskhandler rc:
GW_CONNECT_FAILED (thRc=236)
SAP gateway connection failed; is SAP gateway started?
...
DEST =%_TCPIP_%2
HOST = <hostname>
PROG =/usr/sap/<SID>/D00/exe/sapxpg

Scenario 4

In the dev_rfc* trace, there are such information:

Error RFCIO_ERROR_SYSERROR in /bas/916_REL/src/krn/rfc/abrfcpic.c : 1882
CPIC-CALL: 'ThSAPOCMINIT', communication rc: CM_PARAMETER_ERROR (cmRc=19), taskhandler rc:
GW_SNC_START_EXT_DIS (thRc=730)
Not allowed to start non-SNC connections

SAP NetWeaver ABAP Platform Operating system: All platforms (Linux, Unix, Windows NT)

Unknown error 902, sapxpg, secinfo, gw/rem_start, unicode, gw/sec_info, random, intermittent, gateway, SM49, SM69, external commands, env, localhost, local_host, snc/enable, snc/permit_insecure_start, SNOTE, SAP Notes, Download, Upload, Message incomplete, BTC_SAPXPG_SNC, SNC Partner Name, BTCOPTIONS table, SNCERR_BAD_NT_PREFIX, PROGRAM_START_ERROR, SNC, BTCOPTIONS, SNCERR_INVALID_NAMETYPE, parsing error, Error 1009, sapgw00, FORK_FAILED, GwStartProgram, RC 667, gwntrd, Windows NT, CM_RESOURCE_FAILURE_NO_RETRY , KBA , BC-CCM-BTC-EXT , External and Logical Commands , BC-UPG-NA , Note Assistant , BC-OP-NT , Windows , BC-OP-LNX , Linux , BC-CST-GW , Gateway/CPIC , How To