cancel
Showing results for 
Search instead for 
Did you mean: 

sapcontrol function OSExecute failed on AIX

Former Member
0 Kudos

Hello, colleges.

We try to update SAP JAVA system components by JSPM. The system has two application servers. Servers run under AIX 6.1

We run JSPM on primary instance. During update JSPM stops due to failing of executing by sapcontrol function OSExecute on seconadry instance from primary instance.

The error is Invalid Credentials.

I checked on OS Level with following command:

sapcontrol -nr 00 -host <secondary host> -user <SID>adm password -function OSExecute "ls" 0 0 log.log

Yes, indeed - It is failed with invalid credentials.

I have checked the SAP Note 927637. All is ok.

After long time troubleshooting i discovered that a system log - /var/sys/log/messages contains the following strings:

auth|security:debug sapuxuserchk PAM: pam_authenticate: error Authentication failed

auth|security:debug sapuxuserchk PAM: pam_authenticate: error Permission denied


I have added sapuxuserchk in /etc/pam.conf and the first error - Authentification failed  - has gone from the system log. But the second error still exist there.

Please explain me what does the error "Permission denied" mean. How can find out what permissions are not sufficient for sapuxuserchk?

But may be I get the wrong way?

Thank you very much.


Accepted Solutions (0)

Answers (2)

Answers (2)

former_member182657
Active Contributor
0 Kudos

Hi Igor,

Have you checked SAP Note 1563660 - sapcontrol, user authorization issues (SUM)

Could you share results after following the same.

Regards,

Gaurav

Former Member
0 Kudos

Please check owner and permissions of sapuxusercheck command in secondary instance executables.

Former Member
0 Kudos

Hello,

I checked this many times. it has the following permissions and owner:

-rwsr-xr-x 1 root     sapsys 956972 Jan 16 01:17 /usr/sap/PX9/J00/exe/sapuxuserchk*

It seems correct...

Former Member
0 Kudos

What release version and patch level you use?

Former Member
0 Kudos

Hello, we have sap kernel release 7.20 Ext  64-bit Unicode and patch level 401.

We have recently updated the kernel but that nothing changed.

Former Member
0 Kudos

What entry did you add to pam.conf to eliminate the authentication failed errors?

Cheers...