Access denied to sapmnt\<SID>\SYS\global\security\data\SecStore.properties

[former_member912992]

Dear Forum,

I have an EP 6.0 on clustered servers. When I change the parameter in the configtool's secure store, there is an error message showing access denied.

=================================================

I/O error on file "
gdcsepci\sapmnt\PP1\SYS\global\security\data\SecStore.properties".

com.sap.security.core.server.secstorefs.FileIOException: I/O error on file "
gdcsepci\sapmnt\PP1\SYS\global\security\data\SecStore.properties".

at com.sap.security.core.server.secstorefs.StorageHandler.flush(StorageHandler.java:769)

at com.sap.security.core.server.secstorefs.SecStoreFS.updatePair(SecStoreFS.java:2351)

at com.sap.sql.connect.OpenSQLConnectInfo.rebind(OpenSQLConnectInfo.java:739)

at com.sap.sql.connect.OpenSQLConnectInfo.rebind(OpenSQLConnectInfo.java:709)

at com.sap.engine.configtool.batch.task.ChangeSecStoreTask.replaceJDBCConnectionInfo(ChangeSecStoreTask.java:183)

at com.sap.engine.configtool.batch.task.ChangeSecStoreTask.go(ChangeSecStoreTask.java:119)

at com.sap.engine.configtool.batch.task.TasksThread.run(TasksThread.java:46)

Caused by: java.io.FileNotFoundException:
gdcsepci\sapmnt\PP1\SYS\global\security\data\SecStore.properties (Access is denied)

at java.io.FileOutputStream.open(Native Method)

at java.io.FileOutputStream.<init>(FileOutputStream.java:179)

at java.io.FileOutputStream.<init>(FileOutputStream.java:70)

at com.sap.security.core.server.secstorefs.StorageHandler.flush(StorageHandler.java:765)

... 6 more

=================================================

I have tried to change the security on SAPMNT to full control to everyone, but didn't help.

Please help.

Regards,

Agoes

[former_member912992]

I went to the permission in sharing and put my user ID with a full access. Not just the security tab in the folder properties.

Problem solved!

Regards,

Agoes

[Former Member]

<sid>adm user is designed to be used for administration purposes.

Do not insecure your system by inaccurate changes to access control lists for direcories, files or network shares.

Specially granting access for everyone, enabling guest accounts etc.should never be done.

peter

[former_member912992]

Thanks, Peter. That is also our thought, so we sticked on <SID>ADM instead to do the process.

Regards,

Agoes

[Former Member]

Hai,

First thing,

-->give full rights to everyone for SAP directory.

-->Or else just enable the Guest account in the host(gdcsepci in yr case)..

which you want to connect..

Regards,

Gopinathan.T

[former_member912992]

Hi Gopinanthan,

I have tried the first suggestion. The second one just done, didn't help...

Regards,

Agoes