Skip to end of metadata
Go to start of metadata


Logon with ECTR fails with error "Connect to SAP gateway failed"

[11:37:26.935] OMF-Q                Caused by: RfcException raised by system [XXX|systemname]:
[11:37:26.935] OMF-Q                    message: 'sapgui' start failed.
[11:37:26.935] OMF-Q                    return code: RFC_SYS_EXCEPTION (3)
[11:37:26.935] OMF-Q                    error group: 104
[11:37:26.935] OMF-Q                    key: RFC_ERROR_SYSTEM_FAILURE
[11:37:26.935] OMF-Q                    message class: 00
[11:37:26.935] OMF-Q                    message type: X
[11:37:26.935] OMF-Q                    message number: 341
[11:37:26.935] OMF-Q                    message parameter 0: RFC_ATTACH_GUI_FAILED
[11:37:26.935] OMF-Q                    at
[11:37:26.935] OMF-Q                    at$JavaRfcClient.execute(
[11:37:26.935] OMF-Q                    ... 21 more
[11:37:26.935] OMF-Q                Caused by: 'sapgui' start failed.
[11:37:26.935] OMF-Q                    at
[11:37:26.935] OMF-Q                    at
[11:37:26.935] OMF-Q                    at
[11:37:26.936] OMF-Q                    at
[11:37:26.936] OMF-Q                    ... 22 more

German Log:

[08:34:08.461] Threa            Caused by: RfcException raised by system [XXX|systemname|36]:
[08:34:08.461] Threa            	message: Start von 'sapgui' fehlgeschlagen.
[08:34:08.461] Threa            	return code: RFC_SYS_EXCEPTION (3)
[08:34:08.461] Threa            	error group: 104
[08:34:08.461] Threa            	key: RFC_ERROR_SYSTEM_FAILURE
[08:34:08.461] Threa            	message class: 00
[08:34:08.461] Threa            	message type: X
[08:34:08.461] Threa            	message number: 341
[08:34:08.461] Threa            	message parameter 0: RFC_ATTACH_GUI_FAILED
[08:34:08.461] Threa            	at
[08:34:08.461] Threa            	at$JavaRfcClient.execute(
[08:34:08.461] Threa            	... 20 more
[08:34:08.461] Threa            Caused by: Start von 'sapgui' fehlgeschlagen.
[08:34:08.461] Threa            	at
[08:34:08.461] Threa            	at
[08:34:08.461] Threa            	at
[08:34:08.461] Threa            	at
[08:34:08.461] Threa            	... 21 more


Analyze the issue

This sequence diagram shows how a SAP GUI is opened from ECTR:

Possible Reason 1

Firewall issue on server side

Possible Reason 2

As of SAP GUI 7.20, 7.30 and 7.40, there is a security check before starting the SAP GUI. If the you click on 'Deny' or if in the SAP GUI security settings the option is set to 'Deny', you will get the same dump

Possible Reason 3

When the sapgui.exe delegates, it always starts SAP Logon, no matter whether SAP Logon Pad is already running or not.

Possible Reason 4

RFC connection fails in NAT environment.

Possible Reason 5

An registry setting at the frontend blocks the SAP GUI.

Possible Reason 6

No SAP GUI installed at all on frontend PC. 

Possible Reason 7

No SAP GUI resources available any more on frontend PC.
Lot of parallel threads in ECTR can call SAPGui transactions e.g. when opening the structure tab of a document.

[15:06:55.113] FJ-08                         Calling: /DSCSAG/DOC_GET_LATEST_STR4.[apilog @ stateless.txt#115] (using SAPGui)... 
[15:06:55.113] FJ-03                         Calling: /DSCSAG/DOC_GET_LATEST_STR4.[apilog @ stateless.txt#114] (using SAPGui)... 
[15:06:55.113] FJ-05                         Calling: /DSCSAG/FOL3_CLASS_READ.[apilog @ stateless.txt#113] (using SAPGui)... 
[15:06:55.113] FJ-02                         Calling: /DSCSAG/DOC_WHEREUSED_ALLVERS2.[apilog @ stateless.txt#112] (using SAPGui)... 
[15:06:55.113] FJ-04                         Calling: /DSCSAG/OBJ_GET_MULTIDETAIL2.[apilog @ stateless.txt#116] (using SAPGui)... 


Generate JCO Log Files

Change these settings in …\customize\config\SAPlogon.txt of ECTR:

 # Enable/disable CPIC trace (-1 [use environment setting], 0 no trace, 1,2,3 trace level)
      sap.transaction.cpicTrace = -1

# Enable/disable RFC trace (0 or 1)
# This would create trace files jco_rfc*.trc in the ECTR log directory which you could send to support.
      sap.transaction.jcoTrace = 1

# Define trace level for JCo (see
# Use level 5 to send log files to support if nothing else requested.
# This would create a trace file JCO*.trc in the ECTR log directory which you could send to support.
      jco.trace_level = 5
      jco.trace_path = .
 Generate Backend Log Files
  • ABAP-Server: SM50 (Work Process) - Activate the WP-Trace for all DIA Processes (Component M, A, Y, D) and set the Dispatcher-Trace to 2
  • SMGW (Gateway Monitor) --> Goto --> Trace --> Gateway --> Increase Level
Switch on SAP GUI Log Files
  • In SAP Logon open the dialog "Optionen" -> "Modus Trace" -> "RFC (rfc*.trc)"
Solution 1: Search for firewall issues in Gateway Trace files

Check for Traces in SM21 Dumps in ST22 or Traces in transaction SMGW. This can give you hints how to change the firewall settings.

Solution 2: Fix local SAP GUI issues
  1. Check the SAP GUI security setting using "Options" - "Settings" - "Security Settings". Ensure all Actions are ALLOWED or Disable the Security Settings 
  2.  Apply the latest SAP GUI patch
  3.  Run a workstation Front End check. Start Menu -> Run NwCheckWorkstation.exe. If any errors are reported at the end of the installation check, reinstall the GUI with the Addons.
Solution 3: Fix sapgui.exe delegate issues

Please check this SAP note 844095 and the other occurrences of the registry key "StartSaplogon". Maybe you have to change the value for that key "StartSaplogon".

Note that on 64bit operating systems keys under HKEY_LOCAL_MACHINE have to be created in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SAP\SAPGUI.

Solution 4: Fix NAT issues

Check own network address in SMGW:

Read note 211365 - RfcAttach Fehler beim DNS oder muliple hostnames

  • abap/hostname_for_sapgui = <full qualified hostname dns>
  • gw/alternative_hostnames = <full qualified hostname dns>

If this not helps, read note  1760329:

  • Maintain the NAT IP as an alternative IP address for the servers in the transaction SMLG within the corresponding logon group as per the recommendation of note:   364552 Loadbalancing does not find application server
  • and additionally maintain the NAT IP within the instance profile of the corresponding instance with the parameter gw/alternative_hostnames. See note:   148832 IP address conversion with a firewall
  • To solve problems related to RFC load balancing in a NAT environment please follow the recommendations of the notes:
    •   1418278 RFC load distribution does not work via NAT
    •   593058 New RFC load balancing procedure
Solution 5: Fix local registry issues

Check this registry key on frontend computer: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SAP\SAPGUI. Set it to StartSaplogon DWord Value 0.

Solution 6: Install the latest SAP GUI 

Load latest SAP GUI from and install it.

Solution 7: Use RFC calls instead of GUI calls

Use "sap.logon.SapGui* = 0"  in saplogon.txt. ( 0- NoGUI,  2-GUI) for all systems.