Unable to access user DDIC and SAP*

+Hi GURUS,+
+I installed solutionmanager 4.0 and i loggen in the system(000) with DDIC user and check the TCODE SICK.+
++When i restarted the server it was not allow me to login awith user DDIC and SAP in 000 client.++*
+It's giving error message:+
+Password log on nolonger possible too many times failed attempts.+
++Could you please help me out is there any way to set DDIC and SAP from windows level(i mean sap inst directry..usr/sap/<sid>/sys/profile)*
Regards
JAn

Hi,
Unlock it at Database level
UPDATE usr02 SET uflag = 0 WHERE bname = "SAP*" AND mandt = <client number>
Or
Run the sql query at sql prompt and then login to sap with sap* and password "pass".
SQL> delete from usr02 where mandt=<your login client> and banme='SAP*';
Rakesh

Similar Messages

DDIC and SAP* changing into usertype system

In order to secure the Standard Users DDIC and SAP* against misuse i
planned to change them into SYSTEM accounts instead of DIALOG.
Is there, in case of a standard SAP implementation, any indications that
we shouldn´t do this?
In the guidelines and forums i couldn't find any arguments against
such a situation.
The SAP* accounts is further secured by setting the system profile
parameter 'logon/no_automatic_user_sapstar' to 1.
Thanks in advance for your reactions.
With kind regards,
Edwin Stam

As of release 7.00 EhP1 there is a new procedure for this.
See --> Lock DDIC user but keep the RDD* jobs working. and the link to the help.sap.com documentation.
The users are already blocked from authenticating via trusted RFC. Changing the user type to system will also prevent them from being used on the issuing system for SAP Logon Tickets as well as attaching a SAPGui to a logon session in the backend systems. You can also disable the password in SU01 (which will delete the password hash).
Alcatraz for standard users...
Cheers,
Julius
Edited by: Julius Bussche on Dec 16, 2009 3:28 PM

DDIC AND SAP*

Hi
Kindly let me know the what is the difference between DDIC and SAP* .
Selvan

Hello ,
SAP* is the only user in the SAP System that does not require a user master record, SAP* has by default the password PASS, as well as unlimited system access authorizations.
To secure SAP* against misuse, you should at least change its password from the standard PASS. For security reasons, SAP recommends that you deactivate SAP* and define your own superuser.
The maintenance user for the ABAP Dictionary and software logistics, user DDIC.
The user master record for user DDIC is automatically created in clients 000 and 001 when you install your SAP System. User DDIC special privileges for certain operations. For example, DDIC is the only user that is allowed to log on to the SAP System during an upgrade.
"But, in which * Parameter Name* i have to activate"
login no_automatic_user_sapstar 1

DDIC and SAP* locked due to bad logins

Hi!
I'm setting up a WAS 7.0/CRM5.1 system and have encountered som problems.
My DDIC and SAP* users have been locked in both the production client and the 000 client.
I found a note on how to solve this and that was to delete the SAP* from the USR02 table. Then the password would be PASS and I would be able to log on.
I deleted the SAP* user from client 000, but I stil can't log on! Should the user be deleted in the other clients as well or have I done something bad?
regards
rollo

- enter oslevel as user <sid>adm of ora<sid>
- on oracle use e.g. sqlplus, connect as sapr3 (resp. sap<SID) and enter <i>delete from usr02 where mandt = '000' and bname = 'SAP*';</i> then <i>commit;</i>
- as of WebAs 7.0 it's forbidden by default to logon as SAP* so you also have to set profile parameter and restart the system.
see also SAP note <a href="https://websmp201.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=68048&_NLANG=E">68048</a> and <a href="https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=0000862989&nlang=E">862989</a>

When are DDIC and SAP* used in Client 066 and 001

Hi everyone,
Can someone please shed some light on when DDIC and SAP* users are supposed to be used in logging into client 066 and 001?
Your inputs will be greatly appreciated.
Thanks!
Divine Grace Banzon

User DDIC is a user with special privileges in installation, software logistics, and the ABAP Dictionary. The user master record is created in clients 000 and 001 when you install your R/3 System.
User SAP* is default superuser in SAP System, in the clients 000 and 001. A user master record is defined for SAP* when the system is installed. However, SAP* is programmed in the system and does not require a user master record.
Hope this will help.
-Pinkle

I am loging in SAP. Initial screen come where it display User Menu and Sap

Dear All,
When i am loging in SAP. Initial screen come where it display User Menu and Sap Menu, but User menu is in active not showing but T code are executing then what object i have missed.
can u help me?
Thanks,
Regards,
Sachin

Hi Sachin,
It doesn't care if you're using SAP_ALL or any of those profile. That is not relevant. I had that case a few days ago, I'm not using any of those profiles and I made it work with help of one post.
If you put the transactions in the tab "Menu" of the role in the PFCG, and if you activate parameters I mentioned in a prior post, then you should see the Menu.
Tables SSM_CUST and USERS_SSM. The first is global and the other is user-especific.
The link in one of the first post of this thread hace all the info.
That should work, that worked in my case.
What values the parameters have on those tables? The more the info the better.
Updating the parameters on those tables should help. If still doesn't work then you should check another parameter using transaction RZ10 or report RSPARAM.
If my info solves your problem, points are appreciated, if not, we will try...
Jose

Unable to access CC assets and VERY frustrated with support

I just spent a fruitless hour trying to discover why I am unable to access my assets on the Creative Cloud. CC acts as if my membership isn't current, in that I see a folder of mine, but when I click on it, it disappears. After an hour with support I was unceremoniously disconnected and don't have the fortitude right now to start over again. Is there any chance of speaking with a U.S. based support person who speaks intelligible English?

David, thank you for your response. I recognize you as one of the
helpful people on the forum and gather that you are an Adobe employee.
With respect to the problem I wrote about: The following morning
everything was working normally again. During the several days that I
was having the problem, I did try accessing CC via two different
computers and on 2 different browsers, all with the same result. My
impression was that CC was treating me as though I was someone whose
subscription had lapsed. I could see that the folder I had created for
image files was there on my screen, but when I clicked to open it the
folder would disappear. So I'm guessing that CC had incorrectly changed
my status as a subscriber and then somehow this got corrected. In
reviewing the forum issues, I haven't seen anyone complain of exactly
the same problem.
I would also like to say a word about Adobe support. As a loyal
purchaser and user of multiple Adobe products for the past 15 years, and
also as an Adobe shareholder, I find the current trend in support to be
very disappointing. I have had minimal need for support over the years
but had always had good service until recently. After subscribing to CC
I had occasion to seek help from Business Catalyst support which was
just as frustrating and unhelpful as my attempt to obtain CC support on
8/3. The forum seems to be able to solve some problems but it can't
always happen in a timely manner. I fear that the current status of
Adobe support, if my two recent experiences are typical, will serve to
drive customers away from Adobe.
I do thank you for your interest in my problem.
John

My tower for my dell computer died.got one from a friend with an existing itunes account. now I am unable to access my library and playlists, but can get to previous ownwer's.I downloaded itunes again using my apple id but was unsuccessful.HELP PLEASE!

My Dell tower died. Got one from a friend and am only able to get her account for itunes to appear. I am unable to access my library even after downloading new using my apple id. I can access songs I've purchased, but not ones that I downloaded from cds. PLEASE HELP ME.

Thank you for using the Apple Support Communities
From what I understand is that the device will show up in iTunes but it will not allow you to synchronize media over to the device even after you reset the device. When you say you reset the device, do you mean you restored the device in iTunes? What error message you are getting when attempting to synchronize media?

Still unable to access online billing and no respo...

Registered for online billing at the end of February, then when all the new improvements to the website happened was unable to view the bill. Have phoned, emailed and generally been given the run around by BT over the week. Then suddenly last Thursday was able to access online bill - great. Then checked on Sunday afternoon and again same problem no access with the same old error message. Sent email to [email protected] and no reply so that's over 48 hours.
So anybody at BT able to help, because I'm really impressed that it's taking almost over a fortnight to restore access to billing. These improvements on this website are an absolute shambles, and in the error message don't direct people to call 0800 800 152 if nobody knows anything about how to deal with this issue.
Seeing the feedback on this forum that others are suffering from the same problem a sticky from BT acknowledging the issue and how to report this should be on the top of the forum at the very least.
One BT customer seriously unimpressed.
Please check Incident: 100227-009300 and Incident: 100303-002253
As of 4:00pm on Sunday 7th March I am again unable to access my BT
account using my BToneID [email protected]. This was fixed on
Thursday but since improvements to the website I have the message
"Due to technical reasons we are currently unable to provide details for
this account on our new billing system. We are working to make this
available to you. In the meantime, if you require online access to this
account we can arrange this for you, please click here to contact us.
Our advisors will be happy to make the necessary changes.
If you have another account within your profile, you can view this by
using the 'switch accounts' menu above."
I would like for this issue to be resolved and access restored. I don't
require flashy animated graphics, interactive web pages or the latest
service being splashed across the front page - I want access to my on
line billing! If BT are unable to restore this access for a length of
two days then a manager must contact me on (removed) during the day. I
wish to discuss this matter further as trying to contact anybody with
knowledge of how to resolve this issue using 0800 800 152 is impossible
and I feel should be escalated further.
I am not happy with the way that BT has dealt with this issue which is
clearly from "improvements" that have been made to the site.
Nathaniel Goss

So after another forty minute call - insisted that the call was escalated - got a manager who understood what I was telling them and was aware of the technical situation. Put me on hold and then deleted the BToneID (I found out by the email that I received whilst on hold)without warning me, then after being on hold for ten minutes the line went disconnected.
Created new BToneID and am now able to see bill and check calling charges.
Waiting to see how long I am able to access this account before BT "improves" the website yet again.
Seriously unimpressed with the way BT have dealt with this issue.

ESS user ids and SAP Users ids accountability

Dear All,
Here at client place we some 50 professional user licenses for SAP r/3 and 200 ESS licenses. So here can we split same licenses into 150 ESS and 50 MSS, as well as when i am creating a system user at backend would be accountable against SAP professional licenses or its included in ESS licenses.
Regards,
Rajasekar

no replys

Unable to find SAP_BUILDT, SAP_JTECHS, and SAP-JEE

Hi,
I am configuring NWDI for dev environment and in the process i have created a product, software component, reserved the namespace prefix, created a domain and while cretaing a track i am facing this prblm.
I have entered the general track data in the track data tab, added the software component which I have created and after that I got the SAP_BUILDT, SAP_JTECHS and SAP-JEE in the required component table.
After that how to add these systems to the development track in runtime systems tab and i added only the development runtime system and i left the other three.
After that to perform checkin and import the above software components SAP_BUILDT, SAP_JTRANS, SAP-JEE i did not find the directory CMS_CBS in the server path <drive>://usr/sap/<sid>/SYS/global.
Please tell how to find those software components
Thanks

Hi,
you can use the wizard to create a track and determine which kind of application you want to develope. The wizard will automatically select and import the correct components.
If you are working with CE 7.11 you can find the wizard in
NWA -> Configuration Management -> Scenarios -> Configuration Wizard
-> Change Management Service (CMS): Create an Application Skeleton
or
http://server:port/devinf --> Create an Application Skeleton
Best regards,
Kevin

Unable to access information spaces and Exploration View Sets

I have run into a problem.   we had a Business intelligence server setup as a proof of concept for analyzing data. This was done by a 3rd party company and we no longer can use them as a resource.
Originally we were unable to view the information spaces and exploration views, unless the user is part of the administrators group.   I have been attempting to have a view only group created that would allow access.
now i am getting the following error when trying to open an explorer view set (The view sets show in a list).
Failed to open the exploration view set
Can't load the information space. (PS 50300)
Failed to retrieve the exploration space 'cb06755b-7fab-4a21-b1ba-a41389bd5f59'.
This happens with all accounts.   Administrators group, built in administrator account and the everybody group.
We are using AD Authentication only on this server.
does anyone know what might have happened to remove access to the information spaces?

I can't seem to find where this workspace lives.
I am very new to Business Intelligence (3 Months)
I went to manage spaces in Explorer but there isn't anything there that points to the reports that i need to index.
here is what i am trying to have show.

Forefront Unified Access Gateway (UAG) and SAP portal

Hi Guys
Do you have experience or knowledge about the integration of UAG as a reverse proxy for SAP Netweaver portal 7.0?
We are trying a setup where the SAP NW portal uses SPNEGO/kerberos authentication (and it is working), but when accessing the SAP NW portal through UAG we get a "HTTP basic authentication" prompt, while SPNEGO login module fails. UAG can be configured to use kerberos contrained delegation, but it does not work for us.
Anyone who have setup UAG - SAP NW portal integration ? Did you succed with any SSO: Which authentication mechanism' did you configure in UAG and i J2EE?
Best regards
Tom Bo

Hi Tom,
I work as a consultant for various customers who seek my companies expertise in Microsoft Forefront security. I published SAP Portal 7.0 for my customers and was able to provide seamless single sign with UAG.
We configured NTLM authentication in UAG. We then configured SPNEGO and enabled fall back to Basic Authentication on SAP. This should work but you may need to write some authentication modification scripts if you are getting username/password errors.
In addition, we did strong 2-factor authentication with RSA for one customer. Some of our customers also ask about enabling endpoint detection to do things like, If you dont have an updated antivirus, then you the user cannot download any documents from SAP.
Thanks!
Dennis Lee
Celestix Networks
Edited by: Dennis Lee CLX on Mar 17, 2010 10:06 PM

Unable to capture user comments and responder in RESPOND API

We are building a custom application that uses Oracle Workflow underneath. The application users and responsibilities have been integrated into Workflow. Notifications are acknowledged and responded to directly from the application using the PL/SQL Notification APIs.
When using the wf_notification.respond API with the appropriate user and comment information filled in, we are still unable to capture the responder information as well as the reponders comments. In other words, the RESPONDER and USER_COMMENT fields in the WF_NOTIFICATION is blank. However, the response does seem to go through otherwise. Do we need to set some kind of user context outside of just setting the response attributes and calling the respond API? Following is the code....
owf_mgr.wf_notification.setattrtext(p_nid,
               'RESULT'          ,
               'APPROVED');
-- This procedure then caused the WF to advance to next step
-- Respond to notification, depends on RESULT setattrtext above
owf_mgr.wf_notification.respond(     p_nid, -- notification id
     p_respond_comment,     -- response_comment
p_responder     );     --responder role
Any help is greatly appreciated.
Thanks,
Raj

If you are on 11.5.10 or greater or standalone 2.6.4 if you pass the responder value to wf_notification.respond API it should be updated in wf_notifications.responder column. The comments is now updated in wf_comments table against the notification id and not wf_notifications.user_comment column.
Thanks, Vijay

Unable to access Query Rules and Result Sources in SSA

I have access to our Search Service Application (SSA) within Central Administration. I am able to get to all of the options within Search Administration except for Query Rules and Result Sources. Does this require farm admin access or is there
something special that needs to be done for access to these two areas? I can get to all of the Diagnostics, Crawling, and the other Queries and Results options without issue. Our farm admin has been looking at it, but we have not been able to determine
why my access is not allowing me to get to those options. Any info you may have about this will be much appreciated.
Thanks!
Brian

Hi scalawagd,
This issue seems to be about permissions. Please add the user into the search service administrator group and give him full control, compare the result. You can try to give the user permission like the screenshot:
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Unable to access user DDIC and SAP*

Similar Messages

Maybe you are looking for