ABAP+JAVA System Copy -- Administrator account getting locked

Hi,
I am in the process of doing system copy of my portal to a new server. As per the SAP instructions, I had updated the JDK and SP levels of my EP to the latest supported ones.
Now when i am doing JAVA Add-in Export of my system, SAPinst is throwing error that --
"Error connecting to http://Entportal:50000/sap/monitoring/SystemInfoServlet. The provided user data might be incorrect or user might be locked.:
and when I check the "administrator" user account, it is getting locked. Even though I manually unlock it and update the password is secure storage, still when I run SAPinst, again it is getting locked. I have also chnged the path of my temporary directory to c:\temp which has no spacees in it, according to SAP instructions.
I have raised the issue through OSS, but still, in the mean time can sombody help me?
Regards,
Mandar

Hi Akshay,
I am not using any ID. SAPInst itself is trying to access systeminformationservlet using administrator account. at this stage it is failing to get the correct password and thats why my administrator account is getting locked.
Regards,
Mandar.

Similar Messages

ABAP+JAVA system copy using 3rd party export/import tools

Hi all,
I am trying to do a homogenous system copy. I am following the syscopy guide for SAP NW 7.0 SR3 ABAP+JAVA systems
We are running AIX 5.L and Oracle.
My question is this. We are using an IBM XiV system for our disk storage, and we are able to restore from "snaps" which is their version of images. Does anyone know if it is possible to restore or "import" the data in a system copy using an outside tool like this? If so, do you have any information on how to?
I know it is possible to restore the database from an offline backup using BRTools rather than r3load and jload, and I just wanted to see if I can restore from a snap as it would save a lot of time in the procedure.
Any help or ideas would be much appreciated.
Thanks!

>My question is this. We are using an IBM XiV system for our disk storage, and we are able to restore from "snaps" which is their version of images. Does anyone know if it is possible to restore or "import" the data in a system copy using an outside tool like this? If so, do you have any information on how to?
That approach is not supported.
The reason is: combined instances write the instance name and hostname in various places, on the filesystem in .properties files, in the JDBC configuration, depending on the java applications you run on top in various other places. What you're trying to do is effectively "renaming" an instance.
Technically it's possible to do it and to get it run, yes, but the supported way is running sapinst and choose ABAP + Java system copy. This will prevent you from lots of (not really documented) manual work after the copy.
Markus

PI (ABAP+JAVA) system copy

It's said that PI (ABAP+JAVA) system copy is different from pure JAVA system copy or pur ABAP system copy.
Could you share your experience? Thanks!

Hi Christy,
For Java there is exe file, so by clicking that the java is installed on the system.
For PI check the below link
https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=870863
For ABAP
https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=784931
Java tools copy for SAP PI
https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=784118
Regards
Ramesh

SYSTEM user's accounts get locks automatically

Oracle SYSTEM user's account gets lock automatically after every 4-5 days. I user to run following query which unlocks the account:
SQL:\>ALTER USER system ACCOUNT UNLOCK;
How I can stop this happening? I am not able to alter profile for unlimited attempts also.
Is there any workout, please help me....

In my opinion, you should immediately find out who constantly tries to guess the password of system instead of making it possible for him to try that indefinitely without locking the account. That is like switching off the annoying alert sirene if someone constantly tries to break in.
You should
SQL> connect sys/oracle@prima as sysdba
Connected.
SQL> alter system set audit_trail=true scope=spfile;
System altered.
SQL> startup force
ORACLE instance started.
Total System Global Area 313860096 bytes
Fixed Size                  1299624 bytes
Variable Size             285215576 bytes
Database Buffers           20971520 bytes
Redo Buffers                6373376 bytes
Database mounted.
Database opened.
SQL> audit session whenever not successful;
Audit succeeded.
SQL> select count(*) from dba_audit_trail;
COUNT(*)
         0
SQL> connect system/wrongpw@prima
ERROR:
ORA-01017: invalid username/password; logon denied
Warning: You are no longer connected to ORACLE.
SQL> connect sys/oracle@prima as sysdba
Connected.
SQL> select count(*) from dba_audit_trail;
COUNT(*)
         1

Abap+Java System Copy on NW2004

Hello Gurus:
I will be performing a system copy of NW2004 (not NW2004s) which is running on ABAPJava stack. How should I perform the system copy? I have gone thru the documents for ABAP system copy and Java System copy. What are steps that I need to follow to do the ABAPJava stack?
Huge thanks in advance.
Regards,
N.S
Message was edited by:
Narayanan Swamy

Hi Swamy,
Please refer these notes to clarify further.
Hom./Het.System Copy SAP Web AS 6.40 SR1 Java Note 785848 .
restrictions which apply to the system copy see SAP Note 711093.
Cheers,
Shaym

ABAP + JAVA system copy

Hi
My enviroment is SAP ECC 6 (ABAP + Java add in though we don't use the Java stack) on Oracle 10g/Solaris 10.
I intend to do a system copy(PRD to QAS) using offline backup/restore method. Is this possible for a ABAP + JAVA system using this method ?
Thanks

> Karan , I'm just wondering I'm i supposed to do two separate system copies in the case ie One ABAP (backup/restor) & the other for Java(export/import)?
Read the system copy guide.
Basically you will
- start sapinst on the source system and choose "database specific method"
- start sapinst on the target system and select the same
Markus

ABAP +JAVA system copy process

Hello All,
We are in process of building a server from a existing ECC 6.0 ABAP + JAVA system.
We are using system copy process where we are restoring ABAP databse from source system.
My question is about the JAVA part.
How can we copy java part? Can we export only JAVA part from ECC 6.0 ABAP +JAVA system and import this to target server.
Please suugest the process.
Regards,
Manish

Hi Manoj,
When you are doing restore of your P(DUAL stack)system then it will automatically restores your ABAP and JAVA scehema table spaces(Normal usage).And If you are using sapinst then take a CI export(for file system/java settings etc) of your source system and then you have to import that in your target system later in the process.So this procedure will automatially serve for both ABAP and JAVA schemas. Importantly this procedue was highly recommended by SAP,so if you run into any issues then you can go ahead and raise a OSS msg.
Other guy already pasted the link for homogenious copy guides
But you can do your java export from command level also(with out using SAPINST) and later you can import it into your target system.This means you are exporting your JAVA schema table space and importing.Keep it in mind that you have to export your Target java scehema not source system .If you do so then its of no use because you have to perform all post steps for java stack also. You can export and import table j2ee table space from your OS level at DB host using "exp javascehma/pwd ........."(not a full fledged command) and then you do the same by perforing "imp........." after restore and recovery from your P(source) system.But this is not at all recommended by SAP but this will work!.
Let every one to know if you need anything more than this.

ECC6 EHP2 (ABAP+Java) system copy using file system copy

Hello Experts,
I have a question around system copy method for a dual stack ECC6 EHP2 system.
We are planning to take full file system backup of this entire ECC6 EHP2 dual stack system and throw it on a completely new hardware with new host name but same SID. We are also planning to do a host renaming in instance profiles and re-building the control files in target system after we finish the file system restore.
Is this method supported in SAP ? Or we strictly have to use SAPinst to do export and import method. In any case our source and target platform is not going to chance as per our scenario.
Any suggestions will be greatly appreciated.
Thanks,
Harshal

> Thanks for the quick response. Is their any document that says it is not supported ? Because of no proper document that says no to do it, client want's to try it out.
For the ABAP part this is certainly feasible.
The Java part has not only issues with the secure store but also with SID and hostname. The old values are stored in many places in the database and in, depending on the applications installed, many .properties files in the filesystem. So it would be not enough to somehow regenerate the secure store but also change hostname and SID in different places that are not really all documented.
What you are basically looking for is
Note 757692 - Changing the hostname for J2EE Engine 6.40/7.0 installation
with the significant sentence
This note should be applied only when the hostname of a machine
where the j2ee engine was already installed has changed.
It does not replace the SAP official system copy procedure and
MUST NOT be used for copying of an instance to another host and/or with different SID.
Markus

BW 3.5 over ABAP+JAVA system homogeneus copy

Hello Gurus,
I making a BW homogeneus copy to other hardware (i want change the hardware).
I check the WAS Abap and WAS java homogeneus copy guide, but i am really confused.
I think follow this steps:
1.- Install central instance ABAP (only WAS ABAP)
2.- install DB instance ABAP
3.- restore de BD
4.- export JAVA ADD-in in source system
5.- import JAVA ADD-in in target system
6.- post processing
I dont know if after step 2 I must install the Java ADD-in in target system ( the BW system is over ABAP+JAVA system).
or the import java add-in install the java component?
Regards,
Ernesto.

Hello Ernesto,
There are two ways to perform the system copy
1. Database Specific
2. Database independent
I beleive you are trying to do Database Independent system copy that is by creating export cd of source database and use them for system. For your environment which is WINDOWS + MSSQL on 6.40 SR1.
Please refer to documents
Homogeneous and Heterogeneous System Copy for SAP Systems based on SAP Web AS ABAP 6.40 SR1
Homogeneous and Heterogeneous System Copy for SAP Systems based on SAP Web AS Java 6.40 SR1
To answer your original question, You install the Java Add-In using the Java export on Target System. I have summarized the process flow below
From document "Homogeneous and Heterogeneous System Copy for SAP Systems based on SAP Web AS Java 6.40 SR1
check section 4.2 Database-Independent System Copy (Jload Procedure)
Process Flow for the Source System (Java Add-in)
On Source System: Windows
1. You run SAPinst to perform the Java export [page 64].
We recommend that you perform the export as a test run before you perform a productive run. Deselect the option Stop J2EE cluster before export on the screen Java System > Database Export when running SAPinst for a test run.
2. You run SAPinst to perform the ABAP export as described in the documentation Homogeneous and Heterogeneous System Copy for SAP Systems based on Web AS ABAP 6.40 SR1.
3. If required, you can run the SAPinst GUI in standalone mode to perform a remote system copy [page 86].
On Target System: Windows
1. You perform the ABAP import as described in the documentation Homogeneous and Heterogeneous System Copy for SAP Systems based on Web AS ABAP 6.40 SR1.
3. For more information, see Running SAPinst on Windows [page 64].
4. Java import: You install the Java Add-In using the Java export.
You must check the documentation Installation Guide u2013 SAP NetWeaver u201904 SR1 Java on <your OS> : <your database>, Part II u2013 Installation and Post-Installation for details concerning the installation of your database that cannot be covered by this documentation.
a. Central System: You run SAPinst to install the target system and perform the import [page 64].
Hope this helped you let me know if you still have concerns.
Thank you,
Praveen

SYSTEM account gets locked automatically

Hi,
Recently I started the oem agent on one of the box. Since then, the system account gets locked frequently.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times and I can see someone is connecting from terminal "pts/4".
Please help to resolve this asap.
Regards,
Harry

Please specify your OS and DB versions.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times
and I can see someone is connecting from terminal
"pts/4".It means someone is trying to hack the system account. I assume you have configure audit options so you can log where this attempts come from. Even though you have already realized attacks come from pts/4 it will only have sense if you are able to discover in the few minutes what's the actual terminal attached from pts/4. On the other hand, it sounds to me that someone opened a session in a unix like box, and is able to see the os where the database resides. If this is the case, look for the output from the os command 'last' to find out further information about pts/4. If this hacker has reached the OS, it is a serious matter, it could quite easily get signed to the database if it is OS authenticated.
~ Madrid

DB refresh on Netweaver 7.0 ABAP+JAVA system - Issue

Dear Folks
I am having an issue with starting the Java instance after system copy.
This is the situation
System QAS database was refreshed from system PRD.
Both the systems are on NW 7.0 Ehp1 SP 18, in a HPUX/ORACLE environment.
Our normal landscape is full of R3 systems so teh DBA's have been historically doing DB refresh by copying for teh Oracle fileystems and then renaming the schema and some post db refresh activities to get the DB in teh target system up and running. Pardon my terminologies I ma not a DBA. The abpove procedure has worked fine with R3 systems.
But with the above mentioned Netweaver system ABAP instance is running fine after refresh while Java instance is not since SMSICM-> Goto-> HTTP Server -> DIsplay Data is showing
HTTP Application Server Handler
ABAP Server operational        = TRUE
J2EE Server configured         = TRUE
J2EE HTTP port                 =
J2EE HTTPS port                =
J2EE Server operational        = FALSE
Default root access handler    = ABAP
URL Prefix Table loaded        = TRUE
There are no other dumps or errors in the system and teh startup logs do not show any error. I have looked up online and the System Copy Guide for 7.0 systems and I understand SAP recommends using sapinst. But I would like to know if there is a workaround to fix the j2ee instance.
I have seen a few forumns where people have had similar issues but no solution.
FYI, The the Instance_IDXXXXX in the SAP J2EE Engine- Config Tool in system QAS is that of PRD and there is no entry for the instance ID of the QAS system.
I have tried changing all the entries that are pointing to PRD under Cluster_Data-> Instance.properties.IDXXXX to that of QAS and saved and restarted but no luck as the Instance_IDXXXXX of QAS does not show up in teh config Tool menu.
All the properties files at teh OS level are pointing correctly to QAS, so I would liek to know if there is any way to change the config on eth DB level.
Thanks in advance.
sapkid

Hi,
When you go for ABAP+JAVA system refresh please always ose the JAVA export method .
Take the JAVA export of the source system with the help of sapinst.Check the j2ee_admin and the ddic password of source system.
then you need to get the offline backup of the Source system.
then import it on the target system wth the help of sapinst and in the middle it shall promt you to restore from the backup of the source system.
Always use this method as JAVA stores it file at file system level and in the database.So you need both the files .
Thanks Rishi Abrol

Impact of J2EE_ADMIN / Administrator user getting locked

Hi,
What is the impact of J2EE_ADMIN / Administrator user getting locked in abap / java engines? Will it effect startup of java server processes or java applications? What are the other implications?
Thanks,
Abdul

Hi Abdul,
if the J2EE_ADMIN or Administrator user is locked then
1. you cannot login to Visual Admin unless you define some other user with same authorization.
2. any Jco-RFC using this user won't work.
3. if you don't have any other user, you will have to activate SAP* user to unlock this user.
Thanks,
Sandeep

Domain Administrator account being locked up by PDC

Hi everyone,
My PDC is locking up my domain administrator (administrateur in french) account.
System event logs :
The SAM database was unable to lockout the account of Administrateur due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please
consider resetting the password of the account mentioned above.
Level : Error
Source : Directory-Services-SAM
Event ID : 12294
Computer : Contoso-PDC
User : System
There is absolutely no events in the security events log, not a single "Audit Failure" event for the "administrateur" account.
I tried to change the name of the domain administrator account from "administrateur" to "administrator".
Now there is "Audit failure" events poping up in the security event logs.
Once again the Source Workstation is the PDC. I guess those events are there because it receive credential validation for an account who doesn't exist anymore since it have been renamed in "Administrator".
Here is the detail log :
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: Administrateur
Account Domain: CONTOSO
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: CONTOSO-PDC
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
On the PDC i checked :
Services : None of them are started with the "administrateur" account
Network Share : There is no network share ...
Task Scheduler : None of the tasks are launch with the "administrateur" account.
And the logon type (3:network) seem to indicate that the login comes from an other computer but i have nothing to look for, not a single IP.
Any ideas?
ps : Sorry for the probable english mistakes :(

Hi,
Thanks for you answers.
San4wish :
Lockout tool confirm that the domain administrator account is locked on my PDC. I didn't run eventcomb but i though it only helped parsing security event logs which i did "manually". Anyway i'll try eventcomb after this week end.
About the conficker worm : I looked into it and this worm was exploiting a vulnerability in the server service. It have been patched by MS08-067 (KB958644) and this kb isn't available for Windows 2008 R2 and Windwos 2012 so i guess Windows 2008 R2 have
fixed this vulnerabilty.
So i doubt its a conficker type worm.
Also i gave the PDC role to another DC (let's call him DC2) and now DC2 is locking the administrator account so it seems that the computer locking the account is doing it through the network and it's not something executed on the DCs.

How to Changing Productive Client in an ABAP+Java System?

How to Changing Productive Client in an ABAP+Java System?

1. Log on to the ABAP system.
2. Call transaction SPRO.
3. Go to SAP Solution Manager Implementation Guide -->
SAP Solution Manager --> Basic Settings --> SAP Solution Manager
System --> General Settings --> Client Copy
4. Perform the following steps:
a) Maintain Profile Parameters
b) Create Client
c) Copy Client 000
d) Convert UME

J2EE logon groups in an ABAP+JAVA system

Hi,
We are trying to restrict java calls to specific App servers in our ABAP+JAVA system. So if we have 5 App servers, we want all J2EE requests to go to 3 Apps only.
We are using SAP web dispatcher for this purpose. When checking on SAP help site, it suggested two options.
1) Configuring Logon Groups on AS Java
2) Configuring Logon Groups Using Configuration Files
Which of the above would be a better option for ABAP+JAVA system?
Has anyone implemented this before? If yes, can you share your experiences/lessons learned??
Thanks.
Fahad

1. Log on to the ABAP system.
2. Call transaction SPRO.
3. Go to SAP Solution Manager Implementation Guide -->
SAP Solution Manager --> Basic Settings --> SAP Solution Manager
System --> General Settings --> Client Copy
4. Perform the following steps:
a) Maintain Profile Parameters
b) Create Client
c) Copy Client 000
d) Convert UME

ABAP+JAVA System Copy -- Administrator account getting locked

Similar Messages

Maybe you are looking for