Communication User Locked..

Hi All,
Can you plz provide the information for this problem.
How does a communication user gets locked & what could be the root cause for that problem?
Thanks & Regards
Srinivas K

Hi Srinivas,
Reasons for this:
1) Somebody has changed the password of the communication id
2) An RFC defined to refer that client has an incorrect password in SM59 for that Comm. id.
>
Srinivas K wrote:
> a) If the password for the communication user has been expired, then do we need to reset it by using SU01?
>
Passwords for Communication users do not expire. Yes, SU01 is the way by which you change passwords, even for communication users. As mentioned earlier, its a bad idea changing the password of a Comm. user, as all other RFC's referencing to that client will have to be updated with the correct credentials.
> b)"Communication users details not changed in all RFC communication configuration"---> I couldnt understand this, so could u plz provide some more information regarding this.
>
> Can we get information in ST05, with related to this problem?
Debug the issue more. Look at the change documents of the Comm. user. See if anyone has changed the password. If not, then there might be a possiblity that some RFC referencing to that client has the incorrect details. ST05 is not what you are looking for. Look at SM20N (AIS) for the details.
Do not change Comm. users to Service type! Comm. users normally have broad authorization, making it a service id is a heavy risk as SAP GUI access will be opened up!
You might want to post/move this to the security forum
Thank you
Abhishek

Similar Messages

Communication user locking

Hi Experts,
We recently have an issue where communications users were locked for upgrade activity.
After upgrade was over,these users were unlocked.
Now when the users go to the application,they get "password has expired".
Is it that locking and unlocking of communication users always lead to this issue?
Peeyush.

Yes,
All RFC /CUA push is happened thorugh communication users only.
<striked through incorrect information by moderator>
Edited by: Bernhard Hochreiter on May 5, 2010 7:27 AM

RFC user locked for guixt

Hi,
The communication user for guixt keeps getting locked. The RFC username & encrypted password are in the guixtrfc.ini which is distributed to each user PC. I'm thinking that somebody tried to edit the guixtrfc.ini & changed the encrypted password.
I need a method to either find out which front end PC has the bad guixt.ini or prevent the communication user from being locked (not all user accounts).
Thanks.
Stephen S.

Hi,
Thiugh am not exposed much to guixt the following document may help you to resolve your prob. Pl have a look.
http://www.synactive.com/download/sap%20gui%20scripting/sap%20gui%20scripting%20security%20settings.pdf
regards

BPC 7.5 NW- error 'Name or password of RFC Communication user is invalid '

Hi
Environmen: Win 2008 R2, CPMBPC 7.5 SP09, BW 7.2 Sp09, .NET BPC 7.5 SP09
I just completed installing .NET BPC 7.5 and when I try to open BPC Server manager, i get "cannot coonect to ABAP server' error.
When I try to open the website http://localhost/osoft I get the error "name or password of RFC communication user is invalid".
I see the same error in the BPC logs as well.
I have the tried the following so far:
1. Created single domain user for the three communication users BPC_sysadmin, BPC_admin & BPC_user.
2. I momentarily changed to dialog users and logged in to check their fucntioning.
3. I have generated their relevant profiles. Inlcuded SAP_ALL, SAP_NEW for the sysadmin ID
4. I have disabled firewall, allowed port 80 on Windows firewall.
5. I have disabled UAT
6. I have followed the rest of the installation as per inst guide.
When I run BPC server manager diagnostics, I see error "SAP ABAP server connection:database connection:status error".
Can someone tell is there anything else that I could try ?
many thanks
Sreekanth

Hi,
If when you launch BPC Server Manager, you do not get "Cannot connect to ABAP server", this means user BPC_SYSADMIN is connecting correctly. And assuming you had invalid RFC user in BPC Web, your issue is then only with user BPC_USER (or BPC_ADMIN if the issue is with BPC Admin client only)
If you do get that error, it means the error is for more than one user, so I would look for something big missing.
In point 1 you mention domain users, make sure in BPC Server Manager under "reset login credentials" that you do not have windows users specified there as it's a common mistake, those should be your 3 BW communication users
On BPC .Net server, if you installed SAP GUI, run an MDX_PARSER test in SM59 to check librfc32.dll is working correctly
Also quite common issue it is possible your background users have wrong authorizations; in PFCG check the roles SAP_BPC_SYSADMIN SAP_BPC_ADMIN and SAP_BPC_USER were copied to customer namespace and that the role are active (user tab should be displaying green light) and assigned to the background communication users
Also check the background users are not locked in SU01 (if they are locked the password saved on .Net server was or is not matching the real password defined on NW server)
Thanks,
Julien

BW...User Locked

Hi,
I am working on weekend to carry out dataloads....
In RSA1>Source System>context menu ---check
I am getting error message
'User Locked'
How shall i proceed now
Please advise
Thanks

Hi ,
Check out the previous threads on your issue. Following Points would be helpfull to resolve your issue.
1) Ask your Basis team to release the user.It is mostly ALEREMOTE.
2) Password Changed
3) Nimber of incorrect attempts to login into ALEREMOTE.
4) USE SM12 tcode to find out are there any locks.
5) Look at OSS Note 316329
Check out the previous threads on your issue.
/community [original link is broken]
/community [original link is broken]
/community [original link is broken]
Assign Point if you finf it usefull.
Regards
Sujan

When I try to sign in to the support community using one of my email addresses it asks for my apple support community user name and when I type in what I think it might be I get one of several messeges Ie. An account using this e-mail address already exis

When I try to sign in to the support community using one of my e-mail addresses and I put in nothing or what I thought was my apple support community user name I can get one of several messages
Ie.1. Please specify a user name
2.An account using this e-mail address already exists; only one account per e-mail address is allowed on Apple Support Communities
How do I find out what my Apple Support Communities user name is

Good luck with this!!!
EVEN USING what WAS my Username, this is the exact problem I am having having entered my correct ID and Password.
Rgds
Rod

LOCKS checking user locked and SQL that he is executing

Hello all,
I have this script that inserts into a table the user causing the lock and the users waiting for the lock to be released.
What I would like to add into this the script is the SQL string that the user causing the lock and the users waiting for the the lock to be released are executing.
Can you help me on this?
Script that I have now:
insert into dba.sessions_bloq
select sysdate "Data", w.sid "SID E", s1.username "User E", s1.osuser "OS User E", s1.machine "Maquina E", s1.program "Programa E", s1.logon_time "Logon E",
s.ksusenum "SID B", s2.username "User B", s2.osuser "OS User B", s2.machine "Maquina B", s2.program "Programa B", s2.logon_time "Logon B"
,decode(r.ksqrsidt,
''MR'', ''Media Recovery'',
''RT'', ''Redo Thread'',
''UN'', ''User Name'',
''TX'', ''Transaction'',
''TM'', ''DML'',
''UL'', ''PL/SQL User Lock'',
''DX'', ''Distributed Xaction'',
''CF'', ''Control File'',
''IS'', ''Instance State'',
''FS'', ''File Set'',
''IR'', ''Instance Recovery'',
''ST'', ''Disk Space Transaction'',
''TS'', ''Temp Segment'',
''IV'', ''Library Cache Invalidation'',
''LS'', ''Log Start or Switch'',
''RW'', ''Row Wait'',
''SQ'', ''Sequence Number'',
''TE'', ''Extend Table'',
''TT'', ''Temp Table'',
r.ksqrsidt) "Tipo Lock"
from gv$session_wait w, x$ksqrs r, gv$_lock l, x$ksuse s, gv$session s1, gv$session s2
where w.wait_Time = 0
and w.event = ''enqueue''
and r.ksqrsid1 = w.p2
and r.ksqrsid2 = w.p3
and r.ksqrsidt = chr(bitand(p1,-16777216)/16777215)||
chr(bitand(p1,16711680)/65535)
and l.block = 1
and l.saddr = s.addr
and l.raddr = r.addr
and s.inst_id = userenv(''Instance'')
and w.sid = s1.sid
and w.inst_id = s1.inst_id
and s.ksusenum = s2.sid
and s.inst_id = s2.inst_id;
Thanks in advance

You can link to:
gv$sql
gv$sqltext_with_newlines
but, if doing this in a trigger, also look at these:
http://www.psoug.org/reference/system_events.html

Creation of Communication users in CUP

Hi,
Is it possible somehow to manage the creation of a non dialog user (i-e: communication) using CUP after the relevant request has been ended and approved?
Thanks in advance. Best regards,
Imanol

Imanol,
here's what you need to do:
Create a custom field "User Type" with the following values:
A - Dialog User
B - System User
C - Communication User
L - Reference User
S - Service User
(or at least the ones you need...)
Make "Dialog User" the default.
Then create a mapping in Field Mapping - Provisioning where you map this to the R/3 field "User Type" for the systems that you want to create non-Dialog users in.
Hope that helps,
Frank.

Initial password expires:Communication Users

Hi All,
I have created one user for early watch alert generation purpose user password expires every 15 days :
Defined profile parameter is:login/password_max_idle_initial:14
As per my understanding communication user password never expires.
Kindly please suggest me
Thanks in Advance
Regards
Nekkalapu

Hi Siva,
Thanks for you response.
But it will effect to all the users right,sap also is not recomending to put 0 value this parameter.
Is their any other way to resolev this issue.
I am using communication users for generating earlywatch laerts.
Advance thanks
Regards
Nekkalapu

Query SAP BW via BO universe - Dialog user / Communication user

Hi,
Context: XI 3.1 Web Intelligence on top of SAP BW.
Can a communication user be used in the universe connection? or does it need to be a dialog user?
Possibly the following post already gives the answer:
Change BEX query to run in background process instead of dialog?
Terminology used there is slightly different, we just want to be sure.
Thanks!
Raf

Hi,
I just tried it with User Type = Communications data and with User Type = System. Both of them worked fine and I was able to display the queries/infocubes from BW.
Hth.,
Jacob

Configuration scenario currently being edited by user" & locked

HI all,
Appreciate your help on this object locks;
I was changing some configuration scenarios in integration Directory - suddanly lost the internet connection;
Now when i try to change it says "configuration scenario currently being edited by user" & locked
I appreciate if you help me to remove these lock objects
Thanks
Iver

Hi,
Go to administration -
Select appropriate option out of these - > repository/ Directory
now select LOCK OVERVIEW.
now you will get all the locked objects by any user.
Now focus on locked object which you want to realese
now press Button Release Lock .
Hurray !!! locks are released.
Hope this helps .....
regards
prabhat Sharma.

Use of communication user in RFC of HCM process types

Dear All,
I have created an HCM-PA package, and when used a communication user in the RFC it gives me the error that no data exists for your user in the Transfer selection criteria activity (This is not an issue with defining target areas I have confirmed)
I then used my ID ( a dialog user) and it works well. However, now I want other users (about 10) to be able to run their respective packages. Does that mean I have to add each of these 10 users to the RFC? How can I resolve this without having to use their ID in the RFC maintenance?
Thanks
Harmeet

Hi Harmeet,
the easiest thing to do is to define a CPIC user in your receiver system destination and then to use the customising activity "Set technical switches". Here you can set a switch called SND_LOGON to the value 'X'. When you do this, the person who calls the transfer program with the activity "Transfer Selection Criteria" must explicitly log on using their own sender system user.
This method means that the user must have the correct HCM authorisations and prevents that a dialogue user is defined in the RFC definition (which, of course, anybody could use).
Hope this helps.
Gerard.

WebService Call Fails for Communication Users

Hi
I am calling a BAPI through web service in VB.NET windows application.
The application works fine with Dialog users but when I use Communication User then it thows this message.
The Request Failed with HTTP Status 401: Unauthorized
Where as if i call the same BAPI through RFC with for this Communication User it is successful.
What can be the reason ?
Regards
Rajendra

The Web Service uses the HTTP protocol, whereas the BAPI is using RFC protocol.
The reason for the "unauthorized" error in HTTP is that you need to embed the user / password combination into the web service URL (assuming you have set the Web Service authentication method to user / password).
Regards,
D.

Is Communication user recommended to access Webdynpro ABAP?

Hi,
I don´t know if somebody knows if we can recomend the client to use a communication user type for accesing Webdynpros for ABAP, can this cause some licence problems? or communication users can be used by final users without a problem?
Hope somebody can help!
Thanx in advanced!
kind regards,
Gerardo J

Hi Gerardo,
main difference between dialog and communication user is the access via SAPgui. The license still depends on the role of the user not the user type.
Property \ User Type            Dialog Communication   System Service
Dialog logon (SAP GUI)          X       -               -       X
Multiple logons                 -       X               X       X
RFC logon                       X       X               X       X
Background job execution        X       -               X       X
Password change                 X       X               -       -
Logon ticket can be generated   X       X               -       -
Probably you mean "named user" and "anonymous user". For this Q you always have to ask your SAP sales person (because it depends...)
Hope this helps a little bit.
Best regards, Uwe

JCO authentication through communication user password expiry problem

Hi,
We are using communication user for accessing our metadata. As per help.sap.com the authorizations for this user must be set in the backend so that this user can access all DDIC function modules.I have doubts as follows
1. What are the Roles in R/3 we need to assign to the user to access DDIC function modules.
2.As per our company IT policy, The default settings in R/3 for change of initial password is 3 days. After 3 days the password gets expired? Which user are we supposed to use for jco Communication user, system user, or service user? plz clarify.
Regards,
Sreeram

Hi Sreeram,
For the JCo user for defining the metadata can be a service user. with jsf communication authorization.
hope this helps
-Madhu

Communication User Locked..

Similar Messages

Maybe you are looking for