Do XI service users have to exist in the SLD with the same password?

Question

Hi All,
Do XI service users have to exist in the SLD with the same password?
We have a 3 system(development, QA and production) XI landscape with a single SLD. All systems are NW04s with support stack 9.
We are required to change XI service user passwords. I have found OSS note 936093 for changing these passwords. What I am not sure of is if I can change XI service user passwords one system at a time. I am under the impression that XI service users must exist in the SLD with the same password as the XI system. If this is correct, I have to change service user passwords in all three systems at the same time which is not very feasible.
Thanks,
Hamid Lashgari

Answer 1

Creation and Maintain Users
For the transport of Integration Server content, it is a good idea to install CMS on an
existing Integration Server. In this double-stack scenario, where an ABAP and J2EE
stack is used, user management is different from a J2EE only installation.
Note: For more information about using CMS on a J2EE only installation, see the
CMS documentation.
The following section describes the double-stack user management settings required
when CMS is running on the Integration Server in the development environment. See
Figure 2. The description we provide starts with ABAP user management and is followed
by the maintenance in J2EE User Management Engine (UME). You proceed as follows:
• Create the service user LSADMIN using transaction SU01.
• Assign the ABAP roles SAP_XI_CMS_SERV_USER and
SAP_SLD_ORGANIZER to the LSADMIN service user.
• Create the ABAP role SAP_CMS_ADMINISTRATOR and assign this role to the
ABAP dialog user(s) responsible for CMS administration.
• In UME, create the role CMSDeveloper with the actions CMS.Display and
CMS.Export.
• In UME, create the role CMSAdministrator with the action CMS.Administrate.
• In UME, assign the users representing “xirepuser” and “xidiruser” to the role
CMSDeveloper.
• In UME, assign the group SAP_CMS_ ADMINISTRATOR to the role
CMSAdministrator.
• Log on to CMS with the ABAP dialog user responsible for CMS administration.
• Maintain the CMS service user (LSADMIN) for the domain.
Task XI Dev
With CMS XI Test XI Prod
Create the service user LSADMIN in TA using transaction
SU01. Yes Yes Yes
Assign the ABAP roles SAP_XI_CMS_SERV_USER and
SAP_SLD_ORGANIZER to the LSADMIN service user. Yes Yes Yes
Create the ABAP role SAP_CMS_ADMINISTRATOR and
assign this role to the ABAP dialog user(s) responsible for
CMS administration.
Yes No No
In UME, create the role CMSDeveloper with the action
CMS.Display and CMS.Export.
Yes No No
In UME, create the role CMSAdministrator with the action
CMS.Administrate.
Yes No No
In UME, assign the group SAP_CMS_ ADMINISTRATOR to
the role CMSAdministrator
Yes No No
Log on to CMS with the ABAP dialog user responsible for
CMS administration.
Yes No No
Maintain the CMS service user (LSADMIN) for the domain. Yes No No
Figure 4: Overview of User Management Tasks in Different Systems