Java-administrator password keeps getting locked

Hi,
We have a portal 7.3 in which the Java-administrator password keeps getting locked. I can't see anything in the log traces in NWA. The only thing I've found is in security_audit logfile which doesn't really say much:
#2.0 #2014 07 17 05:47:03:913#+0200#Info#/System/Security/Audit/PrincipalModification#
#BC-JAS-SEC-UME#com.sap.security.core.sda#C000AC142D1F08D90000000000003284#52888950000000002#tc~bl~txmanager~plb#com.sap.security.core.util.SecurityAudit#Guest#0#JTA Transaction : 127261#040FAA9B0D6511E4C5A4000003270576#040faa9b0d6511e4c5a4000003270576#040faa9b0d6511e4c5a4000003270576#0#Thread[RMI/IIOP Worker [0],5,Dedicated_Application_Thread]#Plain##
User account modified    | USERACCOUNT.MODIFY    | UACC.PRIVATE_DATASOURCE.un:Administrator    |     | SET_ATTRIBUTE: islocked=[true], SET_ATTRIBUTE: lockreason=[1]#
Please advice,
Thanks.

Hi,
there exists a trace location that should provide useful information for such cases. It is described in SAP note:
1493272 - A user gets locked automatically
My suggestion is add the location com.sap.security.core.userlocking as
specified in the attachment to the note and once it is added, set that
location to DEBUG and wait for the user to be locked again. Hopefully additional information concerning the origin of the bad credentials will be written to traces.
Exactly how you capture the traces depends on the frequency in which
the user becomes locked. For example if the user becomes locked every
few minutes, after adding the location in the configtool and
restarting the system, I suggest using the Security Troubleshooting
Wizard to do so. Refer to note 1332726 - Troubleshooting Wizard and
its attachments. Create a custom incident that is a copy of the
Authentication incident and add this location
com.sap.security.core.userlocking  to the newly created incident
Set the wizard to use this new incident for trace collection and wait
for the user to become locked. Then immediately stop the wizard's
trace collection
I
f the locking occurs less frequently than every few minutes, it is
preferable to use the NWA to adjust the severity of these locations
and their sublocations to DEBUG and wait for the issue to reoccur
com.sap.security.core.userlocking
com.sap.engine.interfaces.security
com.sap.engine.services.httpserver.HttpTraceRequest.traceRaw
com.sap.engine.services.httpserver.HttpTraceResponse.traceHeaders
com.sap.engine.services.security.authentication
com.sap.security.core.logon
com.sap.security.core.ticket
com.sap.security.core.util
com.sap.security.core.server.jaas
See Log Configuration with SAP NetWeaver Administrator
http://help.sap.com/saphelp_nw73/helpdata/en/47/af551efa711503e10000000a42189c/content.htm
Don't forgot to change these back to default severity levels after the
issue has captured in the traces
Regards,
David

Similar Messages

  • NWDI_ADM user keep getting lock

    Hi,
    We are having an issue with the NWDI, the user NWDI_ADM keeps getting lock and i am not sure what is locking the user.  I also receive this message when trying to access the activity in the CBS.
    #1.5 #001E0BEBCFF000760000005700001090000467BE96A6C2DD#1239968175774#com.sap.tc.cbs.server.rt.bs.BSAdmin##com.sap.tc.cbs.server.rt.bs.BSAdmin####n/a##8d5928812b4211decb67001e0bebcff0#Thread[CBS BSA Orc,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Java###
    [EXCEPTION]
    #3#Unable to instantiate a Build Space administrator!
    Build Space "JDI1_TESTJS_D" [bsID: 42, version: 1] [in-queue: on, out-queue: "on (queueing)", processing: on]#Unable to access repository. Authentication failed.#com.sap.tc.cbs.api.CommunicationException: Unable to access repository. Authentication failed.
         at com.sap.tc.cbs.api.impl.BSFacade.getOwnerBuildspace(BSFacade.java:526)
         at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.checkWorkspace(_BuildSpaceValidator.java:87)
         at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.validateWSs(_BuildSpaceValidator.java:57)
         at com.sap.tc.cbs.server.rt.bs.BSAdmin.validate(BSAdmin.java:183)
         at com.sap.tc.cbs.server.rt.bs.BSAdmin.updateState(BSAdmin.java:251)
         at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.determineChanges(BSAdminOrc.java:437)
         at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.validateBuildSpaceData(BSAdminOrc.java:217)
         at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.act(BSAdminOrc.java:339)
         at com.sap.tc.cbs.server.rt.impl.CourteousTimer.run(CourteousTimer.java:139)
         at java.lang.Thread.run(Thread.java:534)
    If you can help, that would be great.
    Thanks
    Jean Seguin

    Hi Jean,
    You can check NWDI_ADM user in your NWDI System & SLD System. To check where user is getting locked you can go to Visual Admin --> Server Node --> Security Provider --> User Management:
    Search for NWDI_ADM user and see when it was last locked. Perforn this on both NWDI & SLD system.
    To resolve this issue.
    1. Make sure you have same password defined in NWDI & SLD system OR
    2. Run configuration wizzard in NWDI System which will prompt you to enter password for NWDI_ADM user. TO do that please go to
    http://NWDIserver:<portnumber>:nwa --> Deploy and Change. From there run configuration wizard for CBS; CMS & DTR. and before doing this make sure you have correct password for NWDI_ADM user in SLD & NWDI System.
    What I generally do is keep same passowrd in NWDI & SLD system. Thats my way of doing thing and keeping less complications.
    Bhavin

  • PIDIRUSER & PIRWBUSER Keep Getting Locked

    After a recent XI system copy my PIDIRUSER and PIRWBUSER keep getting locked by the kernel.  I did not change the passwords from the system I copied yet this problem only occurs in the new copy.  In SM21 it shows that SAPJSF locks it with repeated invalid login/passwords.  It seems to occur every 20 minutes on the nose but I can't find any jobs that correspond to this timeframe. 
    I have been through the enchange profile a number of times and validated everywhere I can think of but I can't find anywhere in ABAP or JAVA where these users are embeded with the wrong password.  I have also restarted multiple times during the system copy process and once just to try to stop this occuring.  I've refreshed the caches, I've sync'ed with the SLD, I'm at a loss.
    Anyone have any ideas where to procede?
    Thanks
    Phil

    Thanks Moorthy,
    I have gone through and changed my passwords for these two users per note 721548.  Still the same issue is happening.  I am somewhat puzzled since I have no jobs running under either user (at least none that should cause 3 failed logins in 20 minutes).  Also, this is a relatively unused system with no developers logging on to use either the directory or the runtime workbench.  So I really have no clue what is causing these failures.  It is pretty clearly failing from Java trying to connect to ABAP but why?
    Thanks for your help, I'll keep this open in case anyone wants a good mystery.
    Phil

  • The J2EE_ADMIN is keep getting locked

    Hello,
    The J2EE_ADMIN is keep getting locked for some reason.
    I unlock it and after a while it is locked again.
    No one is trying to login with it so it can't be locked due to multiple wrong logins.
    What can be the reason for that?

    Hi,
          Open Visual Administrator in  Cluster> Server>Services-->Security Provider
    Go to Runtime - tab and then User Management. Search for the user "J2EE_Admin" and double click on the user name to get the user management property sheet. There you can find "No password change required". If it is not checked, please check that one. Then that password wont expire for every deployment.
    Hope this helps.
    Regards,
    Pooja.

  • My password keeps getting hacked, how can i disable my account and start a new one and not lose all the stuff I already have?

    Hi All,
    I need help, my password keeps getting hacked, and I keep changing the password, and changing all my security questions. I have changed everything I can. How can I disable my account, but not lose everything that I already have in there? Is this possible or do I have to start all over again?

    You might have some better luck if you call your country number from http://support.apple.com/kb/HE57 and ask to speak with the Account Security Team.

  • Administrator account keeps getting disabled in SAP BI 4 from time to time.

    Hi,
    I am working for Ericsson. Recently during a upgrade for a customer, we migrated from SAP BO XI 3 to BI 4 Platform. Everything is running fine, but the Administrator account keeps getting disabled from time to time. They need to login from any other account with Administrator rights to enable the Administrator account to resume operations. What can be done for this problem?

    Hi,
    Try to check if the administrators group have already enough rights.
    Also verify if one of the admin users is modifying the rights for the administrator.
    Best regards,
    Saloua.

  • E-mail password keeps getting rejected

    e-mail password keeps getting rejected, asks to reente for IMAP server

    Gustavo, launch Keychain Access. Go to "login" keychain and then "Passwords". Double-click the entry for this email account and place a check mark beside "Show Password". You will be asked for your login password but you should be able to see what the password for this email account was.
    Let us know if this helps. Cheers!

  • I've forgotten my administrative password and am locked out of my laptop. How do I get back in?

    I changed the administrative password on my Macbook Air and then lost my record of the password.  I had to shut down earlier today and now I can't get back in to the Mac Air.  What do I do to discover the password or go around it?

    OS X 10.7 Lion, 10.8 MountainLion & 10.9 Mavericks
    Reset Password using Recovery HD
    Boot into Recovery Partition.
    Start the computer,then press and hold down command and R keys to start into recovery partition.
    When you see the Apple logo, release the keys.
    Wait until  OS X Utilities window shows up.
    Move the mouse to the menubar at the top and click "Utilities", then select "Terminal"
    from the drop down.
    Terminal window will appear.
    Type in   resetpassword   and press enter on the keyboard.
    Leave the Terminal window open.
    Reset Password Utility window will open with Macintosh HD selected.
    Select the user account from the popup menu box.
    Enter a new password.
    Reenter the new password for the user.
    Enter a hint.
    Click the "Save" button.
    Click  in the menubar and select Restart.
    Log in.
    If Keychain dialog box appears, select “Create New Keychain”.

  • J2ee_admin keeps getting locked

    Hi,
    I changed the j2ee_admin password in both the secure storage of Java AS and in ABAP. Our SLD connection also seemed to use the j2ee_admin user in tx SLDAPICUST which I also changed but still it gets locked each time! SAPJSF user reports the locked j2ee_admin account in the syslog after awhile when unlocking it.
    Where else could j2ee_admin be possibly being used where I still need to change the password ? ..or any other log files on Java AS that could tell me of errors or give me more info ?
    Thanks!
    Regards,
    Nelis
    Sorry, not sure if this is the right place to post this question.

    Hello Neil,
    When you log into R/3 and go to transaction SU01 does the j2ee_admin user show up "locked"?    In addition to changing the password did you remember to unlock the user.  Also, you might try changing the user type from dialog to system in su01.  If you have a security policy that requires the password to be changed at first logon or after a period of time, this could cause the logon failures.  Changing the user type to system or communication type will avoid the forced password changes for j2ee_admin.
    If the issue continues to occur you should check the ./cluster/server#/log/defaultTrace.#.trc for exceptions regarding the j2ee_admin user.  Another useful log is the ./cluster/server#/log/system/security.#.log which will show details more specific to the security provider.
    Regards,
    Nathan

  • WAS Java Administrator password ok but logon to Visual Admin not working

    Hi,
    I've got a situation with one of our NW 7 Portal systems where logon to both the Portal and Netweaver Administrator application using the Administrator password is ok but the filesystem based visual administrator tool logon does not work with the same password. The correct passwordhas been set in configtool so the secure storage encrypted file is in sync.
    From the Java security trace files I can see that there may be a problem with the "Security Provider" logon ticket configuration as the message issues when the logon to the visual administrator occurs the following trace info is written :-
    nfo#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.OK
    User: Administrator
    Authentication Stack: SAP-J2EE-Engine
    Login Module                                                               Flag        Initialize  Login      Commit     Abort      Details
    1. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   SUFFICIENT  ok          true       true
    2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok                     false
    Central Checks                                                                                true                  #
    I've looked at the following SDN links on a similar issue but I'm not 100% sure the offline configtool process will resolve :-
    /people/shantanu.garg/blog/2009/03/17/offline-configuration-of-login-module-stack-with-configtool
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0bebd22-72f3-2b10-7eab-b93963e8edf2
    Can anyone suggest how best I can get access to the "Security Provider" settings to validate the correct settings are in place to enable the visual administrator to authenticate properly and connect.
    Regards,
    Brian.

    Another development !!!!!
    This is weird......
    I start the Visual Administrator and enter the correct password for the administrator user but get the "error while connecting" after a short while.
    I then enter a wrong password for the administrator user in my next attempt to start the visual administrator and get the "User authentication failed" pop-up straight away.
    I then try another connect using the correct password for the administrator user and..... it connects properly !!!!
    User: Administrator
    Authentication Stack: SAP-J2EE-Engine
    Login Module                                                               Flag        Initialize  Logout     Details
    1. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   SUFFICIENT  ok          true       true
    2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok                     false                 #
    #1.#00144FEBC438005E00000003000012FF00049DA77E66D57A#1299242612610#/System/Security/Authentication##com.sap.engine.services.security.authentication.logincontext#Administrator#1050##n/a##0385a932465d11e0a533000000d1065b#SAPEngine_Application_Thread[impl:3]_28##0#0#Info#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.OK
    User: Administrator
    Authentication Stack: SAP-J2EE-Engine
    Login Module                                                               Flag        Initialize  Login      Commit     Abort      Details
    1. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   SUFFICIENT  ok          true       true
    2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok                     false
    Central Checks                                                                                true                  #
    #1.#00144FEBC438007500000000000012FF00049DA77F5BE8EC#1299242628671#/System/Security/Authentication##com.sap.engine.services.security.authentication.logincontext#Guest#0##n/a##0d184332465d11e084b9000000d1065b#SAPEngine_Application_Thread[impl:3]_17##0#0#Info#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED
    User: N/A
    Authentication Stack: SAP-J2EE-Engine
    Login Module                                                               Flag        Initialize  Login      Commit     Abort      Details
    1. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   SUFFICIENT  ok          exception             true       Authentication did not succeed.
    2. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          exception             true
    Thius means I can at least get access to the Visual Administrator but I can't explain at the moment why this strange behaviour is happening.
    Brian.

  • Password keeps getting reset.

    Hi there.
    I've had my password been reset about 20 times in the last few months, not by me. I keep getting emails saying that my password has been reset without my consent. I've changed the password back every single time, each time making it increasingly obscure. I've also changed all my security questions to almost impossible to guess answers even by my close family.
    I'm now starting to believe that somebody is either hacking my account or my computer has contracted some sort of virus.
    This issue is making me absolutely livid. It's a real nuisance.
    Any suggestions very welcome.
    Charlie.

    I'm assuming that you're talking about your Apple ID password? Most likely, these e-mails either represent a phishing attempt, in which case there's nothing to be done but send them to your junk mail folder, or someone is repeatedly trying to reset your account password. To rule out the latter, enable two-factor authentication on your Apple ID, which will prevent any password reset attempts without providing some additional authentication.

  • Keep getting invalid password, keep getting invalid password

    I keep getting invalid password.  I haven't changed it, worked 10minutes before, no I have to wait 60 minutes to use.  What do I do? I know my password is correct.

    Hello Bullsfan133,
    I'm disappointed to hear that you've had trouble signing in to your BestBuy.com account. This is absolutely not the stellar experience that we strive to provide and I regret any frustration you've incurred and inconvenience you've endured as a result.
    I will be happy to look into this situation for you, but will need some additional information to begin, so please watch for a private message from me. To check your forum inbox, ensure that you have signed in with your user name and password, then click on the envelope icon in the upper right of this page.
    I look forward to working with you and am grateful that you brought your concerns to our attention.
    Sincerely,
    John|Social Media Specialist | Best Buy® Corporate
     Private Message

  • Why do my HTTPS proxy password keep getting deleted?

    I use my MAC on a corporate network
    in order to access the internet I have to do it via a proxy server. I have set the proxy settings against the Network interface, but it keeps getting deleted, so that I have to retype it.
    can anyone let me know why this happens and what I can do to solve it so that I do not keep putting in user name and password.
    Cheers

    In your calendar app, in the bottom middle there's the words 'calendar'. Tap on that and make sure your iPad's internal calendar is selected. What happens sometimes with mine is that it defaults to my synced calendar and not the internal one, so my internal one is there just not visible.

  • I am attempting to make my first purchase in the App store, yet it is asking me security questions I know I didn't enable and I keep getting locked out of my account despite resetting everything.

    This usually wouldn't pose to be a problem, but I am a college freshman and I just redeemed my $100 giftcard to the app store. I am beyond frustrated and don't know what to do.
    It is my first time making a purchase off of this Mac with this account, so it is asking me two security questions. It keeps asking me who my favorite and least favorite teachers were. I know for a fact that these are not the security questions I enabled, so I went in to change them again and logged out of everything. I logged back in and I was getting the same thing from the App store -- it was asking me questions I didn't enable. I've been locked out of my account for eight hours twice and all of my Mac's information is at home and not easily accessable to me, so I don't want to have to call and be asked for information I do not have.
    What do I do? I need some crucial apps for classes that start in less than fourty-eight hours from now?
    I have changed my appleID's information three times now: passwords, rescue email, and of course, my security questions. I am at my wits end and not pleased that I will possibly be losing $100!

    You've been hitten by Apple's recent SNAFU. I fear you are SoL until their pending investigation fiasco is over with.

  • Email password keeps getting dropped

    This is annoying but on my Q10 the unit keeps losing my email password and I have to go to setting and continue reentering it.
    This is really annoying!
    How do I stop this.
    It happens about maybe once or twice every few weeks.
    I check the Q10 for email and it says it can not connect to my email server.
    So I reenter the password.
    Comments?????

    when you switch to wifi earthlink requires a different server and that could be the reason for it
    best solution IMO is to use Outlook.com and have it fetch your emails from earthlink or have earthlink forward them to outlook.com
    nice feature is you wont lose any emails, get a better way to do email and can you Outlook program to connect to Outlook.com. that way you can backup emails, sync contacts and even sync calendar. Your device is able to active sync to get your emails and works a lot better than POP or IMAP
    Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
    Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
    Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
    BESAdmin's, please make a signature with your BES environment info.
    SIM Free BlackBerry Unlocking FAQ
    Follow me on Twitter @knottyrope
    Want to thank me? Buy my KnottyRope App here
    BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

Maybe you are looking for