Limited login in multiple logon blocked condition

Hello Expert
we are using ECC6.0 EHP4, we blocked multiple logon on PRD system but now want to allow multiple loggin on some ID
but apart from that we also want to resrtict no total no. of logon session by 4 only.
suppose USER1 is SAP ID on which we want to permit multiple logon with this permission we also want to restriction as only 4-5 logon session are allowed (on the same front-end system or different-different front-end system) for this SAP ID.
plz help us to get this.
best Regards
Deepak Singh

Hi Deepak,
Refer SAP Note # Note 142724 - Prevention of multiple SAPGUI logons
you can disable multiple user login acrocss SAP instance via profile parameter :login/disable_multi_gui_login =1
however , further you can add exception list via SAP profile parameter:login/multi_login_users= <userID>
as per your requirement , you further want restrictions by allowing above exception list with only 4 sessions , which you can control via SAP profile parameter : rdisp/max_alt_modes = 6
pls check if it works , but mind changing SAp profile parameter requires SAP system restart to reflect changes
Regards,

Similar Messages

How to block the multiple logons with NWBC?

Hello,
With Sapgui we have the possibility to prevent the multiple dialog logon by profile parameters (login/disable_multi_gui_login).
How to prevent the multiple dialog logon using NWBC to the same system?
Best regards
Frédéric Blaise
e-Kenz S.A.
Luxembourg

Hello,
I opened a ticket at Sap but unfortunately they do not have a solution even if the problem is known.
"Unfortunately, due the HTTP protocol nature, is not possible to force a single logon via web browser. The profile parameter login/disable_multi_gui_login is solely valid for SAPGUI logons."
"Since this case is known since the Web Application Server was created, I am pretty convinced that SAP knows about the fact that multiple logons cannot be blocked (you can only give a warning for the user)."
Since we monitor multiple connections with the SM04 transaction and notify customers that they may be controlled by Sap.
Best regards
Frédéric

RT jitter! Can multiple reads to a variable / cluster cause a blocking condition?

Howdy do.
While incrementally developing and testing an application on a crio9068 (linux RT) I've begun to see the 'finished late?' indicator in my main timed loop flicker. Starting to pull my hair out trying to figure out how to prevent this from happening. I made a 'hold max' vi and can see the longest execution time for each frame.
The application runs fine at about 75% processor load with the front panel open, and the majority of iterations execute in time. Occasionally, I'll have a 'spike' in execution time, and all four frames in the timed loop take significantly longer than normal to execute, and the 'late' indicator says so.
A couple questions I've had build up while chasing this:
-If I use local varables to pass data between loops, but only write to the variable in one place, can I still cause a blocking condition/jitter by competing reads of that memory space?
-If I use an FPGA read/write node to pass data between the timed loop and the FPGA, should I expect this to cause a problem? I selectively disabled a lot of my code, and it seems like this is where some of the delay occurs. What stumps me is that these parts of the code haven't changed in recent development and the thing never used to run late.
-On the topic of the FPGA read/write node, I previously assumed that I shouldn't write to the same FPGA FP item in different subvis. However, the code is set up so that there are multiple parallel calls to the read/write node, just with different elements selected. Is this BAD?
-Similarly, if I unbundle and read the same element from a cluster control in a 'parallel' fashion, can this cause a blocking situation, or is it the same as unbundling and wiring from there to multple places?
-I am using the recently renamed "NI software calibration and management toolkit (SCM)," formerly Drivven CalView, to handle communication between the RT and a windows host. It also does neat fault management stuff. Anybody else using this, and is there any possibility I'm getting jitter by having too many calpoints in my deterministic loop?
Any guidance on any of the above points would be greatly appreciated. If I don't make sense on any of the above points I can make example snippets to describe.
Solved!
Go to Solution.

Tom,
Thanks for your input(s). I'll stop obsessing over the local variables and the branched cluster wires for now.
I didn't realize that all the code in the timed loop would be serialized beyond normal execution. In fact, this brings up another question I have. Somewhere I read that the overhead of multithreading would cause an issue. Since the 9068 has two cores, I had previously been setting the CPU selector in the timed loop to 'automatic', which seemed to load both cores roughly equally. Doesn't this mean that the process is being multithreaded? Funny thing is that even when I do select cpu 0 or cpu 1, they both are roughly equal in utilization while the timed loop is running.
The period for the timed loop is set at 15ms, and the execution of all the frames usually occurs in less than 10ms. After several seconds I'll get a 'spike' in execution time, and it will take 20-30ms to complete an iteration. I'm not positive if my benchmark is valid, but if I look at the execution time for each frame and 'hold' the maximum time, it seems like they all (four frames) take extra time at this one instance. So that hasn't helped to narrow it down much.
It sounds like you have a method in mind for 'caching runtime data'. If you can point me in a good direction to gather more information about what the thing is doing it would help. I have run a strip chart of execution times, attached.
How much should I expect having the front panel open will affect the determinism of the loop? I realized it added overhead, but since the overall CPU load is less than 60% (each) with all the bells and whistles (other loops) disabled, I thought it wouldn't be having an effect like this.
Again, thanks for throwing ideas around, it really helps.
Matt
Attachments:
iteration execution.png ‏16 KB

Multiple Logon in Production

All,
I am trying to understand the actual risk of allowing users multiple logon in production systems. As of now I believe that should logon credentials be stolen then it's not possible to monitor illegal logons and also a possible data inconsistency.
Please throw some light, have tried searching with the logon profile parameters in the forum and online, but nothing concrete found.
Kind Regards,
AJS

Hi Avinash,
Production system should not allow multiple logon.
Please have a look at below for restrict multiple logins :-
[Restrict multiple logins for a single user in Portal |/message/6942923#6942923 [original link is broken];
[Limiting Number of Users Logged On |http://wiki.sdn.sap.com/wiki/display/EP/LimitingNumberofUsersLogged+On]
Hope it helps
Regards

How to restrict login for multiple users having same Role

Our Web Application is deployed on Tomcat 5.5
The requirement is ?
There are roles in application like "operator", "admin"?
There are multiple users created for each of the above role.
When one user of "operator" role is logged in, then
It should not allow to login for another user of "operator" role.
Also, if user did not log out & application gets close, then
It should not allow to login for another user of "operator" role.
Also, it should not allow to login for multiple requests of same user
(using another browser instance...)
Is it possible using session object?
But, using session object, it will create separate objects for different users,
So here I will not be able to restrict session object creation rolewise.
Also, how to retrieve these multiple session objects created for different users on server?
If anyone is having the solution please reply as soon as possible,
Thank you.

To tell you the truth, this is a stupid requirement. It must be an extremely fragile application.
In any case, you will have to write your stuff for that. Probably a filter that on login, logout, and session expiration checks, makes, or removes entries in a DB (using a synchronized resource to prevent race conditions) or possibly even simply in an application context object.

Prevent the same user login on multiple computers at the same time

prevent the same user login on multiple computers at the same time

Is there any way (currently running 2012 Servers) that we can prevent users from logging into multiple domain computers simultaneously with the same username?
We still want them to log into those computers, just not simultaneously?
LimitLogin utility not work in Windows 2012 server.
Thanks.
Babu
Unfortunately Windows has never offered this feature as a built-in feature, but there are several possibilities discussed in these articles:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/0103b5e7-0db5-4fb4-bfe7-d7132983880a/limit-concurrent-logins-on-a-ws-2008-environment
http://www.edugeek.net/forums/windows-server-2008-r2/61216-multiple-logins.html
http://windowsitpro.com/windows/prevent-multiple-logons-gpos
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Logon Block Like SDN Logon Block

Hi,
We've added an Anonymous Page to our portal and we need to add a logon block same as SDN Logon Block on Left. We need this, as we do not want to use Login Link on MasterHead.
We've created a new layout which consists of 4 columns. We need this login module to be displayed in left column at up position. As the annoymous page will be accessed by Registered users, login block must disappear after successfull logon.
I tried to edit the layout jsp file and add the following code into it but not successful as Java knowledge is lack.
Does anybosy have an idea?
<%@ page session = "true"%>
<%@ taglib uri="prt:taglib:com.sap.portal.reserved.layout.TagLibHtmlb" prefix="hbj" %>
<%@ taglib uri="prt:taglib:com.sap.portal.reserved.layout.TagLibLayout" prefix="lyt" %>
<%@ page import = "com.sap.security.core.sapmimp.logon.*" %>
<%@ page import = "com.sap.security.core.sapmimp.rendering.Browsers" %>
<%@ page import = "com.sap.security.core.util.taglib.EncodeHtmlTag" %>
<%@ page import = "com.sap.security.api.UMFactory" %>
<%@ page import = "com.sap.security.api.logon.IAuthScheme" %>
<%@ page import = "com.sap.security.api.logon.ILoginConstants" %>
<%@ page import = "com.sap.security.api.UMFactory" %>
<jsp:useBean id="languages" class="com.sap.security.core.sapmimp.logon.LanguagesBean" scope="session"/>
<jsp:useBean id="logonLocale" class="com.sap.security.core.sapmimp.logon.LogonLocaleBean" scope="session"/>
<jsp:useBean id="logonMessage" class="com.sap.security.core.sapmimp.logon.LogonMessageBean" scope="session"/>
<jsp:useBean id="logonBean" class="com.sap.security.core.sapmimp.logon.LogonBean" scope="session"/>
<jsp:useBean id="error" class="com.sap.security.core.util.ErrorBean" scope='request'/>
<%@ include file="/logon_proxy.txt" %>
<lyt:template>
    <hbj:content id="myContext" >
        <hbj:page title="Portal Page">
            <hbj:gridLayout   id="GridLayout1" width="100%" cellSpacing="2">
                <hbj:gridLayoutCell rowIndex="1" columnIndex="1" width="30%" verticalAlignment="top" horizontalAlignment="center">
     <% if(!inPortal) { %>
                      <hbj:form
                      id="logonForm"
                      method="post"
                      target="_self"
                      encodingType="multipart/form-data"
                      action="http://temepdev.temsa.com.tr:50000/irj/portal"
                      >
<input name="no_cert_storing" type="hidden" value="on">
                    <hbj:textView id="message"
                    text="Kullanıcı"
                    design="HEADER4"/>
                    <hbj:inputField
                    id="j_user"
                    type="String"
                    invalid="false"
                    width="50"
                    value=""
                    visible="true"
                    disabled="false"
                    required="true"
                    maxlength="30"
                    size="50"
                     >
                    </hbj:inputField><br>
                    <hbj:textView id="message"
                    text="Şifre"
                    design="HEADER4"/>
                    <hbj:inputField
                    id="j_password"
                    type="String"
                    invalid="false"
                    width="50"
                    value=""
                    visible="true"
                    disabled="false"
                    required="true"
                    maxlength="30"
                    size="50"
                     >
                    </hbj:inputField><br>
                     <hbj:button
                     id="uidPasswordLogon"
                    text="Giriş"
                    onClick="onYetAnotherStateButtonClicked"/>
                     </hbj:form>
     <% } else { %>
                         <hbj:textView id="message"
                    text="Portal'e Giris Yapmissiniz"
                    design="HEADER4"/>
     <% } %>
                    <lyt:container id="column1" />
                </hbj:gridLayoutCell>
                <hbj:gridLayoutCell rowIndex="1" columnIndex="2" width="20%" verticalAlignment="top" horizontalAlignment="center">
                    <lyt:container id="column2" />
                </hbj:gridLayoutCell>
                <hbj:gridLayoutCell rowIndex="1" columnIndex="3" width="30%" verticalAlignment="top" horizontalAlignment="center">
                    <lyt:container id="column3" />
                </hbj:gridLayoutCell>
                <hbj:gridLayoutCell rowIndex="1" columnIndex="4" width="20%" verticalAlignment="top" horizontalAlignment="center">
                    <lyt:container id="column4" />
                </hbj:gridLayoutCell>
            </hbj:gridLayout>
        </hbj:page>
    </hbj:content>
</lyt:template>

Hi,
Did you get information about?
I Want to do the same..
Thanks
JUAN

Multiple logon screen doesnt appear and session end in 30mins

Hi all,
I have a problem with my login session.
Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
thanks.

Check these parameters
login/disable_multi_gui_login
Controls the deactivation of multiple dialog logons
Available as of SAP Basis 4.6
login/multi_login_users
List of excepted users, that is, the users that are permitted to log on to the system more than once.
Available as of SAP Basis 4.6
Find the full list of relevant parameters at:
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

Multiple Logon disable

Dear All ,
while multiple logon are performed.SAP pop-up a message with 3 options
1.terminate logon
2.continue with the logon
3.continue with the logon terminating other sessions.
Here we Want to disable the 2 option that is : continue with the logon.
Here we came to know : we can add the following parameterto the instance profile
logon/disable_multi_gui_login
Pl guide with the steps how to add this & where ( Tcode & procedure ) .
Regards

Hi,
Please go through the below SAPnote to get better clarity on it.....
Note 142724 - Prevention of multiple SAPGUI logons
PS: If this parameter is set to value 1, multiple SAPGUI logons (in the same client and with the same user) are blocked by the system. The parameter is effective during the SAPGUI logon. Logons to the system using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not influenced by the profile parameter. Furthermore, SAPGUI transaction calls (iViews) that are placed through the Workplace or the Enterprise Portal are not controlled with regard to multiple logons...
Regards,
PY

Limit user login in multiple RODC

I have 2 RODC and a RWDC.i prepopulate some password on RODC1 And Some on RODC2 cache database. i already read this article http://www.frickelsoft.net/blog/?p=232
I want to limit user login in multiple RODC.(for example user1 can not login to os in different RODC).
So i want to know is there is a way to limit user to login just from its RODC cache database not RWDC active directory?(i want user in RODC1 cant not login to RODC2.How can i do this?)

Hi,
Do you want to restrict users from logging into a client computer that belongs to another site? Or do you want the users to get authenticated only to the RODC's where their credentials cached?
If you configured your sites and services properly the clients will choose the DC belongs to their own site and subnet. DC locator is the service name which is responsible for assigning a logon DC to the client.If the DC's are in different sites you
can configure the sites and services to point the client to correct DC in a site. AD authentication always distributed based on the sites and services you configured.
You can configure ldapsrv records to authenticate against specific DC.
RODCs do not register Domain Name System (DNS) general records (records that are associated with the domain itself and not with a specific site), as read/write domain controllers (RWDCs) do. This is the default behavior of RODCs. Although you can tune an
RODC to register DNS general records, we recommend that you not change the default behavior.
The main impact of RODCs not registering DNS general records is that a client computer cannot find an RODC in its site without reaching an RWDC (that is, a domain controller that registers the general records) if the client computer does not have a record
for the name of the site where the client computer is placed.
Source: Placing Several RODCs in the Same Site
http://technet.microsoft.com/en-us/library/ee522995(WS.10).aspx
Domain Controller Locator : an overview
http://blogs.technet.com/b/arnaud_jumelet/archive/2010/07/05/domain-controller-locator-an-overview.aspx
LdapSrvWeight & LdapSrvPriority
http://blogs.dirteam.com/blogs/carlos/archive/2006/05/10/How-to-lessen-your-PDC_1920_s-load.aspx
http://technet.microsoft.com/en-us/library/cc816793%28WS.10%29.aspx
Regards,
Rafic
If you found this post helpful, please give it a "Helpful" vote.
If it answered your question, remember to mark it as an "Answer".
This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

How to edit "license information for multiple logon" screen

hey gurus
i need to know how to edit or modify the 'license information for multiple logon" screen. this screen usually pops up when a user tries for a multiple logon to sap. We have activated the parameter 'login/disable_multi_gui_login' but we would like to modify the screen in such a way that only one radio button which says 'terminate this logon' should exist. we would prefer to remove the option of 'continue with this option and end any other logon'. Now i searched but i could not find anything to implement this so i am here and i need your advice and suggestions.
thanks in advance.
cheers.
nate

hey bernhard
many thanks for your reply..i appreciate your help. its just that its not explicitly mentioned we cant modify the screen in the note.
Is there any other note that specifically say so?
thanks for your time buddy.
regards

Disable the multiple Logons in ECC6 and allowing few users

Dear All,
I need to disable the multiple Logons in ECC6 and allowing few users, can multilogin in system.
I have seen that the parameter login/disable_multi_gui_login and login/multi_login_users can be set.
But need to know did any once use in Ecc6 system and what values to be given in login/multi_login_users.
Please suggest .
Regards,
Kumar

I have found an exmaple on the web of using javascript (it opens a child window that polls the parent window, and invalidates the session if the parent window is closed). I agree there always appears to be loop holes around most of th e solutions i've come across.
I had the same idea about invalidating any previously known session for the same userid, I'm pretty new to the java/web app world so I'm struggling with finding the information I need. I couldn't find any methods to call to invalidate another session, I only came accross example where the current session invalidated its own session via call to the session object, do you have any idea how I would do that for other sessions.
Mant thanks for your input.
Derek.

How to suppress License Information for multiple logon screen?

Hi,
While LOGIN we will get "License Information for multiple logon screen" will displayed.
How to suppress that screen.
Regards,
Bala

>
bala virupaksha wrote:
> Hi,
>
> While LOGIN we will get "License Information for multiple logon screen" will displayed.
> How to suppress that screen.
>
> Regards,
> Bala
and why would you want to do that?
does your contract with SAP say, that you may use multiple logins for free? would SAP's contract-issue department agree that -in your case- it's not necessary to record multiple logins?
have you read this part of the SAP license policy?
SAP gives express notice that the accessing of a system by more
than one person using one and the same named user constitutes
a breach.
tell me this does not apply to you ...

Cannot disable multiple logon

Dear all,
I want to disable multiple logon in my system, I have add parameter: login/disable_multi_gui_login value as 1. But it can't disable multiple logon after restart sap. Could you advice?
Rdgs,
Emily

Hello Emily
1. Try setting the parameter in default profile (DEFAULT.PFL).
2. The parameter restricts multiple logon throguh sap gui only. I hope you are testing multiple logons through sap gui.
Cheers,
Tapan

Limited login in multiple logon blocked condition

Similar Messages

Maybe you are looking for