Lock a client

hay every body,
can any body tell me how to lock a client and prevent any of my user from making any transaction on it
pls help

Dear Nany,
Please don't mind, but I think neither this Forum not this activity is related to SD-Module/ Consultant.
Instead of posting the thread, You must consult your BASIS-ADMIN.
Best Regards,
Amit
Note: Strictly, Just for information-sake
[Lock Client|http://www.sap-img.com/bc060.htm]
Moderators, If you find this link-of-information, against any Rule, Please remove it.

Similar Messages

How to lock a client?

Hi everybody,
I want to lock a client for a period of time. How can I do it?
Thanks in advance
venkatesh

Hi Venkateswarlu,
There is an alternative for what you want to do. Instead of locking the client, you could lock the users in that client, so they dont have access to the client for a period of time (until you unlock them again).
Log in the client you want to restrict. Go to trx SU01. Choose in the menu Environment - Mass changes. In user selection section press button 'Address data' and enter. Select all the users you want to lock. You may not want to block sap*, or the admin user so you still have access to the system :). Select them and then press Transfer. Once all the selected users appear in the first screen, you can select all of them again and press the button to lock them. After this, users wont be able to login in that client anymore.
I dont know exactly why you want to lock the client, but there is another option in trx STMS. Press button 'System overview' and choose the system you want to lock. Then press the lock button to lock the system.
Good luck,

Failed to acquire exclusive lock on client session - Webdynpro

Anyone experience this below intermittent error on Webdynpro - e.g. Display Leave Summary functions ? If user retry/revisit the same screen again. it will be working fine.
Having some hard to to get thread dump at those short and intermittent moment.
Any suggestions are welcome.
Found this note below but doubt it will help at this moment.
Web Dynpro error page, known error situations, error codes
SAP Note Number: 1113811
NW/EP 7.0 SPS13
#2#sap.com/pb/PageBuilder#com.sap.tc.webdynpro.services.session.LockException: Thread SAPEngine_Application_Thread[impl:3]_21 failed to acquire exclusive lock on client session ClientSession(id=(J2EE11441500)ID1662520351DB00529024001059157699End_1898143411). Existing locks: LockingManager(ThreadName:SAPEngine_Application_Thread[impl:3]_21, exclusive client session lock: ClientSessionLock(SAPEngine_Application_Thread[impl:3]_16), shared client session locks: ClientSessionSharedLockManager([]), app session locks: ApplicationSessionLockManager([]), current request: sap.com/pb/PageBuilder).Hint: Take a thread dump of the server node to find the blocking thread that causes the problem.
     at com.sap.tc.webdynpro.clientserver.session.ClientSession$LockingManager.lock(ClientSession.java:1511)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:233)
     at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:150)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

Hi,
Check this,
ESS SC Import Problem
Thanks and Regards,
gopal.sattiraju

Failed to acquire exclusive lock on client session ClientSession

HI all.
when I login the Portal as a MSS role,I want to see about the data of employee(about 20000 employee).
some page can't open succeed.The error:
500   Internal Server Error
SAP NetWeaver Application Server 7.00/Java AS 7.00
Failed to process request. Please contact your system administrator.
Error Summary
While processing the current request, an exception occured which could not be handled by the application or the framework.
If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
Root Cause
The initial exception that caused the request to fail, was:
   com.sap.tc.webdynpro.services.session.LockException: Thread SAPEngine_Application_Thread[impl:3]_27 failed to acquire exclusive lock on client session ClientSession(id=(DSAPBPRD_DPP_01)ID2006199550DB11722229503911854949End_53412655). Existing locks: LockingManager(ThreadName:SAPEngine_Application_Thread[impl:3]_27, exclusive client session lock: ClientSessionLock(SAPEngine_Application_Thread[impl:3]_29), shared client session locks: ClientSessionSharedLockManager([]), app session locks: ApplicationSessionLockManager([]), current request: sap.com/pb/PageBuilder).Hint: Take a thread dump of the server node to find the blocking thread that causes the problem.
    at java.lang.Throwable.<init>(Throwable.java:56)
    at com.sap.exception.BaseException.<init>(BaseException.java:145)
    at com.sap.tc.webdynpro.services.exceptions.WDException.<init>(WDException.java:61)
    at com.sap.tc.webdynpro.services.exceptions.WDException.<init>(WDException.java:54)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession$LockingManager.lock(ClientSession.java:1511)
    ... 20 more
Edited by: cui joe on Jun 16, 2009 5:36 AM

HI,thanks very much.
Because our data is very huge,so some leader login the system will get the error.I check the st22,It realy found the error:
Time limit exceeded.
The program "SAPLRHDB" has exceeded the maximum permitted runtime without
interruption and has therefore been terminated.
If I should increase the system profile parameter "rdisp/max_wprun_time"?
Can else I should turn other parameter?

Locking a client

Hi everyone.
How to lock a client? What exactly a client lock means? Is it like not allowing import of new objects, locking all existing users?

Hi,
here I'll show you the way :
- run tcode SE37
- type function module name - SCCR_LOCK_CLIENT
- enter the Client Number
- execute the function module.
Locking the entire system, an admin can use the following commands:
tp locksys <SID> pf=<transport profile>
rgds,
alfonsus guritno

Lock & Delete Client

Hi,
We have different clients in our development & quality system, some of them are nothing but the copy of production client. Periodically we create some new clients & there is no requirement of old clients for us.
What should I do to delete the client?
Shall I lock the client or delete the client? How to lock a client & How to delete a client? Please suggest.
Regards,
Rajesh

Hi Rajesh,
Its always a good practise to keep the system clean and remove unwanted clients. Every new client has storage requirements and puts load on the database as you keep adding new clients. You can use transaction SCC5 to delete client, you can check 'test run' and test the deletion process as well.
Also, every time you delete a client a large amount DML operations are executed at the database level. If the client contains large amount of transactional data, its a good practise to switch off archive logging at database level to speed up the process, else you will have to also have the overhead of keeping the archiving filesystem free.
Hope this helps.
Cheers,
Nisch

Locked SCCM Client Package waiting for prestaged content, Cant use Client Push

Hi there,
I am having an issue with client push. When initiated the client is unable to find the client install package on the DP. The CCMSETUP log file on the client reads "MP xxxxx.xxx.com didnt return DP locations for client package with the expected
version". This could be caused by a boundry issue but the boundry information is set up correctly, and published into AD.
The SCCM Client on the site server is not getting replicated properly to the DP's that we have setup and I think that this is causing the issue. The reason why its not gettiog to the DP is due to this error: "Distribution Manager is waiting for Package SG100001
content to be prestaged on the distribution point" when we look at the content status of the SCCM client Package.
We are unable to change the prestaged distribution point settings "automatic" as the package is the locked as its the SCCM client installation package and its waiting for us to prestage it on the DP. I have tried prestaging it, but it didnt
work
Any ideas as I have been stuck for two days on this now...
Thanks in advanced.
George

Torsten you were right, The solution was as follows for anyone else having the same issue.
As soon as you create a DP it appears that the client installation package automatically tries to distribute to the DP. If you created the DP as "Enabled for Prestage" while doing the setup then the SCCM client package will just wait for you to
copy it manually. To reslove this I had to remove the "Enabled for Prestage Content" from the DP then go into the SCCM client Package, content location tab, select the DP and redistribute the package to the DP.
Checking the Distribution Manager and PkgXferMgr.log assisted me in monitoring the content transfer to the new location.
Thanks for your assistance.
George
George, I too concur that this fixed the issue.
I had the same problem with my SCCM 2012 R2 CU4, where i updated the distribution point for the Configuration Manager Client Package. Thanks a million!

Question on Bit Locker & IBM Client Security Solution CSS.

Since both Bit Locker and CSS use the TPM chip to store the key, can they both be used at the same time?

I can, idzham, but where do I find the .exe file for reinstalling it? Losing that key, and being completely locked out of my machine, concerns me.

How to lock the ides client for secure purpose

hello friends,
i do have system which contain 4 clients 800,001,000,060 so out of 4 clients i want to lock 3 clients 000,001,060
and client 800 will remain open.
so plz give me solution for window server 2k3 and also for linux redhat system.
thanks
zaheer

Hi,
I agree with Vishnu,
Please perform the following to lock the client:
1. Go to SM37.
2. Enter the module name SCCR_LOCK_CLIENT
3. Enter the client number you want to lock.
4. Execute (F8).
Note: Locked clients are only accessible to DDIC and SAP* users, while other users can't login to that client. Furthermore, if you want to unlock the client use SCCR_UNLOCK_CLIENT in the same way as above.
Please let us know if solved.
Regards,
Avishek.

VPN Client and Terminal Server

We have several clients that allow us to vpn into their systems and it has come to the point that we are getting software incompatabilities. What I am trying to do is set up "compatable" connections on a Terminal server box and let our people access this from their workstations. The problem is when the acuall connection thru the vpn client is made they loose connection to the terminal server. I have tried putting in 2 nic's into the terminal server and am able to allocate one for the terminal server but can not find a way to allocate the other to the VPN CLient. Is this possable or is there another way to accomplish this?
Thanks

Close,
What I have is one machine with 2 nic's
NIC #1 = Terminal Server Access (local lan only) Locked in via registry settings to use ONLY this NIC
NIC #2 = I would like to "LOCK" the Client software to use ONLY this nic (has a dynamic IP for local lan and access to the Inet via a router.
Problem: When you connect to the T-Server all is fine UNTIL you start up the client software to access our clients systems via the web connection to the T-Server on the local side stops and gives the appearance of a frozen screen.
manualy disconnect person from the T-Server and kill the cisco client software then you can re-connect to the T-Server (and it all starts over again)
The Cisco software acualy makes the connection to our clients system but we can not tell because it want BOTH the NIC's for itself and stops access via NIC#1 to the T-Server.

With regard to lock object and authority check

hi all
i would like to know about lock object and authority check specifically in reports. there is a coding in sap library with regard to authority check, but there is no coding to restrict user (i mean there is no user names that the object is restricting for a particular user or any user has got permission to change or display object).
further, the code mentions that you need an authorization in your user master record for the object, could any of u explain where is user master record.
below is the code for authority check.
*&      Module USER_COMMAND_0100 INPUT
MODULE USER_COMMAND_0100 INPUT.
CASE OK_CODE.
    WHEN 'SHOW'.
   AUTHORITY-CHECK OBJECT 'S_CARRID'
ID 'CARRID' FIELD '*'
ID 'ACTVT' FIELD '03'.
   IF SY-SUBRC NE 0. MESSAGE E009. ENDIF.
   MODE = CON_SHOW.
   SELECT SINGLE * FROM SPFLI
    WHERE CARRID      = SPFLI-CARRID
    AND    CONNID      = SPFLI-CONNID.
   IF SY-SUBRC NE 0.
MESSAGE E005 WITH SPFLI-CARRID SPFLI-CONNID.
   ENDIF.
   CLEAR OK_CODE.
   SET SCREEN 200.
    WHEN 'CHNG'.
   AUTHORITY-CHECK OBJECT 'S_CARRID'
ID 'CARRID' FIELD '*'
ID 'ACTVT' FIELD '02'.
   IF SY-SUBRC NE 0. MESSAGE E010. ENDIF.
   MODE = CON_CHANGE.
   SELECT SINGLE * FROM SPFLI
    WHERE CARRID      = SPFLI-CARRID
    AND    CONNID      = SPFLI-CONNID.
   IF SY-SUBRC NE 0.
     MESSAGE E005 WITH SPFLI-CARRID SPFLI-CONNID.
   ENDIF.
   OLD_SPFLI = SPFLI.
   CLEAR OK_CODE.
   SET SCREEN 200.
ENDCASE.
ENDMODULE.                 " USER_COMMAND_0100 INPUT
i thank u all for the help in advance.

hi
this might help
REPORT YUSRLOCK NO STANDARD PAGE HEADING.
TABLES: TRDIR, USR02.
DATA: MARK,CNTR TYPE I,
      ACCNT LIKE USR02-ACCNT, ERDAT LIKE USR02-ERDAT,
      ANAME LIKE USR02-ANAME, CLI(3) VALUE 'AAA', SZIN TYPE I,
      SYDATUM LIKE SY-DATUM, FLAG(3).
TABLES: UINFO.
DATA: OPCODE TYPE X VALUE 2.
DATA: BEGIN OF USR_TABL OCCURS 10.
        INCLUDE STRUCTURE UINFO.
DATA: END OF USR_TABL.
START-OF-SELECTION.
CALL 'ThUsrInfo' ID 'OPCODE' FIELD OPCODE
    ID 'TAB' FIELD USR_TABL-SYS.
SELECT * FROM USR02 CLIENT SPECIFIED ORDER BY MANDT BNAME.
    IF USR02-MANDT <> CLI.
      SZIN = SZIN + 1. SZIN = SZIN MOD 2.
      CLI = USR02-MANDT.
    ENDIF.
    IF USR02-UFLAG = 0.
      MARK = ' '.
    ELSE.
      MARK = 'X'.
    ENDIF.
    CLEAR FLAG.
    LOOP AT USR_TABL.
      IF USR_TABL-BNAME = USR02-BNAME AND USR_TABL-MANDT = USR02-MANDT.
        FLAG = '!!!'.
      ENDIF.
    ENDLOOP.
    SYDATUM = SY-DATUM - 30.
    IF SYDATUM < USR02-TRDAT.
      IF SZIN = 0.
        WRITE:/ ' ', MARK AS CHECKBOX,' ', USR02-BNAME COLOR 2,
              ' ',USR02-MANDT COLOR 2,
              '   ',USR02-USTYP COLOR 2,
              ' ',USR02-TRDAT COLOR 2, USR02-LTIME COLOR 2,
              ' ',FLAG COLOR 6.
      ELSE.
        WRITE:/ ' ', MARK AS CHECKBOX,' ', USR02-BNAME COLOR 3,
              ' ',USR02-MANDT COLOR 2,
              '   ',USR02-USTYP COLOR 2,
              ' ',USR02-TRDAT COLOR 2, USR02-LTIME COLOR 2,
              ' ',FLAG COLOR 6.
      ENDIF.
    ELSE.
      IF SZIN = 0.
        WRITE:/ ' ', MARK AS CHECKBOX,' ', USR02-BNAME COLOR 2,
              ' ',USR02-MANDT COLOR 2,
              '   ',USR02-USTYP COLOR 2,
              ' ',USR02-TRDAT COLOR 4, USR02-LTIME COLOR 4,
              ' ',FLAG COLOR 6.
      ELSE.
        WRITE:/ ' ', MARK AS CHECKBOX,' ', USR02-BNAME COLOR 3,
              ' ',USR02-MANDT COLOR 2,
              '   ',USR02-USTYP COLOR 2,
              ' ',USR02-TRDAT COLOR 4, USR02-LTIME COLOR 4,
              ' ',FLAG COLOR 6.
      ENDIF.
    ENDIF.
    HIDE: USR02-BNAME, USR02-MANDT.
ENDSELECT.
CLEAR USR02.
TOP-OF-PAGE.
WRITE:/ 'LOCK   USER         CLIENT TYPE     LAST lOGIN     ' COLOR 6.
SKIP.
AT USER-COMMAND.
IF SY-UCOMM = 'SEL'.
    DO.
      CLEAR MARK.
      READ LINE SY-INDEX FIELD VALUE MARK.
      IF SY-SUBRC NE 0. EXIT. ENDIF.
      IF USR02-BNAME IS INITIAL.CONTINUE.ENDIF.
      SELECT SINGLE * FROM USR02 CLIENT SPECIFIED WHERE
      MANDT = USR02-MANDT AND BNAME = USR02-BNAME.
      IF MARK = 'X' AND USR02-UFLAG = 0.
        USR02-UFLAG = 64.
        UPDATE USR02 CLIENT SPECIFIED SET: UFLAG = 64 WHERE
        MANDT = USR02-MANDT AND
        BNAME = USR02-BNAME.
        COMMIT WORK.
      ENDIF.
      IF MARK = ' ' AND USR02-UFLAG = 64.
        USR02-UFLAG = 0.
        UPDATE USR02 CLIENT SPECIFIED SET: UFLAG = 0 WHERE
        MANDT = USR02-MANDT AND
        BNAME = USR02-BNAME.
        COMMIT WORK.
      ENDIF.
    ENDDO.
    CLEAR USR02.
ENDIF.
regards
Arun

SRM supplier user synchronization between SUS and productive client

Dear Sirs, in our SRM environement the contact persons (and relative system users) created by suppliers in the auto-registration procedure, should be synchronized between SUS and productive client.
(in our implementation client 150 and 330) .
This sync mechanism should be valid also for lock-unlock status of the user and reset of the password,
but in both cases it does not works (a locked user, manually unlocked from client 150 via SU01, is again locked in client 330, the same from 330 client).
Could you suggest a solution or some checkpoints ?
Could you provide some links for the configuration of this mechanism ? (we have seen only the SPRO node " Maintain Systems for Synchronization of User Data") ?
I am not shure if XI is implicated or not.
Best regards,
Riccardo Galli

HI
Maintain Systems for Synchronization of User Data
In this IMG activity, you specify the RFC destinations to which user data from SUS User Management is replicated.
In the Logical System field, you should enter the backend destination with which the user data should be synchronized when they are entered in SUS. On the basis of this information, the system determines the relevant RFC destination automatically.
Specify the function modules for creating, changing, or deleting a user in the external system for each logical system:
Function Module for Creating User: Function module that is called to create a user in the external system
Function Module for Changing User: Function module that is called to change the user in the external system
Function Module for Deleting User: Function module that is called to delete the user in the external system
If this data exists, you can set the indicator Use Purchasing BP ID to use the business partner ID from the procurement system instead of the business partner ID from SUS.
What are the settings maintained here ?
external system and roles in external system
br
Muthu

SLD User gets locked; four unsuccessful logons every 15 minutes

I have a landscape with a PI with the SLD on it. I defined a user with the name SLDUSER and the appropriate authorizations. The PI is a Unicode system, like all systems in the landscape.
There were already some application servers (CRM, Banking Services, Composition Environment) connecting to this SLD and everything went fine.
Now I added another application server, an ERP, for FI-CAx (NW 7.02). As the business partners are distributed via XI through the PI system, the ERP needs to connect to the SLD, too.
I set it up as usual:
- sldapicust: host, port, SLDUSER, password. (What is weird is that there is no test button as in all the other systems ... maybe that depends on the installed EhPs.)
- This generated the destinations (type T = TCP/IP) SLD_UC and SLD_NUC automatically.
- I created destinations SAPSLDAPI and LCRSAPRFC manually in sm59, type T = TCP/IP, set them to Unicode, entered the same (two different) Registered Server Programs that are used in these destinations on all the other servers (CRM, PI, BaS).
- I ran rz70, entered the host and gateway, activated, executed the data collection.
SLDCHECK runs successfully on the ERP system!
The technical system for the BS1 showed up in the SLD as expected.
- I configured the clients / business systems on the SLD.
Now begins the problem. The SLDUSER is now getting locked all the time! It's definitely the ERP system causing it - when I prevent it from accessing the PI (by changing the hosts file on the operating system), the problem stops.
I activated everything critical related to logons and RFCs in sm19 and looked at the logs in sm20. This is what it looks like:
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Password check failed for user SLDUSER in client 001
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Password check failed for user SLDUSER in client 001
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Password check failed for user SLDUSER in client 001
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Password check failed for user SLDUSER in client 001
17.08.2011     19:40:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
17.08.2011     19:55:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Password check failed for user SLDUSER in client 001
17.08.2011     19:55:04     BNK_RFC     ilbnkpi1          SAPMSSY1     User SLDUSER Locked in Client 001 After Erroneous Password Checks
17.08.2011     19:55:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
17.08.2011     19:55:04     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
17.08.2011     19:55:05     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
17.08.2011     19:55:05     BNK_RFC     ilbnkpi1          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
And it goes on like this. So what happens is this: Every 15 minutes, at :10, :25, :40, :55, there are four unsuccessful logons with SLDUSER. With the fifth logon it gets locked.
Again:
- This stops when I make the PI inaccessible to the ERP.
- SLDCHECK still works completely fine in ERP - until the SLDUSER is locked, of course; then it stops working in all connected systems. It does not result in unsuccessful logons on the PI.
- When I run rz70 on the ERP and run the data collection this also reports success and does not create unsuccessful logons on the PI.
- I have not used the SLDUSER in any other locations besides sldapicust.
So what the hell is wrong with this system?!

I have created a separate user SLDUSER_ER1 just for use in the sldapicust in the new ERP system that causes the problem. Still SLDUSER is getting locked (not SLDUSER_ER1)!
I powered down this ERP system ER1, just to make absolutely sure it is causing the problem - indeed the unsuccessful logon attempts every 15 minutes stopped right away.
As a workaround and for narrowing down the problem I have created separate users SLDUSER_CR1 etc. for each of the other systems in the landscape (CRM and so on) - indeed those do not get any unsuccessful logon attempts.
I have deleted all four SLD-related destinations in ER1 and recreated them from scratch (SLD_NUC and SLD_UC being generated when running rz70). I also used the "delete all batch jobs" button in rz70.
Still, SLDUSER is getting locked.
I checked on the PI system in C:\usr\sap\PI1\DVEBMGS00\j2ee\cluster\server0\log\system\httpaccess\responses_00.0.trc and see it is indeed the IP of the ERP system that gets the error 401 exactly at the times when the unsuccessful logon attempts occur:
[Oct 2, 2011 2:46:06 PM   ] - 10.26.83.234 : POST /sld/cimom HTTP/1.1 401 1499 [140]
[Oct 2, 2011 2:46:06 PM   ] - 10.26.83.234 : POST /sld/cimom HTTP/1.1 401 1499 [79]
[Oct 2, 2011 2:46:06 PM   ] - 10.26.83.234 : POST /sld/cimom HTTP/1.1 401 1499 [62]
[Oct 2, 2011 2:46:06 PM   ] - 10.26.83.234 : POST /sld/cimom HTTP/1.1 401 1499 [47]
As the ERP has no Java instance and the sldapicust does not contain the SLDUSER (but the new SLDUSER_ER1) it is a mystery to me what it is that is still running every 15 minutes in the ERP and tries to use SLDUSER.
I went through the entries in SECSTORE and could not find any use of SLDUSER (only of SLDUSER_ER1, as it should be).
Edited by: Monika Eggers on Oct 2, 2011 3:08 PM

User is getting locked due to incorrect password every few minutes SAPJSF

I have gone through solution manager configuration both as myself and as user solman_admin. Recently the Solution manager system was changed to enforce a more complex password scheme. After changing my password, my account is now getting locked every few minutes due to incorrect logon attempts. The System log states that user SAPJSF from Terminal <solution Manager host name> is attempting to login with my userID and is locking it. so far I have made every change I know to make to all the accounts on the JAVA side and to any and all background jobs that are running to remove my userID from these entries. My account still gets locked and I have no idea where to find what task or process is locking the account.
Any ideas would be greatly appreciated.

I have checked the audit log and it is not very helpful. Here are the results
Date     Date/Time     User     Terminal name     Transaction Code     Program     Message Text
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     User BSEWELL Locked in Client 001 After Erroneous Password Checks
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
11/12/2010     9:32:36 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
11/12/2010     9:32:36 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)

Locking and unlocking one's phone's keyboard, how?

How do I lock and unlock my phones keyboard? I tried finding the answer on my own but failed.
"Don't make me think!"

If you are talking about the functinal modules for locking/unlocking client. They are
SCCR_LOCK_CLIENT and SCCR_UNLOCK_CLIENT
Thanks,
Giri

Lock a client

Similar Messages

Maybe you are looking for