NWDI_ADM user keep getting lock

Hi,
We are having an issue with the NWDI, the user NWDI_ADM keeps getting lock and i am not sure what is locking the user. I also receive this message when trying to access the activity in the CBS.
#1.5 #001E0BEBCFF000760000005700001090000467BE96A6C2DD#1239968175774#com.sap.tc.cbs.server.rt.bs.BSAdmin##com.sap.tc.cbs.server.rt.bs.BSAdmin####n/a##8d5928812b4211decb67001e0bebcff0#Thread[CBS BSA Orc,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Java###
[EXCEPTION]
#3#Unable to instantiate a Build Space administrator!
Build Space "JDI1_TESTJS_D" [bsID: 42, version: 1] [in-queue: on, out-queue: "on (queueing)", processing: on]#Unable to access repository. Authentication failed.#com.sap.tc.cbs.api.CommunicationException: Unable to access repository. Authentication failed.
     at com.sap.tc.cbs.api.impl.BSFacade.getOwnerBuildspace(BSFacade.java:526)
     at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.checkWorkspace(_BuildSpaceValidator.java:87)
     at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.validateWSs(_BuildSpaceValidator.java:57)
     at com.sap.tc.cbs.server.rt.bs.BSAdmin.validate(BSAdmin.java:183)
     at com.sap.tc.cbs.server.rt.bs.BSAdmin.updateState(BSAdmin.java:251)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.determineChanges(BSAdminOrc.java:437)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.validateBuildSpaceData(BSAdminOrc.java:217)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.act(BSAdminOrc.java:339)
     at com.sap.tc.cbs.server.rt.impl.CourteousTimer.run(CourteousTimer.java:139)
     at java.lang.Thread.run(Thread.java:534)
If you can help, that would be great.
Thanks
Jean Seguin

Hi Jean,
You can check NWDI_ADM user in your NWDI System & SLD System. To check where user is getting locked you can go to Visual Admin --> Server Node --> Security Provider --> User Management:
Search for NWDI_ADM user and see when it was last locked. Perforn this on both NWDI & SLD system.
To resolve this issue.
1. Make sure you have same password defined in NWDI & SLD system OR
2. Run configuration wizzard in NWDI System which will prompt you to enter password for NWDI_ADM user. TO do that please go to
http://NWDIserver:<portnumber>:nwa --> Deploy and Change. From there run configuration wizard for CBS; CMS & DTR. and before doing this make sure you have correct password for NWDI_ADM user in SLD & NWDI System.
What I generally do is keep same passowrd in NWDI & SLD system. Thats my way of doing thing and keeping less complications.
Bhavin

Similar Messages

PIDIRUSER & PIRWBUSER Keep Getting Locked

After a recent XI system copy my PIDIRUSER and PIRWBUSER keep getting locked by the kernel. I did not change the passwords from the system I copied yet this problem only occurs in the new copy. In SM21 it shows that SAPJSF locks it with repeated invalid login/passwords. It seems to occur every 20 minutes on the nose but I can't find any jobs that correspond to this timeframe.
I have been through the enchange profile a number of times and validated everywhere I can think of but I can't find anywhere in ABAP or JAVA where these users are embeded with the wrong password. I have also restarted multiple times during the system copy process and once just to try to stop this occuring. I've refreshed the caches, I've sync'ed with the SLD, I'm at a loss.
Anyone have any ideas where to procede?
Thanks
Phil

Thanks Moorthy,
I have gone through and changed my passwords for these two users per note 721548. Still the same issue is happening. I am somewhat puzzled since I have no jobs running under either user (at least none that should cause 3 failed logins in 20 minutes). Also, this is a relatively unused system with no developers logging on to use either the directory or the runtime workbench. So I really have no clue what is causing these failures. It is pretty clearly failing from Java trying to connect to ABAP but why?
Thanks for your help, I'll keep this open in case anyone wants a good mystery.
Phil

Java-administrator password keeps getting locked

Hi,
We have a portal 7.3 in which the Java-administrator password keeps getting locked. I can't see anything in the log traces in NWA. The only thing I've found is in security_audit logfile which doesn't really say much:
#2.0 #2014 07 17 05:47:03:913#+0200#Info#/System/Security/Audit/PrincipalModification#
#BC-JAS-SEC-UME#com.sap.security.core.sda#C000AC142D1F08D90000000000003284#52888950000000002#tc~bl~txmanager~plb#com.sap.security.core.util.SecurityAudit#Guest#0#JTA Transaction : 127261#040FAA9B0D6511E4C5A4000003270576#040faa9b0d6511e4c5a4000003270576#040faa9b0d6511e4c5a4000003270576#0#Thread[RMI/IIOP Worker [0],5,Dedicated_Application_Thread]#Plain##
User account modified | USERACCOUNT.MODIFY | UACC.PRIVATE_DATASOURCE.un:Administrator | | SET_ATTRIBUTE: islocked=[true], SET_ATTRIBUTE: lockreason=[1]#
Please advice,
Thanks.

Hi,
there exists a trace location that should provide useful information for such cases. It is described in SAP note:
1493272 - A user gets locked automatically
My suggestion is add the location com.sap.security.core.userlocking as
specified in the attachment to the note and once it is added, set that
location to DEBUG and wait for the user to be locked again. Hopefully additional information concerning the origin of the bad credentials will be written to traces.
Exactly how you capture the traces depends on the frequency in which
the user becomes locked. For example if the user becomes locked every
few minutes, after adding the location in the configtool and
restarting the system, I suggest using the Security Troubleshooting
Wizard to do so. Refer to note 1332726 - Troubleshooting Wizard and
its attachments. Create a custom incident that is a copy of the
Authentication incident and add this location
com.sap.security.core.userlocking to the newly created incident
Set the wizard to use this new incident for trace collection and wait
for the user to become locked. Then immediately stop the wizard's
trace collection
I
f the locking occurs less frequently than every few minutes, it is
preferable to use the NWA to adjust the severity of these locations
and their sublocations to DEBUG and wait for the issue to reoccur
com.sap.security.core.userlocking
com.sap.engine.interfaces.security
com.sap.engine.services.httpserver.HttpTraceRequest.traceRaw
com.sap.engine.services.httpserver.HttpTraceResponse.traceHeaders
com.sap.engine.services.security.authentication
com.sap.security.core.logon
com.sap.security.core.ticket
com.sap.security.core.util
com.sap.security.core.server.jaas
See Log Configuration with SAP NetWeaver Administrator
http://help.sap.com/saphelp_nw73/helpdata/en/47/af551efa711503e10000000a42189c/content.htm
Don't forgot to change these back to default severity levels after the
issue has captured in the traces
Regards,
David

The J2EE_ADMIN is keep getting locked

Hello,
The J2EE_ADMIN is keep getting locked for some reason.
I unlock it and after a while it is locked again.
No one is trying to login with it so it can't be locked due to multiple wrong logins.
What can be the reason for that?

Hi,
Open Visual Administrator in Cluster> Server>Services-->Security Provider
Go to Runtime - tab and then User Management. Search for the user "J2EE_Admin" and double click on the user name to get the user management property sheet. There you can find "No password change required". If it is not checked, please check that one. Then that password wont expire for every deployment.
Hope this helps.
Regards,
Pooja.

User id getting locked everyday

Dear All,
User Id getting locked everyday having profile SAP_ALL and SAP_NEW.I m not getting any clue why its getting locked everyday.
I tried to check RFC and background job job also but i m not able to find.everyday i have to unlock it.
Kindly suggest me how to check.
Regards
Adil

Hi,
Such issue mostly happens due to wrong attempt of login in SAP system client with that SAP User id either through RFC login, external- program, script,etc...
If you have checked all the RFCs login settings and not able to found the login attempt, then Enable [SAP Security audit log|http://help.sap.com/saphelp_nw04s/helpdata/en/c7/69bcb7f36611d3a6510000e835363f/content.htm] using SM19, SM20 and analyze the logs for that SAP User id only.
Regards,
Bhavik G. Shroff

SAPJSF user is getting locked

Hi,
We are using SAP BI 7.0 system on AIX and DB2 combination. I am getting one problem for the past 1 month. our BI consultant is running queries from BI Portal. while running queries from BI Portal, they are getting one error saying that " java i-view runtime error, if this error persists please contact your system administrator". while they are getting this error, I have observed that user SAPJSF is locked due to incorrect logons from ABAP level. once I unlock the user and refresh the BI portal page we are getting in and able to continue with our work.
This problem is repeating for every 3 weeks or 15 days ( but not for the constant time period). for the time being we are unlocking the user and continuing with work. but I want to know why this user is getting locked. it is only happening in DEV system but not in the remaining systems.we have run the support desk tool in BI DEV system and we made sure that we are not encountering any configuration problems.
roles attached to this uder is:
SAP_BC_JSF_COMMUNICATION
SAP_BC_JSF_COMMUNICATION_RO
profiles:SAP_ALL
please help me in this to solve this problem permanantely.
Mohan K

Hi Mohan
SAPJSF user is used for communication between UME and ABAP user management.
Please check the following links:
http://help.sap.com/saphelp_nwce10/helpdata/en/45/af3ac012d32e78e10000000a155369/content.htm
and
http://help.sap.com/saphelp_nw70/helpdata/en/45/af3ac012d32e78e10000000a155369/content.htm
I hope this helps
Regards
Chen

Auto config is getting failed and apps user is getting locked while running autoconfig on dbTier

Hi Team,
1) I have cold cloning.after cloning i tried to run autoconfig on the db side.i am getting the following error
2) unlocked the apps user and after unlocking executing the adautoconfig apps user is getting locked simuntaneously after executing the adautocfg.sh
JDBC URL: jdbc:oracle:thin:@cimk.na.tcl.com:1528:PIMDev
    Exception occurred: java.sql.SQLException: ORA-28000: the account is locked
    Trying to connect using SID as ServiceName
getConnectionUsingServiceName() -->
    JDBC URL: jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=cimk.na.tcl.com)(PORT=1528))(CONNECT_DATA=(SERVICE_NAME=PIMDev)))
    Exception occurred: java.sql.SQLException: ORA-28000: the account is locked
    Trying to connect using SID as ServiceName.DomainName
getConnectionUsingServiceName() -->
    JDBC URL: jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=cimk.na.tcl.com)(PORT=1528))(CONNECT_DATA=(SERVICE_NAME=PIMDEV.na.tcl.com)))
    Exception occurred: java.sql.SQLException: Listener refused the connection with the following error:
ORA-12514, TNS:listener does not currently know of service requested in connect descriptor
    Connection could not be obtained; returning null
-------------------ADX Database Utility Finished---------------
        Verifying connection to the Database   : Could not be stablished
        No Restore Profile file created.
Restore Profile utility ran successfully
===========================================================================
adcvmlog.xml renamed to /u01/pimdev/11.2.0/appsutil/log/PIMDev_tcl/06141934/adcvmlog.xml.06141934
[AutoConfig Error Report]
The following report lists errors AutoConfig encountered during each
phase of its execution. Errors are grouped by directory and phase.
The report format is:
      <filename> <phase> <return code where appropriate>
[AutoConfig Error Report]
The following report lists errors AutoConfig encountered during each
phase of its execution. Errors are grouped by directory and phase.
The report format is:
      <filename> <phase> <return code where appropriate>
[PROFILE PHASE]
AutoConfig could not successfully execute the following scripts:
    Directory: /u01/pimdev/11.2.0/appsutil/install/PIMDev_tcl
      afdbprf.sh              INSTE8_PRF         1
[APPLY PHASE]
AutoConfig could not successfully execute the following scripts:
    Directory: /u01/pimdev/11.2.0/appsutil/install/PIMDev_tcl
      adcrobj.sh              INSTE8_APPLY       1
AutoConfig is exiting with status 2
AutoConfig execution completed on Fri Jun 14 19:34:18 2013
Time taken for AutoConfig execution to complete : 0 mins 13 secs
Please help me out

Hi Hussein
SQL> select username,account_status from dba_users where username='APPS';
USERNAME                       ACCOUNT_STATUS
APPS                           LOCKED
SQL> select username,account_status from dba_users where username='APPLSYS';
USERNAME                       ACCOUNT_STATUS
APPLSYS                        OPEN
SQL> alter user apps account unlock;
User altered.
SQL> select username,account_status from dba_users where username='APPS';
USERNAME                       ACCOUNT_STATUS
APPS                           OPEN
SQL> select username,account_status from dba_users where username='APPLSYS';
USERNAME                       ACCOUNT_STATUS
APPLSYS                        OPEN
SQL>
After running the adautoconfig facing the same issue and apps user is getting locked
SQL> select username,account_status from dba_users where username='APPS';
USERNAME                       ACCOUNT_STATUS
APPS                           LOCKED

J2ee_admin keeps getting locked

Hi,
I changed the j2ee_admin password in both the secure storage of Java AS and in ABAP. Our SLD connection also seemed to use the j2ee_admin user in tx SLDAPICUST which I also changed but still it gets locked each time! SAPJSF user reports the locked j2ee_admin account in the syslog after awhile when unlocking it.
Where else could j2ee_admin be possibly being used where I still need to change the password ? ..or any other log files on Java AS that could tell me of errors or give me more info ?
Thanks!
Regards,
Nelis
Sorry, not sure if this is the right place to post this question.

Hello Neil,
When you log into R/3 and go to transaction SU01 does the j2ee_admin user show up "locked"? In addition to changing the password did you remember to unlock the user. Also, you might try changing the user type from dialog to system in su01. If you have a security policy that requires the password to be changed at first logon or after a period of time, this could cause the logon failures. Changing the user type to system or communication type will avoid the forced password changes for j2ee_admin.
If the issue continues to occur you should check the ./cluster/server#/log/defaultTrace.#.trc for exceptions regarding the j2ee_admin user. Another useful log is the ./cluster/server#/log/system/security.#.log which will show details more specific to the security provider.
Regards,
Nathan

User is getting locked due to incorrect password every few minutes SAPJSF

I have gone through solution manager configuration both as myself and as user solman_admin. Recently the Solution manager system was changed to enforce a more complex password scheme. After changing my password, my account is now getting locked every few minutes due to incorrect logon attempts. The System log states that user SAPJSF from Terminal <solution Manager host name> is attempting to login with my userID and is locking it. so far I have made every change I know to make to all the accounts on the JAVA side and to any and all background jobs that are running to remove my userID from these entries. My account still gets locked and I have no idea where to find what task or process is locking the account.
Any ideas would be greatly appreciated.

I have checked the audit log and it is not very helpful. Here are the results
Date     Date/Time     User     Terminal name     Transaction Code     Program     Message Text
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:39 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:29:44 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Password check failed for user BSEWELL in client 001
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     User BSEWELL Locked in Client 001 After Erroneous Password Checks
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 1, Type = U)
11/12/2010     9:31:30 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
11/12/2010     9:32:36 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)
11/12/2010     9:32:36 AM     SAPJSF     wsapvsmsdb.png.loc          SAPMSSY1     Logon Failed (Reason = 53, Type = U)

User account getting lock.

Hi All,
OS:RHEL
DB:10G
I am facing a weird problem, one of my db user account got locked yesterday and then i unlocked the same.
And today i faced the same problem and i did the same thing , the account was unlocked for sometime but it got locked agian.It seems that i is workinfg fine for sometime and due to some unknown activity the same is getting locked.
I want to know how can i get to the root of this.
Audit for the same DB is disabled.
Kindly help...
Regards,
Sphinx!

Have a look at your listener log.
Perhaps someone is trying to login with a wrong password.
Have a look at this link:
http://docs.oracle.com/cd/B19306_01/network.102/b14266/policies.htm#i1007339
and at
FAILED_LOGIN_ATTEMPTS.

User id getting locked automatically every day

Hi Experts,
One our user id is getting locked every day automatically with wrong password . We are manually unlocking everyday as of now but don't know the exact reason why is it being locked. And we found that it is getting locked from bo server because of wrong password . But unfortunately there is no background jobs are running in BW and BO. We are unable to find where this going wrong exactly.
Please let me know how to rule out this issue, what are the places we need to check, and how can we get very detailed log about user locking.
Refer the screen shot of user locking log.

HI Daniel,
I am BW Consultant and i am not that much aware of that file. Please provide navigation how and were to check that file.. If possible please provide screen shots. ***Urgent***
Thanks in advance.
Regards,
PRK

APPS User keeps on locked

Hi,
My apps user account keeps on locked every 3 minutes even after unlocked the account in release 12. OS is IBM AIX6.1.
Followed the DOC 275232.1. This issue occurs after changing the apps password. Awaiting for help..
Thanks,

vasanth wrote:
Hi,
My apps user account keeps on locked every 3 minutes even after unlocked the account in release 12. OS is IBM AIX6.1.
Followed the DOC 275232.1. This issue occurs after changing the apps password. Awaiting for help..
Thanks,Please see these docs.
APPS User Account Is Locked While Applying a Patch. Patch Fails With "ORA-28000" [ID 420001.1]
R12: Clone fails with error "ORA-28000 The account is locked" [ID 1114244.1]
FNDCPASS Troubleshooting Guide For Login and Changing Applications Passwords [ID 1306938.1] -- 2. Log In Fails With: You Don't Have Permission To Access /pls/.../fnd_icx_launch.launch On This Server
Thanks,
Hussein

User Account getting locked frequently...

An User account which the developers are using is getting locked very frequently when they run some applications. They say they are giving the right password and username within the application. What should one be looking for? I am fed up by unlocking the account using ALTER USER username ACCOUNT UNLOCK;

I have also faced such kind of problems. Most of the developers forget how the application connects. they might have hard coded it or some time using a wrong parameter files.
Need to check who are all the users and how they are connecting and how the application is connecting to the database.
If there are more users then enable audit. Auditing will be the only solution.

I am attempting to make my first purchase in the App store, yet it is asking me security questions I know I didn't enable and I keep getting locked out of my account despite resetting everything.

This usually wouldn't pose to be a problem, but I am a college freshman and I just redeemed my $100 giftcard to the app store. I am beyond frustrated and don't know what to do.
It is my first time making a purchase off of this Mac with this account, so it is asking me two security questions. It keeps asking me who my favorite and least favorite teachers were. I know for a fact that these are not the security questions I enabled, so I went in to change them again and logged out of everything. I logged back in and I was getting the same thing from the App store -- it was asking me questions I didn't enable. I've been locked out of my account for eight hours twice and all of my Mac's information is at home and not easily accessable to me, so I don't want to have to call and be asked for information I do not have.
What do I do? I need some crucial apps for classes that start in less than fourty-eight hours from now?
I have changed my appleID's information three times now: passwords, rescue email, and of course, my security questions. I am at my wits end and not pleased that I will possibly be losing $100!

You've been hitten by Apple's recent SNAFU. I fear you are SoL until their pending investigation fiasco is over with.

With Cisco Secure ACS 4.2 User accounts gets locked at first instance of wrong credentials even if configured for 3 attempts

Hello Everybody,
I am working with Cisco Secure ACS 4.2 and it is integrated with Active Directory at a Windows 2008 R2 functional level, user accounts that are set with lockout parameters (3 incorrect attempts) are locked out prematurely after the user enters the wrong credentials just once, the integration is done via LDAP.
I wonder if anybody has any idea why this is happening, because when I connect to a Cisco device or VPN, and type my password wrongly, on the Active Directory I get extra bad password counts.
Thanks in advance and regards....

Hello Scott,
Thanks for your answer. However we checked the ACS logs and it shows that we entered bad credentials just once, but in the Active Directory our account sometimes is blocked because we get at least 2 and sometimes 3 failures. This problem is only presented when we authenticate Cisco devices or through VPN, in normal circumstances, when users enter bad credentials on their computers, it works fine.
Thanks and regards...

NWDI_ADM user keep getting lock

Similar Messages

Maybe you are looking for