Password inconsistancy issue with RFC users in ECC 6.0 System after upgrade

Hi,
We have upgraded the system from 4.7 to ECC 6.0, but facing the password inconsistancy problem for RFC users. We have set the parameters like "login/min_password_lng" as "8" and "login/password_downwards_compatibility" as "3" & RFC user Type is "system". Could you please suggest how to resolve the password inconsistancy issue.

Hi Chandan,
you need to run the txn. SECSTORE and there it will shows you all the RFCs that have inconsistent passwords. Please maintain the correct passwords there.
In case the existing passwords are no longer acceptable due to new security policies as per the new SAP version, you will have to change the password from SU01.
Regards,
Shitij

Similar Messages

Password change issue when updating user data in SAP ABAP system

Hi Guru's,
One of my reconciliation tasks part of the reconciliation job I've created is doing some strange password updates.
As you can see below the task selects all users part of my identity store that are part of the account attribute of the particular ABAP system.
Once these users are selected the task updates different data like username, validto, ... but the task is updating a lot of other things that are not part of the destination tab. What is causing the biggest issue is the password fields that are updated in the ABAP system like, password, productive password, ...
Can you please advise if I missed something and how to solve?
Thanks a lot,
Laurent

Hello Steffi,
Yes in the ABAP systems they have the same timestamp. No other jobs are running at the same time.
It is only happening to a few users depending on the ABAP system. On some ABAP systems there are only a few users for which the PW is reset and other systems 300.
Example below of a system where I updated all user. In my pass only the following attributes should have been pushed thru to the ABAP system.
However the valid from, accounting number and password have been updated as well.
Thx,
Laurent

Inconsistent issues with outside users accessing Lync conferences

We continue to battle issues were some of our employees who are at a remote site or working from home accessing Lync conferences. Here is the error message and screenshot:
http://foreveryidea.wikispaces.com/Lync+Problems
Some ideas I have is maybe their local linksys like device is blocking something, or perhaps its a windows firewall issue. The windows firewall has different settings for Lync.
Thanks.

If these users are external user, please check the port 443 to IP address of Edge Server A/V Edge service are opened.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Order not getting saved with RFC user

Hi CRM experts,
We have custom report to update payment card details in CRM order. For an error order when I try to update the card details in CRM it successfully deactivates the "Contains Error(I1030)" status and saves the order.
Whereas the same error order when I try to update the card details through external system, the user is RFC user, the program does not deactivates the status I1030 and the order gets saved with error.
Initially I thought it is an authorization issue with RFC user, so I tried applying SAP_ALL access to RFC user but it did not work.
Kindly suggest the possible solution.
Thanks in advance
Meenu.

Hi Meenu,
The standard one order framework works in such a way that when any changes to any object like PARTNER , HEADER , ITEMS , CARDS etc take place, then after changes done, the system checks for any inconsistency for that particular object and displays error messages accordingly.
At the next change, the check runs again and the messages are removed. The checks are run through the standard event framework of BEFORE and AFTER. So in case the error messages are not getting removed, it means that these events are not getting triggered properly. I think that you are using individual FM for changing the details which could be something like CRM*CARD*MAINTAIN*OW*, you can try using CRM_ORDER_MAINTAIN, as this FM triggers all events correctly.
/Hasan

AUTO PO print out creates spool with RFC user.

We have classic scenario where AUTO SRM PO print out spool is create with RFC user. While PO data is passing to R/3 is correct with correct user (created_by). Out put is created on the name with RFC user not with user who create SRM SC& PO. BADI BBP_CREATE_PO_BACK will help?

Hi Vishal,
Welcome to SDN.
Do they use custom PO SAPScript/Smartform?
If they do, you may want to check the print program (custom one) and the custom PO form. Perhaps there is some logic to set/display with the european decimal notation.
If they don't, you can also check the print program setting and do debugging (if necessary) to find out the logic to assign european decimal notation.
Hope this will help.
Regards,
Ferry Lianto
Please reward point if helpful.

When trying to download it pops up with a window saying with current user i may not be able to do everything and is asking for administrater password or continue with current user? when i click current user it does nothing and i dont know the password

when trying to download it pops up with a window saying with current user i may not be able to do everything and is asking for administrater password or continue with current user? when i click current user it does nothing and i dont know the password
== User Agent ==
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)

Not from your end. Click here and ask the iTunes Store staff for assistance.
(126716)

HT4972 Has anyone had issues with failure of the music player to launch after updating to OS5? My Gen 3 will no longer play music!

Has anyone had issues with failure of the music player to launch after updating to OS5? My Gen 3 will no longer play music!

I think a few have.
Try the standard fixes:
- Reset. Nothing is lost
Reset iPod touch: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Restore from backup
- Restore to factory defaults/new iPod.

Problem with update MUSE CC 2014.2 (october 6). after upgrading to the new version of Muse crashes very often (out without notice).

Problem with update MUSE CC 2014.2 (october 6). after upgrading to the new version of Muse crashes very often (out without notice).

HELP! i can't get ANYTHING done in the new muse - keeps closing. once it crashes - i can't get the file back open!
i've lost all my work!
from my desktop - when it stared happening was with the updated version:
Logging in build 2014.2.1.10 started at: Mon Nov 03 13:36:38 2014
========================================
[00:00:42.416] Opening file '\\D-LAPTOP\_websites\dsbees muse\dsbees.muse' with status:success size:9797632 mod Date:Tue Sep 23 15:51:42 GMT-0500 2014 highestUID: 3548
[00:01:03.898] Preparing to Save As over "\\D-LAPTOP\_websites\dsbeesTWO\dsbeesTWO.muse" exists: true
[00:01:17.516] SaveAs complete for file '\\D-LAPTOP\_websites\dsbeesTWO\dsbeesTWO.muse' file size:9830400 mod Date:Mon Nov 3 13:37:51 GMT-0600 2014 highest UID:3551
Build 232: Mon Nov 3 19:41:03 2014 UTC: Error: CSI: OOBE: Serial Number: Error Code: O-10 Error Message: Unable to retrieve the serial number (Note: this may not be an error)
Build 232: Mon Nov 3 19:41:03 2014 UTC: Error: CSI: OOBE: Serial Number: Error Code: O-10 Error Message: Unable to retrieve the serial number (Note: this may not be an error)
Build 232: Mon Nov 3 19:41:07 2014 UTC: Error: CSI: OOBE: Serial Number: Error Code: O-10 Error Message: Unable to retrieve the serial number (Note: this may not be an error)
Build 232: Mon Nov 3 19:41:21 2014 UTC: Error: CSI: IMS: Connect: Error Code: I-200 Error Message: No Account
Build 232: Mon Nov 3 19:41:21 2014 UTC: Unknown IMS error 'SHARED_NOACCT_ERROR' has occurred when retrieving IMS token.
Build 232: Mon Nov 3 19:41:57 2014 UTC: Opening file '\\D-LAPTOP\_websites\dsbees muse\dsbees.muse' with status:This Adobe Muse site file requires a newer version of Adobe Muse. Please update to the latest version. size:9797632 mod Date:Tue Sep 23 15:51:42 GMT-0500 2014
Build 232: Mon Nov 3 19:41:57 2014 UTC: This Adobe Muse site file requires a newer version of Adobe Muse. Please update to the latest version.
Logging in build 2014.2.1.10 started at: Mon Nov 03 13:43:17 2014
========================================
[00:00:21.481] Opening file '\\D-LAPTOP\_websites\dsbeesTWO\dsbeesTWO.muse' with status:success size:9830400 mod Date:Mon Nov 3 13:37:51 GMT-0600 2014 highestUID: 3551
[00:00:30.373] AssertInDebug: Unable to run recovery. User file remains locked after 5 second pause.-assertInDebugOnly+DataBase/recover+MuseSite$/recover+MethodInfo-2886+DataBase$/run Recovery+apply+UIComponent/callLaterDispatcher2+UIComponent/callLaterDispatcher+end stack
[00:00:30.404] Failed to recover file:\\D-LAPTOP\_websites\dsbeesTWO\dsbeesTWO.muse
[00:00:30.420] Calling openConnection for file that doesn't exist? C:\Users\Owner\AppData\Roaming\com.adobe.AdobeMuseCC.2014.2\Local Store\Recovery\JXRoDn335LE0UosOdoStnQ Parent folder exists.
[00:00:34.429] open of SQL connection failed for C:\Users\Owner\AppData\Roaming\com.adobe.AdobeMuseCC.2014.2\Local Store\Recovery\JXRoDn335LE0UosOdoStnQ
[00:00:34.429] Failed to open mini-save connection B "C:\Users\Owner\AppData\Roaming\com.adobe.AdobeMuseCC.2014.2\Local Store\Recovery\JXRoDn335LE0UosOdoStnQ" Doesn't exist. Folder exists. error:SQLError: 'Error #3125: Unable to open the database file.', details:'Connection closed.', operation:'open', detailID:'1001'
[00:00:34.429] EXCEPTION:[SQLC/internalOpen] SQLError: 'Error #3125: Unable to open the database file.', details:'Connection closed.', operation:'open', detailID:'1001'-SQLConnection/internalOpen+SQLConnection/open+DataBaseConnectionWrapper/o penConnection+MethodInfo-28954+EventDispatcher/dispatchEventFunction+EventDispatcher/dispa tchEvent+MethodInfo-28938+end stack
[00:00:34.445] AlertAndExit because of: [SQLC/internalOpen] SQLError: 'Error #3125: Unable to open the database file.', details:'Connection closed.', operation:'open', detailID:'1001'

Logitech Keyboard Issues with Fast User Switching

I'm running OSX 10.4 on an 800 MHz iMac, and using a Logitech Cordless Navigator keyboard. The keyboard's main feature (for me) is the ability to have the function keys (F1-F12) automatically open applications and folders and such. When I have multiple accounts running though, this feature seems to be tied to whichever one I first logged into. If I switch accounts and try to use one of the keyboard shortcuts nothing happens where I am, but when I switch back to the original account I find that the keyboard has opened the program there. The keyboard types fine in the new account, and I can even change the preferences so the function keys do different things in the different accounts, but the extra functionality seems to be only available for whichever account logs in first.
I realize this may just be a Logitech bug, but any ideas how to fix this? (Also even though I'm the only one using my computer this seems like a mild security issue, if theoretically another user could activate programs on my account without the password.)
800 MHz iMac G4 Mac OS X (10.4.3) 768 MB RAM

Logitech support is frustrating:
Dear tajmahall14,
Thank you for your recent inquiry about your Keyboards.
I understand you are having issues with the settings for the function keys becoming non-functional when fast switching from one user account to another.
Depending on the system configuration, the Fast User Switching may or may not work. Unfortunately this is not an issue I can address. You may need to contact Apple to see if they have a possible solution to your problem.

RFC Call through BSP - Issue with RFC logon credentials

Hi everyone,
I have an BSP application running on a 6.40 which calls a RFC function module on a backend system (4.6c) using a trusted RFC connection.
The BSP is started with an URL which contains in encoded form the username and password. So we don't use the standard sap-username & sap-password.
In the first step the user is logged in with the anonym user (user type 'service') which is entered in the SICF. So sy-uname = 'anonym'.
After a couple of checks and verifications the BSP makes a user switch using 'SUSR_INTERNET_USERSWITCH'. Exporting parameters are the now decoded values from the URL. So after the switch sy-uname is e.g. 'blabla'.
Now a function module on the backend system is called. What I would now expect is that on the backend system sy-uname is also 'blabla'. But it isn't. The sy-uname is still 'anonym', which isn't very helpful regarding object authority checks.
Only after an reload of the BSP page and a second RFC call of the function module the sy-uname = 'blabla'.
I wonder what causes this problem?
Thanks for your replies & regards
Kruno

Hi,
I solved it.
Before I execute function 'SUSR_INTERNET_USERSWITCH' I first check if user has a valid backend account by using function module 'BAPI_USER_EXISTENCE_CHECK'.
And this is the problem. When 'BAPI_USER_EXISTENCE_CHECK' is executed once all other RFC function calls to the backend get the wrong user.
Why? I don't know yet. Maybe I will get an useful anwer from an OSS note.

Finder Wants Permission Every time File is moved on Server (issue with multiple users)

The Situation: I have a team of seven coworkers that uses a file structure on a server to move job folders from the 'active jobs' folder to "coworker x's" folder and then to a "waiting" folder once the job has been completed. Pretty much just moving folders into different folders. Seems pretty simple.
The Problem: At times, some folders will not move from one folder to another, and a message pops up asking "Finder wants to make changes. Type your password to allow this" and then it shows my computer's name and asks for a password. Now if typing in the password meant that the file would be moved, I would be fine with it, but when I type in my password in and accepts it, it does nothing! Like I said, there are seven of us that are using this system, and everyone has the same issue with the same folders, it is not like one person can move it and another cannot. To make it even harder to define where the issue is coming from: if you go back after a few minutes / hours, the folder will randomly be able to move with no issue. If you take the files out of the folder, you can move them, and when you move the now empty folder, it will gladly move into any folder, but when the files remain in the folder it asks for the password. And in some cases, folders that were just made and are empty have the same issue, which leads me to believe that this issue is not a result of the contents of the folder, but something else.
It is seemingly impossible to nail down the cause of our dilemma so I have come here in hopes of a great break through. The worst part is is that we are not doing anything that difficult, we are simply moving folders around. This is a windows based server, that might be important. Also, some of us are running Mavericks and others are still on Snow Leopard. Thank you for any information you might have! ( I have already tried the boot in recovery, resetpassword trick with no luck >_< )

If we're going to fix this, we will have to concentrate on one person to start with. Can that be you?
Some more information is required, only from you, your Mac and your windows user account on the server:
On the Windows server, are the 3 folders in question within the one shared folder?
What is the name of the Volume (share) that appears in Finder?
Are any of the folders being copied or moved to the local drive of the Mac?
On the windows server, what are the permissions that you have to:
The top-level shared folder
The 3 folders underneath the top-level shared folder
Do a Get Info of the Volume (share) in Finder and do a screen shot of both the area above Preview and the area below Preview (Preview itself is not required. Make sure all right-pointing arrows are expanded to down-pointing arrows so all info in each section can be seen.
(Did this discussion get re-assigned to the OS X Server Community? I've never been there, and I thought I found it in the OS X Mavericks community.) Are you actually running OS X Server on the Macs?
Message was edited by: SilverSkyRat: Additional Question

Issues with Remote Users, VPN Connections, etc.

Hi there,
A few weeks ago I was asked to enable EWS and Outlook Anywhere which had not been previously enabled. I did so, but this seemed to cause issues (they may not have been implemented correctly) for users in remote offices; they would be prompted
for credentials to log into Outlook 2010, but no issues with OWA. I disabled Outlook Anywhere as it turned out we didn't need it, and this has caused VPN users to now not be able to open Outlook.
At this point I'm not sure what the issue is. I've tried implementing a few fixes from Googling around but haven't been able to determine the root cause and actually caused more issues this morning, where many local users were being prompted for credentials,
which was alleviated by creating new mail profiles for them.
We're using Exchange 2010 and Outlook 2010, with OWA being served by Forefront TMG.
I've seen in some other cases where results of the following queries were asked for, so here they are:
Get-OutlookProvider | fl
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName :
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : EXCH
DistinguishedName : CN=EXCH,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchan
ge,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : EXCH
Guid : 0e397d7f-fecc-451f-8774-3b4225cce8c9
ObjectCategory : sunrype.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 10/10/2013 2:56:34 PM
WhenCreated : 9/28/2011 2:42:58 PM
WhenChangedUTC : 10/10/2013 9:56:34 PM
WhenCreatedUTC : 9/28/2011 9:42:58 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName : msstd:*.domain.com
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : EXPR
DistinguishedName : CN=EXPR,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchan
ge,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : EXPR
Guid : 3bed6181-e70e-4c93-ac2d-bc57605cbeae
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 8/20/2014 9:32:10 PM
WhenCreated : 8/20/2014 3:21:11 PM
WhenChangedUTC : 8/21/2014 4:32:10 AM
WhenCreatedUTC : 8/20/2014 10:21:11 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName :
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : WEB
DistinguishedName : CN=WEB,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchang
e,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : WEB
Guid : 659f40b8-815e-43ac-95ed-49bed9766ebc
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 10/10/2013 2:56:34 PM
WhenCreated : 9/28/2011 2:42:58 PM
WhenChangedUTC : 10/10/2013 9:56:34 PM
WhenCreatedUTC : 9/28/2011 9:42:58 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
Get-OutlookAnywhere | fl
No output.
I've also run the Microsoft Connectivity Analyzer locally, which appears to fixate on Outlook Anywhere connectivity and fails because OA isn't enabled. Specifically it reports that "The EXPR Provider section is missing in the Autodiscover response.
RPC over HTTP may not be enabled."

Hi Steve,
According to the description, my understanding as below:
1. To make users use Outlook externally, you want to enable Outlook Anywhere. However cannot connect to Exchange server via Outlook, it prompts password again and again.
2. Because Outlook Anywhere doesn't work, so you disable it and enable VPN. But it doesn't work neither.
Please correct me if there is any misunderstanding.
Based on the result of running Microsoft Connectivity Analyzer, it means that the Outlook Anywhere is disabled. However it isn't an error.
I suggest enable Outlook Anywhere on Exchange server 2010 and configure Outlook Anywhere on Outlook.
Find an article related Configuration on Outlook for your reference:
Configure Outlook Anywhere in Outlook 2013
http://technet.microsoft.com/en-us/library/cc179036(v=office.15).aspx
Thanks
Mavis
Mavis Huang
TechNet Community Support

Invalid_jobdata when submitting job with rfc user

Hi,
I've created a function module in the erp system to remotly trigger a report program by a bw prossess chain.
When running in the forground it works fine, but the runtime is so long that I want it as a background job.
So I call job_open, job_submit, job_close in the function module. When I test the function module in the erp system with my dev user it opens a new job, adds a step and release correctly. It also runs fine if I intercept it in the debugger and change sy-uname to aleremote (the standard rfc user).
It does not work when it's acctually called rfc from the bw system. The job is opened, but job_submit throws invalid_jobdata.
Could this have anything to do with rfc or the executing user (which is of type SYSTEM)?

I've caught the execption so there is no dump, but I'm unable to determine why the function module job_submit gives invalid_jobdata only when the executing user is the aleremote user and only when the call originated (the call to my module) from a remote system (the module job_submit is called locally thru my module). Authorization for the user is sap_all, but I was woundering maybe the user type system could be a problem?

Firefox issues with multiple users on a single computer.

I have an issue with Firefox and multiple users on my computer. There are two users setup and I'm running Win7 Ultimate x64. When the other user logs in, my settings in Firefox get screwed up somehow. Even if that user does not open Firefox.
Examples of problems this causes:
Gmail - Cannot load the standard interface, however it will load the HTML only interface.
Facebook - Cannot post anything.
vBulletin Forums - Some forums will no longer normally load - a text-only version loads as if I was browsing from a mobile device.
There may be other issues, but these are the main ones. If I clear my cookies, cache and browsing and download history, then restart Firefox, everything works again.
This seems to happen most often when the other user logs in, and uses Firefox to log on to their Gmail account.
How can I fix this?

Create a new profile as a test to check if your current profile is causing the problems.<br />
See [[Basic Troubleshooting#Make_a_new_profile|Basic Troubleshooting: Make a new profile]]
There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins"
If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

How to force a new password in portal with LDAP user? external users

With an external portal (used by agents that do not work for you or reside in your office), company policy is for password to be changed every qtr.
If the users are creating as LDAP users how to force them to change their password when required?
Is this a custom application that needs to be written so when they log into the portal if the qtr has expired the portal ask them to enter a new password that becomes valid for the next qtr.
Versus internally deleting and emailing all the users a new password?

Hi Glenn,
We are getting one problem when we are creating user in LDAP and login with that user in Portal that time we are getting Password change screen , but when we create a user in LDAP and change the password of that user in LDAP then when the user tries to Login to portal that time we are not able to see the password change screen.
But again if we change the password of that user through Portal we are able to see change password screen.
can you help on this how we can force the user to change password when we are changing password in LDAP or in SAP System.
Regards
Trilochan

Password inconsistancy issue with RFC users in ECC 6.0 System after upgrade

Similar Messages

Maybe you are looking for