PIDIRUSER & PIRWBUSER Keep Getting Locked

After a recent XI system copy my PIDIRUSER and PIRWBUSER keep getting locked by the kernel. I did not change the passwords from the system I copied yet this problem only occurs in the new copy. In SM21 it shows that SAPJSF locks it with repeated invalid login/passwords. It seems to occur every 20 minutes on the nose but I can't find any jobs that correspond to this timeframe.
I have been through the enchange profile a number of times and validated everywhere I can think of but I can't find anywhere in ABAP or JAVA where these users are embeded with the wrong password. I have also restarted multiple times during the system copy process and once just to try to stop this occuring. I've refreshed the caches, I've sync'ed with the SLD, I'm at a loss.
Anyone have any ideas where to procede?
Thanks
Phil

Thanks Moorthy,
I have gone through and changed my passwords for these two users per note 721548. Still the same issue is happening. I am somewhat puzzled since I have no jobs running under either user (at least none that should cause 3 failed logins in 20 minutes). Also, this is a relatively unused system with no developers logging on to use either the directory or the runtime workbench. So I really have no clue what is causing these failures. It is pretty clearly failing from Java trying to connect to ABAP but why?
Thanks for your help, I'll keep this open in case anyone wants a good mystery.
Phil

Similar Messages

PI7.0 PIAFUSER, PIDIRUSER, PIRWBUSER, PIREPUSER getting locked.

Hello,
I have two PI systems PID and PIQ.
PID has central SLD and PIQ is configured to use central SLD during installation.
The PI users in PID and PIQ have different passwords.
I have noticed following users are getting locked in PID.
PIAFUSER, PIDIRUSER, PIRWBUSER, PIREPUSER
When i shutdown PIQ instance, they do not get locked in PID
I am not sure why PIAFUSER in PID is getting locked as soon as I start PIQ instance.
Any help is appreciated.

Hi ,
I am sure whoever has configured Central SLD has missed few steps while doing the configuration.
I would suggest you to go through the configuration guide and check what all steps are missing.
>>>The PI users in PID and PIQ have different passwords.
This isnt a problem. Now if the service users have different passwords, what we need to do is .........<b>Create separate service users in your PIQ system and mention the same in exchange Profile of PIQ system. Also the same service users needs to be created in your PID system with the same password. </b>
If that sounds confusing..
Refer SAP Note 720717: Reduce the number of System Landscape Directories (SLD)
If you have any other query post the same.
Regards,
Sumit

Java-administrator password keeps getting locked

Hi,
We have a portal 7.3 in which the Java-administrator password keeps getting locked. I can't see anything in the log traces in NWA. The only thing I've found is in security_audit logfile which doesn't really say much:
#2.0 #2014 07 17 05:47:03:913#+0200#Info#/System/Security/Audit/PrincipalModification#
#BC-JAS-SEC-UME#com.sap.security.core.sda#C000AC142D1F08D90000000000003284#52888950000000002#tc~bl~txmanager~plb#com.sap.security.core.util.SecurityAudit#Guest#0#JTA Transaction : 127261#040FAA9B0D6511E4C5A4000003270576#040faa9b0d6511e4c5a4000003270576#040faa9b0d6511e4c5a4000003270576#0#Thread[RMI/IIOP Worker [0],5,Dedicated_Application_Thread]#Plain##
User account modified | USERACCOUNT.MODIFY | UACC.PRIVATE_DATASOURCE.un:Administrator | | SET_ATTRIBUTE: islocked=[true], SET_ATTRIBUTE: lockreason=[1]#
Please advice,
Thanks.

Hi,
there exists a trace location that should provide useful information for such cases. It is described in SAP note:
1493272 - A user gets locked automatically
My suggestion is add the location com.sap.security.core.userlocking as
specified in the attachment to the note and once it is added, set that
location to DEBUG and wait for the user to be locked again. Hopefully additional information concerning the origin of the bad credentials will be written to traces.
Exactly how you capture the traces depends on the frequency in which
the user becomes locked. For example if the user becomes locked every
few minutes, after adding the location in the configtool and
restarting the system, I suggest using the Security Troubleshooting
Wizard to do so. Refer to note 1332726 - Troubleshooting Wizard and
its attachments. Create a custom incident that is a copy of the
Authentication incident and add this location
com.sap.security.core.userlocking to the newly created incident
Set the wizard to use this new incident for trace collection and wait
for the user to become locked. Then immediately stop the wizard's
trace collection
I
f the locking occurs less frequently than every few minutes, it is
preferable to use the NWA to adjust the severity of these locations
and their sublocations to DEBUG and wait for the issue to reoccur
com.sap.security.core.userlocking
com.sap.engine.interfaces.security
com.sap.engine.services.httpserver.HttpTraceRequest.traceRaw
com.sap.engine.services.httpserver.HttpTraceResponse.traceHeaders
com.sap.engine.services.security.authentication
com.sap.security.core.logon
com.sap.security.core.ticket
com.sap.security.core.util
com.sap.security.core.server.jaas
See Log Configuration with SAP NetWeaver Administrator
http://help.sap.com/saphelp_nw73/helpdata/en/47/af551efa711503e10000000a42189c/content.htm
Don't forgot to change these back to default severity levels after the
issue has captured in the traces
Regards,
David

PIAFUSER PIDIRUSER & PIISUSER are getting locked , when cache is refreshed

Hi XI Gurus,
My scenario goes like this.. Sonic MQ <- XI <- SAP CRM.The messages sent from CRM are reaching XI but not are not making to Sonic, and the error message in SXMB_MONI of XI is <SAP:Category>XIServer</SAP:Category>
<SAP:Code area="INTERNAL">HTTP_RESP_STATUS_CODE_NOT_OK</SAP:Code>
<SAP:P1>401</SAP:P1>
<SAP:P2>Unauthorized</SAP:P2>
I know this problem deals with the aunthentication.The users PIAFUSER PIDIRUSER & PIISUSER are getting locked when ever Iam trying to refresh cache in ID.When I unlock them and again refresh the cache they are again getting locked.when I unlock the users and restart the message it gives me an error of cache probelm .The mesage is stuck at call adapter phase in SXMB_MONI.Iam really confused of what to do.. please help me..

And when the locks are gone it gives me the following error
I have checked my receiver side every thing is fine.
<SAP:Category>XIAdapterFramework</SAP:Category>
<SAP:Code area="MESSAGE">GENERAL</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>com.sap.aii.af.ra.ms.api.ConfigException: ConfigException in XI protocol handler. Failed to determine a receiver agreement for the given message. Root cause: com.sap.aii.af.service.cpa.impl.exception.CPALookupException: Couldn't retrieve outbound binding for the given P/S/A values: FP=;TP=;FS=CRSCLNT100;TS=Sonic_BusService;AN=EMADispositionIN;ANS=urn:mentorg.com:ema:disposition;</SAP:AdditionalText>
<SAP:ApplicationFaultMessage namespace="" />

The J2EE_ADMIN is keep getting locked

Hello,
The J2EE_ADMIN is keep getting locked for some reason.
I unlock it and after a while it is locked again.
No one is trying to login with it so it can't be locked due to multiple wrong logins.
What can be the reason for that?

Hi,
Open Visual Administrator in Cluster> Server>Services-->Security Provider
Go to Runtime - tab and then User Management. Search for the user "J2EE_Admin" and double click on the user name to get the user management property sheet. There you can find "No password change required". If it is not checked, please check that one. Then that password wont expire for every deployment.
Hope this helps.
Regards,
Pooja.

NWDI_ADM user keep getting lock

Hi,
We are having an issue with the NWDI, the user NWDI_ADM keeps getting lock and i am not sure what is locking the user. I also receive this message when trying to access the activity in the CBS.
#1.5 #001E0BEBCFF000760000005700001090000467BE96A6C2DD#1239968175774#com.sap.tc.cbs.server.rt.bs.BSAdmin##com.sap.tc.cbs.server.rt.bs.BSAdmin####n/a##8d5928812b4211decb67001e0bebcff0#Thread[CBS BSA Orc,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Java###
[EXCEPTION]
#3#Unable to instantiate a Build Space administrator!
Build Space "JDI1_TESTJS_D" [bsID: 42, version: 1] [in-queue: on, out-queue: "on (queueing)", processing: on]#Unable to access repository. Authentication failed.#com.sap.tc.cbs.api.CommunicationException: Unable to access repository. Authentication failed.
     at com.sap.tc.cbs.api.impl.BSFacade.getOwnerBuildspace(BSFacade.java:526)
     at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.checkWorkspace(_BuildSpaceValidator.java:87)
     at com.sap.tc.cbs.server.rt.bs._BuildSpaceValidator.validateWSs(_BuildSpaceValidator.java:57)
     at com.sap.tc.cbs.server.rt.bs.BSAdmin.validate(BSAdmin.java:183)
     at com.sap.tc.cbs.server.rt.bs.BSAdmin.updateState(BSAdmin.java:251)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.determineChanges(BSAdminOrc.java:437)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.validateBuildSpaceData(BSAdminOrc.java:217)
     at com.sap.tc.cbs.server.rt.bs.BSAdminOrc.act(BSAdminOrc.java:339)
     at com.sap.tc.cbs.server.rt.impl.CourteousTimer.run(CourteousTimer.java:139)
     at java.lang.Thread.run(Thread.java:534)
If you can help, that would be great.
Thanks
Jean Seguin

Hi Jean,
You can check NWDI_ADM user in your NWDI System & SLD System. To check where user is getting locked you can go to Visual Admin --> Server Node --> Security Provider --> User Management:
Search for NWDI_ADM user and see when it was last locked. Perforn this on both NWDI & SLD system.
To resolve this issue.
1. Make sure you have same password defined in NWDI & SLD system OR
2. Run configuration wizzard in NWDI System which will prompt you to enter password for NWDI_ADM user. TO do that please go to
http://NWDIserver:<portnumber>:nwa --> Deploy and Change. From there run configuration wizard for CBS; CMS & DTR. and before doing this make sure you have correct password for NWDI_ADM user in SLD & NWDI System.
What I generally do is keep same passowrd in NWDI & SLD system. Thats my way of doing thing and keeping less complications.
Bhavin

PIRWBUSER is getting locked

hello
everyday the user PIRWBUSER is locked in our XI dev system
I searched for jobs for that user and also tried checking su53
but nothing came up
any ideas ?
thx shai

Hi,
As Ivan already said, if the password is changed it has to be maintained in Exchange Profile.
Another common mistake is some RFCs might be using this UerId. But since the password is changed, it gets locked after this RFC tries to establish connection after 3 or 4 times. So check the RFCs.
Regards,
Jaishankar

J2ee_admin keeps getting locked

Hi,
I changed the j2ee_admin password in both the secure storage of Java AS and in ABAP. Our SLD connection also seemed to use the j2ee_admin user in tx SLDAPICUST which I also changed but still it gets locked each time! SAPJSF user reports the locked j2ee_admin account in the syslog after awhile when unlocking it.
Where else could j2ee_admin be possibly being used where I still need to change the password ? ..or any other log files on Java AS that could tell me of errors or give me more info ?
Thanks!
Regards,
Nelis
Sorry, not sure if this is the right place to post this question.

Hello Neil,
When you log into R/3 and go to transaction SU01 does the j2ee_admin user show up "locked"? In addition to changing the password did you remember to unlock the user. Also, you might try changing the user type from dialog to system in su01. If you have a security policy that requires the password to be changed at first logon or after a period of time, this could cause the logon failures. Changing the user type to system or communication type will avoid the forced password changes for j2ee_admin.
If the issue continues to occur you should check the ./cluster/server#/log/defaultTrace.#.trc for exceptions regarding the j2ee_admin user. Another useful log is the ./cluster/server#/log/system/security.#.log which will show details more specific to the security provider.
Regards,
Nathan

I am attempting to make my first purchase in the App store, yet it is asking me security questions I know I didn't enable and I keep getting locked out of my account despite resetting everything.

This usually wouldn't pose to be a problem, but I am a college freshman and I just redeemed my $100 giftcard to the app store. I am beyond frustrated and don't know what to do.
It is my first time making a purchase off of this Mac with this account, so it is asking me two security questions. It keeps asking me who my favorite and least favorite teachers were. I know for a fact that these are not the security questions I enabled, so I went in to change them again and logged out of everything. I logged back in and I was getting the same thing from the App store -- it was asking me questions I didn't enable. I've been locked out of my account for eight hours twice and all of my Mac's information is at home and not easily accessable to me, so I don't want to have to call and be asked for information I do not have.
What do I do? I need some crucial apps for classes that start in less than fourty-eight hours from now?
I have changed my appleID's information three times now: passwords, rescue email, and of course, my security questions. I am at my wits end and not pleased that I will possibly be losing $100!

You've been hitten by Apple's recent SNAFU. I fear you are SoL until their pending investigation fiasco is over with.

Mac book air os x lion windows network connection keep getting locked out

hello, I have an end user with a mac air, running os x lion. I attached him to a network share on the windows network active directory on server 2008. he is the only one that when he clicks on the network share it locks him out. I check a/d and he is locked out each time. Is there a fix for this. other computer specs are processor 1.7 ghz intel core i5 4gigs memory. this should be an easy fix for such a robust machine.

Hey,
yes I did get to the bottom of this problem!!!. After spending some time on the phone with apple support they suggested that it was probably a problem with the hardware on my macbook air.
So I took this to an apple shop they had a look and it was infact a problem with the logic board. Not sure what was wrong specifically but they replaced it and then reinstalled OS for me and now works perfectly. All came under the warrenty obviously.
I had a look at your thread and it seems that your having the same problem, only thing i can suggest is ring support if you havnt done so already they will go through recovery with you, should be all free if you have just bought your new mac. Alternatively, to save time I would quickly check and download via a different internet connection/ try connect your mac to the router with an ethernet cable, just to see wether its an internet issue.
If this fails unfortunately you will most likely have to take it to an apple store to get them to take a look!.
Good luck
A

Keep getting lock ups. Now its a black screen and will not respond even when unplugged .

I cannot reboot as i cannot see anything on the screen. Ive tried to restart and tried control alt delete, and f8 on start....still no response? Anyone have ideas?

you probably have a bad video card. The decision would be up to you but for that PC because it was so unique I'd look for an Authorized HP Repair facility in your area, that way they will know how to take it apart. The video card in this system has a heat sink attached to it as well and it pretty involved. You can replace it on your own, but it would be pretty involved. Here is a link to some instructions on how to open the case.
http://h10025.www1.hp.com/ewfrf/wc/documentSubCategory?tmp_task=useCategory&lc=en&dlc=en&cc=us&lang=...
Your video card is the
Video graphicsGeForce Go 7600
PCI Express x16 interface
MXM connector
256 MB
good luck
bill
I'm a HP employee

PIRWBUSER getting locked repeatedly

Hi Experts,
We are facing a very peculiar problem . The service user PIRWBUSER is getting locked again and again . We have thoroughly checked with all the places where the service user is used and all those places are having the right entry . Still the user is getting locked . Kindly let us know where exactly is this user being used which has gone unoticed or there is some other problem .
We have checked with all the possible notes related to this problem and checked with the PIRWBUSER in sm59, PMI store of J2EE admin and all such related places where actually this service user is in use .
Please help .
Regards
Nishant Kumar Singh

Check these discussions if you have no done already:
PI7.0 PIAFUSER, PIDIRUSER, PIRWBUSER, PIREPUSER getting locked.
Re: PIRWBUSER is locked by incorrect login
PIRWBUSER is getting locked
PIDIRUSER & PIRWBUSER Keep Getting Locked
Regards,
Ravi

PILDUSER gets locked every 2-3 minutes

Hi,
We are using XI 7.0 with SP09 , during post installation we atrying to login exchange profile using PISUPER it throws error .Then we found PILDUSER gets locked.
We have unlocked the account then we can login but it throws error message "name or password incorrect"
Then found once again PILDUSER got locked
PILDUSER gets locked every 2-3minutes even we do not perform any task.
Can any one encountered this issue ? please suggest.
- Kristene

Hi Kristene,
I faced the same problem I found that user may get locked If you have mentioned wrong passwords for the same user at Different places(QA,Prod).
Check this thread
XIAFUSER keeps getting locked
Regards,
Ashwin M
Reward If helpful

I had started the process of removing my husband as the primary on my ipad2 device before the Holiday and never got back to it. I keep getting a message on the ipad for New icloud Terms and Conditions but I can't seem to log on. when i go to it's locke

I had contacted apple support before the Holiday and we had started the process of removing/replacing my husband as the primary on my ipad2. However, I keep getting messages now 'New iCloud Terms and Conditions' in a window that constantly pops up. When I go to settings to log into icloud, it is locked with a grey screen. What can I do? Also, I had gone throught he process of syncing all 3 of my devices Ipad2, mini and my iphone5 to have the same passwords, etc. for ease of use. Now that seems to be all wrong as well. HELP! I need these devices for my work and I'm short on time to go to the store, but will if I have to.
Thank you!
Julie

If the setting is greyed out perhaps you have restrictions enabled that would prevent someone from changing accounts. Settings>General>Restrictions>Allow Changes>Accounts.

My iPhone is locked due to setting up a passcode after loading new version 7. I have tried to reset but keep getting turn of "find my iphone". I can't get into the phone to turn this off. What do I do now?

My iPhone is locked due to setting up a passcode after loading new version 7. I have tried to reset but keep getting turn of "find my iphone". I can't get into the phone to turn this off. What do I do now?

Try this - http://support.apple.com/kb/ht1212 - also you can sign into www.icloud.com and remote erase the phone
recovery mode restore as descibed in HT1808 might be your last resort though

PIDIRUSER & PIRWBUSER Keep Getting Locked

Similar Messages

Maybe you are looking for