Profile parameter changes
Hi gurus,
while changing the profile parameter login/min_password_lng, getting error E:login/min_password_lng is not identified identically on all servers. kindly help me to change the profile parameter login/min_password_lng.
thanks in Advance,
Anbu
Hi,
When you define a parameter at instance level this overrides the global definition. I believe you have removed the instance level definition for this parameter ?? Ensure that this parameter is defined ONLY in the DEFAULT profile . The summary is to have one value for this parameter for the whole SAP system rather than having different values for different application servers as a security policy parameter(of this kind) is something to do with a complete SAP system.
Let us know.
cheers !
PRADi
Similar Messages
-
History of Profile Parameter Changes!!!
Hi,
Please help with any way by which i can find the parameter changes in profile.I referred to other post and found TU02 tcode but this does not help.
Basically we are trying find from particular to till now the list of parameter changes happened.
satishHi,
Go to RZ10
Choose the profile.
Go to Extended maintenance
Choose - Display.
Then Select Go TO - Detailed List
Again Click Go to- Detailed List
You can see the history of the parameter change.
Regards
Edited by: bhuban_2010 on Aug 5, 2011 5:35 AM -
Profile Parameter changes after RAM Upgrade?
Hi,
We are using SAP ECC 6.0 on AIX 5.3 and IBM p595 seriers
Now we have upgrade the Physical memory (RAM) from 8 GB to 16 GB.
After Upgrading/Degrading the Physical memory (RAM) from the Server,What manual Changes has to be done for Profile parameter.Please provide the details.
Cheers
DeepuHi ,
After Changing the RAM in SAP System ..
1) Increase the No of Work Processes , If Required
2) Increase the size of Memory Areas ( Size of Extended Memory) , If you face any Memory Dumps
3) Increase the SAP Buffer Sizes ( Program Buffer etc.) to have better performance.
But it is not compulsary that you should change these parameters but changing these Paramters Values will improve performance of SYstem
Thanks
Deepak Gosain -
Profile parameter for to change password
Hello everyone.
Is there any profile parameter to change the password after certain number of days say 30 days. I see there are profile parameters for lenght , uppercase, lowecase but is there one to change the password after a given period of time.
Thanks.
Neha.> I checked the profile parameters using the program RSPARAM. But I am not able to find a parameter to prevent the old password from being used at least ten times. I also checked in the table TPFET.
>
login/min_password_diff min. number of chars which differ between old and new password
> And also can we prevent the password being same as user id.
>
> Should these parameters be changed in the deafault profile or instance or start profile.
>
It depends ... you may decide this by discussing with BASIS team and as per your Company SOP. I prefer Default profile. But never use Instance profile.
Please go through the following links:
[Password Rules|http://help.sap.com/saphelp_nw04/helpdata/en/d2/141fb593c742b5aad8f272dd487b74/frameset.htm]
[Profile Parameters for Logon and Password (Login Parameters)|http://help.sap.com/saphelp_nw04/helpdata/en/d2/141fb593c742b5aad8f272dd487b74/frameset.htm]
[Password rules and preventing incorrect logons|https://websmp110.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=2467&_NLANG=E]
[ Note 862989 - New password rules as of SAP NetWeaver 2004s (NW ABAP 7.0)|https://service.sap.com/sap/support/notes/862989]
[Logon and Password Security in the SAP System|http://help.sap.com/saphelp_nw04/helpdata/en/eb/4bb638b5358259e10000009b38f8cf/frameset.htm]
Regards,
Dipanjan -
Increase Performance without changing profile parameter
Hi folks,
How to Increase the Performance without changing profile parameter ?One of the easiest ways to gain some performance is to turn off any unnecessary services running on the server. Depending on the platform, you can gain some memory by just removing these (turn off sendmail or postfix if you are not sending any messages [monitoring or otherwise]).
J. Haynes
Denver, CO -
How to change INSTANCE profile parameter?
HI,
How to change INSTANCE PROFILE PARAMETER for permanent???
any step by step or note?
Thanks,Alf,
Its is recommended to do parameter changes through RZ10. Check the parameter in RZ11 and if you see a check mark against DynamicallySwitchable, you dont have to reboot else it requires a reboot. All the changes you made through RZ10 is permanent. You can do it through OS level but its not a good practice. If you do it through RZ10 it is logged.
Thanks
Prince Jose -
Profile Parameter : Time out for executing query on the web
Hi gurus,
I am executing queries on the web directly. This can be done from query designer with the button that says "Execute query on web". The problem is that for queries that take more than 600 Secs to run, I get an Application timed out error. Queries that take less than this run smoothly.
Can anyone please tell me the profile parameter associated with this particular setting. It is not rdisp/max_wprun_time, I know for sure since the value for this profile parameter in my system is 9999. Please help.
Thanks & rgds,
SreeIssue resolved.
Profile Paramter - icm/server_port_0
Current Value - PROT=HTTP,PORT=8000,TIMEOUT=60,PROCTIMEOUT=600
Changed to - PROT=HTTP,PORT=8000,TIMEOUT=60,PROCTIMEOUT=3600
rgds,
Sree -
Profile Parameter to execute Abap Program at user logon.
Hi Experts
I've written a small printer selection program to change the users profile parameter.
Is there another profile parameter that can be given to execute this program automatically
when the user logs on.....The reason why I'm looking for a profile parameter to do this is, that only
certain users need to have this happen at logon.
Kind Regards
VicHi Javi,
I don't think you need a custom process chain for this. You can use delivered Process Chain for logic and hard-code your script name in the package. In that script you can call BADI that has your ABAP program inside.
You can find guides how to build BADI here:[How to Pass Parameters to Custom Logic BADI using START_BADI|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20f4252d-98ca-2b10-e689-f85085ae2d12] or here [Creating Custom Script Logic Keyword BADI's - BPC NW|Creating Custom Script Logic Keyword BADI's - BPC NW;.
Method IF_UJ_CUSTOM_LOGIC~EXECUTE has IT_CV as one of parameters. In your script you probably have to use *XDIM_MEMBERSET to get parameters from DM prompt. IT_CV will have all XDIM members.
Please let me know if you have any other questions.
Regards,
Gersh -
Profile parameter for passwords - conflicting documentations.
Greetings!
I've encountered an issue with profile parameter login/password_max_idle_productive
Integrated help in SU01 says:
You can use the profile parameter login/password_max_idle_productive to define the point as of which the validity of the productive password ends. The time is calculated from the date of the last password change plus the number of days specified in the profile parameter. Password-based logon is then not possible from this point.
This makes this parameter redundant (we have login/password_expiration_time ).
SAP Library says (see link below):
Specifies the maximum period for which a productive password (a password chosen by the user) remains valid if it is not used.
Which suggests that the time after which passwords are considered expired is calculated from last logon date plus whatever is the parameter value.
SU01 help specifies explicitly how this parameter works but it conflicts with a more ambiguous description found in the SAP Library. The observed system behavior on logon is in line with SU01 help, but report RSUSR200 does not list the user as having an expired productive password.
We're on ECC 6.0, release 701 with support package 3. I could not find any SAP notes relating to this issue.
Has anyone encountered this issue before or have I just run into an odd glitch?
[SAP Library|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/22/41c43ac23cef2fe10000000a114084/frameset.htm]It sounds like you have a requirement to set the expiration time (when the user has to change the password) which is for a different user group than those for which you want to disable an idle password. Currently, both are global settings and affect both user groups (actually, all users of type DIALOG and COMMUNICATION - only SERVICE and SYSTEM type users are not affected).
In that there is an option for you... but be aware of license implications... or you can upgrade to 7.02 early next year (I think this is the correct release, time and release "alias" for it..) and then the config your security policies client dependently!
Currently, your best option is to not set these two global parameters illogically and monitor the user group manually from RSUSR200.
In the wild, many folks use the user type difference to workaround this, but that is also global to the user type so they are excepted from the expiration time as well. Additionally, not all functionality is available to them on the client side (e.g. SAP Logon Tickets won't work) and the authority-checks are even slightly different on some special cases.
Personally, I don't understand why users with authorizations to make purchase requests only should change their passwords more often (expiration time) or be more active (idle time) than those with SAP_ALL etc.
> I hadn't considered SSO since we do not currently use it.
SSO solves several of these problems by deleting the password completely...
Cheers,
Julius
Edited by: Julius Bussche on Oct 8, 2009 9:59 PM -
Parameter changes prevent SAP from starting
Hello all,
We are running SAP ERP 4.7ext 2.00 with two nodes in a Windows/MSSQL Cluster environment.
1. Last night, we made parameter changes to the central instance profile. In particular, we started with adding the parameter enque/table_size = 16384, activated the profile and took the SAP R/3 RP1 Resource offline. We then tried to bring it back online but it went into a failed status. We removed this parameter using a text editor, and then retried to bring the SAP Resource online again, but to no avail it went into a failed state again.
2. We had previously made backups of the profile files created by the reinstallation of the central instance (DEFAULT, START_DVEBMGS00_ZAASAPCCI001, and RP1_DVEBMGS00_ZAASAPCCI001 lets call this File Set A.) and decided to use these files instead. These files had the default parameters created on installation. We were successful in bringing the SAP resource online.
3, We made a parameter change and activated the profile in SAP it does not matter which parameter you choose, for example, changing the number of dialog work processes from the default 2 to 20 . We took the SAP R/3 RP1 Resource offline but were unable to bring it back online - it went into a failed status.
4. We then took File Set A, and using a text editor (1) made changes to the number of work processes; and (2) appended the extra parameters to them. Using these files we were now successful in bringing the SAP Resource online.
5. If we now made any changes to these files either through SAP or by using the text editor, we are unable to restart SAP. We have to revert to step 4 above.
6. A strange anomaly we noticed is that if the profile files have the following commented lines in the beginning of the file RP1_DVEBMGS00_ZAASAPCCI001. for example:
#.* Instance profile RP1_DVEBMGS00_ZAASAPCCI00 *
#.* Version = 000007 *
#.* Generated by user = ABOOM *
#.* Generated on = 11.05.2006 , 09:04:07 *
Then we are unable to restart SAP.
Is this a bug related to running a dual-node SAP cluster? We were previously able to make parameter changes (either through SAP or through the use of a text editor) and restart SAP successfully.
It is now become critical to determine the cause of this anomalous behaviour and resolve the problem. Failing this, the client wants to break the cluster and revert to a distributed SAP system installation (with separate DB and central instance hosts).
Your comments and help wil be greatly appreciated.
Regards,
LeboHi Lebo,
Can you try to edit your profiles (the correct ones) using sappad tool (/usr/sap/<SID>/<INST-ID>/run/exe/) and save it in the same format that was used to open it.
Regards,
Mike -
PI 7.1 Exchange profile parameter:
Hi
I got a chance to have a look at PI 7.1. While going through the Exchange Profile parameters, I found a new addition to the existing parameter list. Its called internal. I could not find any information about it.
help.sap documenation also does not make a mention of this parameter
I want to know why this parameter is required. Please help.
Best regards,
HariHi,
I am not sure but most of the Exchange profile parameter are to be for SAP Intyernal use only that should not be altered while custom Installations.
May be that kind of paramteres have sagreegated under Internal category to restrict the changes for it.
Thanks
Swarup -
Hi all,
To use dynamic error handling in the ICM or Web dispatcher, we must set the profile parameter icm/HTTP/error_templ_path to the directory with the error template files.
How can we do this? Where do we set the profile parameter? Is there any TCode for this?
Regards,
Saurabhgo to rz10
choose instance profile
choose radiobutton extended maintenance.
click change
in the resulting screen click create button now using F4 choose the desired paramter and set its value
check out this online documentation about error template and where it can be stored.
http://help.sap.com/saphelp_nw04/helpdata/en/f6/3c0b0389cea34ba66f10d62b718a1a/frameset.htm
Regards
Raja
check out the following weblog on SDN way of saying thanks.
/people/mark.finnern/blog/2004/08/10/spread-the-love -
Hi Gurus,
What is the profile parameter name which is used to increase the character length of user name?
Thanks in advance.Hi,
There is NO such profile parameter exists to control the character length of User Name.
You can change the character length of this field in the following way ONLY.
Go to TCode: SE11 and Change the character length of the field " BNAME " (Data Element: XUBNAME) in the USR* tables. Basically you need to change the Data element character length from default 12 to your desired value.
But the main heads up is that you need a Developer Access key, as this is "Modifiation" and Not customization.
Please let me know if these information is helpful.
Regards,
Dipanjan -
Profile Parameter Setup (RZ10) - Help Needed
In using RZ10 to setup profile parameter for QAS, in the scenario below:
How dow I change the "Unsubtituted and Subituted standard value to match this
miadevs2\sapmnt\trans
Parameter name: Status Seq. no.
DIR_TRANS Active 3
Parameter val.:
$(SAPTRANSHOST)\sapmnt\trans
Unsubstituted standard value:
miaqasc2\saploc\trans <b>(Need to change this value - It is grayed out)</b>
Substituted standard value:
miaqasc2\saploc\trans <b>(Need to change this value - It's grayed out) </b>Hi Joseph,
Change the field in "Param Value" at the top.
It will changed automatically the field value.
Hope this helps,
Erwan -
Msprot: cant read profile parameter rdisp/mshost
Hi
When I run : msprot -name <SID> -l it returns:
cant read profile parameter rdisp/mshost
rdisp/mshost is set in the default profile to : sapms<SID>
in etc/services sapms<SID> is assigined to <port_number>/tcp
If you change rdisp/mshost to the port number rather than sapms<SID> it works....but we don't want to change the parameter to the port number.
Thanks
JimThanks.....i've being testing the command....it's like it can't read the default profile...
if i use mshost switch it complain it can't read msserv.....once I use both switch it runs ok....
I changed default profile to 777 just to test if it was a permissions issue but that didn't make a difference.
Thanks for the note but that seems to be dealing with windows...i'm working on sun...tried it on linux also and get
the same problem....
Cheers
Jim
Maybe you are looking for
-
Adobe Community Help Application Updates - Stuck in download process
I read in the forums where people have had problems with the initialization of the download freezing, but my problem is that when I download the local updates... The download itself freezes. When I try to update everything at once, it hangs up every
-
Script for rename the pictures name as login names
I have staff pictures (100+) and pictures name as ID of staff. But I want to rename all with login names. any idea of writing a script? Best lasantha
-
Just installed Safari on Sony PC. MS wireless mouse will not scroll on most pages. But will on "History" section of homepage. Help appreciated.
-
The geolocation doesn't work with WIFI or GPS indoors, just outdoors?
In HTML5 specification, the geolocation option try to find your location by different sources like: *GPS *Wifi *Cell Tower Indoors it seems that the phone cant get the geolocation.... can you give me some advice? Best regards, Victor
-
X60T Driver issues/missing
Hi, I thought I'd better join up as I've scanned through many similar issues on the site & none seem the same as my or have any useful tips. A couple of weeks ago my HDD destroyed itself so I had to install WinXP from scratch I also have SP2 & 3 inst