Profile parameter changes

Hi gurus,
while changing the profile parameter login/min_password_lng, getting error  E:login/min_password_lng is not identified identically on all servers. kindly help me to change the profile parameter login/min_password_lng.
thanks in Advance,
Anbu

Hi,
       When you define a parameter at instance level this overrides the global definition. I believe you have removed the instance level definition for this parameter ??  Ensure that this parameter is defined ONLY in the DEFAULT profile . The summary is to have one value for this parameter for the whole SAP system rather than having different values for different application servers as a security policy parameter(of this kind) is something to do with a complete SAP system.
Let us know.
cheers !
PRADi

Similar Messages

  • History of Profile Parameter Changes!!!

    Hi,
    Please help with any way by which i can find the parameter changes in profile.I referred to other post and found TU02 tcode but this does not help.
    Basically we are trying find from particular to till now the list of parameter changes happened.
    satish

    Hi,
    Go to RZ10
    Choose the profile.
    Go to Extended maintenance
    Choose - Display.
    Then Select Go TO - Detailed List
    Again Click  Go to- Detailed List
    You can see the history of the parameter change.
    Regards
    Edited by: bhuban_2010 on Aug 5, 2011 5:35 AM

  • Profile Parameter changes after RAM Upgrade?

    Hi,
    We are using SAP ECC 6.0 on AIX 5.3 and IBM p595 seriers
    Now we have upgrade the Physical memory (RAM) from 8 GB to 16 GB.
    After Upgrading/Degrading the Physical memory (RAM) from the Server,What manual Changes has to be done for Profile parameter.Please provide the details.
    Cheers
    Deepu

    Hi ,
    After Changing the RAM in SAP System ..
    1) Increase the No of Work Processes , If Required
    2) Increase the size of Memory Areas ( Size of Extended Memory) , If you face any Memory Dumps
    3) Increase the SAP Buffer Sizes ( Program Buffer etc.) to have better performance.
    But it is not compulsary that you should change these parameters but changing these Paramters Values will improve performance of SYstem
    Thanks
    Deepak Gosain

  • Profile parameter for to change password

    Hello everyone.
          Is there any profile parameter to change the password after certain number of days say 30 days. I see there are profile parameters for lenght , uppercase, lowecase but is there one to change the password after a given period of time.
    Thanks.
    Neha.

    > I checked the profile parameters using the program RSPARAM. But I am not able to find a parameter to prevent the old password from being used at least ten times. I also checked in the table TPFET.
    >
    login/min_password_diff                  min. number of chars which differ between old and new password
    > And also can we prevent the password being same as user id.
    >
    > Should these parameters be changed in the deafault profile or instance or start profile.
    >
    It depends ... you may decide this by discussing with BASIS team and as per your Company SOP. I prefer Default profile. But never use Instance profile.
    Please go through the following links:
    [Password Rules|http://help.sap.com/saphelp_nw04/helpdata/en/d2/141fb593c742b5aad8f272dd487b74/frameset.htm]
    [Profile Parameters for Logon and Password (Login Parameters)|http://help.sap.com/saphelp_nw04/helpdata/en/d2/141fb593c742b5aad8f272dd487b74/frameset.htm]
    [Password rules and preventing incorrect logons|https://websmp110.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=2467&_NLANG=E]
    [ Note 862989 - New password rules as of SAP NetWeaver 2004s (NW ABAP 7.0)|https://service.sap.com/sap/support/notes/862989]
    [Logon and Password Security in the SAP System|http://help.sap.com/saphelp_nw04/helpdata/en/eb/4bb638b5358259e10000009b38f8cf/frameset.htm]
    Regards,
    Dipanjan

  • Increase Performance without changing  profile parameter

    Hi folks,
    How to Increase the Performance without changing  profile parameter ?

    One of the easiest ways to gain some performance is to turn off any unnecessary services running on the server. Depending on the platform, you can gain some memory by just removing these (turn off sendmail or postfix if you are not sending any messages [monitoring or otherwise]).
    J. Haynes
    Denver, CO

  • How to change INSTANCE profile parameter?

    HI,
    How to change INSTANCE PROFILE PARAMETER for permanent???
    any step by step or note?
    Thanks,

    Alf,
    Its is recommended to do parameter changes through RZ10. Check the parameter in RZ11 and if you see a check mark against DynamicallySwitchable, you dont have to reboot else it requires a reboot. All the changes you made through RZ10 is permanent. You can do it through OS level but its not a good practice. If you do it through RZ10 it is logged.
    Thanks
    Prince Jose

  • Profile Parameter : Time out for executing query on the web

    Hi gurus,
    I am executing queries on the web directly. This can be done from query designer with the button that says "Execute query on web". The problem is that for queries that take more than 600 Secs to run, I get an Application timed out error. Queries that take less than this run smoothly.
    Can anyone please tell me the profile parameter associated with this particular setting. It is not rdisp/max_wprun_time, I know for sure since the value for this profile parameter in my system is 9999. Please help.
    Thanks & rgds,
    Sree

    Issue resolved.
    Profile Paramter - icm/server_port_0
    Current Value - PROT=HTTP,PORT=8000,TIMEOUT=60,PROCTIMEOUT=600
    Changed to - PROT=HTTP,PORT=8000,TIMEOUT=60,PROCTIMEOUT=3600
    rgds,
    Sree

  • Profile Parameter to execute Abap Program at user logon.

    Hi Experts
    I've written a small printer selection program to change the users profile parameter.
    Is there another profile parameter that can be given to execute this program automatically
    when the user logs on.....The reason why I'm looking for a profile parameter to do this is, that only
    certain users need to have this happen at logon.
    Kind Regards
    Vic

    Hi Javi,
    I don't think you need a custom process chain for this. You can use delivered Process Chain for logic and hard-code your script name in the package. In that script you can call BADI that has your ABAP program inside.
    You can find guides how to build BADI here:[How to Pass Parameters to Custom Logic BADI using START_BADI|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20f4252d-98ca-2b10-e689-f85085ae2d12] or here [Creating Custom Script Logic Keyword BADI's - BPC NW|Creating Custom Script Logic Keyword BADI's - BPC NW;.
    Method IF_UJ_CUSTOM_LOGIC~EXECUTE has IT_CV as one of parameters. In your script you probably have to use *XDIM_MEMBERSET to get parameters from DM prompt. IT_CV will have all XDIM members.
    Please let me know if you have any other questions.
    Regards,
    Gersh

  • Profile parameter for passwords - conflicting documentations.

    Greetings!
    I've encountered an issue with profile parameter login/password_max_idle_productive
    Integrated help in SU01 says:
    You can use the profile parameter login/password_max_idle_productive to define the point as of which the validity of the productive password ends. The time is calculated from the date of the last password change plus the number of days specified in the profile parameter. Password-based logon is then not possible from this point.
    This makes this parameter redundant (we have login/password_expiration_time ).
    SAP Library says (see link below):
    Specifies the maximum period for which a productive password (a password chosen by the user) remains valid if it is not used.
    Which suggests that the time after which passwords are considered expired is calculated from last logon date plus whatever is the parameter value.
    SU01 help specifies explicitly how this parameter works but it conflicts with a more ambiguous description found in the SAP Library. The observed system behavior on logon is in line with SU01 help, but report RSUSR200 does not list the user as having an expired productive password.
    We're on ECC 6.0, release 701 with support package 3. I could not find any SAP notes relating to this issue.
    Has anyone encountered this issue before or have I just run into an odd glitch?
    [SAP Library|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/22/41c43ac23cef2fe10000000a114084/frameset.htm]

    It sounds like you have a requirement to set the expiration time (when the user has to change the password) which is for a different user group than those for which you want to disable an idle password. Currently, both are global settings and affect both user groups (actually, all users of type DIALOG and COMMUNICATION - only SERVICE and SYSTEM type users are not affected).
    In that there is an option for you... but be aware of license implications... or you can upgrade to 7.02 early next year (I think this is the correct release, time and release "alias" for it..) and then the config your security policies client dependently!
    Currently, your best option is to not set these two global parameters illogically and monitor the user group manually from RSUSR200.
    In the wild, many folks use the user type difference to workaround this, but that is also global to the user type so they are excepted from the expiration time as well. Additionally, not all functionality is available to them on the client side (e.g. SAP Logon Tickets won't work) and the authority-checks are even slightly different on some special cases.
    Personally, I don't understand why users with authorizations to make purchase requests only should change their passwords more often (expiration time) or be more active (idle time) than those with SAP_ALL etc.
    > I hadn't considered SSO since we do not currently use it.
    SSO solves several of these problems by deleting the password completely...
    Cheers,
    Julius
    Edited by: Julius Bussche on Oct 8, 2009 9:59 PM

  • Parameter changes prevent SAP from starting

    Hello all,
    We are running SAP ERP 4.7ext 2.00 with two nodes in a Windows/MSSQL Cluster environment.
    1.     Last night, we made parameter changes to the central instance profile. In particular, we started with  adding the parameter “enque/table_size = 16384”, activated the profile and took the SAP R/3 RP1 Resource offline. We then tried to bring it back online but it went into a failed status. We removed this parameter using a text editor, and then retried to bring the SAP Resource online again, but to no avail – it went into a failed state again.
    2.     We had previously made backups of the profile files created by the reinstallation of the central instance (DEFAULT, START_DVEBMGS00_ZAASAPCCI001,  and RP1_DVEBMGS00_ZAASAPCCI001 – let’s call this File Set A.) and decided to use these files instead.  These files had the default parameters created on installation. We were successful in bringing the SAP resource online.
    3,     We made a parameter change and activated the profile in SAP – it does not matter which parameter you choose, for example, changing the number of dialog work processes from the default 2 to 20 . We took the SAP R/3 RP1 Resource offline but were unable to bring it back online - it went into a failed status.
    4.     We then took File Set A, and using a text editor  (1) made changes to the number of work processes; and (2) appended the extra parameters to them. Using these files we were now successful in bringing the SAP Resource online.
    5.     If we now made any changes to these files – either through SAP or by using the text editor, we are unable to restart SAP. We have to revert to step 4 above.
    6.     A strange anomaly we noticed is that if the profile files have the following commented lines in the beginning of the file  RP1_DVEBMGS00_ZAASAPCCI001. for example:
    #.*       Instance profile RP1_DVEBMGS00_ZAASAPCCI00                           *
    #.*       Version                 = 000007                                     *
    #.*       Generated by user = ABOOM                                            *
    #.*       Generated on = 11.05.2006 , 09:04:07                                 *
         Then we are unable to restart SAP.
    Is this a bug related to running a dual-node SAP cluster?  We were previously able to make parameter changes (either through SAP or through the use of a text editor) and restart SAP successfully.
    It is now become critical to determine the cause of this anomalous behaviour and resolve the problem. Failing this, the client wants to break the cluster and revert to a distributed SAP system installation (with separate DB and central instance hosts).
    Your comments and help wil be greatly appreciated.
    Regards,
    Lebo

    Hi Lebo,
    Can you try to edit your profiles (the correct ones) using sappad tool (/usr/sap/<SID>/<INST-ID>/run/exe/) and save it in the same format that was used to open it.
    Regards,
    Mike

  • PI 7.1 Exchange profile parameter:

    Hi
    I got a chance to have a look at PI 7.1. While going through the Exchange Profile parameters, I found a new addition to the existing parameter list. Its called internal. I could not find any information about it.
    help.sap documenation also does not make a mention of this parameter
    I want to know why this parameter is required. Please help.
    Best regards,
    Hari

    Hi,
    I am not sure but most of the Exchange profile parameter are to be for SAP Intyernal use only that should not be altered while custom Installations.
    May be that kind of paramteres have sagreegated under Internal category to restrict the changes for it.
    Thanks
    Swarup

  • Setting profile parameter

    Hi all,
    To use dynamic error handling in the ICM or Web dispatcher, we must set the profile parameter icm/HTTP/error_templ_path to the directory with the error template files.
    How can we do this? Where do we set the profile parameter? Is there any TCode for this?
    Regards,
    Saurabh

    go to rz10
    choose instance profile
    choose radiobutton extended maintenance.
    click change
    in the resulting screen click create button now using F4 choose the desired paramter and set its value
    check out this online documentation about error template and where it can be stored.
    http://help.sap.com/saphelp_nw04/helpdata/en/f6/3c0b0389cea34ba66f10d62b718a1a/frameset.htm
    Regards
    Raja
    check out the following weblog on SDN way of saying thanks.
    /people/mark.finnern/blog/2004/08/10/spread-the-love

  • Profile parameter name

    Hi Gurus,
    What is the profile parameter name which is used to increase the character length of user name?
    Thanks in advance.

    Hi,
    There is NO such profile parameter exists to control the character length of User Name.
    You can change the character length of this field in the following way ONLY.
    Go to TCode:  SE11 and Change the character length of the field " BNAME " (Data Element:  XUBNAME) in the USR* tables. Basically you need to change the Data element character length from default 12 to your desired value.
    But the main heads up is that you need a Developer Access key, as this is "Modifiation" and Not customization.
    Please let me know if these information is helpful.
    Regards,
    Dipanjan

  • Profile Parameter Setup (RZ10) - Help Needed

    In using RZ10 to setup profile parameter for QAS, in the scenario below:
    How dow I change the "Unsubtituted and Subituted standard value to match this
    miadevs2\sapmnt\trans                                                                               
    Parameter name:                                                 Status      Seq. no.
    DIR_TRANS                                                       Active            3                                                                               
    Parameter val.:                                                                    
    $(SAPTRANSHOST)\sapmnt\trans                                                                               
    Unsubstituted standard value:                                                      
    miaqasc2\saploc\trans   <b>(Need to change this value - It is grayed out)</b>
                                                                                    Substituted standard value:                                                
    miaqasc2\saploc\trans <b>(Need to change this value - It's grayed out)             </b>

    Hi Joseph,
    Change the field in "Param Value" at the top.
    It will changed automatically the field value.
    Hope this helps,
    Erwan

  • Msprot: cant read profile parameter rdisp/mshost

    Hi
    When I run : msprot -name <SID> -l it returns:
    cant read profile parameter rdisp/mshost
    rdisp/mshost is set in the default profile to : sapms<SID>
    in etc/services  sapms<SID> is assigined to   <port_number>/tcp
    If you change rdisp/mshost to the port number rather than sapms<SID> it works....but we don't want to change the parameter to the port number.
    Thanks
    Jim

    Thanks.....i've being testing the command....it's like it can't read the default profile...
    if i use mshost switch it complain it can't read msserv.....once I use both switch it runs ok....
    I changed default profile to 777 just to test if it was a permissions issue but that didn't make a difference.
    Thanks for the note but that seems to be dealing with windows...i'm working on sun...tried it on linux also and get
    the same problem....
    Cheers
    Jim

Maybe you are looking for