RFC User in CUA locked

Hello,
when i tried to unlock user both globally and locally (in cua) it failed..saying 'still the user is locked''..why ?
(refering rfc user here)
Thanks
Rajesh

Hi Rajesh,
Check this link:
When unlocking user ALEREMOTE, the user is still locked
Rajeev

Similar Messages

RFC user get's locked

Hi experts,
We are using rfc_cua user for RFC communication between R/3 prd server and E-Rec prd server. Here issue is frequesntly rfc_cua user get's locked automatically. if we unlock the id it will work fine for one or two day and again it will get locked, There is no same amount of time gap between locking of this ID every time time. Kindly help me how to trace this issue.
Regards,
Sampath.

Are you using CUA or rfc user has been named just like that & what is E-Rec prd server .. is it SAP or something else ?
Dont u find something in change log of this user ??
thanks
ashish

RFC user locked for guixt

Hi,
The communication user for guixt keeps getting locked. The RFC username & encrypted password are in the guixtrfc.ini which is distributed to each user PC. I'm thinking that somebody tried to edit the guixtrfc.ini & changed the encrypted password.
I need a method to either find out which front end PC has the bad guixt.ini or prevent the communication user from being locked (not all user accounts).
Thanks.
Stephen S.

Hi,
Thiugh am not exposed much to guixt the following document may help you to resolve your prob. Pl have a look.
http://www.synactive.com/download/sap%20gui%20scripting/sap%20gui%20scripting%20security%20settings.pdf
regards

RFC users locked after system copy in production system

Hi,
BW_User,MDBTC(RFC users) system users were locked in our BI Production system at the same time system copy activity was running in the Quality system(production to quality) so as per our colleagues concern after system copy they started Quality system with out changing background work-process 0 so some jobs were triggered which were copied from production system.
Is there any cause to lock RFC users in production system for system copy? If there is any other reason where we can check logs
Thanks
Jalandhar Reddy

Hi,
Well maybe i am wrong to analyze your problem .
Anyway I faced this issue to in our system before and we found that one background job was running in a system that has basically prompting an RFC connection to another system. In the t.code SM59 and there was wrong password was put in.We just reset the password and it was worked fine.
You can try for this..
Regards
Bhuban
RKFL

User id getting locked everyday

Dear All,
User Id getting locked everyday having profile SAP_ALL and SAP_NEW.I m not getting any clue why its getting locked everyday.
I tried to check RFC and background job job also but i m not able to find.everyday i have to unlock it.
Kindly suggest me how to check.
Regards
Adil

Hi,
Such issue mostly happens due to wrong attempt of login in SAP system client with that SAP User id either through RFC login, external- program, script,etc...
If you have checked all the RFCs login settings and not able to found the login attempt, then Enable [SAP Security audit log|http://help.sap.com/saphelp_nw04s/helpdata/en/c7/69bcb7f36611d3a6510000e835363f/content.htm] using SM19, SM20 and analyze the logs for that SAP User id only.
Regards,
Bhavik G. Shroff

RFC User for satellite systems

Hello Gurus,
I just wanted to ask about one issue. We are a SAP partner and using Solution Manager in VARs scenario. There are many systems of our customers connected to our Solution Manager..
Now I want to ask about RFC user(s). As I see, in our Solution Manager there are many users(communications type C) with Synthax SOLMAN<system id> or something like that. It means basically, that we have for every particular customerS system one SOLMAN user for RFC(cust_scout) in our Solution Manager. My question is if we can replace all of these users with only one RFC user for all the systems and customers?
Many thanks in advance for your help
Miloslav Pudil
IDS Scheer
Prague
Czech Republic

>
Miloslav Pudil wrote:
> I just wanted to ask about one issue. We are a SAP partner and using Solution Manager in VARs scenario. There are many systems of our customers connected to our Solution Manager..
> Now I want to ask about RFC user(s). As I see, in our Solution Manager there are many users(communications type C) with Synthax SOLMAN<system id> or something like that. It means basically, that we have for every particular customerS system one SOLMAN user for RFC(cust_scout) in our Solution Manager. My question is if we can replace all of these users with only one RFC user for all the systems and customers?
Hi Miloslav,
Technically, it will work that you define one common RFC user in your SolMan for communication (RFC BACK destination) from all connected managed systems.
BUT, I would never recommend it.
Once a managed system cause issues in your SolMan, you are not able (or at least it's much more difficult) to identify the managed system. Same happens, if a invalid password in the BACK destination leads to a locked user.
My recommendation: Spend the extra effort in creating a user per managed system. Operation will be much easier later.
See also this guide:
[Activating EarlyWatch Alert [EWA] in End Customeru2019s System |http://service.sap.com/~form/sapnet?_SHORTKEY=00200797470000089947&_OBJECT=011000358700000567342009E]
Best regards,
Ruediger

PM Order is getting blocked by RFC user

Hi all, i'm facing the following problem. We've an FM that is invoked externally using an RFC user, that is used to change the status of an specific order. This FM first makes the ENQUEUE of the given object, with the following data:
    CALL FUNCTION 'ENQUEUE_ESORDER'
      EXPORTING
        mode_aufk            = 'S'
        aufnr                     = number
        _wait                     = 'X'
      EXCEPTIONS
        foreign_lock           = 1
        system_failure       = 2
        OTHERS               = 3 .
Then calls the standard FM STATUS_CHANGE_FOR_ACTIVITY and after that executes the
    CALL FUNCTION 'DEQUEUE_ESORDER'
         EXPORTING
              aufnr = number.
After that we have a COMMIT WORK.
Somehow and with no explicit reason, the given order remains locked by RFC user, sometimes for several hours.
This happen in Production System. We'd never get this kind of situation on pre-production.
Does anyone have any clue about this ???
Thanks for your kind attention.
Regards,

Hi Rahul,
Thanks for your answer. But it seems to me that the problem is not a question of authorization, because this same user is used in the same system for another processes.
For example, today we have an Order that is blocked in SM12 since 12:47:12 and the processes for closing it still remains active and waiting, but in another way for Orders of the same type during today, this situation doesn't occur and the respective processes were finished sucessfully.
Thanks anyway.
Regards,

Reg:who is self, ALEREMOTE and BW RFC Users,

Hi All
While Loading any data Ensure all other users except self and ALEREMOTE or BW RFC users are locked out
My Question is who is self, ALEREMOTE and BW RFC Users, Iam also used to see these users names list in Process Overview(SM50)
plz clarify my dought
Regards
raamu
Please search the forum before posting a thread
Edited by: Pravender on May 6, 2011 11:14 AM

Good morning
I need to have visibility of what users are online (Excel) for audit/monitoring purposes.
We are having severe performance issues and want to understand how many users are online concurrently.
In other SAP systems one can audit who is online SM04. In SM04 all BPC users logged in through Excel show up as BPCADMIN. So there is no way to tell how many users are online.
BPC for Microsoft offers a feature to find who is online. There must be a way to do the same in Netweaver?
Thank you,
Catherine

Invalid_jobdata when submitting job with rfc user

Hi,
I've created a function module in the erp system to remotly trigger a report program by a bw prossess chain.
When running in the forground it works fine, but the runtime is so long that I want it as a background job.
So I call job_open, job_submit, job_close in the function module. When I test the function module in the erp system with my dev user it opens a new job, adds a step and release correctly. It also runs fine if I intercept it in the debugger and change sy-uname to aleremote (the standard rfc user).
It does not work when it's acctually called rfc from the bw system. The job is opened, but job_submit throws invalid_jobdata.
Could this have anything to do with rfc or the executing user (which is of type SYSTEM)?

I've caught the execption so there is no dump, but I'm unable to determine why the function module job_submit gives invalid_jobdata only when the executing user is the aleremote user and only when the call originated (the call to my module) from a remote system (the module job_submit is called locally thru my module). Authorization for the user is sap_all, but I was woundering maybe the user type system could be a problem?

How to find if an user account is locked in weblogic server or not?

Hi,
I am using jdev 11.1.2.2.
SO i have set in web logic that if a user inputs login information wrongly his account will be locked.
How can i identify if the user account is locked.
Write now if the user account gets locked after say five invalid login attempts and user tries to enter correct login information its throwing exception . But i want to display to the user that his account is locked instead of the exception being thrown . How can i do it ? the following the login code i use
    public String doLogin() {
        LOGGER.log(ADFLogger.TRACE, "Clicked Login Button");
        LOGGER.log(ADFLogger.TRACE, "doLogin() Started.");
        String un = _username;
        byte[] pw = _password.getBytes();
        this.setPassword(null);
        FacesContext ctx = FacesContext.getCurrentInstance();
        HttpServletRequest request = (HttpServletRequest)ctx.getExternalContext().getRequest();
        try {
            Subject subject = Authentication.login(new URLCallbackHandler(un, pw));
            weblogic.servlet.security.ServletAuthentication.runAs(subject, request);
            String loginUrl;
            loginUrl = "/faces/home.jsf";
            HttpServletResponse response = (HttpServletResponse)ctx.getExternalContext().getResponse();
            sendForward(request, response, loginUrl);
        } catch (FailedLoginException fle) {
            FacesMessage msg =
                new FacesMessage(FacesMessage.SEVERITY_ERROR, "Incorrect Username or Password", "An incorrect Username or Password was specified");
            ctx.addMessage(null, msg);
        } catch (LoginException le) {
            reportUnexpectedLoginError("LoginException", le);
        return null;
    }Thanks & Regards,
Rakesh

chk this
http://vtkrishn.com/2011/09/27/implementing-userlockout-using-oam/

Read only users and row locks

Can read-only users obtain row locks on non-temporary (i.e,. visible to other users) tables, for example through SELECT FOR UPDATE, even though they couldn't not ultimately modify said tables?

Yes.
Here is an example with Oracle XE 11G and HR schema:
Connecting as user having only CREATE SESSION and SELECT privilege on HR.JOBS table:
SQL> desc hr.jobs;
Name                                      Null?    Type
JOB_ID                                    NOT NULL VARCHAR2(10)
JOB_TITLE                                 NOT NULL VARCHAR2(35)
MIN_SALARY                                         NUMBER(6)
MAX_SALARY                                         NUMBER(6)
SQL> select * from session_roles;
no rows selected
SQL> select * from session_privs;
PRIVILEGE
CREATE SESSION
SQL> select owner, table_name, privilege from user_tab_privs;
OWNER                          TABLE_NAME
PRIVILEGE
HR                             JOBS
SELECT
SQL> select job_title from hr.jobs for update;
JOB_TITLE
President
Administration Vice President
Administration Assistant
Finance Manager
Accountant
Accounting Manager
Public Accountant
Sales Manager
Sales Representative
Purchasing Manager
Purchasing Clerk
JOB_TITLE
Stock Manager
Stock Clerk
Shipping Clerk
Programmer
Marketing Manager
Marketing Representative
Human Resources Representative
Public Relations Representative
19 rows selected.
SQL>Now connecting as HR following statement hangs:
SQL> connect hr/hr
Connected.
SQL> select * from jobs for update;Going back to first session:
SQL> update hr.jobs set min_salary=0;
update hr.jobs set min_salary=0
ERROR at line 1:
ORA-01031: insufficient privileges

Password inconsistancy issue with RFC users in ECC 6.0 System after upgrade

Hi,
We have upgraded the system from 4.7 to ECC 6.0, but facing the password inconsistancy problem for RFC users. We have set the parameters like "login/min_password_lng" as "8" and "login/password_downwards_compatibility" as "3" & RFC user Type is "system". Could you please suggest how to resolve the password inconsistancy issue.

Hi Chandan,
you need to run the txn. SECSTORE and there it will shows you all the RFCs that have inconsistent passwords. Please maintain the correct passwords there.
In case the existing passwords are no longer acceptable due to new security policies as per the new SAP version, you will have to change the password from SU01.
Regards,
Shitij

RFC function module always creating BPs with the same user name (RFC user )

Hi All
I posted the below question in a different area before. But thought it would be more suitable here.
Moderators - Please let me know if am doing any mistake.
Question:
I have a RFC function module in CRM that creates Business Partners in ECC (XD01 tcode).
I am using a dialog RFC destination configured in SM59 in CRM.
But my RFC function module in CRM is always creating the Business Partners in ECC with the RFC user id (the user that we maintain for the RFC destination in SM59).
This is a problem for the users because they are not able to track the actual person responsible for creating these Business Partners.
Can somebody please let me know how to solve this problem?
Thanks
Raj

Hi.
You may use the trust relationship between CRM and R/3 and in SM59 instead of set a specific username, you set the flag "current user".
With this flag, the system will access R/3 system with the user logged in CRM system. The Trust relationship must be created between CRM and R/3 in order to the system doesn't ask for a password to login in R/3.
If you need more details please reply.
Kind regards,
Susana Messias

Serialize BAPI/RFC executions to avoid locking issue

We have an XI interface that calls and executes a BAPI/RFC to create an invoice receipt against a purchase order in R/3.
While the BAPI/RFC is running, it locks the purchase order. If another XI call to the BAPI/RFC is initiated to create an invoice receipt against the same purchase order, the second BAPI/RFC call will fail in R/3 due to locking.
I have the following questions:
In XI, can we serialize the execution of the BAPI/RFC so the second call will start only after the execution of the first one is complete in R/3?

Hi,
no and yes
no: not in standard
yes: there are workarounds - you can wrap the
BAPI in a RFC in which you can control it
(I used this solution and it works)
Regards,
michal

Authorization Required for RFC user in R/3-APO system.

Could you please help regarding one authorization issue. I want to know the authorization required for one RFC user. Now this RFC user used for RFC connection of SAP R/3 - SAP APO system. user type is given dialog type and SAP_ALL profile has been given to this user id. Now I have to remove SAP_ALL from this user id in R/3 and APO system and provide the required the authorization in R/3 and APO system.
Regard
Auroshikha

The RFC authorisation depends completely on what the user is doing (ALEREMOTE?). We can't tell you what RFC auths your connection requires.
There is a guide to doing this here: https://wiki.sdn.sap.com/wiki/display/Security/BestPractice-HowtoanalyzeandsecureRFC+connections

RFC User in CUA locked

Similar Messages

Maybe you are looking for