User gets locked by an external system but which one?

Hi,
In an abap system, we have changed the password of our administration user. Afterwards, this user gets locked every 5 minutes, obviously because the user and old password has been used to set up communication from another system to the abap system. An RFC connection for instance or whatever. Sure it is possible to check all the systems you can think of to see if the user has been used for such a purpose. But how can you see in the system itself where the call comes from that locks it? I have tried the gateway tracefile but without success. Any suggestions?
Regards,
GK

Hello,
I would try transaction STAD.
There you should find entries of type RFC with your user.
If you double-click on the line, you get the details. Click on the RFC button.
                              as Client             as Server
No. of targets                   0                     1
Click on the highlighted 1 under "as server".
You should get the needed info : the remote destination
Target         TEST_DEV
User ID        TESTOC
RFC Caller     OCHRETIE
Local  destin. bt1suk17v1_DEV_02                IP address xx.xx.xx.xx
Remote destin. bt1suk16v1_DXI_68                IP address yy.yy.yy.yy
Hope this helps
Olivier

Similar Messages

  • SAP BW User getting locked by BO RFC calls

    Hi,
    we are encountering a problem with BO RFC calls locking SAP BW users that recently changed their password in BW.
    Description of the problem in the ticket we raised at the SAP support:
    SAP BO 4.1 SP2 Patch 4, linux installation
    Backend: SAP BW 7.01 EHP8
    BICS interface with SAP authentication
    One of our users gets locked again and again in SAP BW (P19). The cause is a RFC connection that the BusinessObjects server (P59) tries to establish. The user used SAP BO last Friday for the last time and had to change his password in P19 this Tuesday. We think that there is some
    process within SAP BO still trying to connect to SAP BW from time to time, using the old password. There is no open session visible for that user in the CMC. User is even getting locked when not in the office and during night time. RFC calls are established almost regualary every hour.
    We already had this behaviour in our test-system. Restarting the BO-Server solved it. However, this is not the solution we want to use
    in the productive environment. There has to be some way to kill the process that uses the old password on the BO server without restarting
    the whole server. We do not understand why BO would still try to connect to BW with the old password - this has to be some kind of a bug.
    Meanwhile the error disappeared for the first user (some days after it started, maybe the BO process ran into a timeout). However, other users started having the same behaviour after changing their password.
    Our basis team tried to check the log files for advanced information on the conversations between BO and BW, but did not find any hints on which BO process might try to establish the connections.
    The SAP support seems to be a little helpless at the moment...
    Has anyone had similar problems?
    Regards,
    Robert

    Hi again,
    additional information: after approximately one week after the error appeared for the first time BO stops trying to establish the rfc connection for this specific user. Almost as if the "old-password-BO-process" ran into a 1 week timeout or something like that.
    The problem is really strange. The SAP support is still not able to tell us how the gather the information they require.
    Regards,
    Robert

  • Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    Hi,
    For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
    I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
    But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
    Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
    BR,
    Mangesh

  • I have a mac  book pro that i bought in late 2009. My current software is snow leopard version 10.5.8. I would like to get the new lion operating system but I cant without first getting the latest version of snow leopard. it doesnt show on software updat

    I have a mac book pro that i bought in late 2009. My current software is snow leopard version 10.5.8. I would like to get the new lion operating system but I cant without first getting the latest version of snow leopard. however when I go to update my software it doesnt show that any update is available.

    10.5.8 is Leopard, not Snow Leopard. You need the Snow Leopard DVD;
    You can get it only by phone now from Apple.
    In the US, call 1-800-MY-APPLE and ask for a sales assistant. Last quoted price was $19.99 for the single-user and $29.99 for the family licence.
    For other countries, check here; http://support.apple.com/kb/HE57
    Don't forget to ask for Sales; the tech support guys can't help.
    If you want Lion, rather than Mountain Lion, the same Sales team can give you a download code to use at the Mac AppStore.
    To get the App Store, you need to update your new Snow Leopard from 10.6.3 (which is the version on the installer) to 10.6.8 with the combo update; http://support.apple.com/kb/DL1399
    Be warned that the upgrades will render a lot of older software unusable, and will need new drivers for printers and scanners in all likelihood.

  • CUA SU10 issue with users getting locked

    I did some role change using SU10 on CUA central system for 200 users. 45 of the users got locked with global admin lock in the child system for which I made the role changes.  These user locks are shown in the child system change documents log as changes by the CUA RFC user. I have this problem everytime I use su10. Why does this happen?  What can I do about it? Thanks, KT

    Hi Todd,
    propably you have some inconsistencies in your landscape....
    the cause of such 'unwanted' effects is the fact that if you change a user in your CUA central system, the whole user information is picked, then edited with you changes and afterwards distributed to all child systems.
    So what I could imagine in your example is as follows:
    User has a global lock in central system already, the particular child system did not have that information (user is still unlocked there). Several causes are possible, for instance the lock idoc did not get processed, Child system was not available/connected to CUA when the lock had been set,......).
    At the next update of that user (assign a role), the lock information from the central system is pushed to that child.
    Why?
    Because the design is to assure data consistency between central and child system. Therefore all the user information from central system is pushed to child at any user change. (that is also why you will see in SCUL 3 idocs for each user change (also user and profile idocs are pushed, even if you have changed the role assignement only).
    So what you could check is, if that users got the lock flag (128) already in the past somewhen.
    b.rgds, Bernhard

  • I am trying to get space on an external hard drive which has some old time machine back up files that I do not need but can not eliminate, even by going into the time machine, clicking on the backup file to be eliminated and using the drop down eliminate

    I am trying to get space on an external hard drive which has some old time machine back up files that I do not need but can not eliminate, even by going into the time machine, clicking on the backup file to be eliminated and using the drop down menu with the gear box symbol to eliminate

    I cannot find this 300GB "Backup" in the Finder, only in the Storage info when I check "About This Mac".
    You are probably using Time Machine to backup your MacBook Pro, right? Then the additional 300 GB could be local Time Machine snapshots.  Time Machine will write the hourly backups to the free space on your hard disk, if the backup drive is temporarily not connected. You do not see these local backups in the Finder, and MacOS will delete them, when you make a regular backup to Time Machine, or when you need the space for other data.
    See Pondini's page for more explanation:   What are Local Snapshots?   http://pondini.org/TM/FAQ.html
    I have restarted my computer, but the information remains the same. How do I reclaim the use of the 300GB? Why is it showing up as "Backups" when it used to indicate "Photos"? Are my photos safe on the external drive?
    You have tested the library on the external drive, and so your photos are save there.  
    The local TimeMachine snapshot probably now contains a backup of the moved library.  Try, if connecting your Time Machine drive will reduce the size of your local Time Machine snapshots.

  • Impact of J2EE_ADMIN / Administrator user getting locked

    Hi,
    What is the impact of J2EE_ADMIN / Administrator user getting locked in abap / java engines?  Will it effect startup of java server processes or java applications?  What are the other implications?
    Thanks,
    Abdul

    Hi Abdul,
    if the J2EE_ADMIN or Administrator user is locked then
    1. you cannot login to Visual Admin unless you define some other user with same authorization.
    2. any Jco-RFC using this user won't work.
    3. if you don't have any other user, you will have to activate SAP* user to unlock this user.
    Thanks,
    Sandeep

  • User gets locked in lesser attempts than security policy setting

    Hi
    I have written my customized login code to login a user to the
    portal and I user the following code:
    IUser myUser = UMFactory.getUserFactory().getUserByLogonAlias(username, null);
    IUserAccountFactory accountFactory = UMFactory.getUserAccountFactory();
    IUserAccount account = accountFactory.getUserAccountByLogonId(myUser.getUniqueName());
    ILogonAuthentication ILA = UMFactory.getLogonAuthenticator();
    req.setAttribute(JUSER,myUser.getUniqueName());
    req.setAttribute(JPASSWORD,password);
    ILA.logon(req,res,AUTHSCHDEFAULT);     
    I notice that whenever I try to logon using my code with a
    wrong password, the user gets locked in 3 attemps even though the security policy
    (at ABAP and in Portal UME Configuration) setting for number of failed attempts is set to 5.
    (Although, please note that my code works fine logging the
    user into the portal when he enters the correct password)
    I try to check if the same thing happens with the standard logon module - com.sap.portals.runtime.logon,
    and notice that it locks correctly after 5 attempts.
    Would I have to add anything else in my code to make it work
    correctly?
    Thanks
    oj

    Hi All
    I tried to check in the CUA table the incorrect logon attempts value, and noticed that for every time I login (using my above code) with the wrong password, it increments the count by 2!! And that's the reason it gets locked out by the third time.
    What am I doing wrong?
    Thanks
    OJ

  • I want to purchase a two terabyte external hard drive to utilise Time Machine on my new iMac....but which one? Western Digital, Time Capsule, Seagate? Any advice would be most welcome please.

    I want to purchase a two terabyte external hard drive to utilise Time Machine on my new iMac....but which one? Western Digital, Time Capsule, Seagate? Any advice would be most welcome please. Thanks Phil

    If you are looking for high quality drives and enclosures I'd recommend these 3:
    http://g-technology.com/products/g-drive.cfm
    http://www.lacie.com/us/products/product.htm?id=10330
    http://eshop.macsales.com/shop/firewire/1394/USB/EliteAL/eSATA_FW800_FW400_USB
    I use the LaCie's, I've got three connected to my system and a 4th acting as my TM drive on my MacBook Air. Any of the above would be welcome on my desk though.

  • External control unit - which one works best?

    i would like to buy an external control unit. which one works best with the final cut studio apps? as far as i know, there are three competitors, being:
    TASCAM 1802, MACKIE CONTROL and Digidesign...
    I would like to use the unit mainly for audio mixing and Transport functions. Maybe use some function keys for shortcuts... if the unit can be used also in Sound track pro it would not hurt But my major work is in FCP
    thanks for your input!

    I'd buy the Tascam 1802 as my control surface. Actually I'm saving my pennies to get one.
    I have a Mackie Onyx 1640 with the Firewire card and I love it to pieces as a field mixer. But I can't get it to work well with my apps as a control surface. Maybe I should check and see if Mackie has improved the software.
    But I'd go with the Tascam for FCP control surface use. You might get away with one of their smaller models if you don't need that many faders.
    Save some money that way, maybe. Leave you more to send to Apple, MOTU, DigiDesign, Bias, and Waves for software upgrades. I mean, we all understand that those folks need our money way more than we do, right? Heh, heh, heh...
    Good luck in your search.

  • I am considering buying a new MAC laptop to run LOGIC for composition and band live/recording, but which one is best as I do not want to spend too much money? Does it have a line in and how do you monitor sound? Will I need adaptors and a interface?

    Can anybody help?
    I am considering buying a new MAC laptop to run LOGIC for composition and band live/recording, but which one is best as I do not want to spend too much money?
    Does it have a line in and how do you monitor sound?
    Will I need adaptors and an interface?
    Also, I am guessing as Logic only runs on MAC surely then they would not the best spec to recommend to run it?
    I see all the upgrades as additional memory or a faster process?
    Is a retina screen necessary, and why flash based storage against a 1TB hard drive, and a i5 instead of an i7
    The main reason for this purchase is to play live and use backing tracks and record found sounds and make creative songs.
    I hope you can provide some valuable feedback, as I am a longtime MAC user and see upgrades and changes happen regularly but the most important thing is the songs not the equipment.
    I have £500 already and willing to add another 500 to 700 pounds, then software extra.

    Can anybody help?
    I am considering buying a new MAC laptop to run LOGIC for composition and band live/recording, but which one is best as I do not want to spend too much money?
    Does it have a line in and how do you monitor sound?
    Will I need adaptors and an interface?
    Also, I am guessing as Logic only runs on MAC surely then they would not the best spec to recommend to run it?
    I see all the upgrades as additional memory or a faster process?
    Is a retina screen necessary, and why flash based storage against a 1TB hard drive, and a i5 instead of an i7
    The main reason for this purchase is to play live and use backing tracks and record found sounds and make creative songs.
    I hope you can provide some valuable feedback, as I am a longtime MAC user and see upgrades and changes happen regularly but the most important thing is the songs not the equipment.
    I have £500 already and willing to add another 500 to 700 pounds, then software extra.

  • 2011 Macbook Pro 13", But Which one?

    Hello, I want to get a Macbook Pro but I dont want to spend a lot of money if I dont need to. I was thinking between either of the 13" models, but which one to get? because the only difference is i5 vs i7, and 2.4GHz vs 2.8GHz. Basically what I will be doing is basic note taking and web surfing, youtube videos and stuff like that, but I will also use it with my HD PVR  and EyeTV 3 to record Xbox 360 Gameplay. I've  looked at the requirements for the HD PVR and either macbook is good enough for that, but I dont know if I get the Base model will it fail on me if im using iMovie and rendering a lot of videos on it. I saw a review (idk where) about the two and the guy said it wasnt too much of a performance boost so idk.

    In my opinion, your into video/performance, a 15" anti-glare MBP would be more appropriate machine.
    Also I assume you like to play 3D games? The 13" won't comply, it has a integrated graphics is lousy on 3D rendering.
    The 15" has a nice 30 or 45 scoring on Cinebench, the 13" only 11.
    http://www.cbscores.com/index.php?sort=ogl&order=desc
    The anti-glare costs a bit more, but you get to see the screen in nearly any enviroment, outside, in the car, on the bus, in class etc, without having to block the windows and lights.
    https://www.youtube.com/watch?v=_X0wo6dIsMU
    8GB of RAM wil give a little boost, but I would wait to see if you really need it before opening up your machine and possible doing damage that will void your warranty/AppleCare.
    Also if you dare, 16GB of RAM is avaiallbe at OtherWorld Computing for $250. It of course will come down in price over time.
    Good Luck

  • ""Connection to the server failed" on Iphone - but which one?

    When I open the default Mail App on my iPhone 4S I get the error "Cannot Get Mail - the connection to the server failed". OK, but which one? I have six email accounts (all of which have worked at one time) so  which server is not connecting? It'd be nice if IOS told me! Any solution, please?

    I may have solved the problem myself, only to find another one.
    If I tap each of the accounts in turn, I find that it's the 'Exchange' one that's failing. trouble is, I can't recall what this does, or why I set itup, as i don't use MS Exchange. I suspect it's connected with syncing to either Outlook.com or Gmail, but I'm not sure.
    BTW, I still think the error message should say which account is generating the error - Apple stuff is supposed to be easy and intuitive, and this isn't!

  • I was thinking to buy screenprotector, but which one?

    So, I decided to buy a tempered screen protector for my 6+, but which one is recommended, I was looking at the
    Muvit iPhone 6 Plus Screenprotector tempered glass 0.33mm

    There's not much of a jump from the T4i to the T5i; Canon releases updates to these Rebels so frequently they often lack substance.  Looking at the specs I don't see anything that jumps out at me - I'd grab whichever one I could get cheaper.
    The 7D is a substantial jump up.  Much more sophisticated autofocus.  Faster burst rate, shorter shutter lag, weather sealing, better build, better LCD, viewfinder coverage, etc.  Keep in mind it's the same old sensor, but there's a lot more to a camera than a sensor.   The 7D has been the go to camera of sports enthusiasts for years.
    Edit:  I didn't mean to sound like I was selling the Rebels short, I think they're a great camera for the price, depending on your needs.  There are things that more novice photographers may prefer in a camera over the 7D, like built in flash, or the flip out screen, or in-camera HDR.

  • Getting campaign data from external system to display campaigns/offers

    Hi,
    I have to find a solution for a campaign requirement for my company.
    The user centric campaigns are managed by a external system provider who process billing statements (eg if you see your paper credit card statement, you see special offers, campaigns in your paper statement.)
    On similar lines we have to show/build the campaign in our WLP application. The campaign data is hosted in external systems.
    We have to think of a generic reciever in WLP which can get the external campaign data and based upon that it can display right campaign to logged in users.
    Any ideas, leads. Has somebody implememted such a feature.
    Any help will be appreciated

    Hi Vishnu,
    OK, I see now. You don't want a pluggable user profile data source, you want a pluggable campaign rule and pluggable campaign content. I don't think there is such a thing as a framework for plugging an external campaign into Oracle WebLogic Portal.
    I don't think you can plug an external campaign rule into the Oracle WebLogic Portal rules engine but you can make Oracle WebLogic Portal see external user profile data and external content. So, 2 of the 3 ingredients for the campaign are easy enough to make available to the portal. I would guess that you either need to transform the campaign definition into the proper XML document for consumption by the portal's rules engine or you need to evaluate the campaign on the external system and have the results available to the portal via a mechanism like UUP.

Maybe you are looking for