User in CTSDEPLOY RFC getting locked frequently

Hello All,
We have been observing that the user in RFC destination CTSDEPLOY getting locked frequently whenever we transport a rerquest from development to quality in our PI system. The transport would go fine, if we unlock that user. The user we are maintaining in CTSDEPLOY is J2EE_ADMIN. When we test the RFC in our quality system, it works fine. But only when we transport to quality, it is getting locked.
Please help us resolving this. We dont have RFC destination with name CTSDEPLOY in our PI development system. Do we need to have RFC destination there too.
Awaiting your inputs.
Regards,
Ram.

Hi,
>>>We dont have RFC destination with name CTSDEPLOY in our PI development system. Do we need to have RFC destination there too.
no need for that in DEV
does your RFC Destination for Java to ABAP Connectivity work in DEV ?
destination -> sap.com/com.sap.tc.di.CTSserver under
Configuration Management - Infrastructure - Destinations.
Regards,
Michal Krawczyk

Similar Messages

The user id "sa" is getting locked frequently in SQL server 2008 R2

Hi Team,
We have SQL server 2008 R2 machine and recently i'm getting issue with the user id "sa" as its getting locked out. I;m not sure with the reason caused with this. I need to login to the SQLserver with windows authentication and manually unlock
the "sa" account and its happening frequently.
Let me know how to fix this?
Regards,
Guru

Might be the SA account either using by any application team or any job have been configured to use it, since you are saying that its getting locked out then it someone or application or apps jobs performing with Mulitple incorrect login attempts with incorrect
password try(since if check_expiration enabled it it can lockout based on the windows password policy, so you can check in the SQL errorlog when was the last login succeeded and from when the incorrect attempts tried & finally it gets locked out(so here
you will have from which host it was trying)).
So talk to the application team, did anyone recently changed the SA password or some one misusing or configured to any applications .
If nothing works then perform the SQL server side trace to track it or trigger can help
Thanks, Rama Udaya.K (http://rama38udaya.wordpress.com) ---------------------------------------- Please remember to mark the replies as answers if they help and UN-mark them if they provide no help,Vote if they gives you information.

J2EE_ADMIN user getting locked frequently

Hi SAP Guru's,
The user J2EE_ADMIN in our nw2004s system is getting locked frequently. We have changed the password of this user in ABAP via SU01 & in JAVA in the secure store via configtool. The server was re-booted after doing these changes. Still the user J2EE_ADMIN is getting locked frequently. Also in SM21, we have a log <b>"J2EE_ADMIN locked due to incorrect logon"</b> for this locking which mentions the user as SAPJSF (Communication user between ABAP & JAVA).
Is there a possibility that SAPJSF is locking the user J2EE_ADMIN ?? how & why ??
Any help on this will be highly appreciated.
Thanks,
Sanjeev.

have you solve this issue? we have the same!
every half hour (xx:51:00 and xx:29:00), the J2EE_ADMIN user is locked by user SAPJSF transaction KRNL from the local host (terminal).
We have changed the pass in secure store in configtool to the pass we used in abap.
In "Visual Administrator" "Cluster>Server>Services-->Security Provider" the user have a checked box at "No password change required"
We searched for other places with a wrong pass (Jco Connections = no J2EE_ADMIN used, SLD = no J2EE_ADMIN used), but found nothing.
need help pls.
regards
chris

MII UserID gets locked frequently

Hi
I have created a MII user through which PI post messages to MII MesageListener. This user is getting locked frequently so PI fails to post the messages. Can anyone tell me why the userID gets locked frequently? I am using MII version 12.1.6
Thanks in advance
Shaji

In cases that I have seen, it is usually some job folks forgot about that did not get the password updated when it changed. A scheduled job is frequently the problem, but not always as I have seen message listener jobs which were causing the problems or even webpage invoked transactions.
Good luck,
Mike

User Account getting locked frequently...

An User account which the developers are using is getting locked very frequently when they run some applications. They say they are giving the right password and username within the application. What should one be looking for? I am fed up by unlocking the account using ALTER USER username ACCOUNT UNLOCK;

I have also faced such kind of problems. Most of the developers forget how the application connects. they might have hard coded it or some time using a wrong parameter files.
Need to check who are all the users and how they are connecting and how the application is connecting to the database.
If there are more users then enable audit. Auditing will be the only solution.

Oracle user account is getting locked frequently

Hi everyone!!!
I am using Oracle 11g on Linux . I have user named "XXX" to whom I have assigned a DEFAULT profile. The Password parameters in DEFAULT profile are as follow.
Resource Name                                      Resource                                 Limit
FAILED_LOGIN_ATTEMPTS                    PASSWORD                            20
PASSWORD_LIFE_TIME                        PASSWORD                            UNLIMITED
PASSWORD_LOCK_TIME                      PASSWORD                           UNLIMITED
PASSWORD_REUSE_TIME                   PASSWORD                            UNLIMITED
PASSWORD_REUSE_MAX                   PASSWORD                             UNLIMITED
I don't know why my user is getting locked continuously. Even i haven't reached Failed_login_attempts (20). Each time I require to unlock user account as SYS user and then I can connect as XXX user.
And another thing that I want to know is when user account's status is set to LOCKED, EXPIRED, EXPIRED & LOCKED and LOCKED(TIME).
Thanks & Regards
Tushar Lapani

Hi,
can you tell me the exact db version?
As explained in MOS notes:
DBA_USERS.ACCOUNT_STATUS shows LOCKED after FAILED_LOGIN_ATTEMPTS Is Breached (Doc ID 284344.1)
How to Interpret the ACCOUNT_STATUS Column in DBA_USERS (Doc ID 260111.1)
Expected behaviour is:
1. Oracle release is <= 11.1.0.7.
DBA_USERS.ACCOUNT_STATUS = LOCKED(TIMED) whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
2. Oracle release is >= 11.2 and PASSWORD_LOCK_TIME = unlimited:
DBA_USERS.ACCOUNT_STATUS = LOCKED whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
3. Oracle release is >= 11.2 and PASSWORD_LOCK_TIME = <some fix value>
DBA_USERS.ACCOUNT_STATUS = LOCKED(TIMED) whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
Note
that 10.2.0.5 displays the same behavior as 11.2, because the fix that changed the behavior in 11.2 was introduced in 10.2.0.5.
So I suggest you to follow MOS note
Finding the source of failed login attempts. (Doc ID 352389.1)
to find who locked the account.
Ombretta

User account locking frequently

Hi all,
I have a application user account in my db. And this account is getting locked frequently.
I checked dba_audit_session for invalid login attempts but nothing was there. Other users invalid login attempts was there in dba_audit_session.
Is there anyway to trace this.
Please help me in resolving this issue.
Thanks in advance.
Prem

audit create session by appln whenever not successful;HTH
Enrique
PS. Check the value of the audit_trail parameter just to verify that audit is actually enabled. You can verify the connection attempts with:
select * from dba_audit_trail where username = 'APPLN';Edited by: Enrique Orbegozo on Oct 16, 2008 9:05 AM

Unity Connection - Users with system default password getting locked out

Hi all, hope everyone is well !!
I am experiencing a strange problem and hope someone can give me some direction on where to start digging on this issue.
I am getting a good number of users reporting they are getting locked out of their voice mail and they all claim that they have not changed their password and some user even got their greeting recorded by someone else. One thing in common for the users who reported the issue is that they all using the system default password. I am trying to trace to find out who/what has access to these users' mailbox but so far I have not had any luck.
Thanks in advance !!
Danny

Thanks, yes am doing that now and cant really find any new/unique pattern. Plus the trace is pretty hard to follow. Cant really figure out any times stamps in the trace also. The current trace file is defaultTrace.18.trc and it has very simiiar content as some of the older ones before the problem. Right now the ESS portal is working and the slddsuser password is not locked. It seems the problem takes place on start up?
/usr/sap/ESS/JC77/j2ee/cluster/server0/log
Tough thing to test in production.
I wonder what takes place at startup that would kick this problem off?
brad

RFC_USER getting locked

Hi,
RFC_USER are frequently getting locked .
How to find In which RFC RFC_USER password is wrogly maintain ?
which background job locking RFC_USER
why RFC_USER getting locked frequently ?
REgards
M

You may not get the sufficient information from SM21. Try ti check the RFC trace it might help you a bit. Other possible solution is you need to check manually the RFC connection which is maintaining this users and maintain the correct password
Previously we had the same scenario RFC user getting locked due to incorrect password maintained.( after investigated so much we created the Newuser for this RFC and maintained the password)
Thanks Regards,
Avinash I

ABAP+JAVA System Copy -- Administrator account getting locked

Hi,
I am in the process of doing system copy of my portal to a new server. As per the SAP instructions, I had updated the JDK and SP levels of my EP to the latest supported ones.
Now when i am doing JAVA Add-in Export of my system, SAPinst is throwing error that --
"Error connecting to http://Entportal:50000/sap/monitoring/SystemInfoServlet. The provided user data might be incorrect or user might be locked.:
and when I check the "administrator" user account, it is getting locked. Even though I manually unlock it and update the password is secure storage, still when I run SAPinst, again it is getting locked. I have also chnged the path of my temporary directory to c:\temp which has no spacees in it, according to SAP instructions.
I have raised the issue through OSS, but still, in the mean time can sombody help me?
Regards,
Mandar

Hi Akshay,
I am not using any ID. SAPInst itself is trying to access systeminformationservlet using administrator account. at this stage it is failing to get the correct password and thats why my administrator account is getting locked.
Regards,
Mandar.

SYSTEM account gets locked automatically

Hi,
Recently I started the oem agent on one of the box. Since then, the system account gets locked frequently.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times and I can see someone is connecting from terminal "pts/4".
Please help to resolve this asap.
Regards,
Harry

Please specify your OS and DB versions.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times
and I can see someone is connecting from terminal
"pts/4".It means someone is trying to hack the system account. I assume you have configure audit options so you can log where this attempts come from. Even though you have already realized attacks come from pts/4 it will only have sense if you are able to discover in the few minutes what's the actual terminal attached from pts/4. On the other hand, it sounds to me that someone opened a session in a unix like box, and is able to see the os where the database resides. If this is the case, look for the output from the os command 'last' to find out further information about pts/4. If this hacker has reached the OS, it is a serious matter, it could quite easily get signed to the database if it is OS authenticated.
~ Madrid

PIAFUSER and PIAPPLUSER get locked all the time - where are they used?!

Hi guys,
well i am no basis guy but i have to do the following.
We want to use one SLD for PROD & DEV. We chose DEV SLD to be the one!
Therefore i followed Note 720717 in detailed way.
Because there is mentioned i have to change sth. in Service SLD Data Supplier i did so in PROD for giving the SLD-Adress of DEV. This was looking good, i changed, saved and restarted service.
But now the User PIAFUSER and PIAPPLUSER get locked all the time - even without trying to get SLD-Connection.
When i do SLDCHECK we also get error:
Calling function LCR_LIST_BUSINESS_SYSTEMS
Retrieving data from the SLD server.
Function call returned exception code ....4
=> Check whether the SLD is running!
..and it is running!
Could someone help?! We already read post and blogs the last 4 hours but nothing helped that far!
br
Edited by: Fritz Munster on Jul 21, 2008 4:32 PM
And we get some errors from CC also - e.g. when we want to get a file read:
com.sap.aii.af.ra.ms.api.ConfigException: Some of the IS access information is not available. SLDAcess property may be set to true, but SLD is not available.

Hi,
well i already re-checked all pwds again like given in Note 936093.
Everything runs fine that far but again, the PIAFUSER gets locked, PIAPPLUSER doesn't get locked anymore - finally.
The reason why i was coming to this error is because we need to use one SLD - i described already.
So now we wanted to check our PROD Scenarios, running a test with a FILE-CC and got following error in CC-Monitoring:
ERROR:com.sap.aii.af.ra.ms.api.ConfigException: SLDAccess set to true, but not available.
What could cause this error else than some stuff with pwds?!
Any ideas?! i work 10 hours on this crap now
br

SAP BW User getting locked by BO RFC calls

Hi,
we are encountering a problem with BO RFC calls locking SAP BW users that recently changed their password in BW.
Description of the problem in the ticket we raised at the SAP support:
SAP BO 4.1 SP2 Patch 4, linux installation
Backend: SAP BW 7.01 EHP8
BICS interface with SAP authentication
One of our users gets locked again and again in SAP BW (P19). The cause is a RFC connection that the BusinessObjects server (P59) tries to establish. The user used SAP BO last Friday for the last time and had to change his password in P19 this Tuesday. We think that there is some
process within SAP BO still trying to connect to SAP BW from time to time, using the old password. There is no open session visible for that user in the CMC. User is even getting locked when not in the office and during night time. RFC calls are established almost regualary every hour.
We already had this behaviour in our test-system. Restarting the BO-Server solved it. However, this is not the solution we want to use
in the productive environment. There has to be some way to kill the process that uses the old password on the BO server without restarting
the whole server. We do not understand why BO would still try to connect to BW with the old password - this has to be some kind of a bug.
Meanwhile the error disappeared for the first user (some days after it started, maybe the BO process ran into a timeout). However, other users started having the same behaviour after changing their password.
Our basis team tried to check the log files for advanced information on the conversations between BO and BW, but did not find any hints on which BO process might try to establish the connections.
The SAP support seems to be a little helpless at the moment...
Has anyone had similar problems?
Regards,
Robert

Hi again,
additional information: after approximately one week after the error appeared for the first time BO stops trying to establish the rfc connection for this specific user. Almost as if the "old-password-BO-process" ran into a 1 week timeout or something like that.
The problem is really strange. The SAP support is still not able to tell us how the gather the information they require.
Regards,
Robert

User id getting locked everyday

Dear All,
User Id getting locked everyday having profile SAP_ALL and SAP_NEW.I m not getting any clue why its getting locked everyday.
I tried to check RFC and background job job also but i m not able to find.everyday i have to unlock it.
Kindly suggest me how to check.
Regards
Adil

Hi,
Such issue mostly happens due to wrong attempt of login in SAP system client with that SAP User id either through RFC login, external- program, script,etc...
If you have checked all the RFCs login settings and not able to found the login attempt, then Enable [SAP Security audit log|http://help.sap.com/saphelp_nw04s/helpdata/en/c7/69bcb7f36611d3a6510000e835363f/content.htm] using SM19, SM20 and analyze the logs for that SAP User id only.
Regards,
Bhavik G. Shroff

User gets locked by an external system but which one?

Hi,
In an abap system, we have changed the password of our administration user. Afterwards, this user gets locked every 5 minutes, obviously because the user and old password has been used to set up communication from another system to the abap system. An RFC connection for instance or whatever. Sure it is possible to check all the systems you can think of to see if the user has been used for such a purpose. But how can you see in the system itself where the call comes from that locks it? I have tried the gateway tracefile but without success. Any suggestions?
Regards,
GK

Hello,
I would try transaction STAD.
There you should find entries of type RFC with your user.
If you double-click on the line, you get the details. Click on the RFC button.
                              as Client             as Server
No. of targets                   0                     1
Click on the highlighted 1 under "as server".
You should get the needed info : the remote destination
Target         TEST_DEV
User ID        TESTOC
RFC Caller     OCHRETIE
Local destin. bt1suk17v1_DEV_02                IP address xx.xx.xx.xx
Remote destin. bt1suk16v1_DXI_68                IP address yy.yy.yy.yy
Hope this helps
Olivier

User in CTSDEPLOY RFC getting locked frequently

Similar Messages

Maybe you are looking for