User locked continously
Hi all,
since I changed my password yesterday, my user is locked continuously in our BI-System.
In the syslog I can see, that my User is locked.
In the user-column I see the user SAPJSF.
Seems to have something to do with our portal on the same system!?
How can I figure out, where the wrong logins come from?
Best regards
Davor
1. Open the SAP NetWeaver Administrator
2. Choose System Management - Configuration - Log Configuration.
3. From the Show dropdown box, select Tracing Locations.
4. For Locations com.sap.engine.services.security
com.sap.security.core.server.jaas
com.sap.security.core.ticket
com.sap.security.core.util
in the column Severity, choose ALL
5. In order this severity level to be valid for all the children locations, choose Copy to Subtree.
6. Choose Save Configuration.
Next we want to activate HTTP Tracing on the dispatcher by setting the value of property HttpTrace to enable (so we can see the request with the invalid credentials if it is arriving of http/https)
The note for this is 724719 but as you do not have OS level access, you can't use the VA and you will have to use the NWA.
Follow the procedure here http://help.sap.com/saphelp_nw70/helpdata/en/18/5157425e060d53e10000000a155106/content.htm
to set httptrace to 'enable'
When you have established that your user password has become locked, stop the web diagtool trace if you have used it.
Either in the web diagtool log or in the defaultTraces of the servers on the instance you should find a trace entry like
Guest | USERACCOUNT.MODIFY | UACC.PRIVATE_DATASOURCE.un:myuser | myuser | SET_ATTRIBUTE: lockreason=[1], SET_ATTRIBUTE: islocked=[true]
You'll see the authentication stack used e.g
LOGIN.FAILED
User: N/A
Authentication Stack: ticket
Login Module Flag Initialize Login Commit Abort Details
EvaluateTicketLoginModule SUFFICIENT ok false true
BasicPasswordLoginModule REQUISITE ok exception true Authentication did not succeed.
CreateTicketLoginModule OPTIONAL ok
Similar Messages
-
LOCKS checking user locked and SQL that he is executing
Hello all,
I have this script that inserts into a table the user causing the lock and the users waiting for the lock to be released.
What I would like to add into this the script is the SQL string that the user causing the lock and the users waiting for the the lock to be released are executing.
Can you help me on this?
Script that I have now:
insert into dba.sessions_bloq
select sysdate "Data", w.sid "SID E", s1.username "User E", s1.osuser "OS User E", s1.machine "Maquina E", s1.program "Programa E", s1.logon_time "Logon E",
s.ksusenum "SID B", s2.username "User B", s2.osuser "OS User B", s2.machine "Maquina B", s2.program "Programa B", s2.logon_time "Logon B"
,decode(r.ksqrsidt,
''MR'', ''Media Recovery'',
''RT'', ''Redo Thread'',
''UN'', ''User Name'',
''TX'', ''Transaction'',
''TM'', ''DML'',
''UL'', ''PL/SQL User Lock'',
''DX'', ''Distributed Xaction'',
''CF'', ''Control File'',
''IS'', ''Instance State'',
''FS'', ''File Set'',
''IR'', ''Instance Recovery'',
''ST'', ''Disk Space Transaction'',
''TS'', ''Temp Segment'',
''IV'', ''Library Cache Invalidation'',
''LS'', ''Log Start or Switch'',
''RW'', ''Row Wait'',
''SQ'', ''Sequence Number'',
''TE'', ''Extend Table'',
''TT'', ''Temp Table'',
r.ksqrsidt) "Tipo Lock"
from gv$session_wait w, x$ksqrs r, gv$_lock l, x$ksuse s, gv$session s1, gv$session s2
where w.wait_Time = 0
and w.event = ''enqueue''
and r.ksqrsid1 = w.p2
and r.ksqrsid2 = w.p3
and r.ksqrsidt = chr(bitand(p1,-16777216)/16777215)||
chr(bitand(p1,16711680)/65535)
and l.block = 1
and l.saddr = s.addr
and l.raddr = r.addr
and s.inst_id = userenv(''Instance'')
and w.sid = s1.sid
and w.inst_id = s1.inst_id
and s.ksusenum = s2.sid
and s.inst_id = s2.inst_id;
Thanks in advanceYou can link to:
gv$sql
gv$sqltext_with_newlines
but, if doing this in a trigger, also look at these:
http://www.psoug.org/reference/system_events.html -
Configuration scenario currently being edited by user" & locked
HI all,
Appreciate your help on this object locks;
I was changing some configuration scenarios in integration Directory - suddanly lost the internet connection;
Now when i try to change it says "configuration scenario currently being edited by user" & locked
I appreciate if you help me to remove these lock objects
Thanks
IverHi,
Go to administration -
Select appropriate option out of these - > repository/ Directory
now select LOCK OVERVIEW.
now you will get all the locked objects by any user.
Now focus on locked object which you want to realese
now press Button Release Lock .
Hurray !!! locks are released.
Hope this helps .....
regards
prabhat Sharma. -
Dear experts,
I locked a mass users using SU10, one of the user locked and immediately prompted for pwd change.
USER1 31.01.2011 09:15:02 ADMIN Lock Changed 0 Not locked 64 Administrator Lock SU10
USER1 31.01.2011 09:16:56 USER1 Password Changed Long Password 3 Long Password 4 KRNL
USER1 31.01.2011 09:16:56 USER1 Lock Changed 64 Administrator Lock 0 Not locked KRNL
Please suggest why this is happening in my SAP ECC 6.00, Kernal:7.00.
Regards,
Siva.USER1 31.01.2011 09:15:02 ADMIN Lock Changed 0 Not locked 64 Administrator Lock SU10
USER1 31.01.2011 09:16:56 USER1 Password Changed Long Password 3 Long Password 4 KRNL
USER1 31.01.2011 09:16:56 USER1 Lock Changed 64 Administrator Lock 0 Not locked KRNL
Above log is showing that only lock activity was happened from SU10 and after that User changed his password from other opened screen. Did you kick off that user from the system immediate after locking?
Regards,
Nick Loy -
User Lock issue when processing IDOCS
Hi Folks,
We are pushing the data into SAP using IDOCS.During this process some IDOCS are getting failed due to User Lock on shipment header.Anyone here can share their experience in dealing with User Lock issues.
Thanks,
Kiran.Kiran,
Only one can edit the document, it's standard fucntion. I think No note can resolve this. I can suggest you to run a back ground job very frequently ,which picks these status 51 IDOCs and reprocess. Report is :RBDMANi2
We can use Message class & error message number on selection screen, so that we can make sure that only those idocs which were failed due to Lock problem are taken by the job.
Reddy -
User lock persists for killed process
Hi,
We have an app that acquires a user lock (using dbms_lock, release_on_commit FALSE).
We needed to kill a session but it remained in v$session (KILLED), even after killing the OS process. Fine, I know it will clear up eventually.
But the user lock (UL) persists. Does anyone know how it can be force-released?
Calling dbms_lock.release (using handle in v$lock) fails, even as user SYS, the error being that the user does not own the lock. But the owning session is killed so who can release it?
Eventually the session (and lock) disappers from v$session/v$lock but can the lock be removed before then, to avoid a DB bounce in an urgent case?
ThanksIf the process was truely KILLED and not MARKED FOR KILL then I do not know what could of happened. I cannot remember Oracle ever failing to release a user lock when the acquiring session was terminated. We use a fair number of UL; however, few of our processes have concurrent sessions that attempt to use the same UL. Mostly we just ensure that batch processes do not get submitted twice and that some on demand processes run single threaded or do not run if another customer has submitted the task.
HTH -- Mark D Powell -- -
How it is possible that an internet user locks an order???
Hi,
I have a problem. Some of the orders, when transfered to R/3 has a mapping error in SMW01. When I check the details I see that it gives an error "Transaction 300615856 is being processed by user 7003788553" message number CRM_ORDER013.
However here 7003788553 is an internet user who gave the order. So how it is possible that an Internet user locks the order.
I tried to simulate the error myself in quality system however never succeeded.
Any idea?
Best RegardsHello
I would suggest you review notes 542924 and 490932.
Regards
Cormac -
Sounds stop playing when user locks screen on iOS with AIR 3.9 Beta
We built a simple application that should play sounds when in background and when the screen is locked.
Since we updated to the latest AIR 3.9 Beta SDK, all sounds stop playing when the user locks the screen on iOS.
The sounds resume when the screen is unlocked.
- it works on Android
- we use renderMode : cpu
- we use UIBackgroundModes : audio
- we use NativeApplication.nativeApplication.systemIdleMode=SystemIdleMode.KEEP_AWAKE;
- sounds play when the app is in background
- was working great with AIR 3.8 SDK
Any help would be greatly appreciated.
Thanks!Thanks for reproting the issue, we have an internal already logged bug for this, which is under investigation at the moment.
-Nimit -
How can I konw , Which computer name or IP Address make SAP User lock
Dear all,
I have one issues about SAP user lock,
Now I don't know which computer name or IP Address make user lock.
How can I check it or Can you tell me about the table that keep information about the ip address or computer name?
I can see the computer name when I use t-code al08 or sm04.
But I don't know the table that keep data from this t-code.
Pls suggest me for this issue.
Regards,
PanneeIn SM21
If you double click on the message "User XXXXX locked due to incorrect logon"
You'll see under details the name of the terminal
Terminal............ XXXXXXXXXXX
for IP address just ping the terminal.
Regards
Juan -
I guess it's common problem in LDAP. If the user locks out after 3 failed failed logins, The admin needs to be entered in NDS conslole and he need to be unlock after he gets a request from that user. But I couldn't find the property for single User. whatever you specify the parameter in User Lockout tab, it's valid for all the user.
i.e. if you uncheck the checkbox User lockout check box it's valid for all the users. How to unlock the particular user in NDS???
any help in this regard is really appreciable.
regards,
chandraWhat version of WLS are you using? In the 6.0 beta, user lockout was one of
the new security features
added. This way, WLS could detect the failure and allow administrators to
detect password guessing
attempts.
If this is a previous release of WLS, you will need to check the NDS
documentation for how to unlock
a given user.
Paul Patrick
"chandra" <[email protected]> wrote in message
news:3a1e3d7d$[email protected]..
>
I guess it's common problem in LDAP. If the user locks out after 3 failedfailed logins, The admin needs to be entered in NDS conslole and he need to
be unlock after he gets a request from that user. But I couldn't find the
property for single User. whatever you specify the parameter in User Lockout
tab, it's valid for all the user.
>
i.e. if you uncheck the checkbox User lockout check box it's valid for allthe users. How to unlock the particular user in NDS???
>
any help in this regard is really appreciable.
regards,
chandra -
Users Locked after Patch Upgrade
Hello,
After a patch update all users locked .. how to find the reason ..
Thanks,
DereKHi DereK,
Please check the below documents : -
http://www.sapfans.com/forums/viewtopic.php?f=24&t=19370
http://help.sap.com/saphelp_nw04/helpdata/en/c4/f01241c738f423e10000000a155106/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/0a/065e4278636255e10000000a155106/frameset.htm
Hoe it helps
Regards
Arun -
If user locked (backend) then from portal i m not able to send data
If user locked (backend) then from portal i m not able to send data
both user are same in front end and backend.
But once user is unlocked i am able to send data from portal to backend...
Regards
RuturajHi
Since you are in CUA landscape(as u said portal and r3 user are same) unless and utill you unlock it data will not be process.
[Help|What's the right user to access;
BR
Satish Kumar -
Hi ,
I am with user id <b>p258168</b> , This is my friends ID .
When i try to login using p258168 , I am getting
' <b>User Locked</b> ' Try after some time .
I need to login again with same user .
Kindly resolve the problem .
Best Regards
Renjith Kumar ( From Shiba Dutta Id )Hi Shiba,
since the account does not belong to you we cannot deal with your request unless the original user is asking for it. You can get past the problem by just creating your own userid in SDN via https://www.sdn.sap.com/irj/sdn/register.
Please in future send all bugs or requests to [email protected]
Regards,
Folkert Eilts -
Dear all,
I have a "OVMAPI_6000E Internal Error: Connection refused Connection refused " not "User lock" and in this discussion
Please advise me.
Show log as below
==> AdminServer.log <==
####<Sep 26, 2013 5:23:59 PM ICT> <Info> <Health> <OVMM2> <AdminServer> <weblogic.GCMonitor> <<anonymous>> <> <aa1419c5c5beaacb:21222087:14159c0b975:-8000-000000000000000d> <1380191039464> <WL-310002> <67% of the total memory in the server is free>
==> AdminServer-diagnostic.log <==
[2013-09-26T17:24:31.702+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000083,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:31 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:31 ICT 2013]
[2013-09-26T17:24:35.399+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000085,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:35 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:35 ICT 2013]
[2013-09-26T17:24:38.425+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000087,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:38 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:38 ICT 2013]
[2013-09-26T17:24:41.054+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000089,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:41 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:41 ICT 2013]
[2013-09-26T17:24:56.569+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-000000000000008d,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:56 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:56 ICT 2013]
Message was edited by: 9bb5edee-5117-4494-b75e-c081a39dd35fHi,
Look at this URL, maybe can help you
Best Regards -
J2EE_GUEST user locked in PX7
Hi SDNers,
Our Scenario is Idoc-->SOAP Adapter.
The files were picked up from the sender side and delivered successfully to the receiver side. But we are getting errors in Acknowledgement.
When looked into the trace files, we found that the error was due to J2EE_GUEST user locked. This is the user that is being used at the receiver end.
SECURITY LOG
1.5#00112508C2A8006D0000279B000F309A0004622CF5320E36#1233845138624#/System/Security/Usermanagement##com.sap.security.core.persistence#J2EE_GUEST#0####a770ea00f39311dda9e400112508c2a8#SAPEngine_Application_Thread[impl:3]_23##0#0#Warning#1#com.sap.security.core.persistence#Java#Search in the backend resulted in an exception. The search result returned to the application might be incomplete. Reason: .##Search in the backend resulted in an exception. The search result returned to the application might be incomplete. Reason: .#1#User is locked. Please notify the person responsible#
But we have not locked the user manually.
How the user got locked?
Is there any other possibilities to lock an user other than using SU01?Hi All,
Thnx for your inputs.But the user is unlocked already.Could anyone please tell me where to get the details as in who has locked it and when?
We have tried searching the same in SU01,SM04,SUIM,STAD and didn't get any info...
Would appriciate your valuable inputs on this
Thnx in advance...
Maybe you are looking for
-
Two iphones on one account?
I purchased an iphone for each of my children. Set them up each with a separate apple account and itunes acct. (Same credit card). But, can I set them both up under the same account - so that if I buy a song for one they both can use it?
-
Earlier i meantioned that my lock screen was broken. That was a mistake its my lock button i apologize. But do i still have to pay for my phone bill and activate my AT&T account in order to replace my iPhone 5 at an apple store?? Or not because of th
-
Camera not switching ios7 Ipod Touch 5th Gen
I have an ipod touch 5th generation and the camera won't switch around (for selfies). Have tried to switch it with usual method as have owned it for a year and its just started doing this
-
Text in template in ECC 6.0
Can i know how to enter text in template in ECC 6.0
-
Getting the factory/original name of an effect back
Hello All, I thought I was being soooo efficient by renaming my effects in the Effects Control Window, and now several years later I returned to a project to discover I can not recall what several of effects were originally named. I was using CS4 whe