User Password Not Replicated during ACS Replication

I am provisioning user accounts in ACS through a provisioning system. The provisioned ACS is set to replicate user and group database to another ACS. Replication interval time is set to 15 mins.
Problem is that even though the replication cycle runs every 15 mins, if no user is added or deleted, the pre-checks determine that outbound replication is not required and cycle is completed. Hence, if user's password change, they are not replicated to other ACS and in case the authentication request goes to the other ACS then it fails. Manual replication is fine.
How to make sure replication is run even in case of user password change and not just when a user is added or removed.

Hi,
What is the acs ver ? Are the user accounts you are referring to stored? i.e. are the local to the ACS server itself, or are they defined in an external user database (e.g. Active Directory, LDAP, etc.)?
Users defined via Active Directory are dynamically mapped to a user account in ACS and this account information is typically not replicated since the users created are dynamic and can change properties based on
configuration/changes in Active Directory itself.
Regards,
Jagdeep

Similar Messages

SLD connection user/password not working.

Hello friends,
I am new bee in SAP Netweaver.
I installed SAP Netweaver for java.
Now I want to connect it with BAPI from SAP.
so, some where i am sucked with SLD. I opened Visula Administrator and nothing there to connect.
I also tried http://localhost:50000/sld but my user/password not working.
1. What to do to see/get username/password for SLD?
2. How to connect netweaver to access SAP ZBAPI?
Regards,
RH

Hello friends,
I am new bee in SAP Netweaver.
I installed SAP Netweaver for java.
Now I want to connect it with BAPI from SAP.
so, some where i am sucked with SLD. I opened Visula Administrator and nothing there to connect.
I also tried http://localhost:50000/sld but my user/password not working.
1. What to do to see/get username/password for SLD?
2. How to connect netweaver to access SAP ZBAPI?
Regards,
RH
Hi Ronny.
Where is your UME running? On the java engine, on an ABAP system or at a LDAP?
What i want to say is that your user has to gain the rights to connect to the SLD. Easiest way is to give you admin rights - to do that you have to know where your userstore is running....
I am not sure if this is correct http://localhost:50000/sld
Normally it should look like http://my.sap.com/56600/sld where my.sap.com is a fqdn and 56600 is the port of the java engine. 66 ist the system number of the as java.
ZBAPI? I do not really know but i think you have to use a jco to connect...
regards,
Martin

User password not taken in consideration after a company copy

Hi All,
After a company copy, user passwords are not replicated; we´re only able to connect with manager and then reset all passwords.
Is there anything to do to avoid this?
Thanks!

Hi.
When you use the Copy Express function, it copies data from one database to another.
I also do believe that when using Copy Express, all passwords for users are reset and needs to be added manually before entering the new company for the first time.
Kind Regards,
Runar Wigestrand.

SUS user data not replicated to SRM

In service SRMSUS in the SUS system, we have user w/ role SAP_EC_SUS_ADMIN_VENDOR.
When this user modifies his own user data such as name/email/time zone, the change in user data is NOT replicated to the SRM system. The SRM user data still contains the original user information.
I believe user data update is done via a RFC call, and not XI. I've checked for security auth object and there are no authorization issues.
Are there any additional configs we're missing?
We're on SRM 4.0 / SAPKIBKS10 / SAPKB64019
I've already checked all the OSS Notes including, but they don't help, or pertain to my situation:
Note 893714 - SUS30: Replication of bidding users from SUS to EBP
Note 919070 - SUS-UM: User settings are not stored correctly

Hi,
you need to maintain the system details where the changed data needs to be replicated at the following customizing in SUS
1) Transaction SPRO --->
2) Path ---> Supplier Relationship Management ---> Supplier Self Services --->
Master Data --->Maintain Systems For Synchronization of User Data
( check help available with the customizing for more details ).
3) Maintain New Entry for the external systems ---> this should be your SRM system and then use the following data .
F. Mod.: Create User BAPI_USER_CREATE
F. Mod.: Change User BAPI_USER_CHANGE
F. Mod.: Delete User BAPI_USER_DELETE
4) save data
5) once you hav done this , when you make changes , data will be synchrozed with SRM

Set user password auto expired in ACS Server

Hi,
Is the ACS has a function for me to configure in ACS Server to set the users' password will be expired in a period of time(e.g. 90 days)?
Thanks and regards
Ernest

Remember :
RADIUS with expiry only supports password
change when the database that ACS authenticates your users against is active directory (which would not use the password expiry options configurable in ACS but, rather, Windows password expiry).
Password Expiry with tacacs will only work if the user is a part of local database on the
ACS server.
To configure the password expiry, please follow these steps :
- On the ACS server, system configurations > Local Password Managment > uncheck the
check box " Disable Telnet Change Password against the ACS ".
Regards,
~JG
Do rate helpful posts

Change User password not working in SAP ME 6.0

Hi,
In SAP ME 6.0 SP01 6.0.1.0 Counter 40, the activity "Change User Password" does not work for me or any other user.
The activity window (Netweaver) shows, but in the top it says "An error occurred - contact system administrator".
This is the output from the default trace file. Seems my user is not authorized, but where do I set this authorization?
Br,
Johan
#2.0 #2011 09 06 11:15:11:064#+0200#Error#com.sap.security.core.wd.jmxmodel.JmxModelComp#
#BC-JAS-SEC-UME#sap.com/tcsecumewduimodel#C0000AD3034800820000000100000450#9934850000000004#sap.com/tcsecumewdkit#com.sap.security.core.wd.jmxmodel.JmxModelComp#JONORD#16##380199ECD86811E088C3000000979802#ae0e9d52d86811e08e7a000000979802#ae0e9d52d86811e08e7a000000979802#0#Thread[HTTP Worker [@312363456],5,Dedicated_Application_Thread]#Plain##
public void supplyCompany(IPrivateJmxModelCompInterface.ICompanyNode node, IPrivateJmxModelCompInterface.IContextElement parentElement)
[EXCEPTION]
com.sap.engine.services.jmx.exception.JmxSecurityException: Caller JONORD not authorized, required permission missing (javax.management.MBeanPermission -\#getCompanyConceptEnabled[:SAP_J2EECluster="",j2eeType=UmeJmxServer,name=IJmxServer] invoke)
     at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:100)
     at com.sap.engine.services.jmx.JmxServerFrame.checkMBeanPermission(JmxServerFrame.java:101)
     at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.checkMBeanPermission(MBeanServerSecurityWrapper.java:438)
     at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:288)
     at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:813)
     at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:367)
     at com.sap.security.core.jmx._gen.IJmxServer$Impl.getCompanyConceptEnabled(IJmxServer.java:1415)
     at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.supplyCompany(JmxModelCompInterface.java:1498)
     at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.supplyCompany(InternalJmxModelCompInterface.java:710)
     at com.sap.security.core.wd.jmxmodel.wdp.IPublicJmxModelCompInterface$ICompanyNode.doSupplyElements(IPublicJmxModelCompInterface.java:4301)
     at com.sap.tc.webdynpro.progmodel.context.DataNode.supplyElements(DataNode.java:110)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
     at com.sap.tc.webdynpro.progmodel.context.MappedNode.createMappedElementList(MappedNode.java:78)
     at com.sap.tc.webdynpro.progmodel.context.MappedNode.supplyElements(MappedNode.java:71)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
     at com.sap.tc.webdynpro.progmodel.context.MappedNode.createMappedElementList(MappedNode.java:78)
     at com.sap.tc.webdynpro.progmodel.context.MappedNode.supplyElements(MappedNode.java:71)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElements(Node.java:270)

Hi,
Change User Password screen is in fact user self services screen of NW UME and to access it, user must have Manage_My_Password action. Installation and Security Guide ask to assign this action to all roles.

User password not accepted after migration

Source: iMac Lion OSX.7.4 Destination iMac OSX6.8
Problem: user password is not accepted after migration
What I did: Tried to migrate over the LAN, but in the migration assistant the other Mac was mutually never recognized. (Did migrations several times successfully in our LAN before). Last time the LIon Mac was the destination, who is now the source.
I backupped then the user with Time machine on the Lion and installed it with the migration assistant on the Snow Leopard system. As as the password was not accepted, I repeated the backup/migration process once. No help
I reset in System Prefs/User accounts the password of that user. But cannot login either
First time, that a migration process fails for me.
Any help is appreciated
Thanks
Urs

The target computer itself has admin accounts thats not the problem, I can access it. The issue is that the migrated additional user account is not accessible with its password.
I have found here an istruction how to reset a password in single user mode.
http://www.macyourself.com/2009/08/03/how-to-reset-your-mac-os-x-password-withou t-an-installer-disc/
But that does not help either.The answer after the dscl -passwd command is that I do not have access (or similar, I don't remember)
My guess is that backward migration (Lion to Snow) causes the problem. May be I need to create the user freshly and to copy his documents manually

Order Replication CRM - R/3 - User Status not replicated - enhancement

Hello all,
We wish to synchronize order user status between CRM and R/3 (in fact ECC5). As described in IMG documentation, we should use the BAdI CRM_DATAEXCHG_BADI and methods CRM_DATAEXCH_AFTER_MBDOC_FILL, CRM_DATAEXCH_AFTER_BAPI_FILL for replication from CRM to ECC5 and CRM_DATAEXCH_R3D_MBDOC_FILL for replication from ECC5 to CRM.
For method CRM_DATAEXCH_AFTER_BAPI_FILL, I was not able to find fields User Status and Status Profile in any of the R/3 structure BAPI*.
Does anyone have any idea ?
Thanks
Laurent PIALOT

Laurent
I wonder if you know what the CRM_DATAEXCHG_BADI is for.
We have a problem between CRM and BW: delta loads from 0CRM_SALES_ACT_1 finds no data. SAP OSS recommended to deactivate badi CRM_DATAEXCHG_BADI, but we don't know what possible side-effect we could face. Any idea?
thanks,
Mauricio Cubillos

Change Password not replicating to AD user account

I am a mac noob and we are having an issue where password changes on macs are only reflected on the local system. The macs are bound to AD, and Create a mobile account at login is checked. I have asked our network and security teams to verify any changes recently but am told that things are as they have always been.
Currently the only workaround is to have users change the password on their Mac and then use a windows machine to also change the pw, or call the service desk and have them update their password in AD.
Is there something obvious that I am missing because of my inexperience with Macs? I appreciate any help I can get,
Thanks,
Stephen
What I have tried so far: (all the steps I have tried I also rebooted after any changes were made)
Preferences/Users & Groups/Change Password - Only changes PW locally.
Unbinding from the domain and rebinding
Unbinding from the domain, changing the machine name, restarting, binded to the domain and applied AD preferences
Tried specifying the preferred domain server in the Directory Utility under advanced options
I have reproduced the issue on my Mac Air with 10.9 (mavericks) and also on a MacBook Pro with 10.8.5(mountain lion)
Turned off wireless and attempted change via only a wired connection on non 8021x LAN
Turned off wireless and attempted change via only a wired connection on the 8021x LAN
Disconnected wired and attempted change via only a wireless connection.
Turned off wireless and attempted change via DSL connected to VPN
Deleted profiles and downloaded them from Profile Manager
Attempted to change password using the Preferences/Security & Privacy/General tab
Attempted to change password using Terminal

We pinpointed the cause of the issue. It is the build process instructions we follow. The old process was automated but doesn't work with newer macs so we have been running the builds manually. We added the user as a local user manually which is precisely why the PW changes only happened locally.
Once the machine is bound to the domain and network users can login, and the mobile profile option is selected, all one has to do is login using network credentials, the password change was immediate for AD.

User password not recognised

I have recently downloaded flash player and it asked me for my password, which did not work. It then asked for my appple ID and downloaded the app.
Since this I have not been able to log on as a main user and I am now only able to use guest as my password is not being accepted.

First, make sure caps lock is not on.
You must back up all data before continuing, unless you've already done so. If you need to back up but can't log in, ask for instructions.
If the user account is associated with an Apple ID, and you know the Apple ID password, then maybe the Apple ID can be used to reset your user account password.
Otherwise*, boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar.
In the Terminal window, type this:
res
Press the tab key. The partial command you typed will automatically be completed to this:
resetpassword
Press return. A Reset Password window opens.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Follow the prompts to reset the password. It's safest to choose a password that includes only the characters a-z, A-Z, and 0-9.
Select
 ▹ Restart
from the menu bar.
You should now be able to log in with the new password, but your Keychain will be reset (empty.) If you've forgotten the Keychain password (which is ordinarily the same as your login password), there's no way to recover it.
*Note: If you've activated FileVault, this procedure doesn't apply. Follow instead the instructions on this page:
If you forget the password and FileVault is on

Username and employee_id are not replicated during Initial load

In our system we want to integrate HR in ECC (via BP in ECC) with BP in CRM.
Our system consists of SAP ECC 6.0 and SAP CRM 5.0. HR is used for maintaining our (master)data. This all works fine, but when checking the replicated data (in CRM) there's some data missing. In CRM BP there is no EMPLOYEE_ID and USERNAME while they are in ECC BP. Is anyone familiar with this problem or does anyone know where I need to search for a solution.

Thanks four your reply, but I already applied Note 550055. I also applied Note 934372. All the settings are right and the integration works fine. It just looks as the BDoc doesn't transfer the username and employee_id (these values are empty when I look at the BDoc).
Concerning table T77S0, entry HRALX/USRAC should handle the creation and linking of (not-existing) users in the target system (ie. CRM) but because the values aren't transferred I can't check whether this is the case.

SYS password not accepted during WEBDB install

I have installed the 8i Enterprise Edition, Enterprise Manager and WebDB software from the OTN site. I successfully installed EI and EntMan on my NT server box. However, when I attempted to install the WebDB software, the install wizard would not accept the SYS password I supplied. I have tried the change_on_install password, and additional passwords for the SYS user (I reinstalled a number of times in an attemp to correct the problem, myself)....Obviously, with no success.
Please Help.

Your SQL Net probably is not being resolved correctly.
You have two sqlnet.ora's in this configuration. What happens when you open sqlplus at the command prompt? Are you getting SQL PLus 8.0.5 or 8.1.5??
If its 8.0.5 you have to do 2 things.
1 set your tns_admin for the system enviromnment to your ORACLE8i_HOME/Network/Admin.
Check your settings with set | more
also modify your net80 tnsnames.ora
null

LDAP Mobile Users & Password (not) Syncing

Hi folks, we are starting to enable LDAP for our notebook users and have one issue that hopefully someone has some advice on.
We're using a Linux based LDAP server, 389 Directory Server.
Our users can authenticate, login, we make them admins, and enable the mobile user account.
It works well until they change their password on LDAP via our web interface.
Their new password works for Lion so long as they are on our network. Once they take their notebook away and can't reach our ldap anymore, the mobile user account will only accept their original ldap password.
It seems as if the passwords are not being synced/cached locally. I just discovered this before coming home for the weekend and hope to have a few hints to get going on Monday if anyone has a suggestion.
One last thought is that we turn off Home Directory Sync because we're not using network based home directories yet (set it to manual in Mobile Accounts). Would that also disable password syncing except when a manual sync happens?
Thanks folks!

Hi Steve.
We have mobile accounts turned on, but we do not have home directory synching. Faculty/Staff, must at least once, login with their mac while on our campus network. This authenticates the faculty/staff against our LDAP server (Solaris) and "caches" their credentials using the Mobile user feature of Lion. Once they login in once the can then go off campus and use that password to log into their machine, do updates, whatever.
The issue we have is when someone changes their LDAP password from our "web account tools" page it is spotty on the LDAP Snyc with the machine.
Hope that helps
-DK

Texts not replicating during loads

Hi All,
I am doing initial loads for sales transactions from ECC 6.0 to CRM 5.0. The transactions are loading perfectly with all the partner details product details but not the header and item level text.
When i create a new transaction either in ECC or in CRM with header and item level text the texts are replicating fine. Which means my access sequences are correct. But i am not able to replicate the text that are existing with the transactions during loads. Am i missing any configuration step in mapping these texts?
I am facing this problem with all the transactions Inquiries/Quotations/Standard orders.
Please advice.
Thanks in advance,
Karuna.

Hi Karuna,
Check for the filters because the system does not transfer texts if filtering is activated in the R/3 system. Reffer to the oss Note 720147 - Download: Texts not transferred.
<b>Reward points if my post helps!!</b>
Best regards,
Vikash

[SOLVED] new user password not being accepted

I just installed, and I created my normal non-root user and created a password for it using passwd slackcub. When I tried to log into it later, I kept getting a message saying login incorrect. I tried changing the password several time running passwd slackcub, but to no help. The thing I find most interesting is if I log in as root, run su - slackcub, then passwd, when it prompts me for my current password, it accepts as correct what I had just set it as previously. What could be causing my install to refuse login to a normal user?
David
Last edited by slackcub (2013-07-26 15:36:40)

How exactly are you setting that user's shell? Check /etc/shells to see what path to the shell should be:
$ cat /etc/shells
# /etc/shells
/bin/sh
/bin/bash
# End of file
/usr/bin/zsh
As you can see it's /bin/bash but /usr/bin/zsh.
https://mailman.archlinux.org/pipermail … 33740.html

User Password Not Replicated during ACS Replication

Similar Messages

Maybe you are looking for