User SAP* disable.

Hello All,
Can any tell me how to disable the SAP* user in SRM system.
Thnaks,
Raju.

11.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat
Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat
2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service
3.Double-click on the property "ume.superadmin.activated = FALSE"
4.Save.
5.Restart the engine.
Thanks,
Nagaraju

Similar Messages

How to change the password of ddic in 000,sap* user is disabled

Hi
SAP* user is disabled in 000 client in my production server,I can't enable it as it will require outage which is not possible now
I want to use ddic user to login in 000 but I forgot the password,is there any query to change the password for ddic user.My database is SQL server 2005
Rohit

Hi,
Better to activate SAP* user instead of trying for the DDIC user .
Either use the Query Delete from usr02.sapr3 where bname = 'SAP*' and mandt = '000' or delete the
user SAP* from USR02 table where mandt value is 000 through SQL Visual Studio .
Check the value login/no_automatic_user_sapstar in RZ11 , if it is zero , no need to restart the instance .
Otherwise change it to 0 , restart the instance.
Now you will be able to login with the password pass.
Regards,
Nibu

How to re actived user SAP* after disable this account

hi guys,
i have some accident with my sap Portal,
today i was install SAP EP with success, and then i try to create new user to change account sap*, but i forget give a new user to super user role .
my question is how to reactived user sap* ?
thanks for your support and advise
rgds
bahar

Hi Bahar,
have a look into the ume directory. There is a file called sapum.properties.bak.
Edit the file and check if the entry for ume.supersuer.activated (or similar) is set to true.
Rename the file to sapum.properties and restart the portal
Regards
Jochen

User SAP* is active. No other users can log on. Now What?

After the last time I restarted the portal, I get the following message when I try to logon:
User SAP* is active. No other users can log on
Before the reboot, I was trying to configure LDAP. I changed the Data source from "Database Only" to "Read-Only Microsoft ADS (Deep Hierarchy) + Database". I also, tried to create a Superuser/Password. You can logon using SAP* and see the users from LDAP.
Any thoughts? Also, can anyone clarify the configuration option:
SAP* User Configuration
Enable SAP* user (If you disable the SAP* user, enter a superuser ID and password below)
Superuser Name
Superuser Password
EP6.0

Bill,
You have to assign a user the super admin role. Once the user has this role, go to the UM Configuration (System Admin--> System Config --> UM Configuration) and uncheck the Enable SAP* User option and enter in the superuser name and superuser password. Restart the portal and users should be able to login.
FYI. No users can login to the portal if sap* is active.
Regards,
Marty

User Menu Disabled

Hello,
The User Menu for a particular User is disabled.
He can only see the SAP Menu.
How to enable the User Menu?
Thanks in advance

Hi Gautam,
The best way to do this, is to go back and close all the threads which you have started and then use the <a href="https://forums.sdn.sap.com/search.jspa?threadID=&q=usermenudisabled&objID=f208&dateRange=all&numResults=15&rankBy=10001">search</a> before asking questions which have already been answered.
Good luck,
Julius

How to reset password for user sap*

Hi friends,
How to reset password for user sap* if any solution please mail me.
Thanks,
Yogesh

Hi,
Steps for Reset SAP* Password
If you forgot or lock "Administrator or J2EE_ADMIN" password just follow below steps:
STEP-1: Enable "SAP*"
1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat
Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat
2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service
3.Double-click on the property "ume.superadmin.activated = TRUE"
4.Double-click on the property "ume.superadmin.password=<Enter any password ex: abc123>"
5.Save.
6.Restart the engine.
STEP-2: Login with "SAP*" into portal
1. http://<host>:<Port>/useradmin/index.jsp
2. Enter userid / password as" SAP* / <password ex: abc123>"
3. Search for "Administrator" user
4. Reset or change password for "Administrtor"
STEP-3: Disable "SAP*"
1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat
Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat
2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service
3.Double-click on the property "ume.superadmin.activated = FALSE"
4.Save.
5. Restart the engine.
STEP-4: Login with "Administrator"
1. http://<host>:<Port>/useradmin/index.jsp
2. Enter userid / Password as "Administrator / <password>
3. it will ask change password just change it.
Please follow steps one by one. it should resolve your issue.
Thanks,
Nagaraju Parlapalli

How to find out if a user is disabled in xpress code?

I have an active sync form and I'm trying to determine as one of my checks if a user is disabled. I've tried using waveset.disabled, but that always returns null. I also tried waveset.organization to see if the user is in the 'terminate' organization, but it only always returns 'Top' and not 'Top:Terminate'
Any ideas how I can find out if a user account is disabled?
Thanks for any info!

Hi,
These two attributes you can only get in userview.
waveset.disabled (this is always null if user is not disble else return true if user is disble)
waveset.organization (will give you the whole org path like Top:xyz)
take a dump of your userview and see what you are getting there.
Use below code in you form/WF to see the userview on console
<block trace='true'>
<invoke name='toXml'>
<ref>userview</ref> // user your userview object name
</invoke>
</block>

No User SAP* after the creation of a new client

Hello,
I made a system copy from PROD to DEV-System and upgraded the DEV-System to EHP7. Now I want to create a new customizing client but when I create the client in transaction SCC4 there is no user sap* on this client. I never thought this is possible.
I checked my profile and everythings seems to be fine. (login/no_automatic_user_sapstar = 0)
The client is in the table T000. I searched for any users in this client on SQL but there is no User:
Can you please help me with this issue?
Thanks a lot and regards,
Bernhard

Hi Bernhard,
Parameter login/no_automatic_user_sapstar = 0 enables the SAP*(basically from SAP Kernel/hard-coded) for initial logon to the newly created client. Please do the client copy from 000/001 for super user (SAP* and DDIC) availability.
for further info please check this notes
2383 - Documentation: description of "super user" SAP*
68048 - Deactivating the automatic SAP* user
regards
kartik

How i can send a mail to the user SAP Office mailbox through the spool.

hi all,
I have created an report and scheduled for background and it generated a spool now how i can send a mail to the user SAP Office mailbox through that spool.
                      please provide me the sample code if possible.
               thanks.

Read the spool number with this...
    SELECT RQIDENT
    INTO (T_TSP01-RQIDENT)
    FROM TSP01
    WHERE RQOWNER EQ SY-UNAME
      AND RQCLIENT EQ SY-MANDT.
    APPEND T_TSP01.
    ENDSELECT.
Use this FM RSPO_IRETURN_RAW_DATA to read the content of the spool into an Internal Table...
Finally use this FM SO_OBJECT_SEND to send the mail to an SAP Office user...
Greetings,
Blag.

SQL content database is locking when a user is disabled in Active Directory.

We have an issue, first of all we are running custom code in C# within a visual web part to "Offboard Users". In essence it disables their AD account and moves it to another OU using the ActiveDirectoryServiceClient.
Sometimes it works seamlessly, other times it causes a lock in the SQL content DB. The list ID that always comes up with the error is the User Information List. I have researched that SharePoint will update the UserInfo table with tp_Deleted when a
user is Disabled. Would this also update the AllUserData table with a corresponding int value due to the foreign key relationships between these two tables? If so could this update be causing the SQL lock? Is there anything we can do to expedite the
process, it runs really long, goes to critical, locks the DB, proceeds to completion successfully, but meanwhile users cannot interact with the site. The list is indexed on user name and work email. It is close to 4,000 list items, but broken into views. However
I don't think this has anything to do with the list itself as the Profile Service should be updating the list, the code does not.
We have separate DB for each site collection and all are within / under the 100GB limit.
How is the AllUserData table updated from the UserInfo table?
Thank You,
Crjangel
Frances Garland

I wouldn't have expected such a problem, but there you are :-(. Luckily you can analyze further by issuing a SQL DMV query providing details about existing locks, for instance using this one:
http://www.toadworld.com/platforms/sql-server/b/weblog/archive/2013/08/11/dmv-13-finding-locking-amp-blocking-sys-dm-tran-locks.aspx
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

How to delete user SAP* from database in MaxDB

I´m unable to login with user SAP* into client 000 but in other clients.
How can I delete the user SAP* from client 000 that I can login with the standard password?
Is it possible within a transaction in another client or only on DB?

Hi Damian,
You need to connect to MaxDB SQL studio using user SuperDBA,admin
Run the following commands
select bname from <SAPSCHEMA>.USER02 where bname='SAP' and MANDT='000;*
This will list user SAP* from client 000
delete from <SAPSCHEMA>.USR02 where bname='SAP' and MANDT='000';*
This will delete SAP* from client 000.
Regards,
Deepak Kori

WLC 4404 Wireless users getting disabled

Currently Being Moderated
Wireless users getting disabled
Hi,
I have WLC 4404 with 7.0.116.0 version. I was getting following messages for particular APs
*Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:13.908: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.383: %LWAPP-5-RLDP: RLDP stopped on slot 0.
*Dec 20 14:11:29.674: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.678: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.700: %LWAPP-5-RLDP: RLDP started on slot 0.
*Dec 20 14:11:29.707: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.752: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.757: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.790: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:45.396: %LWAPP-5-RLDP: RLDP stopped on slot 0. *Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
After seeing one of the cisco forum, I have disabled RLDP for that particular APs
so above messages are rectified.
But right now we are not able to identify Rogue IP and it is not contained.
So please give any suggetion so that i can rectify the above messages as well as i can identify the rogue IP.
Thanks & Regards
Gaurav Pandya

Hi Scott,
You are right i am not able to detect rogue APs because i disabled the RLDP. but when i enable the RLDP for that particular AP. i got the following messages with interface go up and down
*Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:13.908: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.383: %LWAPP-5-RLDP: RLDP stopped on slot 0.
*Dec 20 14:11:29.674: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.678: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.700: %LWAPP-5-RLDP: RLDP started on slot 0.
So please suggest me the mid way so that i can enable the RLDP (Detect the rogue APs) with out interface going up and down frequently.
Regards
Gaurav

Removing the entitlement wher user gost disabled OIM11g R2

Hi Expert,
I am trying to writing the scheduler for removing the entitlement when user got disabled.
Below is my code:
public class RemoveEntitlement extends TaskSupport {
protected OIMClient oimClient = null;
 private tcLookupOperationsIntf lookupOps;
 private tcUserOperationsIntf userOper;
 private tcObjectOperationsIntf obj;
 private tcFormInstanceOperationsIntf form;
 private UserManager userManager = null;
public void execute() throws Exception {
Connection connection = null;
try {
EntitlementService provisioningService = Platform.getService(EntitlementService.class);
connection = getConnection();
if (connection != null) {
List<Long> entitlementkeys = getEntitlementKey(connection);
if (entitlementkeys != null) {
for (Long entKey : entitlementkeys) {
boolean ent= provisioningService.deleteEntitlement( entKey );
} else {
} catch (Exception e) {
throw e;
} finally {
if (connection != null) {
connection.close();
private List<Long> getEntitlementKey(Connection connection) throws SQLException {
Statement statement = null;
ResultSet resultSet = null;
List<Long> entKeys = new ArrayList<Long>();
try {
statement = connection.createStatement();
resultSet = statement.executeQuery("select ENT_ASSIGN_KEY,USR_KEY,ENT_LIST_KEY from ENT_ASSIGN where USR_KEY IN (select USR_KEY from USR where USR_Disabled='1')");
if (resultSet != null) {
while (resultSet.next()) {
entKeys.add(resultSet.getLong("ENT_LIST_KEY"));
} catch (SQLException e) {
throw e;
} finally {
if (resultSet != null) {
try {
resultSet.close();
} catch (SQLException e) {
if (statement != null) {
try {
statement.close();
} catch (SQLException e) {
return entKeys;
@Override
public HashMap getAttributes() {
// TODO Auto-generated method stub
return null;
@Override
public void setAttributes() {
// TODO Auto-generated method stub
private Connection getConnection() {
Connection connection = null;
try {
connection = Platform.getOperationalDS().getConnection();
} catch (SQLException e) {
throw new SuperRuntimeException(e);
return connection;
when I am trying test from my local (Eclipse) ,getting below error
Mar 25, 2013 7:30:33 PM org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.springframework.context.support.ClassPathXmlApplicationContext@256ef705: display name [org.springframework.context.support.ClassPathXmlApplicationContext@256ef705]; startup date [Mon Mar 25 19:30:32 IST 2013]; root of context hierarchy
Mar 25, 2013 7:30:33 PM org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource [META-INF/iam-spring-config.xml]
Mar 25, 2013 7:30:33 PM oracle.iam.platform.utils.SpringBeanFactory createBeanFactory
SEVERE: Instantiating Spring Bean Factory Failed.IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
Exception in thread "main" java.lang.ExceptionInInitializerError
 at oracle.iam.platform.Platform.<clinit>(Platform.java:101)
 at RemoveEntitlement.execute(RemoveEntitlement.java:75)
 at RemoveEntitlement.main(RemoveEntitlement.java:66)
Caused by: org.springframework.beans.factory.BeanDefinitionStoreException: IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
 at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:349)
Any Help Appreciated...

Depends upon if the domains are part of the same forest. If the account moves from one domain to another in the same forest then I don't think there is any issue with cross domain entitlement assignment as long as your AD supports people in domain to have group from another domain.
-Bikash

Can I get password for client 000 and user SAP*

Hi Experts,
Can get ur help for getting password for User SAP* for client 000 i.e SAP std. client.
please it's urgent.
Thanks & Regards,
Yogesh

Hi ,
If all the users are locked, they can be unlocked by
a)Try this command at ur sql plus query level
Go to cmd prompt.
Sqlplus /nolog
conn /as sysdba
this will take you to the sqlprompt.
Just execute the earlier commands there.
sqlplus>UPDATE SAP<schema>.usr02 set uflag=0 where mandt=<CLNT NO> and uflag=64; this statement actually unlocks the users of that particular client. So, try for every client in that sap system.
b) You can delete sap* user
Go to cmd prompt.
Sqlplus /nolog
conn /as sysdba
sqlplus>DELETE SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;
Note:-
After doing this restart the system. So, that a new user with the name "sap" gets generated with password "pass". Provided the parameter is set login/no_automatic_user_sapstar= 0 (Automatic user SAP is permitted).
regards,
kanthi

How to prevent user from disabling plugins like censureblock or adblock?

I'm thinking about using censureblock and adblock in classroom in school, but it is easy to disable these plugins. Is there a way to prevent users to disable or delete these plugins?

Hi microspace
you mean add-ons, like censureblock or adblock.
see if this helps : [https://addons.mozilla.org/en-US/firefox/addon/public-fox/ Public Fox - addon]
thank you

User SAP* disable.

Similar Messages

Maybe you are looking for