topic Re: Logon data - user passord in Application Development and Automation Discussions

Logon data - user passord

Former Member — Wed, 29 Jun 2005 17:34:20 GMT

Hi,

Can anyone tell me about how to have access to logon data, such as passwords in order to develop user validation?

Thanks,

Bruno

Re: Logon data - user passord

Former Member — Wed, 29 Jun 2005 17:41:34 GMT

The password and the data of connection must give the administrators of the system.

Ronald Mundo

Re: Logon data - user passord

RichHeilman — Wed, 29 Jun 2005 17:52:52 GMT

Bruno, this field is found in one of the USR* tables. It is encrypted. There are some encrption/decryption function modules, but I don't think that they work on this particular field. I believe SAP has engineered it this way. Just think, If you could crack a payroll supervisor's password, You could get in to payroll records and find that the developer beside you is making twice as much, and knows half as much as you. This is a security issue. I am sure SAP has taking measures.

Regards,

Rich Heilman

Re: Logon data - user passord

ssimsekler — Wed, 29 Jun 2005 19:24:34 GMT

Hi Bruno

The user password is stored in "USR02-BCODE" in encrypted format. The encryption does take place in an outer layer. Hence, it is not possible to retrieve one's password. However, it is possible to copy the content of this field to another client making the passwords for each client the same.

Also, you can initialize one's password from the transaction SU01.

Regards

*--Serdar <a href="https://www.sdn.sap.com:443http://www.sdn.sap.comhttp://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.sdn.businesscard.sdnbusinesscard?u=qbk%2bsag%2bjiw%3d">[ BC ]</a>