Question Re: SAP OS users password policy for ABAP and JAVA systems in Technology Q&A

SAP OS users password policy for ABAP and JAVA systems

SAPSupport — Mon, 30 Jan 2023 09:01:35 GMT

Hi SAP,

1. Account lockouts after 3 failed attempts for ora<sid> and <sid>adm users on Solaris OS. Will there be any impact on DB and app operations?

2. <sid>admin and orasid can we use the special character for strong password like @,!,%,$ etc as i know earlier <sid>adm user has special character then during SAP upgrade it was creating problem for special character, please suggest.

3. Password change after certain time, is it allowed for these DB and SAP users? if we forgot to change <sis>adm then many be backup will fail, or <ora<sid> case log will not ship to DR site as we are using brtools.

Please suggest the SAP best practice for setting the password policy for OS users in SAP ABAP and JAVA systems

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

Re: SAP OS users password policy for ABAP and JAVA systems

SAPSupport — Mon, 30 Jan 2023 09:01:39 GMT

1. ora<sid> is the database admin account for oracle, <sid>adm is the sap admin account, please make sure these two OS users are working fine, not locked.

2. generally, there is no restrict for using special character in password. If there is restrict for the password setting during upgrade, please consult BC-UPG component.

3. <sid>adm and ora<sid> are OS users, not DB user. it's allowed to change the user password. OS user password change cannot affect DR log shipping or database backup.

Re: SAP OS users password policy for ABAP and JAVA systems

Johan_sapbasis — Tue, 31 Jan 2023 07:29:47 GMT

Hi,

I think this is the note you were talking about.

1534597 - Using such special characters as "@" in a password

I know in windows it can cause your system to stop working if pass fails. In Linux I have not tested.

Take a dev system after hours lock it on purpose with incorrect attempts and confirm behaviour.

Real world test is best here.

Kind Regards,

Johan