ISEC Implementation

[Former Member]

Hi ... In the company they are planning to implement an standard security called "ISEC" on the SAPsystems. Our SAP systems mainly are an ECC 6.0 SAP systems on LINUX SLES 10 SP2 with DB2 9.1 LUW

The rules that they want to implement are:

1) For the database administration user "db2SID" the rule is about to forze the password expiration every "x" time

2) For the SAP Instance user "SIDadm" the rule is the same that issue 1

3) For the ABAP Database Connect User "sapSID" the rule is to eliminate their logon for the operating system and left their password never expired.

My question is about if those kind of rules could be affect the SAP systems 's layers communication (Operating system, database,sap instance) and provoke a system broken

Thanks so much for your time and support

Regards

[sdipanjan]

Hi,

If a automated notification is not set and continuous monitoring of the expiration is done then make sure that those users are taken cared before they expire. Otherwise when ever an emergency situation will occur and BASIS team need to login with them they won't be able to do at that time of emergency.

Regards,

Dipanjan

[Former Member]

Thanks Dipanjan for your time

But the SAP System's layers (operating system, database and sap instance) wouldn´t be affected including ? (between them about their internal communication)

I remember when we installed the ECC systems during the process we defined those users and their passwords except for the "sapSID" password's user.

Regards

[mvoros]

Hi,

check [SAP documentation|http://help.sap.com/saphelp_nw04/helpdata/en/aa/1dc8d8f0fa11d3a6510000e835363f/frameset.htm] which describes how to change password for each user. Program dscdb6up handles everything for you. It updates user password everywhere simultaneously.

Cheers

[Former Member]

Thanks so much ... It was the correct information . I'm applying it

Regards