Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Locked User ID

Former Member
0 Likes
733

Hi,

I have a comm ID that's getting locked and not sure who or what is causing it. Change document show locked due to incorrect logon. Is there a way to find out what service or even the IP address of the service that's causing the ID to lock. I'm thinking SM20 is the way to go but not familiar with this t/code.Your help is greatly appreciate it.

-Wes

Hi,

I have a comm ID that's getting locked and not sure who or what is causing it. Change document show locked due to incorrect logon. Is there a way to find out what service or even the IP address of the service that's causing the ID to lock. I'm thinking SM20 is the way to go but not familiar with this t/code.Your help is greatly appreciate it.

-Wes

4 REPLIES 4
Read only

Former Member
0 Likes
703

Hi Wes,

I believe that the original password of this id might have been encrypted some where in any RFCs or programs which are being used to connect to other systems, and this password might have been reset recently by some one and might have not been changed here.This could be one reason as the system might be still logging with the old password.Please check in this way.

Contact the users who have an idea about this id, they could help you in knowing if any recent changes has happened to this id.

Hope this helps.

Regards,

Nanda

Read only

Former Member
0 Likes
703

I would activate a dynamic filter for the user in SM19 (can be changed without restart) and set an alert for any logon attempt from it.

Also take a look in ST03N at the RFC Server Profiles on the day the user ID was locked.

Cheers,

Julius

Read only

sdipanjan
Active Contributor
0 Likes
703

Did u save the password by clicking the "save password" option? If yes, then after Unlocking the id, please make sure that the password in the interface is same as the last changed password.

Regards,

Dipanjan

Read only

Former Member
0 Likes
703

These type of problems are caused by people knowing the passwords in the first place, and re-using them for other "use cases" like "Save Password" options on the client side and immortalizing them in coding which deprives you of easy mainteance in the log run and cardinality of connections (or domain groups of connections at most).

Ideally, you should not even need to know the password, which protects you from doing such "re-use" mistakes with it.

This is also how some config wizards work - they setup the user and the connection to it with a cryptic generated password which will work IF you instruct the system to generate one which is compliant with your rules.

I sometimes convert all lower-case characters to UPPER-CASE as well to mimic downward compatibility, but would not be able to remember such a password normally just from having seen it for a few seconds.

But you can only do this if you protect the password, and you can only do that if you respect cardinality of connections.

Cheers,

Julius