2005 Jun 29 6:34 PM
Hi,
Can anyone tell me about how to have access to logon data, such as passwords in order to develop user validation?
Thanks,
Bruno
2005 Jun 29 6:52 PM
Bruno, this field is found in one of the USR* tables. It is encrypted. There are some encrption/decryption function modules, but I don't think that they work on this particular field. I believe SAP has engineered it this way. Just think, If you could crack a payroll supervisor's password, You could get in to payroll records and find that the developer beside you is making twice as much, and knows half as much as you. This is a security issue. I am sure SAP has taking measures.
Regards,
Rich Heilman
Bruno, this field is found in one of the USR* tables. It is encrypted. There are some encrption/decryption function modules, but I don't think that they work on this particular field. I believe SAP has engineered it this way. Just think, If you could crack a payroll supervisor's password, You could get in to payroll records and find that the developer beside you is making twice as much, and knows half as much as you. This is a security issue. I am sure SAP has taking measures.
Regards,
Rich Heilman
2005 Jun 29 6:41 PM
The password and the data of connection must give the administrators of the system.
Ronald Mundo
2005 Jun 29 6:52 PM
Bruno, this field is found in one of the USR* tables. It is encrypted. There are some encrption/decryption function modules, but I don't think that they work on this particular field. I believe SAP has engineered it this way. Just think, If you could crack a payroll supervisor's password, You could get in to payroll records and find that the developer beside you is making twice as much, and knows half as much as you. This is a security issue. I am sure SAP has taking measures.
Regards,
Rich Heilman
2005 Jun 29 8:24 PM
Hi Bruno
The user password is stored in "<b>USR02-BCODE</b>" in <u>encrypted format</u>. The encryption does take place in an outer layer. Hence, it is not possible to retrieve one's password. However, it is possible to copy the content of this field to another client making the passwords for each client the same.
Also, you can initialize one's password from the transaction <b>SU01</b>.
Regards
*--Serdar <a href="https://www.sdn.sap.com:443http://www.sdn.sap.comhttp://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.sdn.businesscard.sdnbusinesscard?u=qbk%2bsag%2bjiw%3d">[ BC ]</a>
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |