UME - user authentication failed

[Former Member]

Hi!

Im trying to launch the UME administration console. Regardless of my input, I get always the message "user authentication failed".

I use credentials of administrative windows 2003 users, which belong to the SAP-Group's. Where is my mistake? Where can i seek for more information?

[Former Member]

Hello Martin,

do you mean http://<hostname>:5<instance_no>00/useradmin when you talk about UME administration console, or do you mean the Security service you can access via Visual Administrator?

Regards,

Cornelia

[Former Member]

Hi Cornelia,

thanks for your question.

I had used the http administration console.

In the meantime I solved my issue with the emergency user <i>SAP*.</i> I set a new password for the user Administrator und created an additional user 'martin' :-). So my task will be continued.

But the use of the <i>SAP*-</i>user doesn't answer my first question. Perhaps you have a solution for the first question?

Regards,

Martin

[Former Member]

Hello Martin,

SAP* is a good solution - that would have been my next question.

As you said you reset the password of the Administrator User: if you store the Administrator in the secure store and then change its password, you also have to change it in the secure store - otherwise, there will be a lot of strange errors like services which cannot be started or maybe the authorization problem you had.

By the way: be aware if you change the entries in secure store you have to restart the system...

Best regards,

Cornelia

[yonko_yonchev]

Hi Martin,

most likely you entered a wrong user id/password combination and the J2EE Engine Administrator user eventually got locked. Was the UME administration console the only thing you weren't able to log on to?

Activating the SAP* user can help you unlock the Administrator, but it requires a restart to activate it and a restart to deactivate it....It's easier to have 2 Administrator users in case one gets locked. You've also come to this conclusion I think...However, make sure that the 'martin' user is a member of the Administrators group or has a UME role with UME action Manage_all assigned.

Hope this helps,

Yonko

[Former Member]

Hi Martin,

Can you please check whether the user is got locked, if locked unlock the user J2ee_admin in the relevant client and try.

Regards,

Shyam.

[Former Member]

Merci beaucoup for your help.

Regards,

Martin

[Former Member]

Hi,

If you forgot or lock "Administrator or J2EE_ADMIN" password just follow below steps:

<b>STEP-1: Enable "SAP*"</b>

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = TRUE"

4.Double-click on the property "ume.superadmin.password=<Enter any password ex: abc123>"

5.Save.

6.Restart the engine.

<b>STEP-2: Login with "SAP*" into portal</b>

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / password as" SAP* / <password ex: abc123>"

3. Search for "Administrator" user

4. Reset or change password for "Administrtor"

<b>STEP-3: Disable "SAP*"</b>

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = FALSE"

4.Save.

5. Restart the engine.

<b>STEP-4: Login with "Administrator"</b>

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / Password as "Administrator / <password>

3. it will ask change password just change it.