Change password on SAP Logon message "Password is in exception tables"

[Former Member]

Hi when I try to login sap using sap GUI logon and I type client, user ID and Password before we start login there is Icon " New password " and click and will be coming to change password Ok after we retyping and click ok I have message " Password is in exceptions Tables " always like that.

There's any want can help me to solve this issue,

Thanks and Regards,

Chris

[Former Member]

Try to use a stronger (or weaker) password which is not in USR40.

If no passwords are accepted, then someone may have tried (too much) to range or put a * into USR40. Logon using a connection from SM59 and your own account, go to USR40 and remove the offending entrie(s).

[WolfgangJanzen]

If the effected system has a kernel 7.00 (pl < 56) then <a href="http://service.sap.com/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=943505">SAP Note 943505</a> will resolve the problem. Previously even an empty USR02 entry was causing the described problem (since it was treated as "*" entry).

Regards, Wolfgang

[Former Member]

USR40 is recommended to be maintained with <b>patterns</b> like pass, abc and not individual values. So

try to change to not a familiar one.

[WolfgangJanzen]

Well, table USR40 can contain both, patterns and static values (literals), see <a href="http://service.sap.com/_{form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=2467">SAP Note 2467</a> referencing <a href="http://service.sap.com/}form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=618630">SAP Note 618630</a>

[Former Member]

Thanks Guys, for helping me on this case it helpfull so I'll checked the USR40 tables that you mentions and I found this notes 735356 as well.

once again thanks

Chris

[WolfgangJanzen]

Well, I just do not see how <a href="http://service.sap.com/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=735356">SAP Note 735356</a> is related ...

[Former Member]

Perhaps Chrisna wants to put the special characters into USR40 so that they cannot be included in the password?

SU01 could still include them in the password anyway.

[WolfgangJanzen]

Please have a look on my previous reply: there used to be a bug in the kernel 7.00 which has been fixed.

Yes, the administrator can assign a password which violates the USR40 rule. He will receive a warning which he can ignore (in contrast to the user which will receive an error which he cannot bypass).