BAPI_USER_CHANGE - any alternative

[#1]

Hi,

I'm using BAPI_USER_CHANGE for reseting a user's pass.

The problem with this function is that it sets an initial pass => in the next logon the user will be prompted to change it.

Is there a way to change this behavior?

If not, do I have any other BAPI alternative?

tx a lot,

s.

[Former Member]

Hi Matt,

thanks for the detailed answer.

I uinderstand SAP point of view here.

I have another question to you:

Is it possible to user ME_USER_CHANGE_PASSWORD instead the SUSR function that you specified?

(When using the .net connector I couldn't find the SUSR in the BAPI functions list)

Is there any major difference between these two?

thanks a lot,

shlom

[Former Member]

and by the way, Matt:

1. where is the trace in which I can see the password content?

2. if I user BAPI_USER_CAHNGE - I won't have this problem? will the password sent encrypted?

tx again.

s.

[Former Member]

Hi,

>Is it possible to user ME_USER_CHANGE_PASSWORD instead the SUSR function that you specified?

I do not know. I am familiar with our discussions on this topic, but I am not a programmer and I am not an expert on BAPIs.

>1. where is the trace in which I can see the password content?

System or user trace, ST05, and dumps, ST22

>2. if I user BAPI_USER_CAHNGE - I won't have this problem? will the password sent encrypted?

I don't think so, but, again, I am not an expert here.

In a nutshell, your method is not recommended and presents serious security risks that should be discussed with the customer before implementing. It is highly recommended to implement SSO solutions instead.

Best Regards,

Matt

[Frank_Buchholz]

>

> 2. if I user BAPI_USER_CHANGE - I won't have this problem? will the password sent encrypted?
> 

Well, the new initial password which is set with BAPI_USER_CHANGE would be visible in traces and dumps, too. However, it gets changed during next dialog logon. Therefore, we might accept the risk in opposite to a longterm risk if a productive password is traced.

(Encryption of the communication channel is possible if you use SNC, Secure Network Communications, but this wouldn't touch the issue about traces and dumps.)

Kind regards

Frank

[Former Member]

Hello,

I am having an issue with BAPI_USER_CHANGE. The client has the users centralized system in 250 and the program i am creating has to change any system password. So, for example, when i try to change system 700 password if i execute the FM it will throw me an error because the password change has to be done in 250, and if I do the password change in 250 it will change the password for 250, not for 700.

Do you know any other BAPI i can use or if i can set the parameters correctly in a different way to use BAPI_USER_CHANGE?

Thanks for any inputs, regards,

Gustavo