Debug wrong user authentication ERR_USRFAIL (-24950)

[sitb]

Hi Everyone,

I seem to have some database GUI user or script that constantly tries to log into one of our databases with wrong credentials. This leads to a:

ERR     -24950 DBMSrv   ERR_USRFAIL: User authorization failed
INF          2 DBMSrvCo A DBM Server client connection was released (client process has process ID 12476 on computer 10.2.1.1).

Since this connection is over a NATed IP-Address I can neither easily see the originating machine nor which user account has been tried.

I already tried to raise the Global Listner's (XSERVER) debug level to at least see the user account tried but failed, since the "sdbgloballistener_hostname.prt" file basically contains the same information or even less as above (even misses the client's process id).

Before I do start to put heavy network level debug onto my firewalls I wanted to ask, if there is any way to maybe make dbm.prt or other logs more verbose?

thx,
\urs

[birgit_malik]

Dear customer, you could use DBM command dbm_trace: dbm_trace | SAP Help Portal

dbm_trace CommandHandling on

You find the traces in wrk directoy: dbmsrv_<pid>.trace, one file for every dbmsrv process. choose this one with your error ERR_USRFAIL. Example:

2023-11-01 11:10:35,752000 [A79] 19820 [DBMSrv_MainThread][CommandHandling]: Analyzing DBM command 'user_getchallenge DBM EXTERNAL…

The first token after user_getchallenge is theused user.

After this use

dbm_trace CommandHandling off

to deactivate the trace.

Regards Birgit Malik IMs SAP MaxDB