I am unable to log in with SAP* or DDIC user passwords

[mmshareef]

I have created a new client (787) and performed a local client copy from client 000 using the profile SAP_ALL. After the copy was completed, I am unable to log in with SAP* or DDIC user passwords. Could anyone please guide me through resolving this issue?

I am new to SAP BASIS, and we are running on Windows ECC 6.0 with Sybase DB.

Any help would be appreciated!

Faiyaz

[Sandra_Rossi]

Can you connect with SAP* or DDIC in client 000? What user did you use in client 000?

[Sandra_Rossi]

Log in with the same user as the one you have used in 000 (SAP_ALL copies all user master data and roles, including passwords).

[Gavin_G]

Hi @mmshareef 

For SAP*:

- login/no_automatic_user_sapstar must be set to 0

- there must be no sap* user record to use the default password - if there is you need to know the password assigned to the sap* user

Some useful links on the subject

Note 2383 - Documentation: description of "super user" SAP* 

Note 68048 - Deactivating the automatic SAP* user 

Activating Automatic sap* user 

Profile Parameters for Logon and Password (Login Parameters) 

I hope this helps

Gavin

[Sandra_Rossi]

So, this solution requires to delete the SAP* user, which leads to the latest situation (Sybase authorization to run an SQL statement).

[Gavin_G]

@Sandra_Rossi,

login/no_automatic_user_sapstar need to be disabled to log in as sap*

If a sap* user was created manually then that password is required to log in - the default password will not work

The SQL error is due to the the user executing the SQL command  not having sufficient permission at the database level - it's not SAP related

[mmshareef]

Hello Gavin , thank you for your support once again , unfortunetly i can see the provided solution is for SQL here i have SYBASE DB

[Gavin_G]

Hi @mmshareef 

The link @S_Sriram supplied is comprehensive and the sql is not database dependent. All that will change is the tool you use to connect to the database to run the sql. There should be a Sybase command line utility to connect to the database for this scenario.

The actions you need to take

• check the SAP parameter is set correctly. A restart of SAP  is required for it to take effect 
• use sql to check DDIC is not locked - you need to use a user with access to your SAP schema
• OR remove the sap* user so that you can use the default sap* password 

Perhaps it is appropriate to mention that under normal circumstances you shouldn’t directly update n SAP database.

Gavin

[Sandra_Rossi]

For Sybase ASE, solution here to unlock the user: How to unlock users using sql console on SAP Netwe... - SAP Community. In short:

1.

isql -USAPSR3 -X -SNPL

2.

1> update USR02 set UFLAG=0 where BNAME='SAP*' and MANDT='000'
2> GO
(1 row affected)

SAP* user in client 000 is now unlocked.

[mmshareef]

Not working , it was SAP* , any steps to unlock the user from DB level ?

[Sandra_Rossi]

UFLAG=0 means user unlocked: Update USR02 set UFLAG = 0 where MANDT = '000' AND BNAME = 'SAP*'

[S_Sriram]

Hi 

Just follow the steps mentioned in the blog to unlock the user id and set the new password for DDIC using SAP* logon.

https://community.sap.com/t5/technology-blogs-by-members/how-to-unlock-sap-user-in-ms-sql-database/b...

Regards

SS

[mmshareef]

Hello Sir, thank you for sharing me the link , but we are on SYBASE database do u have any steps to login into SYBASE ?

[mmshareef]

No , i cannot login to 000 as well , it says too many failed attempts

[S_Sriram]

Hi Shareef, Check this thread, https://community.sap.com/t5/technology-q-a/how-to-unlock-ddic-sap-user-in-000-client-sybase-databas...

[mmshareef]

(1 row affected) 1> Select top 1 * from SAPSR3.USR02 2> go Msg 10330, Level 14, State 1: Server 'AJD', Line 1: SELECT permission denied on object USR02, database AJD, owner SAPSR3 1> Select * from SAPSR3.USR02 where BNAME=’SAP*’ 2> go Msg 10330, Level 14, State 1: Server 'AJD', Line 1: SELECT permission denied on object USR02, database AJD, owner SAPSR3 1> use master 2> go 1> sp_db_name() 2> go Msg 102, Level 15, State 181: Server 'AJD', Line 1: Incorrect syntax near ')'. 1> select db_name() 2> go ------------------------------ master (1 row affected) 1> select db_name() 2> go ------------------------------ master (1 row affected) 1> use AJD 2> go 1> select db_name() 2> go ------------------------------ AJD (1 row affected) 1> select top 1 * from SAPSR3.USR02 2> go Msg 10330, Level 14, State 1: Server 'AJD', Line 1: SELECT permission denied on object USR02, database AJD, owner SAPSR3

[S_Sriram]

Hi Shareef, try to logon SIDADM or DB admin userid

[Sandra_Rossi]

The error message says "owner SAPSR3" so if you login with database user SAPSR3 it should work (isql -USAPSR3 -SNPL -X)

[Sandra_Rossi]

I just tried the link given by @S_Sriram on my ABAP/Sybase system, it works well. What is your issue? Also the same answer here: https://community.sap.com/t5/technology-blogs-by-members/how-to-unlock-users-using-sql-console-on-sa....