SM20 audit log - RFC/CPIC logon failed errors

[sravankumar319]

Hello,

In SM20 we have a lot of alerts RFC/CPIC logon failed, reason=24, type=R, method=T user sapsys, client 000, program SAPMSSY1, that are generating very often, every hour we have 2, 3 alerts.

Upon checking the note 320991 - Error codes during logon (list) - SAP ONE Support Launchpad

We got to know that the issue with the parameter login/ticket_expiration_time

and in our system it is set to the default value 8:00 hours

Can you help me to solve this issue?

Regards,

Sravan

[Former Member]

Greetings sravankumar319!

As you may see in the note 2469428 - Session or User timeout setting is not working for Fiori Launchpad when using MYSAPSSO2, the login/ticket_expiration_time parameter only influence SSO ticket, it is independent from the time of inactivity of the user.

I would recommend deactivating automatic log off, by deleting the rdisp/gui_auto_logout parameter from the profile(s) or set the value '0'.

Go to Profile Maintenance by choosing Tools --> CCMS --> Configuration --> Profile Maintenance or the transaction RZ11.

Remember to restart the instance.

Beyond that, I would look into technical users / system users that might be connecting through RFCs and trace them, if you find any.

Kindly advise if you were to address your topic.

Cheers,

Luis

[sravankumar319]

Hi Luis,

Thank you for the response,

we cannot change the rdisp/gui_auto_logout parameters as per our company security policy.

and more over this error is only seen in Production environment.

This is a BW system connected to BO.

Regards,

Sravan.

[t_linsenbreit]

@sravankumar319: Did you find any solution to this problem?