Logon to Firefighter is not possible after incorrect logon

[former_member227293]

Hello,

we are facing some kind of error in Firefighter logon. User tried logon on FFID and logon was not completed because some problem with FFID. Then he pressed refresh button in GRAC_SPM transaction. But the FFID was not released and it seem to be locked.

There is no locks for the user in satelite system in SM12 and no record of logged FFID in SM04.

There is no locks for the user in GRC system in SM12. There is lock in table GRACFFUSER for the user and particular FFID. During this issue run the sync job with program GRAC_SPM_LOG_SYNC_UPDATE and there was lock on table GRACFFREPMAPP.

Did somebody faced similar issue?

Regards,

Jakub

[Colleen · Accepted solution]

Hi Jakub

if you have confirmed the AL08 (covers SM04 for multiple applications servers), can you attempt to remove the FF Id assignment from the user and then re-add it - see if this releases it. It shouldn't be the normal approach to fixing but might clear the lock

If not, you may need to look at debugging the release functionality to see why it can't free the "lock"

Regards

Colleen

[former_member227293 · Accepted solution]

Hi Colleen,

in AL08/SM04 is FFID not listed because the logon process is interrupted before I'm actually logged into satelite system via Firefighter.

Regards,

Jakub

[former_member192837 · Accepted solution]

Hi, 1. Now you log into satellite /Plugin system  system 2. execute Al08 3. search for FF id you facing issue 4. and kill the session. 5. then try GRAC_SPM from GRC central system and check. Same way we have resolve issue. As Nishant and Colleen mentioned above. Regards Dilip

[former_member227293]

Hello,

@Collen: our colleage tried the release button he also tried the refresh button. But without any success. The FFID remains still locked.

@Radhu: this note is not related to our system, we run SAP GRC 10.0 on SP12.

Regards,

Jakub

[Former Member]

Hi Jakub,

You are correct. The previous note is not applicable for SP12. However, refer the note 1290018 - Firefighter ID is locked in Superuser Privilege Management. It gives more detailed explanation of this behavior.

Regards,

Raghu Boddu

[former_member227293]

Hi Raghu,

the problem is that I dont see any active session of FFID in SM04.

Regards,

Jakub

[Former Member]

Hi jakub,

We got exactly same issue during one of the project,:

Tried SM04 - didn't help.

Tried SM12 - didn't help.

Asked user to click unlock - didn't help.

If I recall correctly BASIS contact have done the work, by using AL08. Please recheck AL08 while searching entries try to find both FF I.D and User using search option.

It worked in my case, not sure of same applied. (Can see collen updated about AL08 already, request you to cross verify once more).

Regards,

Nishant

[Former Member]

Hi Jakub,

This is a known issue. You may refer SAP Note # 1699468 - EAM: Locked Firefighter IDs not getting released after use

Even though the issue that you are experiencing is a bit different, this note still applies. Let me know after applying it.

Best Regards,

Raghu Boddu

[Colleen]

Hi Jakub

On the GRC_SPM launchpad there is an icon at the end to release a session. I think Authorizations may be required. Have you tried to press that since you have confirmed Ids aren't appearing in SM04 (AL08 if multiple app servers)?

Regards

Colleen