User ddic locked

[Former Member]

Hi,

the ddic user is locked in client 001 and we dont know his password neither for sap*. I connected to the oracle DB using:

sqlplus "/as sysdba"

update SAPSR3.USR02 set uflag = 0 where bname ='DDIC' and mandt ='001';

and then I copied the password from client 100 of the user ddic:

update SAPSR3.USR02 set bcode =<PASSWD> where bname ='DDIC' and mandt ='001';

commit;

the passwd is encrypted, so I have just copied from the other user

but when I tried to log on the sap system using user ddic on 001 client using the password of user ddic on client 100, the following message appear:

Name or password incorrect

What did I do wrong? We have ECC 6.0 on Windows and Oracle 10gR1, please I need some advice...

Thanks a lot!

[Former Member]

Hay Alejandro,

have you tried to delete user SAP* and then login with the default SAP* user/password and change ddic's password with SAP* ?

Uri Lifshitz.

[Former Member]

There is an OLD "dirty" trick called user equaliser or ZZRESET.

If you have ABAP and developer access in any client in a system you can upload this abap and it will create the uid you run it form across all clienst in a system, with exactly the same password and the same access you have in eth clinet ypour run it from. it is advised to give yourself SAP_ALL before doing this as it does not copy any custom role. Send me an e-mail and i will send you the source code: <b><removed by moderator></b> Keep it in your toolbox for emergency access reasons to other clients.

[Former Member]

Do I should delete the SAP* user via oracle statements? Will it be created automatically?

[Former Member]

Hi Vega,

Delete the sap* user by following command in the oracle.

Login to oracle as sqlplus /nolog --> connect /as sysdba

execute the command: "delete from SAP<SID>.usr02 where mandt=001"

It will delete the user automatically and then login to the system using SAP* with password 'pass' and then unlock the DDIC user.

Regards,

Ashok

"Award points if it is really helpful"

[Former Member]

Hi friend,

it works! tks a lot!

[Former Member]

Yes that works,...

but with a small difference in MS SQL Servers.. It worked on NW 7.0 ..

the table name in ms sql is <sid>.USR02... and this database is case sensitive...

If it doesnot allow you to login with PASSWORD pass restart the system and then try logging in.. it will work....

[Former Member]

@Ashok Samala

It seems that you are deleting all the users from table usr02 for client 001.

Can't we delete only SAP* entry from the table?