SAP* lock

[Former Member]

Hi All,

I had accidentally tried to many attempt to access client 000 with SAP. Now, the account is locked and i can no longer use this account. Can anyone advise me how to unlock or make the SAP user valid ? I am using db2.

Regards

Kim

[former_member196060]

Hi Lauran,

If you just want to unlock rather than reset the password for SAP*, the simplest way is

1. goto DB and change the UFLG to 0 for MANDT = 200 and BNAME = SAP*

2. restart NW or just execute $sync in ST02

Regards,

Hengye

[former_member190272]

Hi lauran

Login SQL Pluse and delete sap* table usr02 .After restart system it will automatically create new password.

Try login user name

Sap* Passward pass or 06071992.

if u can login DDIC u can change sap* password.

Awards point if helpful

Thanks & Regards

Pankaj Kumar

[former_member187702]

Hi Lauren

Please check this thread

Hope it helps

Regards

[Former Member]

Hi Rajat,

I am referring to ECC client 000 instead of the Java. However, your information is useful for me in the future if i encounter this problem. Many thanks. Do you have any solution for ECC as well ?

Regards

[Former Member]

Hi Lauran

I don't see this one was answered for your problem in DB2

here are steps you can use to fix SAP* login issue

Step-1

First login to DB2

Use Following Command which will delete SAP* from 000 client

db2 => delete from SAPR3.USR02 where BNAME = 'SAP*' and MANDT = '000'

DB20000I  The SQL command completed successfully.

db2 => commit

DB20000I  The SQL command completed successfully.

Step-2

Make sure following parameter has a value 0

login/no_automatic_user_sapstar = 0

If not then use RZ10 to change it and it is better to keep in  DEFAULT profile which needs a restart of SAP itself

After these two steps are done , you can use SAP* and password PASS to login to 000 client or any client you deleted in STEP-1

Hope this helps

Thanks

Rabi

[Former Member]

Just an update in STEP-2

If you are not able to login to SAP at SAP level from any client then you can change the parameter

login/no_automatic_user_sapstar = 0   at OS level which you miust be aware of it as a BASIS

[Former Member]

Hi Lauran

) Start the Config Tool.

2) In the tree, navigate to Global server configuration -> services -> com.sap.security.core.ume.service and the list of UME properties appears.

3) Activate the SAP* user by setting the following properties:

ume.superadmin.activated - true (This activates the SAP* user)

ume.superadmin.password - <password> (This defines the password for the SAP* user)

4) Restart the WebAS. The SAP* user is now activated. While it is activated, all other users are deactivated. You can only log on with the SAP* user.

5) Go to http://<IPAddress>:5<PORT>00/useradmin and click on Identity Management button

6) Select the user Administrator from the source UME Store and click on unlock button. (For other users, the source may change)

7) When you are done, deactivate the SAP* user again by doing the step 2 and setting the property ume.superadmin.activated to false.

😎 Restart the Java application server.

You can set the new password and use SAP*.

Reward points if usefull

[Former Member]

Hi,

But I am using db2, the link is referring to SQL

Regards

[ankur_garg5]

Hi Launran,

See if the following thread helps:

Bye

Ankur

Reward points if it helps!!