Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Communications user password expires

Former Member
0 Kudos

Hi,

The password of our communications user (ZCONTRANS) always expires/deactivated.

How can I set tha password of this particular user not to expire?

We could not chage the login/password_expiration_time parameter because we need dialog users password to expire every 90 days (for audit requirement).

thanks,

kbas

1 ACCEPTED SOLUTION

Bernhard_SAP
Employee
Employee
0 Kudos

HI,

use the usertype 'SYSTEM' instead of usertype 'Communication'. Passwords of 'System'-users do not

expire. (the usertype can be set in SU01->tab 'logondata')

b.rgds, Bernhard

5 REPLIES 5

Bernhard_SAP
Employee
Employee
0 Kudos

HI,

use the usertype 'SYSTEM' instead of usertype 'Communication'. Passwords of 'System'-users do not

expire. (the usertype can be set in SU01->tab 'logondata')

b.rgds, Bernhard

WolfgangJanzen
Product and Topic Expert
Product and Topic Expert

See [SAP Note 622464|https://service.sap.com/sap/support/notes/622464] - I agree with Bernhard: you should change the user type from COMMUNICATION to SYSTEM.

0 Kudos

Many Thanks Bernhard. Poinst also for you Wolfgang.

evgeny_turovsky
Participant
0 Kudos

Hello.

It's not a correct answer in term of security. You should use system user only for internal usage (for instance, if your system calls itself). But if the system was called from external system, you should use communication user and set different security policy for this user through transaction SECPOL.

0 Kudos

Sorry, but that is wrong. Or at least an urban legend type of myth.

COMMUNICATION type users are obsolete and should not be used anymore. Also a SECPOL will not help to protect you against the users changing it's own password or issuing a logon ticket to the wrong client.

Only SYSTEM type users should be used.

Cheers,

Julius