sap* is not in database but still able to login

[Former Member]

Hello All,

I have one query regarding user sap*.

I deleted sap* from usr02 and changed parameter

login/no_automatic_user_sapstar bet set to 0.

then tried login by sap*/pass i cud.

But from where it is taking sap*/password for it??/

Thanks in advance

[stefan_koehler · Accepted solution]

Hello Anu,

the SAP* user is hard coded in the sap kernel.

If the user does not exists in the table USR02, then the default password is valid.

Regards

Stefan

[Former Member · Accepted solution]

Hello Stefan,

Thanks for the replay.

But what do u mean by it is hard coded in sap kernel.

Also if sap* is there in usr02 and we know the password then can we change the parameter and login by sap* user.

Thanks,

Anu.

[debasissahoo · Accepted solution]

Hi,

But what do u mean by it is hard coded in sap kernel.

That means if SAP* is not in the database, and the parameter is set to 0, then SAP* which has been programmed in the executables of SAP become active and pass is the hardcoded password of this SAP* user.

Also if sap* is there in usr02 and we know the password then can we change the parameter and login by sap* user.

If SAP* is in the USR02, even if you change the parameter to 0, still you wont be possible to login with sap*/pass. as database user is still active, it reads the table first and try to login with the existing password.

Regards,

Debasis.

[stefan_koehler · Accepted solution]

Hello Anu,

please check the following notes:

• #2383 : Explanation about SAP* user (and how it works with the user master records)

• #8852 : Default Password for SAP*

• # 68048: How does the profil parameter login/no_automatic_user_sapstar work

Regards

Stefan

[Former Member]

Hi Anu,

Take a example..Normally it is recommended that do a client refresh from SAP* user only. Suppose we have changed the password and our security administrator has given no access to this user. So at that time we can delete that user. And after that we can use that login with the sap* default password with full access.

If the user will be there in USR02. than it will accept password from that table and if the user doesn't exists it will run it from kernel.

Thanks,

Bhanu Pratap Singh