Skip to Content
author's profile photo Former Member
Former Member

J2EE_ADMIN gets locked when accessing SAP J2EE Engine - System info

Dear SAP gurus,

I tried to patch the Java stack of my SAP ERP system using JSPM but it got stopped with the following error:

"Cannot login to the SAP J2EE Engine using user and password as provided in the Filesystem Secure Store. Enter valid login information in the Filesystem Secure Store using the SAP J2EE Engine Config Tool. For more information, see SAP note 701654."

I followed the note but unfortunately the solution provided did not work.

This is when I realized that J2EE_ADMIN gets locked when I access to SAP J2EE Engine - System info. I access into SAP ABAP Stack (java client) using J2EE_ADMIN without problems but I cannot access to the following link:

http://<SAP host>:50000/monitoring/SystemInfo

I have to go back to ABAP (su01) in order to unlock J2EE_ADMIN after using it to access the above link.

The only logs I could find are on /usr/sap/<SID>/DVEBMGS00/work/dev_w0

***LOG US1=> Login, Wrong Password (J2EE_ADMIN ) [sign.c 4539]

Do you guys have any idea how can I find the reason why J2EE_ADMIN is getting locked continuously?

Thanks in advance, Marc

Add a comment
10|10000 characters needed characters exceeded

Related questions

4 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Mar 26, 2012 at 04:57 PM

    Hi,

    Check whether the J2ee_admin password which is provided on configtool and the password is the same.

    None of the RFC or JCO should contain j2ee_admin for the login .

    If you found no issues with the above, try to change the password make sure you change in Configtool also.

    Thanks,

    Subhash.G

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Thanks Subhash,

      >1)Are you sure the client copy was done from 001 client where j2ee_admin user will come from?

      no client copy was done.

      >2) Restart the cluster node after password reset in configtool from jcmon for password to take effect .

      I already tried that but unfortunately did not work.

      >3) Sap* is the emergency user where you can activate it and login to VA , you need to restart the instance for >that .

      Why do i need the SAP* user?I just want to discover what i locking the j2ee user...

  • author's profile photo Former Member
    Former Member
    Posted on Mar 27, 2012 at 07:32 AM

    Hi,

    Try to find out if you are using J2EE_ADMIN in some RFC's. You can check this in RFCDES table.

    Also try to find the audit logs for the user.

    If still you are not able to find out then you can try using some other admin user id in secure store.

    Regards,

    Nirmal.K

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      I ran an audit log for j2ee_admin user and I got the following logs after unlocking j2ee_admin:

      27.03.2012 13:26:00 J2EE_ADMIN <host>
      SAPMSSY1 RFC/CPIC Logon Failed, Reason = 1, Type = R 27.03.2012 13:27:00 J2EE_ADMIN <host>
      SAPMSSY1 Password check failed for user J2EE_ADMIN in client 100 27.03.2012 13:27:00 J2EE_ADMIN <host>
      SAPMSSY1 RFC/CPIC Logon Failed, Reason = 1, Type = R 27.03.2012 13:28:00 J2EE_ADMIN <host>
      SAPMSSY1 Password check failed for user J2EE_ADMIN in client 100 27.03.2012 13:28:00 J2EE_ADMIN <host>
      SAPMSSY1 RFC/CPIC Logon Failed, Reason = 1, Type = R

      It points that there is an RFC that is being executed every min with Incorrect logon data (client, user name, password) but I couldnt figure out where this comes from.

      Any suggestions?

      Thanks in advance, Marc

  • author's profile photo Former Member
    Former Member
    Posted on Mar 27, 2012 at 07:44 AM

    Hi Marc,

    To be more specific, see if you have specified the password in Global Configuration under point 3.

    Br,

    Venky

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Dec 08, 2012 at 12:29 PM
    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.