cancel
Showing results for 
Search instead for 
Did you mean: 

Standard users including SAP* or DDIC have default password

Former Member
0 Kudos

Hi,

In our early watch report we are getting the status "Standard users including SAP* or DDIC have default password" with red color, Even when sap* and ddic are having password set other than default.

Please let us know how i can resolve the problem.

Rableen

Accepted Solutions (0)

Answers (8)

Answers (8)

Former Member
0 Kudos

HI,

Please refer to sap note as Jim mentioned.

1610103 - EarlyWatch Alert Report : section Default Password of Standard Users

Kind Regards,

Johan

jimguo
Advisor
Advisor
0 Kudos

Hi,

Pleas review SAP KBA 1610103 about this topic.

Thanks.

Jim

Former Member
0 Kudos

Hi Rableen,

have you resolved your issue. i am also into the same like what you are getting in EWA.

pls update.

Rgds,

Durga.

AbhishekGupta1
Participant
0 Kudos

did you have checked earlywatch user in 066 client?

check below link, I hope this will help you:

http://help.sap.com/saphelp_nw70/helpdata/en/3e/cdaccbedc411d3a6510000e835363f/content.htm

Regards,

Abhi

Former Member
0 Kudos

Hi Rableen,

For SAP* purpose, Need to set parameter as below:

login/no_automatic_user_sapstar = 1

This should be 0

--> To change DDIC password, Need to change the password from OS level as below:

To unlock DDIC:

sqlplus /nolog

conn /as sysdba

update <schema_name>.usr02 set uflag='0' where mandt='client_no' and bname='DDIC';

commit;

(Schema_name is usually SAPR3)

_____________________________________________________________

To change DDIC password:

Suppose you know the password of User - XYZ in this system

select bcode from <schema_name>.usr02 where mandt='client_no' and bname='XYZ';

This will display the bcode  - a long key. This is the encrypted password of user XYZ

Copy this key.

update <schema_name>.usr02 set bcode='key' where mandt='client_no' and bname='DDIC';

commit;

The password of DDIC is same as XYZ now.

Note: Then restart your server, and check it, Let us know as same..

Regards,

Varun.Ch

Former Member
0 Kudos

Hi

I have lock the user sapcpic but still "Standard users including SAP* or DDIC have default password" is coming with red mark in EWA........in all the client sap* and ddic password is changed....

Please suggest where i need to do the changes now.

Rableen

0 Kudos

Hi Rableen,

Most often this alert comes if the Standard user passwords for SAP*, DDIC, etc have been changed, the issue is with user TMSADM, and there should be reference in the alert to a link on

how to check this for TMSADM, so pleae review the recomemendations for

TMSADM.

Standard users passwords need to be changed from the defualt, not reset
to the default.

The report RSUSR003 will show if the default password has not been
changed for all standard users, except TMSADM. However SAP Note 1552894
shows how to update RSUSR003 for showing the status of TMSADM.

I have explained that when the report RSUSR003 does not show any
violation ( of default passwords), then the issue is usually always with
TMSADM. And to check that you would refer to SAP Note 1414256.

This is all in the EWA Alert. You need to follow the recommendations.
For more information refer to SAP KBA 1610103 and the references it
lists.

Thank You.

Regards,

Deepika

abhijeet_singh2
Participant
0 Kudos

For TMSADM ignore .. Do not do anything else will have to maintain fresh password in STMS.

For DDIC .. reset password and do remember it... 

for SAP* .. enable login/no_automatic_user_sapstar =1 in default profile and then reset password.

Never delete any of those 3 user from atleast production system.

Thanks

Abhijeet

Former Member
0 Kudos

Hi,

Please check in which client you are getting this error.

Mostly I feel that you will get this error in your 000 client. Please check that in your EWA report and check it by login to the SAP level

If yes, then change it...

Thanks and Regards,

Vimal

Former Member
0 Kudos

HI,

I have checked in all the client then only i have raised a ticket here.

Rableen