Skip to Content
avatar image
Former Member

Standard users including SAP* or DDIC have default password

Hi,

In our early watch report we are getting the status "Standard users including SAP* or DDIC have default password" with red color, Even when sap* and ddic are having password set other than default.

Please let us know how i can resolve the problem.

Rableen

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

8 Answers

  • Mar 14, 2013 at 09:06 AM

    Hi Rableen,

    Most often this alert comes if the Standard user passwords for SAP*, DDIC, etc have been changed, the issue is with user TMSADM, and there should be reference in the alert to a link on

    how to check this for TMSADM, so pleae review the recomemendations for

    TMSADM.

    Standard users passwords need to be changed from the defualt, not reset
    to the default.

    The report RSUSR003 will show if the default password has not been
    changed for all standard users, except TMSADM. However SAP Note 1552894
    shows how to update RSUSR003 for showing the status of TMSADM.

    I have explained that when the report RSUSR003 does not show any
    violation ( of default passwords), then the issue is usually always with
    TMSADM. And to check that you would refer to SAP Note 1414256.

    This is all in the EWA Alert. You need to follow the recommendations.
    For more information refer to SAP KBA 1610103 and the references it
    lists.

    Thank You.

    Regards,

    Deepika

    Add comment
    10|10000 characters needed characters exceeded

    • For TMSADM ignore .. Do not do anything else will have to maintain fresh password in STMS.

      For DDIC .. reset password and do remember it...

      for SAP* .. enable login/no_automatic_user_sapstar =1 in default profile and then reset password.

      Never delete any of those 3 user from atleast production system.

      Thanks

      Abhijeet

  • avatar image
    Former Member
    Mar 14, 2013 at 08:21 AM

    Hi,

    Please check in which client you are getting this error.

    Mostly I feel that you will get this error in your 000 client. Please check that in your EWA report and check it by login to the SAP level

    If yes, then change it...

    Thanks and Regards,

    Vimal

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 20, 2013 at 06:38 AM

    Hi

    I have lock the user sapcpic but still "Standard users including SAP* or DDIC have default password" is coming with red mark in EWA........in all the client sap* and ddic password is changed....

    Please suggest where i need to do the changes now.

    Rableen

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 22, 2013 at 06:10 AM

    Hi Rableen,

    For SAP* purpose, Need to set parameter as below:

    login/no_automatic_user_sapstar = 1

    This should be 0

    --> To change DDIC password, Need to change the password from OS level as below:

    To unlock DDIC:

    sqlplus /nolog

    conn /as sysdba

    update <schema_name>.usr02 set uflag='0' where mandt='client_no' and bname='DDIC';

    commit;

    (Schema_name is usually SAPR3)

    _____________________________________________________________

    To change DDIC password:

    Suppose you know the password of User - XYZ in this system

    select bcode from <schema_name>.usr02 where mandt='client_no' and bname='XYZ';

    This will display the bcode - a long key. This is the encrypted password of user XYZ

    Copy this key.

    update <schema_name>.usr02 set bcode='key' where mandt='client_no' and bname='DDIC';

    commit;

    The password of DDIC is same as XYZ now.

    Note: Then restart your server, and check it, Let us know as same..

    Regards,

    Varun.Ch

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 22, 2013 at 08:07 PM

    did you have checked earlywatch user in 066 client?

    check below link, I hope this will help you:

    http://help.sap.com/saphelp_nw70/helpdata/en/3e/cdaccbedc411d3a6510000e835363f/content.htm

    Regards,

    Abhi

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Apr 04, 2013 at 09:31 AM

    Hi Rableen,

    have you resolved your issue. i am also into the same like what you are getting in EWA.

    pls update.

    Rgds,

    Durga.

    Add comment
    10|10000 characters needed characters exceeded

  • Apr 11, 2013 at 02:54 AM

    Hi,

    Pleas review SAP KBA 1610103 about this topic.

    Thanks.

    Jim

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    May 13, 2013 at 12:17 PM

    HI,

    Please refer to sap note as Jim mentioned.

    1610103 - EarlyWatch Alert Report : section Default Password of Standard Users

    Kind Regards,

    Johan

    Add comment
    10|10000 characters needed characters exceeded