what tries to log on as DDIC....?

[Former Member]

Hi all,

I'm facing the problem that something tries to logon as DDIC in client 000 every few minutes.

As the PW is wrong DDIC is locked after three attempts.

There is nothing helpful in the syslog. I've already checked all incoming RFC connections but didn't find anything helpful.

Currently I run a trace in ST01 but no info yet.

Has anyone an idea how to find out where these logins come from? It's not very funny to run a EhP installation and unlock DDIC every three minutes 😞

Cheers,

Helmut

[former_member188883]

Hi Helmut,

It looks like DDIC user has been maintained in an RFC destination from another SAP system.

As the password is not synchronized in the RFC destination, whenever other SAP system tries to establish a connection it fails and results into DDIC user being locked.

More details of this issue could be found in SM21 logs.

Hope this helps.

Regards,

Deepak Kori

[Former Member]

Hi Helmut,

Do you have any jobs running as userid DDIC which could do this?  Especially from your current production client?

Regards,

Graham

[Former Member]

Hi,

Perhaps activating an SM19 audit log for the user would be helpful in determining what is locking it.

Also try using the STAD transaction to check the DDIC user activity right after you see it getting locked.

Please also check if the below resource helps in tracing the source of locked user:

http://wiki.sdn.sap.com/wiki/display/ABAPConn/Users+being+locked+through+RFC+connections+-+finding+t...

Hope it helps.

Regards,

Srikishan