cancel
Showing results for 
Search instead for 
Did you mean: 

procedure for changing passwords of OS and RDBMS

Former Member
0 Kudos

Hi All,

I'm having 2 Node MS failover cluster (windows 2008) with SAP PI (ABAP + JAVA) on Oracle RDBMS.

Cluster servers is executed by domain admin "sapcluster" and my "<sid>adm", "SAPService<SID>" are domain users.

I request you to guide with right procedure for changing all passwords.

for Domain admin, SAP OS users and RDBMS users.

will there be any order to be followed ?

Kind regards,

Harika

Accepted Solutions (0)

Answers (1)

Answers (1)

paul_power
Active Contributor
0 Kudos

Hello Harika,

http://scn.sap.com/docs/DOC-8324

SAP Supported configuration for SAP users7permissions on Windows Server
OS is indicated in SAP ERP 6.0/Windows/Oracle installation guide,
as well as on SAP library,
please refer and rely on these references :

- http://service.sap.com/instguides ->
   SAP Business Suite Applications ->
    SAP ERP 6.0 ->
     Installation ->
          Oracle

On this guide, regarding MS Windows Failover configuration,
      'see the Chapter 8:
High Availability with Microsoft Cluster Service'

Additionally,
I suggest you also read following Note :

  112266 - SAP and MS Cluster Server: Frequent questions and tips

- SAP SYSTEM SECURITY ON WINDOWS
  The following reference explains the security settings for an SAP
  system:

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/4d/6b747d7f961fbbe10000000a15822b/content.htm

SAP processes usually run under SAPService<SID> account.
It the password will be deactivated - SAP System would not start as
SAPService<SID> used to start the SAP service and processes.

If you change the password for SAPService<SID> you must re-type
it for every SAP service running in your system

Open the 'Services' and  for every SAP service running in your system
service SAP<SID>_<inst-numb> and SAPOSCOL.


<sid>adm can  be changed using above process also need to retype it
in saposcol service

Check other SAP services also in case any are using the <sid>adm
account

<SID>adm is usually used for administartive and maintenance tasks only
as interactive user.

Hope this helps.

Regards,

Paul