j2ee_admin user account locked repeatedly

[Former Member]

Hi All,

When the password of j2ee_admin is changed, we are able to deploy our web dynpro applications a few times before j2ee_admin is locked automatically due to incorrect logins. We have specified the correct password for j2ee_admin in config tool(secure store tab). Not sure what is causing the locking of the j2ee_admin account.

Any help would be greatly appreciated.

Thanks and Regards,

Gangadharayya.

[former_member185864 · Accepted solution]

Hi,

If you forgot or lock "Administrator or J2EE_ADMIN" password just follow below steps:

STEP-1: Enable "SAP*"

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = TRUE"

4.Double-click on the property "ume.superadmin.password=<Enter any password ex: abc123>"

5.Save.

6.Restart the engine.

STEP-2: Login with "SAP*" into portal

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / password as" SAP* / <password ex: abc123>"

3. Search for "Administrator" user

4. Reset or change password for "Administrtor"

STEP-3: Disable "SAP*"

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = FALSE"

4.Save.

5. Restart the engine.

STEP-4: Login with "Administrator"

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / Password as "Administrator / <password>

3. it will ask change password just change it.

Note: Just increase the no.of invalid_attemps during the deployment then make it according to your standereds.

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

ume.logon.security_policy.lock_after_invalid_attempts = <number ex: 4>

3. Save & restart.

Thanks,

Nagaraju Parlapalli

[Former Member · Accepted solution]

Hi Nagaraju,

I followed the steps and was able to logon using sap* to http://hostname:50200 -> Netweaver administrator -> System Management -> administration -> Identity Management.

However, when I am trying to change the j2ee_admin password, I am getting the error

---

An error occurred in the persistence. The original message (possibly not translated) was: "Attribute "lockreason" on namespace "com.sap.security.core.usermanagement" of principal "UACC.R3_DATASOURCE.J2EE_ADMIN" is not modifiable.". Contact your system administrator

---

Please advise.

Thanks,

Abdul

[Former Member · Accepted solution]

if you have the j2ee run as add in, the modification of users in j2ee is locked.

you can modify the users in abap (SU01), this will be used as ume Userstore.

Edited by: Christian F. on Oct 15, 2008 10:44 AM

[ErvinSzolke · Accepted solution]

Hi All,

this note can come in handy too:

#1493272 A user gets locked automatically

I hope this helps someone.

Regards,

Ervin