sap* is not in database but still able to login

[Former Member]

Hello All,

I have one query regarding user sap*.

I deleted sap* from usr02 and changed parameter

login/no_automatic_user_sapstar bet set to 0.

then tried login by sap*/pass i cud.

But from where it is taking sap*/password for it??/

Thanks in advance

[stefan_koehler · Accepted solution]

Hello Anu,

the SAP* user is hard coded in the sap kernel.

If the user does not exists in the table USR02, then the default password is valid.

Regards

Stefan

[Former Member · Accepted solution]

Hello Stefan,

Thanks for the replay.

But what do u mean by it is hard coded in sap kernel.

Also if sap* is there in usr02 and we know the password then can we change the parameter and login by sap* user.

Thanks,

Anu.

[debasissahoo · Accepted solution]

Hi,

But what do u mean by it is hard coded in sap kernel.

That means if SAP* is not in the database, and the parameter is set to 0, then SAP* which has been programmed in the executables of SAP become active and pass is the hardcoded password of this SAP* user.

Also if sap* is there in usr02 and we know the password then can we change the parameter and login by sap* user.

If SAP* is in the USR02, even if you change the parameter to 0, still you wont be possible to login with sap*/pass. as database user is still active, it reads the table first and try to login with the existing password.

Regards,

Debasis.

[stefan_koehler · Accepted solution]

Hello Anu,

please check the following notes:

• #2383 : Explanation about SAP* user (and how it works with the user master records)

• #8852 : Default Password for SAP*

• # 68048: How does the profil parameter login/no_automatic_user_sapstar work

Regards

Stefan