SAP R/3 User Password Issue

[Former Member]

NOTE: Please do not get confuse SAP R/3 user with SAP* User

Hi Experts,

Can somebody suggest the best way to track the concern person who changed the SAP R/3 User password, we don't know the responsible person.

Please help me in this vital situation, so that we can take care of the things in future.

Suggest me the ways whether from SAP Level or from Oracle Level.

Waiting for your responses....

Thanks

Rhishabh

[Former Member]

Hi,

You can track the password changes for R3 users via SUIM if it is changed via SAP. You cannot keep track of password changes for R3 users if they are changed at oracle level.

Hope this helps.

Manoj Chintawar

[Former Member]

Hi Joe

You are absolutely correct.,

SAPR3 is the SAP Oracle Database user and cannot be done from SUIM as it is not a SAP user,

Its password is changed by brtools which is run using <SID>ADM user, hence anyone who can login into the system at OS level, can make the change.

Thanks

Rishi

[former_member603052]

Hey Vyas,

R u talking about Schema Owner Password...If yes we cannot identify. Its done at OS level and how can we check in SAP.

Regards,

Kalyan

[Former Member]

NOTE: Please do not get confuse SAP R/3 user with SAP* User

It seems all the answers so far did exactly that...

And sorry, I'm afraid there is no way to tell which person changed SAP R/3 user's password. (that is, Oracle user SAPR3, or SAP<SID>, or SAPSR3, depending on SAP release, if I correctly understand)

SAP says that this user's password shall be changed by brconnect or sapdba.

For this you will have to be logged as the correct OS user, <sid>adm.

So anybody who knows <sid>adm's password might have done it.

regards

[former_member603052]

Hi Vyas,

Run this below statement after connecting to oracle with

SQL>conn / as sydba

SQL>select mandt,bname,modda,modbe from SAP<URSID>.usr04 where bname='ur_username' and mandt=ur_clientno;

Here mandt is ur client number

bname is username

modda is date on which modified lastly

modbe is username who modified.

Regards,

Kalyan

[Former Member]

Hi Vyas,

just check the same as below:

suo1put user namego to--user change documents

otherwise you can check the same with suim.

Regards

Nick Loy

[former_member220071]

Hi Rishabh ,

Set audit log by using T code sm19 and check log by using T code sm20.

In sm20 it will show which user make what transcation.

It will help in your case which user change password.

Abhijeet

Please check link

http://help.sap.com/erp2005_ehp_04/helpdata/EN/23/c9833b3bb1780fe10000000a11402f/frameset.htm

Edited by: Abhijeet Siras on Feb 19, 2009 7:38 AM

[Former Member]

SM19/20 won't help here, you have to activate it to see data. That's not possible for the past

I'm not sure in wich tables changes to the passwort are stored, but from within SAP SUIM ist the best choice and from oracle-level i'd look at the usr*-tables. In SE11, you can look at the structure USRCD, it contains the data you need. I got no idea how to go further from there, though.

Regards,

ulf

[Former Member]

Hello,

If you want to know who changed the password for a user id

there are couple of ways:

1. go to SU01,give his id and then display and then go to Last changed by

this can tell u

2. Also through SUIM,u can see,roles,profiles,authorizations

what was changed by whom

Rohit

[Former Member]

I Tried SUIM code but is there any way we can sortout through Oracle Level......