User Password Parameters (RZ10)

[Former Member]

Hi Guys,

I have short and quick question, my basis team just set up the user parameters using RZ10. I'm using ECC6.0 system. Once he created all the parameters I doubt checked and test the parameters setting. I have noticed when I created test user I can go more then 8 characters length for the user password. I know the default setting is min = 3 and max = 40 characters but my question is can we control max length of password so it will not exceed more then 8 characters.

This is the parameter: login/min_password_lng

Or is it my Basis team who didn't set up right? Or is it normal? 40 characters length is max. We can't make it max of 8 characters right

Please give you feedback

Thanks in Advance

Faisal

[Former Member]

Hi Faisal

I am pretty certain that you can't specify the maximum length. More to the point, unless using the ABAP password as a source for other systems with max length = 8, why would you want to restrict the maximum length?

[sdipanjan]

Hi,

Please check the following notes:

[Note 2467 - Password rules and preventing incorrect logons|https://service.sap.com/sap/support/notes/2467]

[Note 862989 - New password rules as of SAP NetWeaver 2004s (NW ABAP 7.0)|https://service.sap.com/sap/support/notes/862989]

FYI: 40 char length of password is normal in ECC. The maximum length as you specified was applicable for 4.X versions. For details, please check the following note:

[Note 559410 - Login and Password Maintenance Functionality|https://service.sap.com/sap/support/notes/559410]

Regards,

Dipanjan

[Former Member]

Hi Faisal

First I would like to mention Passowrds digits ,letters, numbers , special numbers all are fully customized in SAP .You can set the desires nomenclatures of password.Means as

per your desires password will generate .Now In this case ,Please check the parameter in RZ10 "login/min_password_lng". Please set the value from 3- 8 in this parameter and save .

For this parameter to be activated in server ,You need to shutdown the server and then start .And then these parameters will take effect and hence your

password length will generate as per your setting criteria in "login/min_password_lng".

Below are the parameters which are using for contrlloing the behaviour of Password in SAP R/3 .

login/min_password_lng

Defines the minimum length of the password.

Default value: 3; permissible values: 3 u2013 8

login/min_password_digits

Defines the minimum number of digits (0-9) in passwords.

Default value: 0; permissible values: 0 u2013 8

Available as of SAP Web AS 6.10

login/min_password_letters

Defines the minimum number of letters (A-Z) in passwords.

Default value: 0; permissible values: 0 u2013 8

Available as of SAP Web AS 6.10

login/min_password_specials

Defines the minimum number of special characters in the password Permissible special characters are ()!\"@ $%&/()=?'`*+~#-_.,;:{[]}
<>

Default value: 0; permissible values: 0 u2013 8

Available as of SAP Web AS 6.10

login/min_password_diff

Defines the minimum number of characters that must be different in the new password compared to the old password.

Default value: 1; permissible values: 1 u2013 8

Available as of SAP Web AS 6.10

Hope it answers.

Thanks & Regards

Vikas rana