on 09-25-2009 7:48 AM
Hi All,
I plan to implement password expiration feature of SAP. I am looking at having to expire my user's password every 3 months. I did by using rz10 transaction code and inserting the parameter login/password_expiration_time and setting its value to 90. However, I noticed that its been 5 months already and the password is still not expired. Im expecting that by the end of the third month, it will prompt me to change my password.
Have I missed something? By the way, I restarted the instance after I set the login/password_expiration_time parameter.
Can anybody help?
Thanks in advance
Jun
Hi,
This parameter works with the Exception: Users of types SERVICE and SYSTEM.
Check if your user id is of type Service or not?
if its a dialog user, please mention your kernel version.
Regards,
Debasis.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
No, by definition SERVICE users will not go though the normal password expiration check during login to system.
http://help.sap.com/saphelp_erp2004/helpdata/EN/52/67119e439b11d1896f0000e8322d00/content.htm
Thanks,
Debasis.
Hi,
In my PRODUCTION instance, I have 2 physical servers. One is the application server and the other is the database server. The database server is also my Central Instance. Thus, I would say that I have multiple instance. I set the password parameter to the instance profiles of both my application and central instance but it seemed not working.
Thanks
If its not working is because you didn't set or activate the paremeters correctly.
Check that the parameter exist in both instance profiles, in the other hand if this apply to the whole environment you could add this to the default profile. You can check the current value of the paremeter via RZ11 to see if your changes to the value took place.
Regards
Juan
Hi Juan,
I checked theRZ11 and searched for the parameter PASSWORD_EXPIRATION_TIME and I cant find it. I went back to RZ10 and I can see 5 profiles. Please see below:
Profile Name Prof Type
DEFAULT Deafult Profile
E6P_D00_AMC-E6P-APPS Instance Profile
E6P_DVEBMGS02_AMC-E6P-DB Instance Profile
START_D00_AMC-E6P-APPS Start Profile
START_DVEBMGS02_AMC-E6P-DB Start Profile
I checked on the 2 instance profiles and I can see that the parameter login/password_expiration_time is present and has a value of 90.
Please help. Where did I go wrong?
Thanks
I checked theRZ11 and searched for the parameter PASSWORD_EXPIRATION_TIME
You should be checking for login/password_expiration_time, if you just put PASSWORD_EXPIRATION_TIME certainly won't return anything.. alternatevely you can use * as a wild card like *password_expiration_time
I checked on the 2 instance profiles and I can see that the parameter login/password_expiration_time is present and has a value of 90.
Did you restarted the system after the changes?... also you can do a profile Check in RZ10 to see if the syntax or the values of the parameters are properly set.
Regards
Juan
Hi,
Yes, I restarted the instance. Also, I noticed error in profile check but these errors may not have nothing to do with the password expiration. Please see actual errors below:
E:login/disable_multi_gui_login is not identified identically on all servers
E:login/disable_multi_gui_login (1) on server AMC-E6P-DB_E6P_02
E:login/disable_multi_gui_login (0) on server AMC-E6P-APPS_E6P_00
E:login/min_password_letters is not identified identically on all servers
E:login/min_password_letters (2) on server AMC-E6P-DB_E6P_02
E:login/min_password_letters (0) on server AMC-E6P-APPS_E6P_00
E:login/min_password_digits is not identified identically on all servers
E:login/min_password_digits (2) on server AMC-E6P-DB_E6P_02
E:login/min_password_digits (0) on server AMC-E6P-APPS_E6P_00
However, Ive been searching for those parameters above that has zero values but I cant find them.
Hi Juan,
Thats what I've been trying to do but I can seem to do it right. Im looking for that parameter where the value is zero so that I can change it but I cant find it anywhere in all the profiles. Since I cant find it, I created a new parameter and set the value to 2 but when I saved it, its returning an error saying that I havent set it identically on all servers and its showing the same parameters with 2 different values (0 and 2).
Where do you think did I go wrong?
Thanks
User | Count |
---|---|
85 | |
10 | |
10 | |
10 | |
7 | |
6 | |
6 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.