unable to login password status : product password

[Former Member]

Dear All,

User sapadmin is locked in client 000 due wrong password.when i trying to unlock it coming sapadmin is still locked.

after checking the information

Password logon not possible (too many incorrect attempts)

password Status Product. password

This password was chosen by the user and not by the user administrator.

Exception: Users of the types service or system cannot change their passwords themselves, meaning that the passwords assigned by the administrator are automatically productive passwords in these cases. The requirement to change passwords (see SAP Note 622464) described in the following sections therefore does not apply to users of these types.

The validity period of the productive password depends on the profile parameter login/password_expiration_time and login/password_m ax_idle_productive.

You can use the profile parameter login/password_expiration_time to define the point at which the user is prompted to change his or her productive password. The time is calculated using the date of the last password change plus the number of days defined in the profile parameter.

You can use the profile parameter login/password_max_idle_productive to define the point as of which the validty of the productive password ends. The time is calculated from the date of the last password change plus the number of days specified in the profile parameter. Password-based logon is then not possible from this point.

It is therefore useful to define the time period for the validity of the productive password (login/password_max_idle_productive) as larger than the time period for automatic prompting to change the password (login/password_expiration_time).

Even once the productive password is no longer valid, a non-password-based logon is still possible (SSO procedure).

The password status can still be checked in the case of a non-password-based logon, if the user is using an SAP GUI. You can use profile parameter login/password_change_for_SSO to choose between the following options (profile parameter values in parentheses):

No check of the password status (0)

Check the password status

If the check determines that the password must be changed, the system offers the option of changing the password (3), deactivating it (2), or both options (1).

Regards

Ashok

[Former Member]

Hi Ashok,

Try to change in below way:

1)First check whether your DDIC has full auth or not, if not assign full auth and change

2) Change the user type first from DDIC user for that user, then you will be able to change the password...after that you can revert the setting

Regards

Nick Loy

[Former Member]

Dear Nick,

DDIC is having full authorization having proile sap_all and S_A.SYSTEM.But i m getting option for change and create.

Message getting :productive password.

There is no change option in DDIC and Sap*.Only view option are there.

Regards

Adil

[Former Member]

Dear All,

thnx for ur reply. It was actualy CUA activated so it was giving error password protected.Jst follow this steps

First contact your system administrator. I don't it's a good idea to just

remove this client from CUA without asking the administrator, even though

it's not recommended to include client 000 in CUA in the first place.

The way to remove the client from CUA is described below.

1. Logon to client 000 as DDIC

2. Go to tcode SE38

3. Execute report RSDELCUA

4. Select radio button "Child systems" and make sure the logical

system name of the client you want to remove is entered in the text field.

5. Uncheck "Test"

6. Execute.

Now go to SU01 and you'll have all the buttons available.

Regards

Ashok

[Former Member]

did you try unlocking it from the db level? see the command below

update schemaname.USR02 set UFLAG = 64 where MANDT = 000 and BNAME ='sapadmin';

commit;

Gerard

[Former Member]

DId u try logging on as SAP*/DDIC in client 000 and unlocking it?

[Former Member]

Dear Grerard,

i loged by ddic but its noy alowing me to unlock....

Regards

Ashok