User password expires everyday

[Former Member]

Hi,

For only one of the user we support, the system prompts to change the password when logging-in first time for the day. After changing, the password is fine for working all day. This has to be repeated again the next day the user logs-in. Has anyone come across a similar situation?

Thank you.

Mani

[Bernhard_SAP]

Hello Mani,

you need to check usr02 before and after the change of the password. I suspect, that somehow the pwd gets the 'initial' status every day. Especially have an eye on the fields ltime and pwdinitial.

Also the change logs of the user can give a clue. If there are no change logs but the table content gets changed w/o user/admin interaction, check for coding updating usr02 w/o using standard bapis/FMs.

good luck,

Bernhard

[Former Member]

Hi,

Check the user change documents to identify if the password is reset by any other user. It gives you a clue.

Rgds,

Raghu

[Former Member]

Hi

As per my understanding is that USR02 entry for that user after changing the password.

Regards

Hari

[Former Member]

check code of ZXUSRU01 program.

if it has any, paste it... if possible.... or take help of your ABAPer to understand it.

Regards,

Surpreet

[Former Member]

All,

When looking at the change documents for the particular user, I can see Tcode KRNL against the ' password change ' value.

This is for every day. Any reasons ?

Mani

[Bernhard_SAP]

that means password change on the login screen....

Couldn't you find the clue after having read my first reply?

b.rgds, Bernhard

Edited by: Bernhard Hochreiter on Nov 17, 2010 3:50 PM

[Former Member]

Hi Mani,

I recommend following steps provided in Note 495911 - Trace analysis for logon problems. This should help you to identify the root cause and fix it.

Regards,

Raghu

[Former Member]

Thank you all. Though I could not pin point the exact issue,all I did was to delete and create the user id again. That resolved the issue.

Mani

[Former Member]

..And did you do this in Production ??

[Former Member]

Yes, With the permission of the BPO. The user in this case belongs of VIEW only access.

Mani