cancel
Showing results for 
Search instead for 
Did you mean: 

After HOSTNAME change disp+work locks SAPSR user

Former Member
0 Kudos

Dear All,

I was forced to change a hostname on Windows 2008 64bit where my SAP instances work.

I performed these steps:

1. Changed hostname values in regedit

2. Changed values in TPPARAM and in all files in trans\bin directory

3. Changed values in profile files

4. Changed values in listener.ora and tnsnames.ora

5. Changed Windows hostname

6. Reboot

And the thing is that all instances (ERP, CRM) locks specific oracle users during disp+work startup.

Part of syslog in mmc console:


Database: > ORA-01017: invalid username/password; logon denied   
Database: Database error 1017   at CON        
Database: > ORA-01017: invalid username/password; logon denied          
Database: Database error 1017   at CON    
Database: > ORA-01017: invalid username/password; logon denied          
Database: Database error 1017   at CON    
Database: > ORA-28000: the account is locked    
Database: Database error 28000  at CON          
Database: > ORA-28000: the account is locked
Database: Database error 28000  at CON              
Database: > ORA-28000: the account is locked          
Database: Database error 28000  at CON    

before I changed the hostname and performed above steps everything worked fine... I din't change any passwords!

I checked which user gets locked in SQLPlus. It is SAPSR4 (in case of ERP - it's instance number is 04) and SAPSR5 (CRM).

In log dev_w0 is:


C  Oracle Client Version: '10.2.0.2.0'
C  Client NLS settings: AMERICAN_AMERICA.UTF8
C  Logon as OPS$-user to get SAPSR4's password
C  Connecting as /@S11 on connection 0 (nls_hdl 0) ... (dbsl 700 250407)
C  Nls CharacterSet                 NationalCharSet              C      EnvHp      ErrHp ErrHpBatch
C    0 UTF8                                                      1 000000001259A8D0 0000000008F5B240 0000000008F5CA58
C  Attaching to DB Server S11 (con_hdl=0,svchp=0000000008F5C918,srvhp=00000000125B1138)
C  Starting user session (con_hdl=0,svchp=0000000008F5C918,srvhp=00000000125B1138,usrhp=0000000008F5BA58)
C  *** ERROR => OCI-call 'OCISessionBegin' failed with rc=1017
 [dboci.c      4532]
C  *** ERROR => CONNECT failed with sql error '1017'
 [dbsloci.c    11044]
C  Try to connect with default password
C  Connecting as SAPSR4/<pwd>@S11 on connection 0 (nls_hdl 0) ... (dbsl 700 250407)
C  Nls CharacterSet                 NationalCharSet              C      EnvHp      ErrHp ErrHpBatch
C    0 UTF8                                                      1 000000001259A8D0 0000000008F5B240 0000000008F5CA58
C  Starting user session (con_hdl=0,svchp=0000000008F5C918,srvhp=00000000125B1138,usrhp=0000000008F5BA58)
C  *** ERROR => OCI-call 'OCISessionBegin' failed with rc=1017
 [dboci.c      4532]
C  *** ERROR => CONNECT failed with sql error '1017'
 [dbsloci.c    11044]
B  ***LOG BY2=> sql error 1017   performing CON [dbsh#2 @ 1204] [dbsh    1204 ]
B  ***LOG BY0=> ORA-01017: invalid username/password; logon denied [dbsh#2 @ 1204] [dbsh    1204 ]
B  ***LOG BY2=> sql error 1017   performing CON [dblink#5 @ 431] [dblink  0431 ]
B  ***LOG BY0=> ORA-01017: invalid username/password; logon denied [dblink#5 @ 431] [dblink  0431 ]
M  ***LOG R19=> ThInit, db_connect ( DB-Connect 000256) [thxxhead.c   1440]
M  in_ThErrHandle: 1
M  *** ERROR => ThInit: db_connect (step 1, th_errno 13, action 3, level 1) [thxxhead.c   10468]

I don't know how to find out what password or connection string SAP sends to Oracle and why it's wrong...

Every time I unlock SAPSR4 manually in SQLPlus but after next disp+work run it gets locked again.

I don't know if I changed all necessary values of old hostname. For example select USERNAME from dba_users gives me some users with old hostname in logins like:


OPS$OLD_HOST_NAME\ER1ADM
OPS$OLD_HOST_NAME\SAPSERVICEER1

some time ago I faced the issue with password including '@' character. I couldn't use SQLPlus because it's connection string looked like this:


login/pass@word@SID

so I've got an error. User SAPSR4 still has password with '@' inside. When I change password disp+work still has the same issue.

What can I do?

Thank you in advance

Accepted Solutions (0)

Answers (1)

Answers (1)

0 Kudos

Hello,

Sorry, but these steps to change hostname can work for the operational system perspective, not to SAP system.

Please check SAP note 8307 - Changing host name on R/3 host: What do you do?

My advice: Proceed with a system copy to be on the safe side - or avaluate the need to change the hostname.

Regards,

Carlos

Former Member
0 Kudos

Hi, looks like I did all steps from that note..

former_member204746
Active Contributor
0 Kudos

delete these:

OPS$OLD_HOST_NAME\ER1ADM

OPS$OLD_HOST_NAME\SAPSERVICEER1

then, change password WITHOUT @

then, run SAP note 400241

finally, test:

R3trans -d