Locking of user ids in Studio

[Former Member]

Hi All,

We are facing the issue of user id getting locked in HANA Studio. The id is getting locked due to multiple ( 100 - 200) incorrect logon attempts. All attempts happen from the user laptop. We thought that this is probably because multiple HANA systems are defined with varying credentials, we have eliminated this possibility now but the problem still persists. Is it possible that the system is trying to access other applications like IDT for credentials, even though the user is not running them on his laptop. What could be reason behind locking of the ids. Pl assist. Thanks.

[rindia · Accepted solution]

Dear Saurabh,

It is possible to trace this action by using the auditing features.

From HANA studio, open the Security editor and create a new policy as shown below. Click the image to enlarge it.

               

After clicking the deploy, any action where a user is locked because of  invalid  connection attempts is written to SYSLOG at location /var/log/messages with an entry like this:

<Event Timestamp>;<Service Name>;<Hostname>;<SID>;<Instance Number>;<Port Number>;<Client IP Address>;

<Client Name>;<Client Process ID>;<Client Port Number>;<Audit Level>;<Audit Action>;<Active User>;<Target Schema>;

<Target Object>;<Privilege Name>;<Grantable>;<Role Name>;<Target Principal>;<Action Status>;<Component>;

<Section>;<Parameter>;<Old Value>;<New Value>;<Comment>;<Executed Statement>;<Session Id>;

The columns are separated by semi-colons, so you can copy the lines into a CSV-file and open the audit result in any spreadsheet software.

With the help of

<Client IP Address>;<Client Name>;<Client Process ID>;<Client Port Number>; and other fields we can find out the root cause of the problem.

Regards

Raj