cancel
Showing results for 
Search instead for 
Did you mean: 

Still able to login with user sap*

Former Member
0 Kudos

Hi experts,

Has any of you encountered this issue?


The parameter below has been set in the default profile via RZ10

login/no_automatic_user_sapstar = 1

However, after the application restart (multiple times), I'm still able to logon to the system with user sap*

I double-checked in RZ11.

Current Value of Parameter login/no_automatic_user_sapstar    

    

Expansion Level Value
Kernel Default 1
Standard Profile 1
Instance Profile 1
Current Value 1

I'm using NW 7.4, Sybase ASE. Please advise.

Thanks,
Henry

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hello Henry,

Try the following steps:

1) Set parameter login/no_automatic_user_sapstar to 0 in the instance profile

2) Login to SQL and use the following command

delete from <Schema_Owner>.usr02 where bname='SAP*' and mandt='000' ;

000 represents the client so provide the client you are trying to login to.

Schema owner can be found from System Status

3) Restart SAP

4) Login using password: pass

Best Regards,

Anita

akram_mg0
Explorer
0 Kudos

how i log in sql in sybase data base???

Answers (5)

Answers (5)

Former Member
0 Kudos

Hi all,

Thanks, I've tried to added the parameter to instance profile, with a restart, but it doesn't help.

Guess I have to delete the sap* manually.

It's weird, cause I usually have no problem in enabling/disabling the user sap* just by changing the parameter, but that was Oracle and older version of NW.


Thanks,
Henry

Former Member
0 Kudos

Hello Henry,

What is the output when you're giving the following command?

delete from <Schema_Owner>.usr02 where bname='SAP*' and mandt='000' ;

Best Regards,

Anita

Former Member
0 Kudos

Parameter login/no_automatic_user_sapstar will be useless as long as user sap* is defined a normal user in table USR02.

Please check, and delete it from this table if you really want to prevent login.

akram_mg0
Explorer
0 Kudos

how i delete it ?

former_member182657
Active Contributor
0 Kudos

Hi,

Please set parameter  login/no_automatic_user_sapstar into Instance profile & recheck again by restarting the sap instance.

Thanks,

Gaurav

Martina_Gállego
Active Participant
0 Kudos

Hi Henry,

 

Please check sapnote 68048 - Deactivating the automatic SAP* user.

Try the parameter in the instance profile.

Hope it helps.

Best regards,

Martina

Message was edited by: Martina Gállego Ansó

former_member188883
Active Contributor
0 Kudos

Hi Henry,

Please verify Default as well as instance profile for your SAP system and ensure parameter login/no_automatic_user_sapstar = 1 is set only once.

Also I assume you are testing with SAP* and its password pass with SAP parameter login/no_automatic_user_sapstar = 1

Regards,

Deepak Kori

Former Member
0 Kudos

Hi Deepak,

I can confirmed that it only appear once in default profile.

However, the password for SAP* is not the default "pass". It's the master password used during the installation.
Would that make the difference?

Thanks,
Henry

former_member188883
Active Contributor
0 Kudos

Hi Henry,

The profile parameter login/no_automatic_user_sapstar works only when SAP* user is deleted from the respective client.

Hope this helps.

Regards,

Deepak Kori

Former Member
0 Kudos

From Defining a New Superuser and Deactivating SAP*:

Deactivating the Hard-Coded SAP* User

You can also deactivate the hard-coded user SAP* by activating the profile parameterlogin/no_automatic_user_sapstar. For more information, see SAP Note 68048.

If a user master record was created for SAP*, then the corresponding authorizations assigned will apply; they are not affected by this parameter's setting.