BR1628E Invalid charcter '@' in database password

[Former Member]

Hi,

   by mistake i used '@' in my password while installating SAP EHP 7 oracle 11g. now i am geeting following error while installation.

BR1628E Invalid charcter '@' in database password

___________________________________________________

An error occurred while processing option SAP NetWeaver 7.4 Support Release 1 > Oracle > SAP Systems > Application Server ABAP > Standard System > Standard System( Last error reported by the step: Process call '/usr/sap/DVR/SYS/exe/uc/linuxx86_64/brconnect -u / -c -f chpass -o SAPSR3 -p XXXXXX' exits with error code 5. For details see log file(s) brconnect.log.). You can now:

Choose Retry to repeat the current step.

Choose Log Files to get more information about the error.

Stop the option and continue with it later.

Log files are written to /tmp/sapinst_instdir/NW740SR1/ORA/INSTALL/NW740SR1/ORA/STD/ABAP.

_______________________________________________________________________________________

kindly help.

Regards

Sunil

[Former Member]

It might be resolved earlier incase some one still looking for it:

it can be fixed re-running the installation or

go to installation directory check control.xml add below three lines (ad.password = "new pass with out @")

  // get ABAP user informations

  if ( role == "SAPSID" ) {

    var ad = nw.getUsers().getAccountData(NWUsers.roles.SAPSID);

ad.password = "new pass with out @"

}

  else if ( role == "ORASYS" ) {

    var ad = nw.getUsers().getAccountData(NWUsers.roles.ORASYS);

ad.password = "new pass with out @"

  }

  else if ( role == "ORASYSTEM" ) {

    var ad = nw.getUsers().getAccountData(NWUsers.roles.ORASYSTEM);

ad.password = "new pass with out @"

[Former Member]

Dear Sunil,

I faced the same problem and the solution is to Stop the installation and start new one on the old Installation and choose the same parameter for old installation except the steps of oracle Database.

First mark on the second choice recreate Database don't choose MCOD (multiple Component in one Database), Second change the password of database user SAPSR3 of ABAP schema and the new password must be without '@' and any special characters in it and continue your steps for installation like the old one, it will work without any error.

Note: during Installation the sap engine will check just checking it will pass every step that you have already done with the old installation until the phase of (configure Oracle network) it will stopped due to access denied to oracle files because your old schema with old services already running to pass this error stop the oracle service and choose retry and it will pass and oracle services will start again automatic with new schema without losing any old installation steps you have done, Hope this will help you and the others.

[Former Member]

Hi,

brconnect -u / -c -f chpass -o 'BRT$ADM' -p <xxxxxx> -s

If your password is xxx$xxx to you use the $ you need to escape the special character so oracle understands the characters preceeding the $ so you would do

brconnect -u / -c -f chpass -o 'BRT$ADM' -p \xxxx$xxx -s

Try that and see if it works, also if you are using ssfs

Check in rsecssfx list

If there is more than one entry detected run rsecssfx compact and then check again with rsecssfx list

Kind Regards,

Johan

[janos_mucsi-besze]

Hi Sunil,

The passwords (along with other things) are maintained in keydb.xml file. You have to search for the corresponding entry and overwrite the already encrypted password. But take care of the consistency please. Make sure you copied the original keydb.xml beforehand to have a bakcup of it.

Since the password is not read directly from the database, but coming from the SWPM tool, yoiu have to ways to solve the issue.

1.) change keydb.mxl (this is the quickest solution)

2.) Start everything from the beginning (this will take way too much time, so I advise this only if you      have no strickt timeline)

Regards,

János

[Former Member]

Hi Janos,

I try it to solve this issue with changeing keydb.xml file. First I found the corresponding encripted fields.

I have delete first that field from entry ABAPSchema_password and try it to continue the installation process. The result was the same....

After that i have changed the pass to every entry into file, the result was more errors 🙂

Solution: Start from the biginning!

Thanks,

Irena

[janos_mucsi-besze]

Hi Irena,

My development contact told me that changing keydb.xml might help. Obviously this is a tricky operation. At least that worth a try.

Regards,

János

[Former Member]

Hi Janos,

I have done the same mistake, Could you please tell me which field need to edit in keydb.xml?

Regards,

Sayendra.M

[Former Member]

Hi Sunil,

Did you pass the folowing installation phase with the last link from Gaurav?

I have the same problem.....

BR,

Irena

[Former Member]

HI Irena,

  as i was doing a test installation and the above solution didn't solve the issue. i re-formatted the machine and installed the SAP.

the issue was special character in this password.

Thanks

Sunil

[former_member185239]

Hi Irena,

In 11g @ character is not allow as per password policy.

You need to enter a master password without @ character.

When sapinst is trying to change the password of SAPSR3 schema with the master password which in turn having a @ character , it won't allow the brconnect to do that as it is not supported by 11g.

It was possible in 10g though.

This will resolve your error.

With Regards

Ashutosh Chaturvedi

[former_member182657]

Hi Sunil,

Please follow

for step by step.

Thanks,

Gaurav

[former_member182657]

Hi,

Before the command please do

SQL> create user brt$adm identified by XXXXX;

    SQL> grant to sapdba to brt$adm;

After that execute brconnect -u / -c -f chpass -o BRT$ADM -p <password> -s brtools

Thanks

[former_member182657]

Hi Sunil,

Please share the output of command

brconnect -u / -c -f chpass -o BRT$ADM -p <password> -s brtools

Thanks,

Gaurav

[Former Member]

Hi Gaurav,

eccdev:oradvr 50> brconnect -u / -c -f chpass -o BRT$ADM -p <password> -s brtools

ADM: Undefined variable.

thanks

sunil

[former_member188883]

Hi Sunil,

Please refer below SAP notes

1) Create SSFS directories and permissions

  Note 1639578 - SSFS as password storage for primary database connect

2) Creation of sidadm user for SSFS

Note 1764043 - Support for secure storage in BR*Tools

  Refer 3. Storage of BR*Tools user/password in secure storage

All the steps are clearly specified. Please follow in sequence to resolve the issue.

Hope this helps.

Regards,

Deepak Kori

[ACE-SAP]

Hi

On Unix system you need to use quotes as the $ is a special char.

Regards

1764043 - Support for secure storage in BR*Tools

On Unix:

brconnect -u / -c -f chpass -o 'BRT$ADM' -p <password> -s brtools

[Former Member]

Hi,

  i am getting following error.

eccdev:oradvr 49> brconnect -u / -c -f chpass -o 'BRT$ADM' -p <xxxxxx> -s brtools                                    

BR0801I BRCONNECT 7.40 (6)

BR0280I BRCONNECT time stamp: 2014-03-16 00:01:26

BR0828I Changing password for database user BRT$ADM ...

BR0280I BRCONNECT time stamp: 2014-03-16 00:01:26

BR0829I Password changed successfully in database for user BRT$ADM

BR0282E Directory '/oracle/DVR/security/rsecssfs/data' not found

BR1527E Setting password for user BRT$ADM in secure storage failed

BR0832E Changing password for user BRT$ADM failed

BR0280I BRCONNECT time stamp: 2014-03-16 00:01:26

BR0804I BRCONNECT terminated with errors

[former_member182657]

Hi,

Directory '/oracle/DVR/security/rsecssfs/data' not found

Please confirm above path exists on your system.

Thanks,

Gaurav

[ACE-SAP]

Hi

This directory should exist / be created as stated in the here under note

Regards

1639578 - SSFS as password storage for primary database connect

mkdir <dir_global>/security/rsecssfs/data

mkdir <dir_global>/security/rsecssfs/key

chmod -R 700 <dir_global>/security

Log on to SAPGLOBALHOST to the operating system as user <sid>adm and execute the following commands:

chmod 700 <dir_global>/security

chmod 700 <dir_global>/security/rsecssfs

chmod 700 <dir_global>/security/rsecssfs/data

chmod 700 <dir_global>/security/rsecssfs/key

[former_member182657]

Hi Sunil,

As per documents path should be

/usr/sap/SID/SYS/global/security/rsecssfs/data

Please create below directories & try to execute brconnect command again.

cd /usr/sap/SID/SYS/global

mkdir /usr/sap/SID/SYS/global/security

mkdir /usr/sap/SID/SYS/global/security/rsecssfs

mkdir /usr/sap/SID/SYS/global/security/rsecssfs/data

mkdir /usr/sap/SID/SYS/global/security/rsecssfs/key

Thanks,

Gaurav

[former_member182657]

Hi,

Please recheck permissions on dirs with below commands,

Set authorizations on Directories

1. sidadm

cd /usr/sap/SID/SYS/global

chmod 700 security

chmod 700 security/rsecssfs

chmod 700 security/rsecssfs/data

chmod 700 security/rsecssfs/key

This is point 9 from referred doc.

Regards,

Gaurav

[Former Member]

Hi Gaurav,

   after doing this also it is not working..the owner of these directory is 'SIDADM'

###############################################################################

BR0801I BRCONNECT 7.40 (6)

BR0280I BRCONNECT time stamp: 2014-03-15 22:36:45

BR1048I Enter new password for user 'SAPSR3' (max. 30 ASCII chars):

BR0280I BRCONNECT time stamp: 2014-03-15 22:36:47

BR1048I Reenter new password for user 'SAPSR3' (max. 30 ASCII chars):

BR0280I BRCONNECT time stamp: 2014-03-15 22:36:49

BR0829I Password changed successfully in database for user SAPSR3

BR0831I Table SAPUSER not found for user SAPSR3

BR0252E Function stat() failed for '/usr/sap/DVR/SYS/global/security/rsecssfs/data' at location BrFileStatGet-1

BR0253E errno 13: Permission denied

BR0273E Determination of file status for /usr/sap/DVR/SYS/global/security/rsecssfs/data failed

BR1527E Setting password for user SAPSR3 in secure storage failed

BR0832E Changing password for user SAPSR3 failed

Regards

Sunil

[former_member188883]

Hi Sunil,

Stop the SAPinst.

Please change the password using the command

SQL> alter use <username> identified by <newpassword>;

Post this execute the command

brconnect -u / -c -f chpass -o SAPSR3 -p <new passwd>

After this retry the installation phase

Hope this helps.

Regards,

Deepak Kori

[Former Member]

Hi Deepak,

  i have performed the following,

alter use SAPSR3 identified by <newpassword>;

altered----Done

but while executing the brconnect i am getting following error.

eccdev:oradvr 6> brconnect -u / -c -f chpass -o SAPSR3 -p <newpassword>;

BR0801I BRCONNECT 7.40 (6)

BR0280I BRCONNECT time stamp: 2014-03-15 22:17:39

BR0828I Changing password for database user SAPSR3 ...

BR0280I BRCONNECT time stamp: 2014-03-15 22:17:39

BR0829I Password changed successfully in database for user SAPSR3

BR0831I Table SAPUSER not found for user SAPSR3

BR0252E Function stat() failed for '/usr/sap/DVR/SYS/global/security/rsecssfs/data' at location BrFileStatGet-1

BR0253E errno 13: Permission denied

BR0273E Determination of file status for /usr/sap/DVR/SYS/global/security/rsecssfs/data failed

BR1527E Setting password for user SAPSR3 in secure storage failed

BR0832E Changing password for user SAPSR3 failed

BR0280I BRCONNECT time stamp: 2014-03-15 22:17:39

BR0804I BRCONNECT terminated with errors

eccdev:oradvr 7>

Please advise.

Regards

Sunil

[former_member188883]

Hi Sunil,

Please refer SAP Note 1764043 - Support for secure storage in BR*Tools

Hope this helps.

Regards,

Deepak Kori

[former_member182657]

Hi Sunil,

Are you using SSFS connection method for database connection.Please follow

After configuring try to execute command again.

Regards,

Gaurav

[Former Member]

Hi Deepak,

  while doing the same i am getting following error.

BR0280I BRCONNECT time stamp: 2014-03-15 22:34:24

BR0257I Your reply: 'c'

BR0259I Program execution will be continued...

BR0278E Command output of '/usr/sap/DVR/SYS/exe/run/rsecssfx':

Could not open lockfile "/usr/sap/DVR/SYS/global/security/rsecssfs/data/SSFS_DVR.LCK"; open() == 13 (Permission denied)

BR0280I BRCONNECT time stamp: 2014-03-15 22:34:24

BR0279E Return code from '/usr/sap/DVR/SYS/exe/run/rsecssfx': 253

BR1527E Setting password for user SAPSR3 in secure storage /usr/sap/DVR/SYS/global/security/rsecssfs/data/SSFS_DVR.DAT failed

BR0832E Changing password for user SAPSR3 failed

BR0280I BRCONNECT time stamp: 2014-03-15 22:34:24

BR0804I BRCONNECT terminated with errors

please advise.

regards

sunil