How to find the system which is the caller of an RFC connection

[Former Member]

Hi,

Sometimes an RFC connection or an interface tries to log in to a remote system with wrong password and locks that account. When this happens, i.e. a system/communication type user id gets locked due to incorrect logon attempts, how can we find out which system tried to login causing the id to get locked? I checked SM20 but could not find anything.

Thanks,

Arindam

[Former Member]

Did you activated the log collection and maintained the parameter for SM19? If log collections are activated in SM19 then only you can see it log in SM20.

Alternately if you can't afford downtime for the params - try activating the dynamic collection - has bit restriction though.

Cheers,

[Sriram2009]

Hi Arindam

You can run the RFC check program name "RSRFCCHK" in SA38 from that you can find the which RFC user id getting locked

Regards

Ram

[Reagan]

SM20 will show information only if you have activated SAP Security Audit log.

Check whether an RFC from Solution Manager is trying to connect with incorrect password.

Also read this SAP note 171805 - Determining RFC client when sign-on problems occur

Regards

RB

[divyanshu_srivastava3]

Hi Arindam,

You can enable security audit logs and quickly find such information.

Also, search SCN thread, similar issues are discussed many time.

Regards,

Divyanshu