SAPSR3 schema user is allowing only default password

[Former Member]

Hello All,

I'm facing a wired issue while changing the SAPSR3 schema password, other than default password "SAP".

tried changing with sql query and brtools as well, still not worked.

then I have deleted the OPS$* users and user tables(SAPUSER) and recreated the updated the table with the schema user id and password.

R3trans -x out put is 0000 and R3trans -d is 0012.

granted the access as well, since the R3trans -x is 0000 I know that is some where permission issue.

when I Change the password it is saying invalid userid/password. and when I set back password of schema user to "SAP" it is working fine, R3trans -d is 0000

did some one face this issue anytime, please help me resolving it.

trans.log :

4 ETW000  [     dev trc,00000]  Logon as OPS$-user to get SAPSR3's password                               42  0.046935

4 ETW000  [     dev trc,00000]  Connecting as /@GCI on connection 0 (nls 0) ... (dbsl 721 140314, UNICODE[2])

4 ETW000                                                                                                  54  0.046989

4 ETW000  [     dev trc,00000]     OCIHandleAlloc(OCI_HTYPE_SVCCTX, con=0, svchp=022faa28)                98  0.047087

4 ETW000  [     dev trc,00000]  Allocating server context handle                                          29  0.047116

4 ETW000  [     dev trc,00000]  Attaching to database server GCI (con=0, svchp=022faa28, srvhp=022fdfd0)

4 ETW000                                                                                                 190  0.047306

4 ETW000  [     dev trc,00000]  Assigning server context 022fdfd0 to service context 022faa28          77171  0.124477

4 ETW000  [     dev trc,00000]     OCIHandleAlloc(OCI_HTYPE_SESSION, con=0, usrhp=0236c310)               92  0.124569

4 ETW000  [     dev trc,00000]  Starting user session: OCISessionBegin(con=0, usr='/', svc=022faa28, srv=022fdfd0, usr=0236c310)

4 ETW000                                                                                                  47  0.124616

4 ETW000  [     dev trc,00000]     OCISessionBegin(OCI_DEFAULT) failed with -1=OCI_ERROR                6116  0.130732

4 ETW000  [     dev trc,00000]     OCISessionBegin(OCI_DEFAULT) failed with SQL error 1017:              147  0.130879

4 ETW000  [     dev trc,00000]     ORA-01017: invalid username/password; logon denied

4 ETW000                                                                                                  71  0.130950

4 ETW000  [     dev trc,00000]  server_detach(con=0,stale=1,srvhp=022fdfd0)                               35  0.130985

4 ETW000  [     dev trc,00000]  Server handle (con=0,svchp=022faa28,srvhp=022fdfd0) detached             847  0.131832

4 ETW000  [     dev trc,00000]  Free server handle srvhp=022fdfd0 of con=0                                52  0.131884

4 ETW000  [dbsloci.c   ,00000]  *** ERROR => CONNECT failed with SQL error '1017'                        136  0.132020

4 ETW000  [     dev trc,00000]  -->oci_get_errmsg (con=0, rc=1017)                                        56  0.132076

4 ETW000  [     dev trc,00000]     OCIErrorGet() -> SQL error code: 1017                                 125  0.132201

4 ETW000  [     dev trc,00000]  ORA-01017: invalid username/password; logon denied

4 ETW000                                                                                                  41  0.132242

4 ETW000  [     dev trc,00000]  ocica() -> SQL error code 1017,1017                                       31  0.132273

4 ETW000  [     dev trc,00000]  Info: 99=DBSL_ERR_DB, oerr=1017, try to connect with default password.

4 ETW000                                                                                                  54  0.132327

4 ETW000  [     dev trc,00000]  Connecting as SAPSR3/<pwd>@GCI on connection 0 (nls 0) ... (dbsl 721 140314, UNICODE[2])

4 ETW000                                                                                                  48  0.132375

4 ETW000  [     dev trc,00000]  Allocating server context handle                                          31  0.132406

4 ETW000  [     dev trc,00000]  Attaching to database server GCI (con=0, svchp=022faa28, srvhp=022fdfd0)

[janos_mucsi-besze]

Hi Rajesh,

I suspect that there is a problem with synonyms and/or possibly there are more than 1 SAPUSER table existing.
I suggest you to remove all OPS$ users + SAPUSER table(s) and recreate them from scratch with ORADBUSR.SQL file.

The script is available in note 50088 and within file oradbusr10.zip. Please check the SQL file for correct syntax.
Before I forget, although the note says 'windows' the SQL file is OS independent of course.

Regards,

János

[former_member185239]

Hi Rajesh,

Follow the below steps :

1. Change the password of the SAPSR3 and SYSTEM user with the help of brconnect.

    If your brconnect is not able to connect to database then change the password of SYSTEM user first

    Alter user SYSTEM identified by <password without @ character)

2. Then logon to the sqlplus

    - sqlplus /nolog

    - connect SYSTEM/<password provided in the first step> (it will connect to the database)

3. onec it got connected to database , then you can run the brtools to change the password of SAPSR3 user without giving the @ special character.

4. After changing the password of SAPSR3 , then try to logon to the database

    sqlplus /nolog

    Connect SAPSR3/<password given in step 4>

    if it get connected , then comeout from the sqlplus and run the R3trans -d command.

also do check the owner of SAPUSER table and also do paste the output of SAPUSER table.

select * from "OPS$<SID>ADM".SAPUSER;

if your password is not encrypted then your default password will work in this scenario.

If you are still getting the error , then follow the steps of sapnote 400241

With Regards

Ashutosh Chaturvedi

[Former Member]

Hello All,

Thanks for replying, and I have applied all the solutions provided by you people, but no luck

some where the password "SAP" for sapsr3 is hard coded in the system, but how do we find where it hard coded.

[former_member207186]

Hi Rajesh,

You can also perform the steps of section 'General checks' of SAP Note 400241 for troubleshooting. Since you want to change password, please also check carefully point 5 and 7 of SAP Note 562863 for the simplest and safest way of consistent password change.

Regards,

Bíborka

[fidel_vales]

Rajesh Gopagani wrote:

Hello All,

Thanks for replying, and I have applied all the solutions provided by you people, but no luck

some where the password "SAP" for sapsr3 is hard coded in the system, but how do we find where it hard coded.

Hi,

"sap" is the default password for the SAP schema user. As you mention it is hardcoded, in the SAP kernel code. You cannot see this or change this.

With the "clasic" login method, SAP will try to get the new password connecting with the OPS$ user.

if this is not possible then it will try the "sap" password.

If you do NOT change the password properly (meaning, using the brconnect method) or do not have properly configured the OPS$ then SAP will not be able to get the correct password and will try to connect with the mentioned default one.

This is how it works and you cannot change it (using the classic conection method in ABAP) unless you change to Secure Store.

I'm not sure how many time it was mentioned that you change the password with BRCONNECT and you have been pointed to several notes.

currently, I#m not sure what is the problem you are facing

[former_member207186]

Hi Rajesh,

Since you want to change password, please check carefully point 7 of SAP Note 562863 - "FAQ: Logon mechanisms" for the simplest and safest way of consistent password change with brconnect.

You can also check the SAP KBA 1576837 - "ORA-01017: invalid username/password".

Regards,

Bíborka

[Former Member]

Hello Rajesh,

Here are some useful commands to solve the problem:

To unlock the user if it's locked:

In sqlplus:

alter user SAPSR3 identified by XXXX account unlock;

To update the password of SAPSR3 gracefully:

brconnect -c -p init<SID>.sap -l E -f chpass -o SAPSR3 -password XXXXX

As other experts had said, try giving a password without characters...

Regards,

Serhat

[JamesZ]

Hi,

The problem here is OPS$ user <sid>adm is not able to connect oracle via /@.

Please refer to SAP note 400241.

Whenever you want to change SAP user's password, you have to use brtools as per SAP note
522863 point 7.

Best regards,
James

[fidel_vales]

Hi,

Why arre you not changing the password with BRCONNECT as you should?.

the error is clear and you are doing something wrong. Use the SAP tools (menu BRTOOLS or command BRCONNECT)

[former_member182657]

Hi Rajesh,

a wired issue while changing the SAPSR3 schema password, other than default password "SAP".

For the issue i suggest you to follow SAP KBA  1576837 - ORA-01017: invalid username/password;

& notes   1534597 - Using such special characters as "@" in a password

(Assuming you may be using special characters while changing the password as desired,apart from the default one i.e SAP ).

Addition to it you could also refer note 1617976 - Case sensitive logon with Oracle 11g

Hope your issue will get resolved after following these.

Good luck !!