on 04-07-2015 4:37 AM
Hi Rajendra,
Are you getting any error while login to the portal with J2EE_ADM_SID?
It may sometimes happen that a user enters the wrong password a number of times (by default, 3) and if that user is the administrator, then the administrator user is locked. This prevents all sorts of things happening.
To unlock the administator, use the following process
You need to use the Config Tool and the process is:
1) Go to the Server Installed path i.e. usr/sap/SID/<system instance>/j2ee/configtool\
2) Choose configtool.bat and start it.
3) Under Global Server Configuration, choose Services.
4) Find com.sap.security.core.ume.service, click it.
5) Under Global Properties, find ume.superadmin.activated
6) Set the Custom value to TRUE. Click on SET to apply the new value
7) Apart from that, you have to set another property i.e.
😎 ume.superadmin.password, define some password.The password that you are defining is for SAP*. save the changes.
9) Restart the cluster / server. Issue the command stopsap to do so.
10) Log on to Portal with SAP* as user and the defined password.
11) Create a User with Super Administrator role.
12) Go back to Config Tool and set the Custom Value as default value i.e. FALSE. save the changes.
13) Restart the Server.
Incase if you deploy a Application i.e. a Webdynpro or PAR and the Admin Password is not configured properly or is locked then
1) Go to Config Tool.
2) Choose Secure Store, right click.
3) Choose Admin\Passowrd\Systemid\
4) Set the Password value, choose add and save.
5) Restart Server.
If you are able to logon to Visual Admin , You can create a new user and assign him administrator group or Reset password .
1) Go to the Server Installed path i.e. \usr\sap\<systeid>\<system instance>\j2ee\admin\go.bat Or in UNIX /usr/sap/<systeid>/<system instance>/j2ee/admin/go .
2) Choose go.bat / go and start it.
3) Under Cluster ->Server<number>, choose Security Provider .
4) Select Tab 'Runtime' and Inner Tab 'User Management' , Click Create User .
5) And then assign to group Administrators .
6) No Need to restart J2EE engine , Open http://<hostname>:<port>/irj/portal .
7) Now go toUser Administration -> Identity Management , Search for Administrator user and Unlock it . etc ....
Regards,
Krishna
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Rajesh,
You can activate SAP* and before try with j2ee_admin master pwd.
Regards,
Deva
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Rajesh,
For activating SAP* .Please follow the link
How to activate emergency user on AS Java - Basis Corner - SCN Wiki
Regards,
Deva
Hi ,
Yes.. in NW7.3 there is no Visual admin concept.
You have to activate the sap* user from Configtool, after activating we need to login to NWA with SAP* user and unlock the respective user.
Please refer Deva link and let us know.
http://wiki.scn.sap.com/wiki/display/Basis/How+to+activate+emergency+user+on+AS+Java
Regards,
Krishna
Dear
I am very much thankful to you for your immedaite answer but i am very new to portal server
i am not able to start configtool our is linux we need to start vncserver for this and i don't know that in windows we can start directely but in linux we need start vnc server
kindly send me step to connect to vncserver
i ran the command vncserver from root user after that what to do i don't know
Regards
Hi Rajendra,
The steps mentioned by Krishnaiah Kammari is what you need to follow. Outline is...
Activate SAP*--> Restart Java --> Unlock the Administratior user and reset the password using user administration--> Deactivate the SAP* user --> Restart Java. Done!!!!
You may also create an extra user say Admin1 replica of Administrator user to avoid such cases in future.
Also, NWA is nothing but Visual admin now in later releases.
Regards,
Prithviraj
Hi,
That's great..! your vnc is running fine.
Did you installed vnc software in any windows system for connecting the sap system?
Please follow the procedure ( if already installed vnc in windows 😞
1) Double click on VNC where you installed in windows system
2)provide your SAP server name(host name or IP address) and click on ok
3)provide the password
Regards,
Krishna
Dear
Thanks for your kind support now i have installed VNC viewer on my system and i run configtool.sh
and not able to change the ume.superadmin.activated to FALSE to TRUE the edit option is not activated is there is ant way to activate the set custom value it is in disable mode
and not able to set ume.superadmin.password to password all are in disable mode only
kindly suggest
Regards
Hi ,
Please follow the below steps :
Procedure:
- Navigate to /usr/sap/SID/J*/j2ee/configtool/
- run the executable configtool.sh
- Expand the nodes Global server config > Services > com.sap.security.core.ume.services
After providing the values for "ume.superadmin.activated" and "ume.superadmin.password" click on set option :
and finally click on apply changes for server.
after saving the settings, please restart the system and let us know.
Regards,
Krishna
Dear
I am able to set the value as you said and restart the server but no luck i think there is problem with user locking this is some other issue
when i give password to SAP* also it won't respond anything what could be the reason
i have checked database table through brtools but there is lot of space in table
i think i have to search in logs now kinldy help which log to check
Regards
Hi rajendra,
Hope you are doing good.
Nice to hear from you again.
It is possible that you made the changes in the configtool, but the actual DB does not have this change. For this you have to check the values in the offline configtool:
Login to the configtool->switch to the configuration editor
mode->configuration->cluster_data->server-> cfg> services->
Propertysheet com.sap.security.core.ume.service
and check the SAP* parameters.
Hope this helps.
_ _ _ _ _ _ _ _ _
Kind Regards,
Hemanth
SAP AGS
_ _ _ _ _ _ _ _ _
User | Count |
---|---|
83 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.