SMD_AGT user getting locked frequently in Solution Manager

[harshavarddhan_pandeya]

Hi, User SMD_AGT getting locked frequently within 1 hr,  in Solution Manager system 7.1 SP12. All the agents are registered with SMD_AGT user without any issue.I have also checked through RFC; credentials are fine. SM21 05:19:09 DIA  014 100 SAPJSF                      US  1 User SMD_AGT locked due to incorrect logon M  ***LOG US1=> Login, Wrong Password (SMD_AGT ) [sign.c      4862] No dump in the system for this isseu and nothing in the trace. Please suggest on this. Thanks, Harsh

[Former Member]

Hi Harsha,

It is cleared that due to wrong password SMD_AGT locked,so you can switch on the trace for SMD_AGT in ST01. Also you can enable audit logs for further analysis.

Kind Regard's

Mirza Ismail

[former_member204080]

Hi,

PLease check below thread if any of the suggestion will help you

http://scn.sap.com/thread/3775257

Regards,

Murali

[harshavarddhan_pandeya]

Hi Prakhar, I followed the note but still my issue persists. There are 85 agents and all are authenticated after agent restart. Not sure why still getting locked. SMD_AGT credntials are updated in system preparation again and all agent are restarted. Password is correct that I have checked from test RFC. Thanks, Harsh

[rishav54]

Hi Harsha,

Can you check the Jco destinations etc if anything is using this id, any background job which is using this,

Can you activate the SM19 security audit log and try to analyze with SM20 and check from which IP address this user is being used.

Hope it helps.

Thanks

Rishav

[Sriram2009]

Hi Harsha

1. You can check the RFC connection testing using the SAP standard program "RSRFCCHK".

     Refer the SCN Wiki link

Best Practice - How to analyze and secure RFC connections - Security and Identity Management - SCN W...

2.  You can enable the user auditing for the user SMD_AGT by using the transaction code to enable SM19 / SM20. Kindly refer the SCN link about Auditting

Regards

SS

[prakhar_saxena]

Hi Harsha,

Incase you would like to change the password for this user its not straight forward and has to be done properly based upon solman stack version level

check below SAP note for steps

2119627 - Change the Password for the Diagnostics Agent Connection User in SAP Solution Manager

Thanks

Prakhar

[Former Member]

Hi Harish,

This issue might occurs due to wrong password maintained while connecting Agents during installation.

Also there might be a chance where password is changed for SMD_AGT user after Agents connectivity with Solman.

You can run below Solman connectivity script (only one) to maintain the new password.

smdsetup managingconf hostname:"sapms://<fqn>" port:"<MS HTTP port>"[optional user:"<value>" pwd:"<value>" servername:"<value>"]

or

smdsetup managingconf hostname:"<fqn>" port:"<P4 port>"[optional user:"<value>" pwd:"<value>" servername:"<value>"]

If still it does not resolve your issue.

You can switch on the trace for SMD_AGT in ST01. Also you can enable audit logs in SM19.

Regards,

Jaskirat Singh

[rishav54]

Hi

Can you check the STAD dumps, mainly the users being wrongly maintained in RFC.

Please check where else this user is being used.

Regards

Rishav

[harshavarddhan_pandeya]

Hi Rishav, Nothing in STAD also. This issue still persists. Thanks, Harsh