fail to login HANA with SYSTEM user (pw reset not help..)

[former_member146669]

Dear folks,

Need your help about this task which supposed to be easy...

One day I found that i cannot I failed to logon HANA with user SYSTEM.

Then i tried to reset user referring to as I did before..

But this time no luck....after hdbindexserver -console....the command ALTER....password   have no response....I dont know why.

Then i found that there is another way which is even more convenience to do so.

that is SAP HANA Academy - SAP HANA Security: Reset SYSTEM Password [SPS 09] - YouTube  with command

hdbindexserver -resetuserSystem

The output show evernthing alright..but...what the hell..i still cannot login.....(invalid user/name pw....)

I tested in both HANA studio and DBCO (sap t-code)...

Is it related to issue of "INVALID_CONNECT_ATTEMPTS"??    I

know it can be reset..but i cannot even logon studio...how can i execute sql to reset.....

Any idea, please help.

Regards

Gary

[anindya_bose]

HI Gary

Did you already go through this link ?

HANA Tutorials: How to use SAP HANA HDBSQL to execute SQL commands at OS level.

Cheers

Anindya

[former_member146669]

I tried this before. But it require SYSTEM user password to login.
And it is my problem that my SYSTEM user password do not work...

[anindya_bose]

Bad condition to be in ...Do you have any user with USER_ADMIN role available ?  Can he/she run the below SQL ? Do you have SIDADM login information ?

ALTER USER SYSTEM ACTIVATE USER NOW

You can also start the system in console mode and create  a brand new user id .  You can run any SQL command with that ID.

Check this below blog also, it has  some information .

[former_member146669]

Thanks for your prompt reply.

I also want to try this method...but the server seems do not accepting ANY sql command after hdbindexserver -console...you can see below screen....and thats' why I didn't use ALTER command to reset password this time..

[anindya_bose]

As per the document, first nameserver was started and then indexserver was started.  You probably also started compile server before starting index server.

Before starting did you also check if any of the hdb service is running ?

Can you try afresh exactly as per the steps mentioned in the document.

[former_member146669]

Yes, didn't say to start compile server before index server console. But if the compile server do not start, the hdbindexserver -console will be failed.

This guide SAP HANA Academy - SAP HANA Security: Reset SYSTEM Password [SPS 09] - YouTube also told to start compile server as well.

Therefore i think the steps are correct.  (actually I did the same before and it was working to reset pw.)

I think it is version to make the steps a bit different...

I even reboot the whole system but not help..

[anindya_bose]

Not sure if it is possible to change the value of parameters from OS level. Just a  wild guess....

If yes, you can try setting  "maximum_invalid_connect_attempts"  to big number  like 100 and

"password_lock_for_system_user"   to false  .  Can you check if you see these parameters in indexserver.ini file ?

Also check the trace of indexserver , it might say why it is unable to take a SQL command .

Please also tag @Lars , he might be able to provide some expertise...

Cheers

Anindya

[former_member146669]

I could not find related parameter and ini files.

Below are the files i found.

saphana:HDB:bwhadm /sapdata/HDB/global/hdb/custom/config 120> ls -ltr

total 24

drwxr-x--- 3 hdbadm sapsys 4096 Dec 29 11:44 lexicon

-rw-rw-r-- 1 hdbadm sapsys 7408 Dec 29 11:44 hdbconfiguration_1

-rw-r--r-- 1 hdbadm sapsys  147 Dec 29 11:45 nameserver.ini

-rw-r--r-- 1 hdbadm sapsys   42 Dec 29 11:46 webdispatcher.ini

-rw-r--r-- 1 hdbadm sapsys   42 Dec 29 11:48 statisticsserver.ini

um....seems i can only tag when creating the message?

Can i still do it now? Seems no option for this ..

[anindya_bose]

I can see for my system maximum_invalid_connect_attempts has been set as 3 ( default 6) .under password policy .

Not sure why you cannot see indexserver.ini .  Let me tag a real expert in this area.

, can you please provide a way in this situation ?

Cheers

Anindya

[rindia]

Hi Gary,

Use this after after hdbindexserver -console

ALTER USER SYSTEM PASSWORD Admin@123

[former_member146669]

Thanks Anindya.

[former_member146669]

Hi Raj,

Yes, I know this method but it just doesn't work this time.

As mentioned above and you can see in my capture,there is no response after the ALTER command.....

[anindya_bose]

Hi Gary

I know your ALTER *** commands hangs and does not give a success message.  Is that the case with CREATE statement also ? 

Do you see any log in indexserver trace file ?

password_lock_for_system_user  false  ?

Did you already try creating an indexserver.ini or global.ini and put a value for the above mentioned parameter and then restart DB ?

Check this note for help. 

http://service.sap.com/sap/support/notes/2036111

I assume this is your sandbox system, otherwise please contact SAP support. 

Cheers

Anindya

[lbreddemann]

From what I read in this thread the system could have been messed up a bit during the tries to reset the password.

I recommend to have this checked by SAP support.

Maybe by now the system is also stuck with a log full situation...