ddic and sap* both locked in 000 in R/3

[Former Member]

ddic and sap* are both locked in client 000

it is an oracle db on solaris

how can i get round this and log on to 000

[Former Member]

Take a look at the following threads:

Cheers,

Ben

[Former Member]

You can unlock the same from sql plus, by accesing the table usr02. if ur using NW04s, u've to use sap schema sapsr3<sid>, else use the normal schema id and set the uflag in the table to 16.

sqlplus>SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;

-subbu

[Former Member]

Hi Mike,

Logon to your database with orasid as user id and run this sql:

delete from sapSID.usr02 where bname='SAP*' and mandt='XXX';

commit;

Where mandt is the client.

Now you can login to the client using sap* and password pass.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

Santosh

[Former Member]

Hi Mike,

Santosh is right. But you have also change the instance parameter login/no_automatic_user_sapstar = 0

I think you should create a temp table and move the SAP* record first in that table then remove the record from USR02. Then you can login through SAP gui through SAP* and unlock/change the password of DDIC.

Again you can login on database level and move the SAP* record from the temp table to the USR02. Then login through DDIC and change the password of SAP*.

This is the best way to keep the consistency of the system.

I had the same problem and I followed the same steps as mentioned above.

Regards,

Harish

[Former Member]

Hi ,

If all the users are locked, they can be unlocked by

a)Try this command at ur sql plus query level

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

this will take you to the sqlprompt.

Just execute the earlier commands there.

<b>sqlplus>UPDATE SAP<schema>.usr02 set uflag=0 where mandt=<CLNT NO> and uflag=64;</b>

this statement actually unlocks the users of that particular client. So, try for every client in that sap system.

c) You can delete sap*

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

sqlplus><b>DELETE SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;</b>

<b>Note:-

After doing this restart the system. So, that a new user with the name "sap" gets generated with password "pass". Provided the parameter is set login/no_automatic_user_sapstar= 0 (Automatic user SAP is permitted).</b>

regards,

kanthi