RFC - SAP_UPGRADE_SHADOW_SYSTEM

[Former Member]

Hi all,

I'm not sure if anyone can be of help but here goes.

During an Audt of a SAP Basis implementation when checking the the table SM59 we came across a user SAP_UPGRADE_SHADOW_SYSTEM. It was found that there was no password or user associated with this. I can email the print screen to anyone if that helps.

What we are trying to determine is whether or not this poses any threat to the system. If anyone has any idea about this any help would be fantastic.

Cheers

[Former Member · Accepted solution]

Hi,

its not user, its RFC connection with (by default) empty user and password fields. To use this RFC connection someone will have to type in (or pass) valid username and password (so I think its not a big threat to system security).

Regs,

FS

http://www.icg.pl/sap