Unable to lock user! from J2EE visual admin

[Former Member]

Hi All,

J2EE_GUEST user in my PI server had been locked and I couldn't unlock it from J2EE visual administrator, and the error is as below :

com.sap.security.core.server.userstore.UserstoreException: Could not write user property for user UACC.R3_DATASOURCE.PISUPER

Caused by: com.sap.security.core.persistence.datasource.PersistenceException: Attribute "lockreason" on namespace "com.sap.security.core.usermanagement" of principal "UACC.R3_DATASOURCE.PISUPER" is not modifiable.

Please come up with solution.....

Regards,

Venkat Titumalasetti

[Former Member · Accepted solution]

Hello Venkat,

Check the which role is assigned to the SAPJSF user in transaction SU01 of the abap stack. If the role is SAP_BC_JSF_COMMUNICATION_RO then J2EE administrator has READ ONLY access to the abap UME. To give change access, switch the role to SAP_BC_JSF_COMMUNICATION (without _RO on the end). You'll need to restart the J2EE instance after changing the SAPJSF role assignment.

The other option is to use transaction SU01 to lock/unlock the users.

Regards,

Nathan

Edited by: Nathan Swenson on Jan 18, 2008 5:34 PM

[Former Member]

Hi Venkat,

Please follow:

1.Call transaction SU01 to check whether the user is locked. Navigate to the Logon Data tab page. This is where information about the lock status is displayed.

2.You can unlock the user in the initial screen. To do this, choose Lock/Unlock.

3.To display more information about the user, choose Display (F7). Check whether the service user has the correct user type, check the radio button for User Type. Make sure the selected value is Service (and not Dialog).

4.Check whether the profiles for the user have been generated. Choose the Profiles tab page. If the profile for the role is not generated, call transaction PFCG.

If these do not help you solve your problem,

5. you can check if the caller side (XI tools, for example, the Integration Builder) uses the correct entries. To do this, you need to call the exchange profile.

a)choose Administration in the navigation area. You have to log on with an SAP XI administrator user.

Choose Administration of Properties --> Exchange Profile.

b).Navigate to:

IntegrationBuilder --> IntegrationBuilder.Directory --> com.sap.aii.Directory.serviceuser.name and .pwd

c)You can also navigate to

IntegrationBuilder --> IntegrationBuilder.Repository --> com.sap.aii.Repository.serviceuser.name and .pwd

d)Check the name of the service user and retype the password that is stored in the SAP User Management

(if you are not sure about the password, retype it in transaction SU01). Then choose Save.

e)Open the SAP XI administration section and choose Administration of Properties --> AII Properties. Then

choose Refresh in the content area (this reads the properties from the exchange profile).

*Pls: Reward points if helpful*

Regards,

Jyoti

[Former Member]

Hi,

Can you please try to unlock the user from SU01 transaction.

Thnx

Chirag