sap*被锁定及basis事务码

所有？是否包括超级用户SAP*？
如果sap*未锁定，可以用sap*登陆解锁，用户数少可以手工在su01里解，用户数多的话，可以用catt or abap程序的方式批量改，table字段为usr02-UFLAG.
如果sap*也锁定了，那就得黑一把了： 首先，确认参数文件login/no_automatic_user_sapstar的值为0； 然后，直接登陆到数据库中，删除USR02表中，相应client的SAP*用户，不要删错罗；） 最后嘛，再用SAP*登陆该client，使用口令PASS，进去再做上面说的操作。 -----------------------

所有用户都被锁了,当然进不了系统,也用不了rz10了,去目录底下看 /usr/sap/SID/SYS/profile/(instance profile) 找login/no_automatic_user_sapstar这个参数,如果没找到说明sap*可以用来登陆,如果值是1,说明sap*被deactive了,要改成0. 然后sqlpus去删除sap*: delete from sapr3.usr02 where mandt='<client>' and bname='SAP*';             commit; 最后重启SAP instance 来activated新的profile. 用sap*登陆后可用su10批量来解其他用户.

------------------------------------------------------

 

how to reset DDIC and SAP* password 如何解除DDIC 和SAP* 用户全被锁定

I'll give the awnser from my issue practise as below:

1, logon the operate system as <sid>adm. for example:  logon the server by user slmadm and password. slm is the slm's sid, slmadm is the admin for slm. if slm was installed on the single PC, this step can be ignored. if slm and dev or ide or prd were installed on the one server together, this step is important.

2, cmd - > sqlplus /nolog

3, sql > connect /as sysdba

4, sql > delete from sapsr3.usr02 where bname='SAP*' AND mandt='001';

5, sql > commit;

6, sql > exit

note: the key step is 4,  001 is the wanted client, you can change it. sapsr3.usr02   is used be. you can see it use : "select owner,table_name from dba_tables where table_name='USR02'; ". finally, ";" cannot be ommitted.

7, then you can logon 001 with sap* (password is pass). needn't restart the instance. and you can change or unlock any other users by sap*.

8, enjoy it!

 

SM01   锁定解锁事务码

SM02    发送即时消息

SM59   RFC连接配置

---

 

dbco    创建数据库连接

db02，SAP访问的TNSNAMES  在数据库级别配置tnsnames.ora 路径/sapmnt/DEV/profile/oracle

DB01  查看数据库的WAIT

DB14   DBA的操作记录，查看brtools的报错

---

RZ11   查看参数

RZ10       查看参数文件

RZ20   ccms监视器设置

RZ21   监控 属性和方法

 

---

SPRO    后台配置

Snro       spo_num （打印的序号）

---

ST04OLD  →详细分析