sap* & DDIC - unlock and password reset

[former_member201054]

Hi ,

We have ECC 6.0 ehp4 on AIX 7.1 & DB2 10.5 platform

how to do the following for db2 10.5

1) checking the status of sap* & ddic from OS level ( whether its locked or not)

2) unlocking the users( sap* and DDIC)

3) resetting the password of sap* and DDIC at OS level

Please help for the above commands

Thanks in advance

[former_member186228]

Dear Daniel,

You can use below command,

1) checking the status of sap* & ddic from OS level ( whether its locked or not)

          db2 select UFLAG, BNAME, MANDT from <schema>.USR02 where BNAME='SAP*';

2) unlocking the users( sap* and DDIC)

          db2 update <schema>.USR02 set UFLAG=0 where BNAME='SAP*' and MANDT=<client>;

3) resetting the password of sap* and DDIC at OS level

        db2 delete from <schema>.USR02 where BNAME='SAP*' and MANDT=<client_no>;

Regards,

Jithin M

[former_member201054]

Hi,

thanks for the reply.

what could be the "schema" name to place in the command.

Thanks in advance.

[former_member186228]

Dear Daniel,

you can check your schema name using below command,

db2 " select tabschema from syscat.tables where tabname = 'SVERS' "

Most of the case schema will be SAPR3 or SAP<SID>

Regards,

Jithin M

[jimguo]

Hi,

You can check the value of column UFLAG in table USR02 to see if the user is locked and update the value to unlock the user. however, you need to reset table buffer using /$tab or restart system.

If you need to reset password, you can use the steps as suggested in the above reply.

You need to restart system after you change profile parameter and update data in table USR02.

Thanks.

Jim

[Former Member]

Dear

if you have done new installation or you have done system copy then the default password for sap*

is pass if it is not entering into system with this password means that is locked you need to delete that entry

for logging into system with sap* you need to

1)set parameter login/no_automatic_user_sapstar = 0 , if it is 1 change it to 0 otherwise system won't    allow you to go inside login screen

2)logon as db2<adm>

   db2 "select bname ,mandt from <shema>.usr02 where bname='SAP*'";

   db2 "update <schema>.usr02 set bname="SAPSTAR" where bname='SAP*' and mandt='###'";

above command will delete the entry and when you login next time it will automatically creates the SAP* entry with default password   pass

after this you can able to login to client with SAP*  and password is pass

hope this will help you

Regards

[former_member186228]

Dear Rajendra,

db2 "update <schema>.usr02 set bname="SAPSTAR" where bname='SAP*' and mandt='###'";
above command will delete the entry and when you login next time it will automatically creates the SAP* entry with default password   pass

     As per my knowledge the above command is not proper. We have to change UFLAG entry from USR02 table. and the above query wont delete the entry which is an update statement.

[former_member201054]

Hi,

Please answer for the 1 and 2 questions as well

Thanks in advance