Symptom
A technical user in SAP HANA Extended Application Services, Advanced Model (XSA) is frequently locked or in deactivated status due to too many failed login attempts.
(In this example case the technical user is SYS_XS_RUNTIME.)
The following logs can be seen:
- In xscontroller.out
[2020-02-12 16:15:42:399]-[Installation.Misc]-[log]: Can't connect to the system DB with user 'SYS_XS_RUNTIME', using the credentials from the SSFS.
[2020-02-12 16:15:42:550]-[Installation.Misc]-[log]: Can't connect to any tenant database with user 'SYS_XS_RUNTIME', using the credentials from the SSFS. Assuming XSA
is located within the system DB. - In security audit log:
CONNECT;INFO;CONNECT;;;;;;;SYS_XS_RUNTIME;UNSUCCESSFUL;;;;;;authentication failed at ptime/query/catalog/catalog_authmgr.cc:920;;101477;<sid>adm;;;;;;;;;;;;;;;;;;;;;
- In nameserver_<XXXXXXXXXX>.<XXXXX>.000.trc:
23224]{-1}[34/-1] 2018-12-22 02:08:25.615848 e Authentication catalog_authmgr.cc(00919) : lock time for user SYS_XS_RUNTIME is 1440 minutes; user is locked until 2018-12-23 08:08:18.9760000 (given in UTC) [1440,2018-12-23 08:08:18.9760000]
[23224]{-1}[34/-1] 2018-12-22 02:08:25.615894 e Authentication catalog_authmgr.cc(00503) : Unexpected exception occurs in CatalogAuthMgr::invalidConnect: authentication failed
[23224]{-1}[-1/-1] 2018-12-22 02:08:25.615992 d Authentication Connection.cc(03226) : exception during authentication: ERROR [SQL-10] authentication failed at ptime/query/catalog/catalog_authmgr.cc:920
exception 1: no.71000010 (ptime/query/catalog/catalog_authmgr.cc:920)
ptime::PtimeException
Read more...
Environment
SAP HANA Extended Application Services, Advanced Model
Product
SAP HANA, enterprise extended edition all versions
Keywords
SYS_XS_RUNTIME, SYS_XS_RUNTIME locked, SYS_XS_RUNTIME frequently locked, XSA technical user locked, lock time for user, deactivated, too many login attempts, change password, update password, SYS_XS_HANA_BROKER, users, xsa, change, update, password , KBA , BC-XS-RT , OP Runtime / XS Controller , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.