SAP Knowledge Base Article - Preview

2749450 - XSA technical user is frequently locked - authentication failed

Symptom

A technical user in SAP HANA Extended Application Services, Advanced Model (XSA) is frequently locked or in deactivated status due to too many failed login attempts.

(In this example case the technical user is SYS_XS_RUNTIME.)

The following logs can be seen:

  •  In xscontroller.out
    [2020-02-12 16:15:42:399]-[Installation.Misc]-[log]: Can't connect to the system DB with user 'SYS_XS_RUNTIME', using the credentials from the SSFS.
    [2020-02-12 16:15:42:550]-[Installation.Misc]-[log]: Can't connect to any tenant database with user 'SYS_XS_RUNTIME', using the credentials from the SSFS. Assuming XSA
    is located within the system DB.

  • In security audit log:
     
    CONNECT;INFO;CONNECT;;;;;;;SYS_XS_RUNTIME;UNSUCCESSFUL;;;;;;authentication failed at ptime/query/catalog/catalog_authmgr.cc:920;;101477;<sid>adm;;;;;;;;;;;;;;;;;;;;;
       
  • In nameserver_<XXXXXXXXXX>.<XXXXX>.000.trc:
       
    23224]{-1}[34/-1] 2018-12-22 02:08:25.615848 e Authentication catalog_authmgr.cc(00919) : lock time for user SYS_XS_RUNTIME is 1440 minutes; user is locked until 2018-12-23 08:08:18.9760000 (given in UTC) [1440,2018-12-23 08:08:18.9760000]
    [23224]{-1}[34/-1] 2018-12-22 02:08:25.615894 e Authentication catalog_authmgr.cc(00503) : Unexpected exception occurs in CatalogAuthMgr::invalidConnect: authentication failed
    [23224]{-1}[-1/-1] 2018-12-22 02:08:25.615992 d Authentication Connection.cc(03226) : exception during authentication: ERROR [SQL-10] authentication failed at ptime/query/catalog/catalog_authmgr.cc:920
    exception 1: no.71000010 (ptime/query/catalog/catalog_authmgr.cc:920)
    ptime::PtimeException


Read more...

Environment

SAP HANA Extended Application Services, Advanced Model

Product

SAP HANA, enterprise extended edition all versions

Keywords

SYS_XS_RUNTIME, SYS_XS_RUNTIME locked, SYS_XS_RUNTIME frequently locked, XSA technical user locked, lock time for user, deactivated, too many login attempts, change password, update password, SYS_XS_HANA_BROKER, users, xsa, change, update, password , KBA , BC-XS-RT , XS Advanced Runtime / XS Controller , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.