SAP Knowledge Base Article - Preview

3330395 - Frequently failed logins of the user sapsa reported by Auditing - SAP ASE for BS

Symptom

  • ASE auditing parameter "audit trail type" is enabled to syslog.
  • Failed logins from the user sapsa are being reported in the OS syslog file (ie /var/log/secure file), coming from the application server.
     
    Example event:
    Feb 23 13:31:01 <server_app_host> SAP_ASE_AUDIT: <SID>| 45 | 2 | 0 | Feb 23 2023  1:31PM | 1 | 0 | 1 |  |  | sapsa | master |  |  | sa_role sybase_ts_role replication_role mon_role js_admin_role; ; ; ; <ASE_host>, <IP_adress>, network password rsa encryption with nonce, 4067.14.1; ; sapsa/ase;  |

    Note: 45 is event column = login , 4067.14.1 = where error is 4067 "Login failed because an incorrect password was supplied"  <Error number.Severity.State> - more information in the "Audit table - values in Event and Extrainfo columns" documentation.

  • The command "/usr/sap/hostctrl/exe/saphostctrl -function LiveDatabaseUpdate -dbname <SID> -dbtype syb -updateoption TASK=VALIDATE_SEC_STORES " is returning "invalid" status for the user reported in the event:

    ASE_USER_STORE_NAME=<ASE_host>
    ASE_SAPSA=invalid


Read more...

Environment

  • SAP Adaptive Server Enterprise (ASE) 16.0 for Business Suite
  • SAP Netweaver (All versions)

Product

SAP Adaptive Server Enterprise 16.0 ; SAP NetWeaver all versions

Keywords

ASE, user store, login failed, syslog, event, audit , KBA , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.