SAP Knowledge Base Article - Public

3789493 - Consuming SAP Datasphere via ODBC fails with error "414 user is forced to change password"

Symptom

  • ERROR [S1000] [SAP AG][LIBODBCHDB DLL][HDBODBC] General error;414 user is forced to change password: alter password required for user
  • Connection attempt from an ODBC client (for example, MS Excel, Power BI) fails when using a newly generated database user password
  • The system-generated password includes multiple special characters (for example: [] {} () , ? * = ! @)

Environment

  • SAP Datasphere

Reproducing the Issue

  1. In Space Management, open the target space, go to Database Access, and request a new password for the database user.
  2. Configure an ODBC connection using the SAP HANA ODBC driver.
  3. Test or establish the ODBC connection and observe error 414 indicating the user is forced to change the password.

Cause

  • The password policy requires a password change on first login for the database user. ODBC clients cannot complete an interactive first-login password change, resulting in error 414.

Resolution

  1. Disable password lifetime for the user

    • In Space Management → Database Access → open the user → disable "Enable Password Lifetime". Then request a new password and the force change flag will no longer be set.

  2. Change the password manually via Database Explorer with SQL:
    ALTER USER "SPACE_TECHNAME#<USER_NAME>" PASSWORD "<NEW_PASSWORD>"
  3. Adjust the password policy globally.
    • In Configuration → Security → Password Policy → set "Force First Password Change" to disabled. 
    • This applies to all database users going forward.

See Also

Keywords

odbc, error 414, user is forced to change password, alter password required for user, hana odbc, hdbodbc, first login, force first password change, password lifetime, database access, multitenant, tls/ssl, database explorer, alter user, excel , KBA , DS-SM , Space Management , Known Error

Product

SAP Datasphere all versions