User Account Is Locked 

Problem Description

Users report that they cannot login to the J2EE Engine via the Visual Administrator tool. The following text is displayed in the TaskError window in the Visual Administrator:

javax.security.auth.login.LoginException: com.sap.engine.services.security.exceptions.BaseLoginException: User not authorized.

   ..…

Caused by: com.sap.engine.services.security.exceptions.BaseLoginException: User is locked.

      …

There is a message in the server’s log file (/log/system/security.log.*):

   …

Invalid password for user TEST_USER .

Invalid password for user TEST_USER.

Invalid password for user TEST_USER .

Invalid password for user TEST_USER .

Invalid password for user TEST_USER .

Invalid password for user TEST_USER .

<systemuser>   | USERACCOUNT.MODIFY | USERACCOUNT = UACC.PRIVATE_DATASOURCE.un:TEST_USER   | | SET_ATTRIBUTE: lockreason=[1], SET_ATTRIBUTE: islocked=[true]

User 'TEST_USER' locked after 6 unsuccessful attempts to login.

Scenario Type:	Error analysis
NetWeaver Component:	J2EE Engine
Validity:	J2EE version >= 6.30

Decision Roadmap

Prerequisites

-

Main Tools

Visual Administrator

Analysis

Possible reasons:

...

       1.      The password was being changed from someone with the administrator’s rights without your knowledge

       2.      Someone is trying to guess your password

       3.      You forgot your password

       4.      You changed your password but some external tool does not know about that (for example getting the JNDI context with a wrong password will also lock the user’s account)

Solution:

·        Ask the J2EE Engine administrator to unlock your account using administrator’s account (via the Visual Administrator : Select  server_X_Y  ®  Services  ®  Security Provider  and the User Management tab).

·        If the locked account is the only administrator’s account, follow the instructions in note 669848.

Additional Information

-