Hi,
One user id is getting locked every day at same time automatically with wrong password .
When we check SUIM for change documents we see that value for the lock as 128 ( incorrect password)
and the tcode for the lock is KRNL. and we dont have any other information regarding this.
we have cheked table USR02 as well but did not find any more information
We are manually unlocking everyday as of now but don know the exact reason why is it being locked.
We also checked for any jobs running on the same user id and also any RFC connetions using this user id but did not find any in RFSDES.
The user id is getting locked at alomost same time every day so We dont believe its a manual attempt.
today iam configured the sm19 system log configure this log showing below imformation
| Report DSVAS_APPL_CSA_UPD_TASKSTATUS Started |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| Password check failed for user BASIS in client 100 |
| RFC/CPIC Logon Failed, Reason = 1, Type = S |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| Password check failed for user BASIS in client 100 |
| RFC/CPIC Logon Failed, Reason = 1, Type = S |
| Password check failed for user BASIS in client 100 |
| RFC/CPIC Logon Failed, Reason = 1, Type = R |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| Password check failed for user BASIS in client 100 |
| RFC/CPIC Logon Failed, Reason = 1, Type = S |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| Password check failed for user BASIS in client 100 |
| User BASIS Locked in Client 100 After Erroneous Password Checks |
| RFC/CPIC Logon Failed, Reason = 1, Type = S |
| Successful RFC Call RFC_SYSTEM_INFO (Function Group = SRFC) |
| RFC/CPIC Logon Failed, Reason = 53, Type = S |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| RFC/CPIC Logon Failed, Reason = 53, Type = S |
| Successful RFC Call RFC_PING (Function Group = SRFC) |
| RFC/CPIC Logon Failed, Reason = 53, Type = S |
| RFC/CPIC Logon Failed, Reason = 53, Type = R |
Please check the same and let us know if there is any other way to find out REASONS why the user id is being locked and please also let us know if there are any logs to find the same.