Register Login
Python Photoshop SAP Java PHP Android C++ Hadoop Oracle Interview Questions Articles Other

SAP DDIC Activity

Updated May 18, 2018

Hi Gurus,

- Our PRD system is using SAP ECC 6.0 EHP5 with 2 physical servers: APP and DB. We've load balancing, active log shipping and DB clustering.
- Both servers are using Windows 2008 R2 (Enterprise) with MS SQL Server 2008 R2.
- Current DB size is about 90GB with about 200 active users.
- Audit log had been activated on both servers.

FYI, we've already changed DDIC account to a non dialog type (system) and it's only being used when there is a proper authorized request and approval.

So far this account has not been used, however, when we checked the system audit log using SM20, we've noticed that there are some logon activities by this account for executing a batch job program (RSBTCRTE).

-> "Terminal" and "TCode" columns are empty.
-> Program: RSBTCRTE
-> Message Text: Logon Successful (Type=B)

Here are some SM20 output on DDIC account:

Name Date Time User Terminal TCode Program Message Text
SAP-PRD 31.07.2013 11:46:46 DDIC RSBTCRTE Logon Successful (Type=B)
SAP-PRD 31.07.2013 11:46:55 DDIC RSBTCRTE Logon Successful (Type=B)
SAP-PRD 31.07.2013 11:46:55 DDIC RSBTCRTE Logon Successful (Type=B)
SAP-PRD 31.07.2013 11:46:58 DDIC RSBTCRTE Logon Successful (Type=B)
SAP-PRD 31.07.2013 11:46:58 DDIC RSBTCRTE Logon Successful (Type=B)

We've checked all over on our system and could not figured it out.

We've checked SM59 for all jobs and there are no any batch jobs scheduled using this account and for this particular date and time.

We know logon "Type=B" is used for background job and nobody should be able to use this account to logon and perform anything as this is a non dialog account.

We wanted to know where to check and find out why DDIC is performing this activity and what is this RSBTCRTE program about?

Appreciate if anybody help out on this issue.

Thank you in advance.

Comments

  • 02 Aug 2013 6:00 am Sushma
    Hi Gurus,

    - Our PRD system is using SAP ECC 6.0 EHP5 with 2 physical servers: APP and DB. We've load balancing, active log shipping and DB clustering.
    - Both servers are using Windows 2008 R2 (Enterprise) with MS SQL Server 2008 R2.
    - Current DB size is about 90GB with about 200 active users.
    - Audit log had been activated on both servers.

    FYI, we've already changed DDIC account to a non dialog type (system) and it's only being used when there is a proper authorized request and approval.

    So far this account has not been used, however, when we checked the system audit log using SM20, we've noticed that there are some logon activities by this account for executing a batch job program (RSBTCRTE).

    -> "Terminal" and "TCode" columns are empty.
    -> Program: RSBTCRTE
    -> Message Text: Logon Successful (Type=B)

    Here are some SM20 output on DDIC account:

    Name Date Time User Terminal TCode Program Message Text
    SAP-PRD 31.07.2013 11:46:46 DDIC RSBTCRTE Logon Successful (Type=B)
    SAP-PRD 31.07.2013 11:46:55 DDIC RSBTCRTE Logon Successful (Type=B)
    SAP-PRD 31.07.2013 11:46:55 DDIC RSBTCRTE Logon Successful (Type=B)
    SAP-PRD 31.07.2013 11:46:58 DDIC RSBTCRTE Logon Successful (Type=B)
    SAP-PRD 31.07.2013 11:46:58 DDIC RSBTCRTE Logon Successful (Type=B)

    We've checked all over on our system and could not figured it out.

    We've checked SM59 for all jobs and there are no any batch jobs scheduled using this account and for this particular date and time.

    We know logon "Type=B" is used for background job and nobody should be able to use this account to logon and perform anything as this is a non dialog account.

    We wanted to know where to check and find out why DDIC is performing this activity and what is this RSBTCRTE program about?

    Appreciate if anybody help out on this issue.

    Thank you in advance.
  • 02 Aug 2013 6:00 am Sushma
    Hi,

    The User DDIC is used internally by the system to manage Data dictionary objects, mainly in Client 000
    This user should not be locked or deleted.
  • 02 Aug 2013 6:00 am amit butola
    Thanks for your reply and advice.
    We're aware of DDIC usage, that's why it's not locked or deleted, the account is only changed to system account as stated.

    We wanted to know where to check and find out why DDIC is performing this activity and what is this RSBTCRTE program about?

    Anybody else can help?

    Thanks.
  • 05 Aug 2013 5:43 am Sushma
    Hi,

    RSBTCRTE is an internal program that run periodically during the day. The Documentation is only in German, but it has something to do with Performance and Printing.
    It has been hardcoded to use DDIC to run.
  • 05 Aug 2013 5:44 am amit butola
    Thanks again for your response and advice.

    Will it be possible to check on this RSBTCRTE job?

    Where it's being scheduled and its schedule frequency?

    We need any supporting documents or SAP Notes to show it to our management and auditor.

    Thanks.
  • 05 Aug 2013 5:44 am amit butola
    Hi,

    Can anyone else help me out with this issue?

    Thanks.
  • 05 Aug 2013 5:44 am Sushma
    Hi,

    RSBTCRTE

    Function:
    Executes the program with the selections entered on the selection screen. The resulting list is also displayed on the screen.

    It seems to me, RSBTCRTE is a program that starts background job based on some (predefined) inputs as in the case of schedule background jobs. There is nothing to be concerned about.

    Try using tcode SA38 and run RSBTCRTE and see the resulting screen.

    I hope this helps.
  • 14 Aug 2013 12:51 pm amit butola
    Hi Gurus,

    Thanks for your response.

    Is there any supporting document or Notes from SAP on this program (RSBTCRTE)?

    Thanks.
  • 16 Aug 2013 7:15 am Sushma
    Hi,

    Sorry there is no real documentation. Have you opened a message with SAP and asked them?
Recommended Posts:
×