Online Tutorials & Training Materials | STechies.com
Register Login

Is it possible to store Sap User's Password in a table if yes how ?if no why ?

|| 26 Jan 2010 6:33 am || 4

Hiii Experts,

Dear All ,
can anyone tel me about below things

  1. is the users password is stored in any table like usr01, usr02 etc ?
  2. can i get the sap user's password from any DB table ?
  3. if yes how ?. if no why ?

and also desribe the password hash Key
 

Regards
Anil


Comments

  • 27 Jan 2010 12:06 pm
    1 hi there yes the users name and passwords are stored in usr02 table in database

    2 you can only view password of default users like sap* and ddic by running report rsusr003 using se38 trans
  • 28 Jan 2010 1:14 pm
    abstracted from sapnote 2467
    3. How is the password stored?
    The password is stored in the database as a hash value (a reversal is not possible: the relevant plaintext password cannot be determined from the hash value). MD5 and (as of NetWeaver 7.0) SHA-1 with a deterministic "Salt" are used as the hash functions. As of NetWeaver 7.1, password hash procedures with a randomly generated "Salt" are also supported (see Note 991968).
  • 22 Feb 2010 1:22 pm
    Hi Anil,

    Sap password hashes are stored in usr02 table. they are called bcode and passcode. RSUSR003 is very restricted. you can use http://www.esnc.de/password-auditor.html for recovering the passwords. i think it also works for netweaver 7.1.

    also have a look at password profile parameters (login parameters)

    are you trying to reset the default passwords only?
  • 28 Aug 2010 2:40 pm
    use can see the in the table usr40(table for illegal paswword)