R/3 Security Guide : VOLUME II
Short summary:
Security Measures when Using SAP Shortcuts. Useful Procedures in User Authentication. administrator should only be able to perform certain tasks. You can also explicitly set locks for specific users. As of Release 3.1G, you can also specify that R/3 ...
Long summary:
You can use the report RSUSR006 (available as of Release 3.0E) to find out whether any known user
has unsuccessfully attempted to logon. This report records the number of incorrect logon attempts by a
user and user locks. We recommend that you schedule this report to run on a regular basis (daily).
â ¢
As of Release 4.0, you can use the Security Audit Log (Transactions SM18, SM19 and SM20) to
record all successful and unsuccessful log-on attempts. Unknown user names and terminal number
from where the logon or logon attempt occurred are also included in this log. See Chapter 2-9 :
Logging and Auditing for more details.
â ¢
The system terminates a session if a set number of consecutive unsuccessful attempts to log on under
a single user-id is exceeded (as specified in the profile parameter
login/fails_to_session_end
).
â ¢
You can hinder unauthorized access over an already logged-on user by configuring your R/3 System to
automatically log users off if they have been inactive for a set period. Specify this value in the profile
parameter
rdisp/gui_auto_logout
.
â ¢
The system locks a user-id if a set number of consecutive unsuccessful attempts to logon is exceeded
under a single user ID. Set the number of invalid logon attempts that are allowed in the profile
parameter
login/fails_to_user_lock
.
The system removes such locks at midnight on the same day; however, you can also manually
remove locks at any time. You can also explicitly set locks for specific users. As of Release 3.1G,
you can also specify that R/3 should not remove user locks automatically. (Set this flag in the profile
parameter
Source: web.mit.edu
Search Terms:
Related
R/3 Security Guide : VOLUME II, Security Measures when Using SAP
Shortcuts. Useful Procedures in User
Authentication. administrator should only
be able to perform certain tasks. You can
also explicitly set locks for specific
users. As of Release 3.1G, you can also
specify that R/3 ...,
more
R/3 Security Guide : VOLUME III, Reducing the Scope of Authority Checks in
R/3
Is it necessary to reduce the scope of
authority checks? our Security Consulting
Team within the SAP Administrator. group?
How are the access control lists for R/3
resources defined usr sap ...,
more
Setting Up Your SAP Enterprise Portal System Landscape, SAP EP 6.0 provides a visual portal
administrator tool (System Administration
System Configuration System) that lets you
easily modify or copy system landscape
files from within the portal ...,
more
