SAP ABAP Message Class 01 Message Number 419 (Password hash is rejected; password is deactivated)
Hierarchy
SAP_BASIS (Software Component) SAP Basis Component
   BC-SEC-USR-ADM (Application Component) User and Authorization Management
     SUSR (Package) ABAP User Administration
Attribute
Message class 01  
Short Description General Basis, e.g. user and authorization maintenance    
Message Number 419  
Documentation status       Space: object requires documentation
Authorization check Error Message      
Changed On 20130531   
Message Text
Password hash is rejected; password is deactivated
Help Document

Diagnosis

As of Basis release 7.0 (software component SAP_BASIS), the system supports a new type of (potentially non-backward compatible) passwords, which can consist of up to 40 characters (instead of only 8), and for which the system differentiates between upper- and lower-case.

These systems can be configured so that that only accept passwords of this new type. The system uses the code version to determine which characteristics a user password has, and the procedure with which the password hash value was calculated.

If the profile parameter login/password_downwards_compatibility is set to the value 0, the system supports only password hash values of the new type (code version 'F'). If a password hash value of the older construction type (code version 'A' / 'B' / 'D') is then received by a system of this type through CUA, the system rejects the received password. This can occur in the following cases:

  • During the distribution of user data (for example, after a new password is assigned in the CUA central system), if the CUA child system has a Basis release > 6.40
  • During the transfer of user master records (from a CUA child system to a CUA central system with a Basis release > 6.40

System Response

The system rejects the received password; the password is deactivated in the target system.

Procedure

Procedure for System Administration

History
Last changed on/by 20140121  SAP 
SAP Release Created in