SAP ASE Sybase password change procedure for user sapsa,SAPSR3 & sapsso

For the OS user syb<sid>, who owns the database, the password is stored in the SAP secure storage and in the operating system. To update password at all location we need to use sybctrl utility for more information please follow the SAP note 1796540 - SYB: Password changes with sybctrl.

Below steps will provide simple steps to change password and more troubleshooting information to change password on ABAP system with SAP ASE Sybase database.

1. Login using sidadm user and identify the sybcntrl utility under exe directory.

Hostname-001:sidadm 77>cdexe

Hostname-001:sidadm 77>pwd

Hostname-001:sidadm 77>/sapmnt/sid/exe/uc/linuxx86_64

Hostname-001:sidadm 77>ls sybcntrl

2. To change password of users use below command:

2.1 for sapsa

/sapmnt/sid/exe/sybctrl set_sapsa_passwd

2.2 for SAPSR3

/sapmnt/sid/exe/sybctrl set_connect_passwd

2.3 for sapsso

/sapmnt/sid/exe/sybctrl set_sapsso_passwd

Command will ask for old password and to confirm new password.

If password change is not successful in first attempt, below are the scenarios and relevant troubleshoot information:

1. with error message

"Error: setting password for connect user failed."                           

Check log at "/var/tmp/sybctrl/dev_sybctrl" OR /home/sidadm Log contains below error information

Write connect user/password to secstore Error: setting DB_CONNECT/DEFAULT_DB_USER in secure storage failed 3, SSFS-1670: update of the secure storage is locked for update by user "sidadm" from host "Hostname" since "2016-07-04 22:21:13 UTC".

Remove lock using below command and re-run password change steps:

Hostname-001:sidadm 69> rsecssfx removelock

Verify the password stored in secure store for all users using below command:

 Hostname-001:sidadm 77> sybctrl verify_secure_store  

It will show one line for each user check for failed users and re-run the command to update password.

Remove lock and try to run sybctrl again for failed users.

Hostname-001:sidadm 69> rsecssfx removelock

2. use rsecssfx utility to remove lock and update new password

From sybctrl log you get the message like secure store is locked remove lock using below command

Hostname-001:sidadm 69> rsecssfx removelock

Try to manually update password in secure store and at DB level using below steps:

Check username for password change

Hostname-001:sidadm 77> rsecssfx list

Update password in secure store

Hostname-001:sidadm 77> sybctrl verify_secure_store

Hostname-001:sidadm 77> rsecssfx put DB_CONNECT/SYB/SADB_PASSWORD 'NewPassword'

Hostname-001:sidadm 77> sybctrl verify_secure_store 

Login using sapsso and issue :

isql>alter login SAPSR3 with password "<sapsso-password>" modify password "<newpassword>"

go

3. If the password change fail check your version of sybctrl utility and update it

Hostname-001:sidadm 75> sybctrl version

In first line, it will show the version of sybcntrl utility.

Download latest version of sybctrl from SAP store and follow as below instructions

Backup directory  /sapmnt/SID/exe/uc/linuxx86_64

and update sybctrl by below command

SAPCAR -xvf SYBCTRL_317-80000800.SAR

sybctrl version to verify sybctrl is updated and it will show updated version information on first line.