SAP Note 721548 - XI 3.0: Changing the passwords of the XI service users

Version: 7

Validity: Valid Since 21.03.2006

Symptom

You want to change the passwords of the XI service users in XI 3.0.

More Terms

XIREPUSER, XIDIRUSER, XILDUSER, XIRWBUSER, XIAFUSER, XIISUSER, XIAPPLUSER,

SAPJSF

Cause and Prerequisites

The XI service users that are created during the installation of XI 3.0 are subsequently created in the R/3 system and added to the exchange profile with the passwords that were set during the installation. The users are maintained in various links and transactions during the Post Installation Steps.

If you want to change the passwords, you have to change them everywhere in a consistent way.

Solution

You must change the passwords at the following locations:

1. Transaction SU01 in the R/3 system:

You must change the passwords for the R/3 ABAP.

2. Exchange profile - server settings:

Call the XI exchange profile using:

http://<xi host>:<j2ee port>/exchangeProfile

Select the 'Connection' link and adjust the password for the XILDUSER user.

3. Exchange profile:

You must now change the passwords in all parameters of the exchange profile to declare them to the Java applications.

To do this, start the Exchange Profile as described in section 2, and adjust the changed passwords.

4. SLDAPICUST

In transaction SLDAPICUST, adjust the password for the XIAPPLUSER user.

5. Transaction SM59, INTEGRATION_DIRECTORY_HMI destination:

In Transaction SM59, adjust the password for the XIISUSER user in the HTTP INTEGRATION_DIRECTORY_HMI destination.

6. SLD bridge in the J2EE Administrator Tool:

Log on to the J2EE Administrator Tool. Under "Cluster --> Server --> Services --> SLD data supplier", change the password for the relevant user.

7. PMI Store destination in the J2EE Administrator Tool:

Log on to the J2EE Administrator Tool. Under "Cluster --> Server --> Services --> Destinations", change the password for the XIRWBUSER user in the HTTP pmistore destination.

8. Adapter Framework Messaging Fallback User

Log on to the J2EE Administrator Tool. Using Cluster --> Server --> Services --> Adapter Framework Messaging, change the password for the corresponding users in the following parameters:

messaging.isconfig.password for the user in messaging.isconfig.username

messaging.system.eventHandler.XI.isconfig.password for the user in messaging.system.eventHandler.XI.isconfig.username

These parameters no longer exist as of Support Package 04. In this case, you do not need to make any changes at this point.

9. SM59 connections for end-to-end monitoring

In SM59, adjust the user password in all connections that start with PMI*. You must adapt the connections under 'R3 connections' and 'HTTP connections for external server'.

In addition, adapt the passwords in the systems to those that indicate the SM59 connection, if this is not the XI itself.

10. SM59 connections for GRMG monitoring

In SM59, change the user password in all connections that start with XI_GRMG*. You must adapt the connections under 'HTTP connections to R/3 systems' and under 'HTTP connections to external server'.

In addition, adapt the passwords in the systems to those that indicate the SM59 connection, if this is not the XI itself.

11. Restart the J2EE engine.

12. Links with sending business systems:

In addition, you must check in all sending systems whether you are using one of the service users (for example, XIAPPLUSER) to log on to the XI system and change the passwords in the relevant systems.

For this purpose, check the relevant SM59 destinations and logon data in the sending adapters.

You should also refer to the Post Installation Steps described in the XI 3.0 Installation Guide.

If you change the password of the SAPJSF user, note that it must also be changed for the RFC connections that are used in XI. To do this, log ontothe J2EE administrator tool and change the password in the individual RFC destinations in 'Cluster --> Server --> Services --> JCo RFC Provider'.

Choosing the Set pushbutton and then stopping and starting the destination transfers the changes.

Checking the service links

After you have changed the passwords, perform the checks that are described

in the Installation Guide under Post Installation Activities:

a) Checking the installation - Part 1

b) Checking the installation - Part 2

c) Testing the Cache Refresh

Download original note @ https://service.sap.com/sap/support/notes/721548