SAP Security Note

1515926 - Update #1 to Security Note 1414256 Language English

Header Data
Released On Release Status Component Other Components 29.02.2012 15:51:14 Released for Customer BC-CTS-TMS Transport Management System BC-SEC Security

Priority Correction with high priority Category Program error Externally Reported Yes

Symptom
SNC and domain links for changing the TMSADM password are supported as of this note. This is still restricted to Release 4.6C or higher.

Other Terms
TMSADM, password, EPS

Reason and Prerequisites

There are security requirements.

Solution
Implement the attached correction instructions or the relevant Support Package in all systems of the domain or of the connected domains. Start the report that is described in Note 1414256 on the domain controller or on all of the domain controllers of the connected domains.

-----------------------------------------------------------------------|Manual Pre-Implement. | -----------------------------------------------------------------------|VALID FOR | |Software Component SAP_BASISSAP Basis compo...| | Release 46CSAPKB46C60 - SAPKB46C61 | -----------------------------------------------------------------------Add the parameter DOMAIN to the interface of the function TMS_SEC_CHANGE_PWD as described below: *"IMPORTING *" VALUE(STAGE) TYPEFLAG *" VALUE(LOCAL_DOMAIN) TYPEFLAG OPTIONAL *" VALUE(TMS_PWD) TYPECHAR100 OPTIONAL *" VALUE(TEST_USER_LEN) TYPEINT4 DEFAULT 12 *" VALUE(DOMAIN) TYPETMSDOMNAM OPTIONAL

Validity
Software Component From Rel. SAP_BASIS 46C 620 700 710 To Rel. And Subsequent 46C 640 702 730

Correction Instructions
Correction Instructions

Software Component Valid from Valid to Number SAP_BASIS 46C 46C 930888

46C 620 620 620 640 700 700 701 701 702 702 702 710 711 720

46C 620 620 620 640 700 700 701 701 702 702 702 710 711 720

930885 1433378 1433373 923885 923890 924367 923891 924206 923892 923914 1433390 1433391 923915 923916 923917

Support Packages & Patches

Support Packages

Software Component Release Support Package SAP_BASIS 700 SAPKB70023 701 SAPKB70108 730 SAPKB73001 46C SAPKB46C62 730 SAPKB73002 620 SAPKB62070 710 SAPKB71012 702 SAPKB70207 711 SAPKB71107 720 SAPKB72005 640 SAPKB64028

References
This document refers to:
SAP Notes 1023437 ABAP syst: Downwardly incompatible passwords (since NW2004s) 1412609 DUPREC when configuring the transport domain 1414256 Changing TMSADM password is too complex 1486759 Blocking unauthorized access to system using TMSADM to 4.6B 1488406 Handling the generated user TMSADM 1494899 CHANGE_SUPPLIED_PARAMS_ONLY indicator 1504652 Consulting: Secure Configuration of Application Server ABAP 1801805 EinfhrungneuerDestinationenimTMS_UPDATE_PWD_OF_TMSADM 761637 Logon restrictions prevent TMSADM logon

This document is referenced by:

SAP Notes (8) 761637 Logon restrictions prevent TMSADM logon 1023437 ABAP syst: Downwardly incompatible passwords (since NW2004s) 1486759 Blocking unauthorized access to system using TMSADM to 4.6B 1488406 Handling the generated user TMSADM 1494899 CHANGE_SUPPLIED_PARAMS_ONLY indicator 1504652 Consulting: Secure Configuration of Application Server ABAP 1412609 DUPREC when configuring the transport domain 1414256 Changing TMSADM password is too complex