Reset SAPSR3DB Password Failed using SAP brtools - Manual Way updating SecStore

-

 Refer to SAP note 1592575 - Recreating Secstore.properties and secstore.key for 7.00/7.01/7.02 J2EE Netweaver systems

Download the attachments.


BEWARE: THE POWERPOINT CONTAINS INCORRECT SYNTAX.

BEWARE: THE LAST COMMAND IN THE TXT FILE HAS A TYPO.


the steps in that note might not directly rrelfectted here. but these steps are valid.


Exmaple of executions as below:


# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar com.sap.security.core.server.secstorefs.SecStoreFS create -s ECD -f Sec.properties -k sec.key -enc -p Password1

SAP Secure Store in the File System - Copyright (c) 2003 SAP AG


Store with encryption and a key phrase created.

# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar com.sap.security.core.server.secstorefs.SecStoreFS insert -s ECD -f Sec.properties -k sec.key admin/user/ECD SAPSR3DB

SAP Secure Store in the File System - Copyright (c) 2003 SAP AG


Key/value pair inserted.

# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar com.sap.security.core.server.secstorefs.SecStoreFS insert -s ECD -f Sec.properties -k sec.key admin/password/ECD Password1

SAP Secure Store in the File System - Copyright (c) 2003 SAP AG


Key/value pair inserted.

# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar com.sap.security.core.server.secstorefs.SecStoreFS insert -s ECD -f Sec.properties -k sec.key admin/port/ECD 1527

SAP Secure Store in the File System - Copyright (c) 2003 SAP AG


Key/value pair inserted.

# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar com.sap.security.core.server.secstorefs.SecStoreFS insert -s ECD -f Sec.properties -k sec.key admin/host/ECD NodeECD01

SAP Secure Store in the File System - Copyright (c) 2003 SAP AG


Key/value pair inserted.

# java -classpath tc_sec_secstorefs.jar:exception.jar:iaik_jce.jar:logging.jar:opensqlsta.jar:jdbc20.jar com.sap.sql.connect.OpenSQLConnectInfo create_dr jdbc/pool/ECD oracle.jdbc.pool.OracleConnectionPoolDataSource jdbc:oracle:thin:@NodeECD01:1527:ECD SAPSR3DB Password1 ECD Sec.properties sec.key

Driver successfully created

#

Once created, you can replace original SecStore witn the newly created keyt and properties file.

Make sure chmod 600.


//alak


Comments

Post a Comment

Popular posts from this blog

SAP Backdoors {placeholder Post]

-
This is a placeholder for future post, on backdooring SAP servers: 1. SAP profile SETENV_xx parameter - if get local access, or SAP level access can cat or echo a line into profile parameter file - concatenated command for SETENV_+xx param 2. Using ABAP program + SM37 - ABAP program to fetch comamnd from a remote server (HTTP-GET ABAP Function Module) - schedule job every 2 minits interval - for that job, set spool recipient to remote attacker email so output can be sent over - Pre-req: SCOT configuration, Auth for SM36, SE38 to be continued.. //alak
Read more

Fiori Apps Keep Calling Internal Hostname / Internal FQDN

-
Image
Had this issue where certain apps calls internal hostnames or internal FQDN when clicking or spawning webdynpro URL or any calling of internally hosted attachment. To change this setting, general steps as below: Check the app is using which local Alias - is it LOCAL or S4PS or S4FIn or whatever Check in /UI2/V_ALIASMAP / /UI2/V_ALIASCAT that alis is mapped to which alias. Check in SM59 under HTTP Connections to ABAP System if let say the Alias name is LOCAL, so there should be three LOCAL_xx created, which are: LOCAL_HTTP LOCAL_HTTPS LOCAL_HTTPT SO change for each of this, to the correct FQDN or hostname Hope this helps someone. //alak
Read more