When a user logins to the HANA system, the following steps are performed −Step 1 The system authenticates the user using the configured mechanism.Example − When User name/password authentication is being enforced, the provided user name and password are verified.Step 2The system verifies that the user's account is within its validity period.In the system view USERS, the columns VALID_FROM and VALID_UNTIL must contain effective values for the user in question.However, this is an optional parameter that a user administrator can set during user provisioning.Step 3The next step is system verifies that the user's account is active.This can be performed by checking ... Read More
You can use parameter detailed_error_on_connect: Indicates the detail level of error information returned when a logon attempt fails.Parameter detailed_error_on_connectDefault Value falseAdditional Information When you set this parameter to false, only the information authentication failed is returned.When this parameter is set to true, the specific reason for failed logon is returned −Invalid user or passwordUser is lockedConnect try is outside validity periodUser is deactivated
Parameter password_expire_warning_timeDefault Value 14 (days)Parameter definitionNotification is transmitted via the database client (ODBC or JDBC) and it is up to the client application to provide this information to the user.If you enter the value 0, the user does not receive notification that his or her password is due to expire.The system also monitors when user passwords are due to expire and issues a medium priority alert. This may be useful for technical database users since password expiration results in the user being locked, which may affect application availability. It is recommended that you disable the password lifetime check of technical ... Read More
You can check this information under New User in SAP HANA. The below snapshot shows the New User dialog in SAP HANA Studio and the password rule that is displayed when hovering over the password field.
You can achieve this by running the below SQL query −>CREATE USER TEST password “Welcome1$$” VALID FROM ‘2017-12-05 11:00:00’
UNTIL ‘2018-12-08 12:00:00’;
CREATE USER DUMMY password “Welcome1$$” VALID FROM NOW UNTIL FOREVER;Note that password passed in this SQL should meet password policy of SAP HANA system otherwise user creation will be failed.
Following privileges are required −You need to have the system privilege INIFILE ADMIN.You need to have the object privileges SELECT, INSERT, and DELETE for the _SYS_PASSWORD_BLACKLIST table (_SYS_SECURITY).
It is recommended that password policy should be configured using Security editor of SAP HANA Studio however this can also be done by editing indexserver.ini file.Note that direct changes to the indexserver.ini file cannot be audited.