sap系统关于系统登录和密码的主要参数设置

TomaketheparametersgloballyeffectiveinanSAPSystem(systemprofileparameters),settheminthedefaultsystemprofileDEFAULT.PFL.However,tomaketheminstance-specific,youmustsetthemintheprofilesofeachapplicationserverinyourSAPSystem.Todisplaythedocumentationforoneoftheparameters,chooseToolsCCMSConfigurationProfileMaintenance(transactionRZ10),specifytheparameternameandchooseDisplay.Onthefollowingscreen,choosetheDocumentationpushbutton.PasswordChecksParameterDescriptionlogin/min_password_lngDefinestheminimumlengthofthepassword.Defaultvalue:3;permissiblevalues:3–40UntilSAPNetWeaver6.40(inclusive),upto8characters.login/min_password_digitsDefinestheminimumnumberofdigits(0-9)inpasswords.Defaultvalue:0;permissiblevalues:0–40AvailableasofSAPWebAS6.10(UntilSAPNetWeaver6.40(inclusive),upto8characters.)login/min_password_lettersDefinestheminimumnumberofletters(A-Z)inpasswords.Defaultvalue:0;permissiblevalues:0–40AvailableasofSAPWebAS6.10(UntilSAPNetWeaver6.40(inclusive),upto8characters.)login/min_password_specialsDefinestheminimumnumberofspecialcharactersinthepasswordPermissiblespecialcharactersare,inparticular,!@$%&/()=?'`*+~#-_.,;:{[]}\|andspaceAfterSAPNetWeaver6.40,allcharactersthatarenotlettersordigitsareregardedasspecialcharacters.Defaultvalue:0;permissiblevalues:0–40AvailableasofSAPWebAS6.10(UntilSAPNetWeaver6.40(inclusive),upto8characters.)login/password_charsetThisparameterdefinesthecharactersofwhichapasswordcanconsist.Permissiblevalues:0(restrictive):Thepasswordcanonlyconsistofdigits,letters,andthefollowing(ASCII)specialcharacters:!@$%&/()=?'`*+~#-_.,;:{[]}\|andspace1(backwardcompatible,defaultvalue):Thepasswordcanconsistofanycharactersincludingnationalspecialcharacters(suchasä,ç,ßfromISOLatin-1,8859-1).However,allcharactersthatarenotcontainedinthesetabove(forvalue=0)aremappedtothesamespecialcharacter,andthesystemthereforedoesnotdifferentiatebetweenthem.2(notbackwardcompatible):Thepasswordcanconsistofanycharacters.ItisconvertedinternallyintotheUnicodeformatUTF-8.IfyoursystemdoesnotsupportUnicode,youmaynotbeabletoenterallcharactersonthelogonscreen.Thisrestrictionislimitedbythecodepagespecifiedbythesystemlanguage.Withlogin/password_charset=2,passwordsarestoredinaformatthatsystemswitholderkernelscannotinterpret.Youmustthereforeonlysettheprofileparametertothevalue2afteryouhaveensuredthatallsystemsinvolvedsupportthenewpasswordcoding.AvailableinthestandardsystemasofSAPWebAS6.40.login/min_password_diffDefinestheminimumnumberofcharactersthatmustbedifferentinthenewpasswordcomparedtotheoldpassword.Defaultvalue:1;permissiblevalues:1–40AvailableasofSAPWebAS6.10(UntilSAPNetWeaver6.40(inclusive),upto8characters.)login/password_expiration_timeDefinesthevalidityperiodofpasswordsindays.Defaultvalue:0;permissiblevalues:0-1000login/password_change_for_SSOIftheuserlogsonwithSingleSign-On,checkswhethertheusermustchangehisorherpassword.AvailableasofSAPWebAS6.10,asofSAPBasis4.6bySupportPackagelogin/disable_password_logonControlsthedeactivationofpassword-basedlogonThismeansthattheusercannolongerlogonusingapassword,butonlywithSingleSign-Onvariants(X.509certificate,logonticket).SeeLogonDataTabPageAvailableasofSAPWebAS6.10,asofSAPBasis4.6bySupportPackagelogin/password_logon_usergroupControlsthedeactivationofpassword-basedlogonforusergroupsAvailableasofSAPWebAS6.10,asofSAPBasis4.6bySupportPackagelogin/min_password_lowercaseSpecifieshowmanycharactersinlower-caselettersapasswordmustcontain.Permissiblevalues:0–40;defaultvalue0AvailableafterSAPNetWeaver6.40login/min_password_uppercaseSpecifieshowmanycharactersinupper-caselettersapasswordmustcontain.Permissiblevalues:0–40;defaultvalue0AvailableafterSAPNetWeaver6.40login/password_history_sizeSpecifiesthenumberofpasswords(chosenbytheuser,nottheadministrator)thatthesystemstoresandthattheusercannotuseagain.Permissiblevalues:1–100(unit:numberofentries);defaultvalue5AvailableafterSAPNetWeaver6.40login/password_downwards_compatibilitySpecifiesthedegreeofbackwardcompatibilitytobeachieved.Thedefaultvalueis1,wherethevalueshavethefollowingmeaning:0Withlogin/password_downwards_compatibility=0,passwordsarestoredinaformatthatsystemswitholderkernelscannotinterpret.Thesystemonlygeneratesnew(backwardincompatible)passwordhashvalues.1Thesystemalsogeneratesbackwardcompatiblepasswordhashvaluesinternally,butdoesnotevaluatetheseforpassword-basedlogons(toitsownsystem).Thissettingisrequired,ifthissystemisusedasthecentralsystemofaCentralUserAdministrationthatsystemsthatonlysupportbackwardcompatiblepasswordhashvaluesarealsoconnectedtothesystemgroup.2Thesystemalsogeneratesbackwardcompatiblepasswordhashvaluesinternally,whichitevaluatesifalogonwiththenew,non-backwardcompatiblepasswordfailed.Inthisway,thesystemcheckswhetherthelogonwouldhavebeenacceptedwiththebackwardcompatiblepassword(truncatedaftereightcharacters,andconvertedtoupper-case).Thisisrecordedinthesystemlog.Thelogonfails.Thissettingistoallowtheidentificationofbackwardincompatibilityproblems.3Aswith2,butthelogonisregardedassuccessful.Thissettingistoallowtheavoi