Question:
Renaming user id's? Bapi SO_USER_LIST_READ return data that does not
match up. Please explain why column SAPNAM and USRNAM do not match up after a rename.
SAPNAM USRNAM OCSNAM USR US USRNO ADRNAME
B1362HWB B1362HWB USR 29 214
B1362SCC4 B1362SCC4 USR 29 414
B1362SPRO B1362SPRO USR 29 172
B1362SPRO1 B1362SPRO1 USR 29 173
B1362TEST B1362TEST USR 29 700
B1362RENAME B1362TEST USR 29 192
B1362TEST2 B1362TEST2 USR 29 147
B1362TEST3 B1362TEST3 USR 29 148
B1362TEST4 B1362TEST4 USR 29 149
B1362TEST5 B1362TEST5 USR 29 150
B1362TEST6 B1362TEST6 USR 29 151
B1362TEST7 B1362TEST7 USR 29 152
B1362TEST8 B1362TEST8 USR 29 153
B1362TESTBB B1362TEST88 USR 30 993
B1362TEST88 B1362TEST88 USR 30 994
If you look at user b1362test and b1362rename they both have the same
name in column USRNAM = b1362test. The same for B1362testBB and
B1362test88 in cloumn USRNAM they both have the same name. Is there a known oss note to fix this problem?
thanks
SAPSEC
Answer:
Working as designed.
Your BAPI is reading the address management system not the user table. The addresses never disapear so when you recreate an ID the address information is returned.. THe old Address is there and the new renamed user. SAme will occur in the SU01 F4. You have to verify the table against the USR02 tabl eor use another search.
Answer:
Thanks John,
Now saying that we have just found out that we have a duplicate in the SAPNAM column? Now we are trying to understand why this is happening. Are we using the right BAPI (so_user_list_read) to find all the userid on a system and why isn't the SAPNAM not unique?
Thanks
sapsec
Answer:
Working as designed... The SO on the BAPI indicates you are looking at SAPOffice info not user ids so you are not using the correct function module to find the USER IDs in the system. Look at the F4 ( a search help USER_ADDR) in SU01 on the user ID ( though you will get orphaned IDs)
Or use the CHECK Table Get function module and retreive table USR02
Answer:
Thanks again John,
Should we start running the RSSOUSCO on a periodical basis so that the SAPNAM column matches up with the usr02 table? Then the so_user_list_read BAPI would be in sync.
thanks
SAPSEC
Answer:
You could if the report indeed cleans the file up the way you expect it to. I would use a better function module like CHECKTABLE_GET or the direct view table USER_ADDR select.