Letus assume all the ids in your SAP system are locked or noone remembers their passwords. So how are you going to login to the system to unlock users or reset passwords. SAP has created a default user id SAP* (SAP Star) for this purpose. The default password for this id is PASS
However, SAP* logon is enabled by default. You would need to add following profile paramter to the instance profile at /usr/sap/<SID>/SYS/profile/<SID>_DVEBMGS<instance>_<host>
login/no_automatic_user_sapstar = 0
You would need to restart for this to take into effect. Then you would be able to login with SAP* and with password PASS provided there is no entry for SAP* user in usr02 table for that client.
If you still can't login after doing above steps it means there is an entry in usr02 table for user SAP* for that particular client. You would need to delete this entry at the dabase level then you would be able to login with SAP* user and default password PASS
Below are the steps to delete the SAP* user from usr02 table for a DB2 database. It would be similar steps and concept for other databases too.
1. Login to your database server as the user db2<sid>
2. Issue below statment to delete SAP* user from usr02 table. Please note that here sapr3 is the default schema, it might be different in you system. And 000 is the client for which we want to reset SAP* (star) password.
db2 "delete from sapr3.usr02 where bname='SAP*' and mandt='000'"
You would now be able login with sap* user id with the default password.
This procedure is also useful when you are not able to login with regular ids after system copy/refresh because of expired SAP license. You will be able login with SAP* id even if when the license is expired then you can isntall the correct licence with SAP* id.
Some times, is mandatory restart the system to complete the procedure.
