SAP Message 01419 - Password hash is rejected; password is deactivated

Diagnosis
As of Basis release 7.0 (software component SAP_BASIS), the systemsupports a new type of (potentially non-backward compatible) passwords,which can consist of up to 40 characters (instead of only 8), and forwhich the system differentiates between upper- and lower-case.
These systems can be configured so that that only accept passwords ofthis new type. The system uses the code version todetermine which characteristics a user password has, and the procedurewith which the password hash value was calculated.
If the profile parameter login/password_downwards_compatibility is setto the value 0, the system supports only password hash values of the newtype (code version 'F'). If a password hash value of the olderconstruction type (code version 'A' / 'B' / 'D') is then received by asystem of this type through CUA, the system rejects the receivedpassword. This can occur in the following cases:

  • During the distribution of user data (for example, after a new password
  • is assigned in the CUA central system), if the CUA child system has aBasis release > 6.40
    • During the transfer of user master records (from a CUA child system to a
    • CUA central system with a Basis release > 6.40

      System Response
      The system rejects the received password; the password is deactivated inthe target system.