Change Oracle APPS Password : FNDCPASS

With Product Family ATG version H Roll Up 3 , Oracle Introduced New Option in FNDCPASS which is ALLORACLE to Change password of all Schema provided by Oracle Application products. These are basically below three category password
–These are mainly schema password for products like AP, GL, AR (These are also termed as of mode ORACLE )
–Password for APPLSYS and APPS (Same password for both schema) . This is also called as Apps Password (used during CM startup)
–Password for account APPLSYSPUB

How to change Oracle Applications Products/Schema Password including APPS ?
As most of you might already be aware that you use FNDCPASS utility on Concurrent Manager Node.
FNDCPASS logon 0 Y system/password mode username new_password
Where MODE is SYSTEM/USER/ORACLE/ALLORACLE (Introduced with patch 4745998)

Will ALLORACLE mode change other schema passwords like CTXSYS, MDSYS, PORTAL..,SYS, SYSTEM, SCOTT, Application User like AtulKumar …. ??

No ALLORACLE mode will change only schemas mentioned in paragraph 1 and will not change passwords for schemas like CTXSYS, MDSYS, SYS, SYSTEM…..

Is previous Mode SYSTEM/USER/ORACLE still available with FNDCPASS ?
Yes

How to get ALLORACLE mode in FNDCPASS ?
Apply Oracle Apps patch 4745998

What files to change after changing Apps Password ?
You use FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS WELCOME to change Apps Password
–Once you change apps password you need to change apps password stored in file wdbsvr.app at $IAS_ORACLE_HOME/Apache/modplsql/cfg

–In some instances you might have to change in CGIcmd.dat at $ORACLE_HOME/reports60/server

–You also have to change in any custom concurrent manager start up script (If you have any)

Added on 14th August 2007

–If you have configured E-Business Suite with 10g Application Server SSO/OID then after changing APPS password, update provisioning profile with new apps password

oidprovtool operation=modify \
ldap_host=oid_host ldap_port=oid_port \
ldap_user=”cn=orcladmin” ldap_user_password=password \
application_dn=”orclApplicationCommonName=app_name, cn=EBusiness,cn=Products,cn=OracleContext, dc=realm_name” \
interface_connect_info=db_host_name:oid_port:SID:apps:apps_password

like

oidprovtool operation=modify \
ldap_host=oid1.co.in ldap_port=389 \
ldap_user=”cn=orcladmin” ldap_user_password=welcome1 \
application_dn=”orclApplicationCommonName=VIS11I,cn=EBusiness, cn=Products,cn=OracleContext,dc=co,dc=in” \
interface_connect_info=11i.co.in:1521:VIS11I:apps:apps

after changing Apps password bounce Concurrent Managers.

Related
Following Metalink Notes are useful & related to Oracle Applications or Apps Password
–303621.1 How to Change and Which Apps Database Users Passwords Can Be Changed in a Multi-Node Apps Installation?
–159244.1 How To Use FNDCPASS to Change The Oracle Users, APPS, APPLSYS and Application Module Passwords (INV, AR, AP, etc.) For Applications 11.5 in Unix

About the Author Masroof Ahmad

Leave a Comment:

55 comments
Suresh Lakshmanan says March 9, 2007

good one atul.

Reply
ashok says August 21, 2007

good one atul…should APPS and APPLSYS have same password??

Reply
Atul Kumar says August 21, 2007

Yes, APPS and APPLSYS should have same password

Reply
shiva says August 23, 2007

Hi Atul,

How to secure apps password ??
apps password will be displayed with the following incidents:
1) echo $1 or echo $* in any script
2) workflow builder error issue
3) while trasfering alert, we have to give apps password (how to decript the password)
Please let us know in any other ways, users/developers can able to know the apps password in secured instance

Thanks in advance, Shiva

Reply
shiva says August 23, 2007

Hi Atul,

How to secure production instance apps password ??

It will display with the following cases:
1) echo $1 or echo $* in the script (encrypt is not enabled)
2) workflow builder connection error will display apps password
3) while transferring alert, it will display password (is there any way to decript the password)
4) I think oracle has fixed in ad patch application log / report server
Please let us know, how to secure our production instances with this issue.

Thanks sir,
Shiva
6)

Reply
Atul Kumar says August 23, 2007

Shiva,
Can you elaborate more on these apps password issues ?

specially

1) echo $1 or echo $* in the script (encrypt is not enabled)

&

3) while transferring alert, it will display password (is there any way to decript the password)

Reply
shiva says August 23, 2007

Hi Atul,

What are all the precautions to be taken to secure apps password.

Thanks
Shiva

Reply
Samer says August 28, 2007

Hi Atul,

how we can bounce the CM? and how many ways to do the same?

Reply
Atul Kumar says August 28, 2007

Use adcmctl.sh or Administer CM screen from frontend.

Reply
Atul says October 19, 2007

naveed said…
Hi Atul,

Why do we need to have same passwords for both apps and applsys.

And when we change the passwords for any one either apps or applsys do we manually need to make them in sync.

Thanks,
Naveed.

Naveed , No you don’t have to synch them manually. If you change apps password using FNDCPASS it will automatically change APPLSYS password and vice versa.

Reply
naveed says October 19, 2007

Hi Atul,

Thanks a lot …

Reply
Chaitanya says December 21, 2007

Why do we need to have same passwords for both apps and applsys ?

Reply
bilal says January 9, 2008

Very good effort, Atul u are doing a wonderfull job, your blogs are very useful, thanks a lot….
Atul I have some confusion about ALLORACLE, and mode ORACLE used in FNDCPASS.
Can you please emphasize over it with the ALLORACLE syntax in FNDCPASS

Thanks a ton

Reply
Atul says January 9, 2008

Bilal,

ORACLE mode is used to change oracle product schema password like AP, GL, AP, AR, AD…..

Reply
Aashish says February 7, 2008

Hi ,

Atul Please elaborate on why do we need to have Apps and Applsys Schema passwords same ?

Thanks in Advance

Reply
Aarif says April 15, 2008

Hi,

Can anyone tell me how to change sys password in Oracle E bussiness suite

Regards,

Aarif

Reply
Atul says April 15, 2008

For sys & system accounts in apps use normal database commands like

alter user identified by ;

Reply
Aarif says April 16, 2008

Hi Atul,

Thanks but someone told me i need to recreate the password file for changing sys password and for system password i have to use FNDCPASS.
Please confirm that only ‘alter user’ will work.

Thanks & regards,
Aarif

Reply
Atul says April 16, 2008

If you are on 10g and remote_login_passwordfile is set to shared you can’t change “sys” password while system is up (you need to change this to exclusive . Though you can still change ssytem password without any issue)

password file will automatically be updated once you change sys password using “aletr user sys …”

For changing system password, just use “alter user ….” (FNDCPASS is for “NOT” used for system or sys password)

Reply
Aarif says April 16, 2008

Thanks a ton …

Reply
gsat says April 21, 2008

hi atul
what is significance of ‘0’ & ‘Y’ in FNDCPASS statement

Reply
Atul says April 21, 2008

0 is request id (request ID 0 is assigned to request ID’s which are not submitted via Submit Concurrent Request Form.
‘Y’ indicates the method of invocation. i.e. it is directly invoked from the command-line not from the Submit Request Form.

Reply
Pavan Kumar says May 6, 2008

Hi Atul,

Is there a way to retrieve Apps password for R12 instance as we retrieve from wdbsvr.app / CGIcmd.dat file from 11i Instances.

If not – how to set to to default [apps/apps] password.

Thanks in advance.
Pavan.

Reply
Atul says May 6, 2008

You mean if you forgot apps password then how to change ?

I am not sure but try this one : (backup your database first & then)

SQL> alter user apps identified by ;
SQL> alter user applsys identified by ;

Then finally use FNDCPASS to reset one more time

Try this and let us know the results

Reply
abdul_mujeeb84 says June 30, 2008

I have changed APPS password using ALTER USER command by mistake in R12. Then did changes as per doc id 153050.1. When i conn Applications using SYSADMIN user it gives “500 Internal Server Error”. Could you provide any help Atul

Reply
Atul says June 30, 2008

Try this http://onlineappsdba.com/index.php/2008/06/26/how-to-change-apps-password-in-11i-if-you-forget/

or

Restore the FND_ORACLE_USERID and FND_USER tables from a backup and then run FNDCPASS

Reply
munvar says June 30, 2008

Atul, but in R12 wdbsvr.app & CGICMD.dat is not available. I have done these changes in R12. Please give reply.

Reply
Atul says June 30, 2008

Yes there is no mod_plsql in r12 so you don’t see wdbsvr.app

There is no such files in R12 so leave this step in R12.

There is just one file related to map viewer which contains obfuscated apps password.

After using FNDCPASS run autoconfig (recommended) and bounce CM.

Reply
sreepriya says July 1, 2008

UrgenHow to rebuild FND_PROFILE_OPTION_VALUES table in 11.5.10.2

Hello

Do anybody know how to rebuild FND_PROFILE_ OPTION_VALUES table in 11.5.10.2 env.
One of our Scripts over wrote the existing values and created a mess in the table which made the apps instance almost stale and cannot proceed further.
Oracle support was very slow and no solution as of now.

we dont have a backup as it is Projects (DEV)instance lot of work going on in this instance.

Notes:
I ran autoconfig successfully but when i try to start application with adstrtal.sh it gives erros
weired

Cause: afpodbinit failed due to ORA-06502: PL/SQL: numeric or value error: character string buffer too smallORA-06512: at “APPS.FND_DATE” , line 32ORA-06512: at “APPS.FND_GLOBAL” , line 1999ORA-06512: at “APPS.FND_GLOBAL” , line 2170ORA-06512: at “APPS.FND_GLOBAL” , line. The SQL statement being executed at the time of the error was: begin fnd_global.bless_ next_init( ‘FND_PERMIT_ 0000’); fnd_global.initiali ze(:session_ id, :user_id, :resp_id, :resp_appl_id, :security_group_ id, :site_id, :login_id, :conc_login_ id, :prog_appl_id, :conc_program_ id, :conc_request_ id, :conc_priority_ request, :form_id, :form_application_ id, :conc_process_ id, :conc_queue_ id, :queue_appl_ id, :server_id); fnd_profile. put(‘ORG_ ID’, :org_id); fnd_profile. put(‘MFG_ ORGANIZATION_ ID’, :mfg_org_id) ; fnd_profile. put(‘MFG_ CHART_OF_ ACCOUNTS_ ID’, :coa); fnd_profile. put(‘APPS_ MAINTENANCE_ MODE’, :amm); end; and was executed from the file &ERRFILE.

Reply
Arizuddin says August 17, 2008

Do i need to run this FNDCPASS utility from $INST_TOP or $ORACLE_HOME directory? what i know is(if single node installation), Shutdown adstpall.sh,go to $ORACLE_HOME,run FNDCPASS,Run autoconfig (apps_tier) & restart adstrtal.sh. Is it ok or not?

Reply
Atul says August 17, 2008

Arizuddin,
There is only one FNDCPASS which is under FND_TOP/bin you can run it from any place as long as application tier environment file is set and $FND_TOP/bin is in path.

1. Login as application tier and set environment file
$INSTALL_BASE/apps/apps_st/appl/APPS$SID_$hostname.env (R12)
$INSTALL_BASE/appl/APPS$SID_$hostname.env (11i)

2. Run FNDCPASS

3. Run Autoconfig

4. Restart Middle Tier Services

Reply
lata says September 15, 2008

Hi,

the instance which i am working is 11.5.10.2 isnatlled on windows.i cannot see FNDCPASS utility in FND_TOP/bin
i want to add this utility to my applications,can you please tell me how do i do that

thanks
lata

Reply
Atul says September 16, 2008

Lata,
Is this multi node install ? Check in FND_NODES table for CM location. FNDCPASS should be on CM tier.

Reply
cnsmiles says April 15, 2009

well what is this file that is related to map viewer that stores the password for 12i? Following instructions, I just changed the password with the FNDCPASS utility and autoconfig fails. what are the steps? the documentation provided my Oracle does not comply with the files that are actually in the system. There is no ORACLE_HOME/reports60/server/CGIcmd.dat

Reply
Atul Kumar says April 16, 2009

cnsmiles, for r12/12i change password and run autoconfig that is enough.

$IAS_ORACLE_HOME/reports60/server/CGIcmd.dat IS FOR 11i

what error message you are getting while running autoconfig ? (update error message from autoconfig log file)

Reply
cnsmiles says April 16, 2009

Well thats what I did.

I Change the password for applsys and apps as follows:
-Shutdown the Application Stack
-Execute the FNDCPASS commmand
FNDCPASS apps/apps 0 Y system/manager SYSTEM applsys cnsmil44
-Run autoconfig on db stack – This ran successfully
-Ran autoconfig on appl stack – Autoconfig completed with errors
-I looked at the log file and at the very bottom it has the following error

AutoConfig could not successfully execute the following scripts:
Directory: /data/R12TMPL/inst/apps/R12TMPL_soclxs3ap05/admin/install
afcpnode.sh INSTE8_SETUP 1

– I dug deeper into the file and noticed another error.

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Enter value for 1: Enter value for 2: Enter value for 3: Connected.

Register a node …

declare
*
ERROR at line 1:
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”
ORA-06512: at line 1
ORA-06512: at line 107
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”

Reply
Atul Kumar says April 16, 2009

1. Check if APPS.FND_CONCURRENT is valid

2. Run afcpnode.sh manually (autoconfig should not call this script as this script is to register CM node)

$INST_TOP/admin/install/afcpnode.sh is Script to register node in the database

above script calls $INST_TOP/admin/install/afcpnode.sql from apps/appspass

afcpnode.sql – Script to register a node for Concurrent Processing by Rapid Install

and output of this sql is spooled at $INST_TOP/admin/log/af_.txt;

Reply
cnsmiles says April 16, 2009

SQL> select owner,status,Object_type from dba_objects where object_name = ‘FND_CONCURRENT’;

OWNER STATUS OBJECT_TYPE
—————————— ——- ——————-
APPS VALID PACKAGE
APPS INVALID PACKAGE BODY
OWF_MGR VALID PACKAGE
OWF_MGR VALID PACKAGE BODY

I ran the afcpnode.sh script and that same error with the package comes up again.

I’m now in adamin recompiling the apps schema. You think that might do that job?

Reply
Atul Kumar says April 21, 2009

Yes compile them using adadmin and if this object remains invalid even after compilation using adadmin then try manual compile.

SQL>alter package FND_CONCURRENT compile body;

and if this errors out

SQL> show error

to check why its failing

Reply
Muthukumar says August 15, 2009

I recently installed an R12.0.4 instance. I am trying to apply the patches to upgrade to 12.1.1. I have forgotten the SYSTEM oracle schema password. How can i handle such a situation. Please help me resolve this.

Reply
Charles Smiles says August 15, 2009

Well the standard system password is manager. But you can change the system password via “alter user system identfied by (yourspecifiedpassword). I’m not an EBS pro…so I may be wrong, but in Oracle Core this is standard.

Reply
Atul Kumar says August 15, 2009

@Muthu , as mentioned by Charles use “aletr user ….” for sys and system .

For other schemas like apps, applsys, oracle schemas (AP, GL, AR)… or application user (sysadmin, operations) use FNDCPASS

Reply
Muthukumar says August 15, 2009

Thanks Atul and Charles. i did the same based on the info i found in the web. I logged in as APPS and did alter user, but, it said insufficient privileges. Which login should i use.
Thanks for the prompt answers.

Reply
Bhargav says October 17, 2009

Hello,

I have just installed 11i apps,installed completed successfuly,can any one tell me what are the next steps and what is the userid nad password to login apps server..

Thanks,
Bhargav.

Reply
Atul Kumar says October 18, 2009

@Bhargav,
Default username/password are sysadmin/sysadmin or operations/welcome

Reply
arvind says November 7, 2010

Hi Atul,

How can we re-store apps password? Like on a running system if we forget apps password and at the same time someone already modified with incorrect password in wdbsvr.app and CGIcmd.dat.

Can we get the password back?

Regards,
Arvind

Reply
arvind says November 18, 2010

Hi,

Can someone please give me some idea?

How can we re-store apps password? Like on a running system if we forget apps password and at the same time someone already modified with incorrect password in wdbsvr.app and CGIcmd.dat.

Can we get the password back?

Regards,
Arvind

Reply
pareshdba says August 29, 2011

Hello Atul,

can you tell me the meaning of 0 Y in FNDCPASS command?

Thanks

Reply
phanendra says April 20, 2012

apps user is getting locked after we changed the apps password using FNDCPASS. the application services are not getting up. unable to login from the front end

Reply
    Atul Kumar says April 20, 2012

    This means any client is configured with apps password which must also be updated. To avoid account lockout, create profile in database and configure not to lock account after 10 failed attempts (set failed attempts to unlimited)

    Reply
shreekanth says August 12, 2012

hai friends,

i forget my apps password how to know that one plse give me reply as soon as possible……

thanku.

Reply
Atul Kumar says August 12, 2012

@ shreekanth,

Check this , please check version of apps and also get steps verified by Oracle Support

http://onlineappsdba.com/index.php/2008/06/26/how-to-change-apps-password-in-11i-if-you-forget/

Reply
sudheer says June 20, 2015

sir

when we are changing the apps password using FNDCPASS
.it will change the passsword and gives out log and report files .i have one doubt where this log and report are located.i want the loaction of that files.

Reply
santhosh says January 12, 2016

hi sir ineed small help from u i have installed r12 12.1.1 in windows 2003 server .in that server i forgot the sysadmin password .how to reset the sysadmin user password please help.

thank u

Reply
Sapna says September 13, 2018

Hi, very nice. Realated FNDCPASS errror which may helpful here:
ORA-29548 Solution (FNDCPASS Error)
Thanks,

Reply
Add Your Reply