With Product Family ATG version H Roll Up 3 , Oracle Introduced New Option in FNDCPASS which is ALLORACLE to Change password of all Schema provided by Oracle Application products. These are basically below three category password
–These are mainly schema password for products like AP, GL, AR (These are also termed as of mode ORACLE )
–Password for APPLSYS and APPS (Same password for both schema) . This is also called as Apps Password (used during CM startup)
–Password for account APPLSYSPUB
How to change Oracle Applications Products/Schema Password including APPS ?
As most of you might already be aware that you use FNDCPASS utility on Concurrent Manager Node.
FNDCPASS logon 0 Y system/password mode username new_password
Where MODE is SYSTEM/USER/ORACLE/ALLORACLE (Introduced with patch 4745998)
Will ALLORACLE mode change other schema passwords like CTXSYS, MDSYS, PORTAL..,SYS, SYSTEM, SCOTT, Application User like AtulKumar …. ??
No ALLORACLE mode will change only schemas mentioned in paragraph 1 and will not change passwords for schemas like CTXSYS, MDSYS, SYS, SYSTEM…..
Is previous Mode SYSTEM/USER/ORACLE still available with FNDCPASS ?
Yes
How to get ALLORACLE mode in FNDCPASS ?
Apply Oracle Apps patch 4745998
What files to change after changing Apps Password ?
You use FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS WELCOME to change Apps Password
–Once you change apps password you need to change apps password stored in file wdbsvr.app at $IAS_ORACLE_HOME/Apache/modplsql/cfg
–In some instances you might have to change in CGIcmd.dat at $ORACLE_HOME/reports60/server
–You also have to change in any custom concurrent manager start up script (If you have any)
Added on 14th August 2007
–If you have configured E-Business Suite with 10g Application Server SSO/OID then after changing APPS password, update provisioning profile with new apps password
oidprovtool operation=modify \
ldap_host=oid_host ldap_port=oid_port \
ldap_user=”cn=orcladmin” ldap_user_password=password \
application_dn=”orclApplicationCommonName=app_name, cn=EBusiness,cn=Products,cn=OracleContext, dc=realm_name” \
interface_connect_info=db_host_name:oid_port:SID:apps:apps_password
like
oidprovtool operation=modify \
ldap_host=oid1.co.in ldap_port=389 \
ldap_user=”cn=orcladmin” ldap_user_password=welcome1 \
application_dn=”orclApplicationCommonName=VIS11I,cn=EBusiness, cn=Products,cn=OracleContext,dc=co,dc=in” \
interface_connect_info=11i.co.in:1521:VIS11I:apps:apps
after changing Apps password bounce Concurrent Managers.
Related
Following Metalink Notes are useful & related to Oracle Applications or Apps Password
–303621.1 How to Change and Which Apps Database Users Passwords Can Be Changed in a Multi-Node Apps Installation?
–159244.1 How To Use FNDCPASS to Change The Oracle Users, APPS, APPLSYS and Application Module Passwords (INV, AR, AP, etc.) For Applications 11.5 in Unix
Oracle WebLogic Administrator [USD 399]- 03rd Dec, 2011
Good hands-on exercises (installation, patching, cloning), very experienced trainer worth every penny 
52 users commented in " Change Oracle APPS Password : FNDCPASS "
Follow-up comment rss or Leave a Trackbackgood one atul.
good one atul…should APPS and APPLSYS have same password??
Yes, APPS and APPLSYS should have same password
Hi Atul,
How to secure apps password ??
apps password will be displayed with the following incidents:
1) echo $1 or echo $* in any script
2) workflow builder error issue
3) while trasfering alert, we have to give apps password (how to decript the password)
Please let us know in any other ways, users/developers can able to know the apps password in secured instance
Thanks in advance, Shiva
Hi Atul,
How to secure production instance apps password ??
It will display with the following cases:
1) echo $1 or echo $* in the script (encrypt is not enabled)
2) workflow builder connection error will display apps password
3) while transferring alert, it will display password (is there any way to decript the password)
4) I think oracle has fixed in ad patch application log / report server
Please let us know, how to secure our production instances with this issue.
Thanks sir,
Shiva
6)
Shiva,
Can you elaborate more on these apps password issues ?
specially
1) echo $1 or echo $* in the script (encrypt is not enabled)
&
3) while transferring alert, it will display password (is there any way to decript the password)
Hi Atul,
What are all the precautions to be taken to secure apps password.
Thanks
Shiva
Hi Atul,
how we can bounce the CM? and how many ways to do the same?
Use adcmctl.sh or Administer CM screen from frontend.
naveed said…
Hi Atul,
Why do we need to have same passwords for both apps and applsys.
And when we change the passwords for any one either apps or applsys do we manually need to make them in sync.
Thanks,
Naveed.
—
Naveed , No you don’t have to synch them manually. If you change apps password using FNDCPASS it will automatically change APPLSYS password and vice versa.
Hi Atul,
Thanks a lot …
Why do we need to have same passwords for both apps and applsys ?
Very good effort, Atul u are doing a wonderfull job, your blogs are very useful, thanks a lot….
Atul I have some confusion about ALLORACLE, and mode ORACLE used in FNDCPASS.
Can you please emphasize over it with the ALLORACLE syntax in FNDCPASS
Thanks a ton
Bilal,
ORACLE mode is used to change oracle product schema password like AP, GL, AP, AR, AD…..
Hi ,
Atul Please elaborate on why do we need to have Apps and Applsys Schema passwords same ?
Thanks in Advance
Hi,
Can anyone tell me how to change sys password in Oracle E bussiness suite
Regards,
Aarif
For sys & system accounts in apps use normal database commands like
alter user identified by ;
Hi Atul,
Thanks but someone told me i need to recreate the password file for changing sys password and for system password i have to use FNDCPASS.
Please confirm that only ‘alter user’ will work.
Thanks & regards,
Aarif
If you are on 10g and remote_login_passwordfile is set to shared you can’t change “sys” password while system is up (you need to change this to exclusive . Though you can still change ssytem password without any issue)
password file will automatically be updated once you change sys password using “aletr user sys …”
For changing system password, just use “alter user ….” (FNDCPASS is for “NOT” used for system or sys password)
Thanks a ton …
hi atul
what is significance of ’0′ & ‘Y’ in FNDCPASS statement
0 is request id (request ID 0 is assigned to request ID’s which are not submitted via Submit Concurrent Request Form.
‘Y’ indicates the method of invocation. i.e. it is directly invoked from the command-line not from the Submit Request Form.
Hi Atul,
Is there a way to retrieve Apps password for R12 instance as we retrieve from wdbsvr.app / CGIcmd.dat file from 11i Instances.
If not – how to set to to default [apps/apps] password.
Thanks in advance.
Pavan.
You mean if you forgot apps password then how to change ?
I am not sure but try this one : (backup your database first & then)
SQL> alter user apps identified by ;
SQL> alter user applsys identified by ;
Then finally use FNDCPASS to reset one more time
Try this and let us know the results
I have changed APPS password using ALTER USER command by mistake in R12. Then did changes as per doc id 153050.1. When i conn Applications using SYSADMIN user it gives “500 Internal Server Error”. Could you provide any help Atul
Try this http://onlineappsdba.com/index.php/2008/06/26/how-to-change-apps-password-in-11i-if-you-forget/
or
Restore the FND_ORACLE_USERID and FND_USER tables from a backup and then run FNDCPASS
Atul, but in R12 wdbsvr.app & CGICMD.dat is not available. I have done these changes in R12. Please give reply.
Yes there is no mod_plsql in r12 so you don’t see wdbsvr.app
There is no such files in R12 so leave this step in R12.
There is just one file related to map viewer which contains obfuscated apps password.
After using FNDCPASS run autoconfig (recommended) and bounce CM.
UrgenHow to rebuild FND_PROFILE_OPTION_VALUES table in 11.5.10.2
Hello
Do anybody know how to rebuild FND_PROFILE_ OPTION_VALUES table in 11.5.10.2 env.
One of our Scripts over wrote the existing values and created a mess in the table which made the apps instance almost stale and cannot proceed further.
Oracle support was very slow and no solution as of now.
we dont have a backup as it is Projects (DEV)instance lot of work going on in this instance.
Notes:
I ran autoconfig successfully but when i try to start application with adstrtal.sh it gives erros
weired
Cause: afpodbinit failed due to ORA-06502: PL/SQL: numeric or value error: character string buffer too smallORA-06512: at “APPS.FND_DATE” , line 32ORA-06512: at “APPS.FND_GLOBAL” , line 1999ORA-06512: at “APPS.FND_GLOBAL” , line 2170ORA-06512: at “APPS.FND_GLOBAL” , line. The SQL statement being executed at the time of the error was: begin fnd_global.bless_ next_init( ‘FND_PERMIT_ 0000′); fnd_global.initiali ze(:session_ id, :user_id, :resp_id, :resp_appl_id, :security_group_ id, :site_id, :login_id, :conc_login_ id, :prog_appl_id, :conc_program_ id, :conc_request_ id, :conc_priority_ request, :form_id, :form_application_ id, :conc_process_ id, :conc_queue_ id, :queue_appl_ id, :server_id); fnd_profile. put(‘ORG_ ID’,
rg_id); fnd_profile. put(‘MFG_ ORGANIZATION_ ID’, :mfg_org_id) ; fnd_profile. put(‘MFG_ CHART_OF_ ACCOUNTS_ ID’, :coa); fnd_profile. put(‘APPS_ MAINTENANCE_ MODE’, :amm); end; and was executed from the file &ERRFILE.
Do i need to run this FNDCPASS utility from $INST_TOP or $ORACLE_HOME directory? what i know is(if single node installation), Shutdown adstpall.sh,go to $ORACLE_HOME,run FNDCPASS,Run autoconfig (apps_tier) & restart adstrtal.sh. Is it ok or not?
Arizuddin,
There is only one FNDCPASS which is under FND_TOP/bin you can run it from any place as long as application tier environment file is set and $FND_TOP/bin is in path.
1. Login as application tier and set environment fileappl/APPS$SID_$hostname.env (11i)
$INSTALL_BASE/apps/apps_st/appl/APPS$SID_$hostname.env (R12)
$INSTALL_BASE/
2. Run FNDCPASS
3. Run Autoconfig
4. Restart Middle Tier Services
Hi,
the instance which i am working is 11.5.10.2 isnatlled on windows.i cannot see FNDCPASS utility in FND_TOP/bin
i want to add this utility to my applications,can you please tell me how do i do that
thanks
lata
Lata,
Is this multi node install ? Check in FND_NODES table for CM location. FNDCPASS should be on CM tier.
well what is this file that is related to map viewer that stores the password for 12i? Following instructions, I just changed the password with the FNDCPASS utility and autoconfig fails. what are the steps? the documentation provided my Oracle does not comply with the files that are actually in the system. There is no ORACLE_HOME/reports60/server/CGIcmd.dat
cnsmiles, for r12/12i change password and run autoconfig that is enough.
$IAS_ORACLE_HOME/reports60/server/CGIcmd.dat IS FOR 11i
what error message you are getting while running autoconfig ? (update error message from autoconfig log file)
Well thats what I did.
I Change the password for applsys and apps as follows:
-Shutdown the Application Stack
-Execute the FNDCPASS commmand
FNDCPASS apps/apps 0 Y system/manager SYSTEM applsys cnsmil44
-Run autoconfig on db stack – This ran successfully
-Ran autoconfig on appl stack – Autoconfig completed with errors
-I looked at the log file and at the very bottom it has the following error
AutoConfig could not successfully execute the following scripts:
Directory: /data/R12TMPL/inst/apps/R12TMPL_soclxs3ap05/admin/install
afcpnode.sh INSTE8_SETUP 1
- I dug deeper into the file and noticed another error.
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter value for 1: Enter value for 2: Enter value for 3: Connected.
Register a node …
declare
*
ERROR at line 1:
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”
ORA-06512: at line 1
ORA-06512: at line 107
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”
ORA-04063: package body “APPS.FND_CONCURRENT” has errors
ORA-06508: PL/SQL: could not find program unit being called:
“APPS.FND_CONCURRENT”
1. Check if APPS.FND_CONCURRENT is valid
2. Run afcpnode.sh manually (autoconfig should not call this script as this script is to register CM node)
$INST_TOP/admin/install/afcpnode.sh is Script to register node in the database
above script calls $INST_TOP/admin/install/afcpnode.sql from apps/appspass
afcpnode.sql – Script to register a node for Concurrent Processing by Rapid Install
and output of this sql is spooled at $INST_TOP/admin/log/af_.txt;
SQL> select owner,status,Object_type from dba_objects where object_name = ‘FND_CONCURRENT’;
OWNER STATUS OBJECT_TYPE
—————————— ——- ——————-
APPS VALID PACKAGE
APPS INVALID PACKAGE BODY
OWF_MGR VALID PACKAGE
OWF_MGR VALID PACKAGE BODY
I ran the afcpnode.sh script and that same error with the package comes up again.
I’m now in adamin recompiling the apps schema. You think that might do that job?
Yes compile them using adadmin and if this object remains invalid even after compilation using adadmin then try manual compile.
SQL>alter package FND_CONCURRENT compile body;
and if this errors out
SQL> show error
to check why its failing
I recently installed an R12.0.4 instance. I am trying to apply the patches to upgrade to 12.1.1. I have forgotten the SYSTEM oracle schema password. How can i handle such a situation. Please help me resolve this.
Well the standard system password is manager. But you can change the system password via “alter user system identfied by (yourspecifiedpassword). I’m not an EBS pro…so I may be wrong, but in Oracle Core this is standard.
@Muthu , as mentioned by Charles use “aletr user ….” for sys and system .
For other schemas like apps, applsys, oracle schemas (AP, GL, AR)… or application user (sysadmin, operations) use FNDCPASS
Thanks Atul and Charles. i did the same based on the info i found in the web. I logged in as APPS and did alter user, but, it said insufficient privileges. Which login should i use.
Thanks for the prompt answers.
Hello,
I have just installed 11i apps,installed completed successfuly,can any one tell me what are the next steps and what is the userid nad password to login apps server..
Thanks,
Bhargav.
@Bhargav,
Default username/password are sysadmin/sysadmin or operations/welcome
Hi Atul,
How can we re-store apps password? Like on a running system if we forget apps password and at the same time someone already modified with incorrect password in wdbsvr.app and CGIcmd.dat.
Can we get the password back?
Regards,
Arvind
Hi,
Can someone please give me some idea?
How can we re-store apps password? Like on a running system if we forget apps password and at the same time someone already modified with incorrect password in wdbsvr.app and CGIcmd.dat.
Can we get the password back?
Regards,
Arvind
Hello Atul,
can you tell me the meaning of 0 Y in FNDCPASS command?
Thanks
apps user is getting locked after we changed the apps password using FNDCPASS. the application services are not getting up. unable to login from the front end
This means any client is configured with apps password which must also be updated. To avoid account lockout, create profile in database and configure not to lock account after 10 failed attempts (set failed attempts to unlimited)
hai friends,
i forget my apps password how to know that one plse give me reply as soon as possible……
thanku.
@ shreekanth,
Check this , please check version of apps and also get steps verified by Oracle Support
http://onlineappsdba.com/index.php/2008/06/26/how-to-change-apps-password-in-11i-if-you-forget/
Leave A Reply