How to reset ORABPEL, ORAESB password in SOA Suite 10.1.3.X

1. ORABPEL or ORAESB  are schema in SOA dehydration store (SOA Suite database)
2. Changing ORABPEL, ORAESB or ORAWSM schema is two step process (Three if SOA suite is integrated with OID)
2.1 Change schema password in database  (SQL> alter user <orabpel/oraesb/orawsm> identified by <newpassword>;)
2.2 Change schema password in middle tier configuration file ($ORACLE_HOME/ j2ee/ oc4j_soa/ config/ system-jazn-data.xml)
for ORABPEL

Change below content

<name>pwForOrabpel</name>
<guid>4F87BD301E0111DEAF4575069469A904</guid>
<credentials>{903}309wIYgWZhq5YvC47p8Kd1+R+0hg+EQ0</credentials>

To

<name>pwForOrabpel</name>
<guid>4F87BD301E0111DEAF4575069469A904</guid>
<credentials>!newpassword</credentials>

Note* ! mark in front which denotes unencrypted text

For ORAESB

Change below content

<name>pwdforOraesb</name>
<guid>D997E5101DFF11DE9F0075069469A904</guid>
<credentials>{903}M+n1vqVNCbUffSBAp1bZh+RknVLfdpwU</credentials>

To

<name>pwdforOraesb</name>
<guid>D997E5101DFF11DE9F0075069469A904</guid>
<credentials>!newpassword</credentials>
2.3 In OID (optional – only if SOA suite is integrated with OID)
Start OIDADMIN and change password under cn=OracleContext, cn=Products, cn=IAS, cn=IAS Infrastructure Databases, orclReferenceName = dbname for the Metadata Repository.

3. Restart application server like
opmnctl stopall; opmnctl startall

(This step will encrypt password in config file system-jazn-data.xml)

.

 References

  • 552400.1  How to Change the Password for ORABPEL and ORAESB Users in Soasuite 10.1.3.x
  • 760076.1  How to change orabpel password on Soa Suite 10.1.3.X (No OID)
  • 359194.1  How To Manage Orabpel Password

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

13 comments
debashis says July 8, 2009

Thanks
This was great help!!

Reply
Ram says August 25, 2010

H atul,

I need a help. we already have soa suite 10.1.3.1.0 and trying to setup one more server.

i already have a database and installed orabpel schemas, can i use the same for the new soa installation? do i need to have a dedicated database for every installation since it is using SYS user?

your input will be great help to me.

Reply
Atul Kumar says August 25, 2010

@ Ram,
Application uses hard coded orabpel, oraesb, orawsm account so yes If you want dedicated SOA instance then they have to be in separate dedicated database (Though you can use same database binaries and simply create another database using dbca : data base creation assistant).

Reply
Ram says August 26, 2010

Atul,

Thank you for the answer.

i will rephrase my question to get the details i need..

I have one SOA installation in one server with oracle Database sitting in a different box.

I want to build one more new SOA server, but i want to use the same database which i already have. do i need to run irca.sh again? does it overwrite the existing schemas?

how does this work? these two soa server use the same set of schema’s as they are in sys user? will it cause any issue to the existing production?

hope this time i am clear.

Thanks again.

Regards,
Ram

Reply
Atul Kumar says August 26, 2010

@ Ram,

Q. I want to use the same database which i already have. do i need to run irca.sh again? does it overwrite the existing schemas?

A. SOA 10.1.3X expects schema orabpel & orawsm to store BPEL process state. You already have this schema in database. Now if you point another middle tier to same database schema then you will see bpel processes of first soa install and both soa install will share same repository.
If you try to run again irca.sh my guess is that it will fail with error that schema already available.

Q. How does this work? these two soa server use the same set of schema’s as they are in sys user? will it cause any issue to the existing production?

Schemas are not in sys , soa repository is in schema orabpel and sys is just medium to connect to orabpel schema. If you configure second middle tier to existing schema (orabpel) they will become kind of member of cluster.

If you wish to create two separate soa environment then soa 10.1.3.X provide concept of domain (this is different from weblogic domain) so see if SOA domain is sufficient for your requirement

Reply
Ram says August 27, 2010

thanks a lot atul

Reply
Ram says August 27, 2010

Atul,

while working, i realized one more issue..

The existing SOA Production server is of version 10.1.3.1.0 and SOA reposioty on the database is also the same version.

In new box, i want to patch SOA to 10.1.3.5.0 and as per the installation instructions, i need to run sql scripts to update orabpel,oraesb schema’s.

If that is the case, is my existing server with 10.1.3.1.0 version continue to work new set of updated schema’s as i am planning to use same repository for both servers?

Thanks in advance.

Regards,
Ram

Reply
Atul Kumar says August 28, 2010

@ Ram,
You will have to upgrade your existing middle tier as well to SOA 10.1.3.5.0 to match with database repository version

Reply
Mark says October 22, 2010

Ram,

Thanks for posting this useful information, especially your references so I can get Oracle’s take on the procedure as well as yours. Regarding your references — it looks like the latter two (760076.1 “How to change orabpel password on Soa Suite 10.1.3.X (No OID)” and 359194.1 “How To Manage Orabpel Password”) no longer exist on My Oracle Support. The first reference (552400.1 “How to Change the Password for ORABPEL and ORAESB Users in Soasuite 10.1.3.x”) is still available.

regards,

Mark

Reply
Neilor Mendes says October 28, 2010

Is that true?

“Application uses hard coded orabpel, oraesb, orawsm account so yes If you want dedicated SOA instance then they have to be in separate dedicated database (Though you can use same database binaries and simply create another database using dbca : data base creation assistant).”

Can’t I use just one instance and have more schemas with different names? For each application server I will need a separete database instance?

Do you know a Oracle Note affirming this?

Regards,

Neilor

Reply
Ram says October 31, 2010

Hi,

Yes you can not use the same schema’s for multiple instances. you have to create different schema’s with this command

./irca.sh all “localhost.localdomain 1521 XE” “password” -overwrite ORABPEL4 orabpel4 ORAESB4 oraesb4 ORAWSM4 orawsm4

and modify your data sources file with new user by replacing hard coded orabpel,oraesb users.

It should work fine and connect to new schemas and will be an independent set up which can be upgraded to multiple versions in case, but still use one database.

Regards,
Ram

Reply
Muthu says January 20, 2011

Hi Atul,

I need a quick help. Any idea where the passwords for the different SOA schemas stored ? I did the installation and configuration of the SOA suite at our site. But somehow I missed the passwords for the following component schemas that I created :

Metadata services (dev_mds)
BAM (dev_orabam)
User Messaging Service (dev_orasdpm)
SOA Infrastructure (dev_soainfra)

I could see the schemas in the database, but I’m afraid, it would take more than changing the passwords in the database.

Can you help in this situation real quick please ?

Thanks
Muthu

Reply
Raj says November 2, 2012

Hi Atul,

ORABPEL ORAESB ORAWSM are locked but when unlock through sysdba status unlock till the server are getting up. I think some thing accessing multiple times to it & getting lock. Am able to connect these users with user name some password through jdev/sql when unlock through the sysdba. Can I set that password for ORABPEL ORAESB
How to reset the ORAWSM password in soa 10.1.3.4

I could find OWSM manageUserGroups.properties I find the db password encrypted. How to get this db password

Reply
Add Your Reply

Not found