How to Change Apps/Applsys & sysadmin Schema Passwords in Oracle EBS R12.2 : Step by Step

In this blog post, we will discuss things good to know about Schema password changes in EBS R12.2

Steps to change Apps Password in EBS R12.2

Passwords for all the 3 schemas, APPS, APPLSYS and APPS_NE will be changed together while changing APPLSYS password.

1. Shutdown Apps Tier Services using the command

$INST_TOP/admin/scripts/adstpall.sh

2. Change Password using

•  For APPS, APPLSYS or APPS_NE password change use the command

Using FNDCPASS: FNDCPASS apps/<apps_password>  0 Y system/<system_password> SYSTEM APPLSYS <new apps passwd>

Using AFPASSWD: AFPASSWD [-c apps@<TWO_TASK>] -s <APPLSYS>

• For SYSADMIN password change use the command

Using FNDCPASS: FNDCPASS apps/<apps_password>  0 Y system/<system_password> USER <new apps passwd>

Using AFPASSWD: AFPASSWD [-c apps@<TWO_TASK>] -s <APPLSYS>

Note: Steps 3-8 are only when changing Apps/Applysys/Apps_NE password. If you are changing SYSADMIN or SYSTEM, EBS_SYSTEM, or product-specific schemas like PO, GL, etc then these steps are not required

3. Run AutoConfig for newly created password

4. Start just Admin Server using $INST_TOP/admin/scripts/adadminsrvctl.sh  (Don’t start other services yet)

5. Change the “apps” password in WLS Datasource either using console or using perl script txkManageDBConnectionPool.pl

5.1 Change the “apps” password in WLS Datasource using Console

• Log in to WLS Administration Console.
• Click Lock & Edit in Change Center.
• In the Domain Structure tree, expand Services, then select Data Sources.
• On the “Summary of JDBC Data Sources” page, select EBSDataSource.
• On the “Settings for EBSDataSource” page, select the Connection Pool tab.
• Enter the new password in the “Password” field.
• Enter the new password in the “Confirm Password” field.
• Click Save.
• Click Activate Changes in Change Center

5.2 Change the APPS password in WLS Data Source by running the the perl script:

$ perl $FND_TOP/patch/115/bin/txkManageDBConnectionPool.pl

When prompted, select ‘updateDSPassword’ to change the APPS password in the WLS Datasource.

6. Start all the application tier services using the below script

$INST_TOP/admin/scripts/adstrtal.sh

7. Verify the WLS Datastore changes as follows:

• Log in to WLS Administration Console.
• In the Domain Structure tree, expand Services, then select Data Sources.
• On the “Summary of JDBC Data Sources” page, select EBSDataSource.
• On the “Settings for EBSDataSource” page, select Monitoring > Testing.
• Select “oacore_server1”.
• Click Test DataSource
• Look for the message “Test of EBSDataSource on server oacore_server1 was successful”.

8. If Integrated SOA Gateway (ISG) is implemented, repeat the steps for “OAEADataSource”. Verify “oafm_cluster*” managed servers are started successfully.

Note: Steps 3-8 are only when changing Apps/Applysys/Apps_NE password. If you are changing SYSADMIN or SYSTEM, EBS_SYSTEM or product-specific schemas like PO, GL, etc then these steps are not required

Things  good to know about Schema Password Changes in EBS R12.2

• You can use FNDCPASS or AFPASSWD to change schema passwords, where AFPASSWD is an enhanced version of FNDCPASS.
• AFPASSWD only prompts for passwords required for the current operation, allowing separation of duties between applications administrators and database administrators.
• In Oracle E-Business Suite Release 12.2.3 and higher, you can also use the AFPASSWD utility to migrate Oracle E-Business Suite user passwords to a password hashing scheme.
• AFPASSWD and FNDCPASS are not used to change the password for EBS_SYSTEM, SYSTEM, SYS, or other Oracle database accounts. To change the passwords for these accounts, use the ALTER USER SQL statement. For example: ALTER USER <username> IDENTIFIED BY <new_password>
• Oracle E-Business Suite system must be shut down before you change the password for a system schema (APPLSYS, APPS, or APPS_NE).
• If you are changing the APPLSYSPUB password using either AFPASSWD or FNDCPASS, you must change the value for the context variable s_gwyuid_passand then run AutoConfig.
• From Release 12.2.3 onwards, the USERMIGRATE mode of FNDCPASS is deprecated. You should now use AFPASSWD to migrate to a password hashing scheme.

Related/References

• 1674462.1  R12.2: Steps to Change the APPS, APPLSYS, and APPS_NE Password Using FNDCPASS or AFPASSWD
• 1306938.1  FNDCPASS Troubleshooting Guide For Login and Changing Applications Passwords
• https://docs.oracle.com/cd/E26401_01/doc.122/e22954/T202991T174305.htm#522325
• EBS 12.1.1: Autoconfig Fails While Running Scripts “afdbprf.sh” and “adcrobj.sh” with 11GR2 Database (Doc ID 1336807.1)
• AutoConfig On Db Tier Fails With Error – SP2-1503: Unable to initialize Oracle call interface (Doc ID 1187616.1)
• [Solved]Upgrade Oracle Apps (EBS) to 12.2? ORA 01804: Failure To Initialize Timezone Information – Issue While Running AutoConfig

Next Task For You

We cover Oracle E-Business R12.2 Architecture & concepts in our Oracle Apps DBA For Beginners Training along with the Installation, Patching, Cloning, and Troubleshooting and also, Database upgrade to 19c  and much more including the hands-on labs you must perform to upgrade your skills and get a good job with a high package.

Begin your journey towards becoming an Apps DBA by joining our FREE Masterclass on How To Learn Oracle Apps DBA (R12) & It’s New Features.