Changing Passwords in 12.2

AFPASSWD Usage

The AFPASSWD command is used with the relevant command line options to perform the desired action.

AFPASSWD [-c [@]] -f

AFPASSWD [-c [@]] -o

AFPASSWD [-c [@]] -a

AFPASSWD [-c [@]] -l {TRUE|FALSE}

AFPASSWD [-c [@]] -L {TRUE|FALSE}

AFPASSWD [-c [@]] -s

AFPASSWD [-c [@]] -h
These options have the following functions:

-c [@] – Specifies the connection string to use, the Oracle E-Business Suite user, and/or the value of TWO_TASK. This option can be use in combination with others. If it is not specified, default values from the environment will be used.

Note: The password will be prompted for, and should not be provided in the connection string.

-f – Changes the password for an Oracle E-Business Suite user. Specify the user name. A user name that contains spaces or special characters must be enclosed in double quotation marks; for example, “JOHN SMITH” or “JOHN.DOE@EXAMPLE.COM”..

-o – Changes the password for an Oracle E-Business Suite database user. Specify the user name.

Note: This only applies to users listed in the FND_ORACLE_USERID table, not database users in general.

-a – Changes all Oracle passwords for schemas that are registered as base product schemas in the FND_ORACLE_USERID table (excluding the passwords of APPS, APPLSYS, and APPS_NE) to the same password, in the same way as the ALLORACLE mode does in FNDCPASS.

-l – Locks or unlocks an individual Oracle E-Business Suite database user (ORACLE_USER) (except required schemas). Specify TRUE to lock or FALSE to unlock.

-L – Locks or unlocks all Oracle E-Business Suite database users (except required schemas). Specify TRUE to lock or FALSE to unlock.

-s – Changes the password for the APPLSYS user, the APPS user, and the APPS_NE user. This requires the execution of AutoConfig on all tiers. After changing the APPLSYS password, you must also perform the steps listed in Important Additional Instructions to Update WLS Datasource.

-h – Displays help.

Important Additional Instructions to Update WLS Datasource

Whenever you use FNDCPASS or AFPASSWD in SYSTEM mode to change the APPS or APPLSYS schema passwords, you must also perform the actions listed below.

Note: Using SYSTEM mode with either APPLSYS or APPS will simultaneously update both the APPLSYS and APPS schemas: the respective passwords are kept in sync by both FNDCPASS and AFPASSWD.

Important: These steps must be carried out on the run file system.

Shut down the application tier services using the $INST_TOP/admin/scripts/adstpall.sh script.

Change the APPLSYS password, as described for the utility you are using.

Start AdminServer using the $INST_TOP/admin/scripts/adadminsrvctl.sh script. Do not start any other application tier services.

Change the APPS password in WLS Data Source by running the the following script as shown:

1. $ perl $FND_TOP/patch/115/bin/txkManageDBConnectionPool.pl

   When prompted, select ‘updateDSPassword’ to change the APPS password in the WLS Datasource.

Start all the application tier services using the $INST_TOP/admin/scripts/adstrtal.sh script.

Verify the WLS Datasource changes as follows:

Log in to WLS Administration Console.

In the Domain Structure tree, expand Services, then select Data Sources.

On the “Summary of JDBC Data Sources” page, select EBSDataSource.

On the “Settings for EBSDataSource” page, select Monitoring > Testing.

Select “oacore_server1”.

Click Test DataSource

Look for the message “Test of EBSDataSource on server oacore_server1 was successful”.

Important: Steps 4, 5 and 6 are only applicable when changing the APPLSYS password. They are not applicable when changing passwords for product schemas or the SYSTEM schema.

In the next prepare phase after the password change, adop will invoke EBS Domain Configuration to ensure that the WLS datasource on the patch file system will be synchronized with the new APPS password.