Change application passwords in E-Business suit 11i & 12i

FNDCPASS Tool:

to change the password in 11i and 12i we need to use FNDCPASS tool to do so.

To test the FNDCPASS just type the word in the command line as shown below:

========================================================$FNDCPASS

Usage: FNDCPASS logon 0 Y system/password mode username new_password

where logon is username/password[@connect]

system/password is password of the system account of that database

mode is SYSTEM/USER/ORACLE

username is the username where you want to change its password

new_password is the new password in unencrypted format

example FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS WELCOME

FNDCPASS apps/apps 0 Y system/manager ORACLE GL      GL1

FNDCPASS apps/apps 0 Y system/manager USER   VISION  WELCOME

========================================================

FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS new_password

The above steps should change the user apps and applsys password.Oracle advice never to change the application users password using the "alter  user " command line tool.

Apps and applsys are the database schema of the oracle application.

When we try to change the password, internally the following will take place. 

Validations of current applsys & system password

Re-encrypt all password in FND_USER & FND_ORACLE_USERID

Update apps & applsys password in FND_ORACLE_USERID table.

Update DBA_USERS table as well.

FNDCPASS apps/apps 0 Y system/manager USER VISION new_password

The above command is used for changing the application level passwords like sysadmin etc. front end applications user password.

When we try to change the password, internally the following will take place. 

Validations of current applsys & system password and update VISION NEW password in FND_USER table.

FNDCPASS apps/apps 0 Y system/manager ORACLE GL GL_New_Password

The above command is used for changing password for any other product schema like AP,AR,GL etc.

When we try to change the password, internally the following will take place. 

Validations of current applsys & system password ,update GL new password in FND_ORACLE_USERID table andUpdate DBA_USERS table as well.

Notes to take into consideration:

1-Always backup the above 3 tables before using FND_USER

2-The tables that FNDCPASS uses are FND_USER and FND_ORACLE_USERID.

All the application passwords and schema passwords are stored in these two tables along with DBA_USERS.

3-Database core schema's like sys,system passwords can be changed using ALTER command in database.

4-Never update apps, applsys and other product schema password directly from database using the alter command.

5-Applsyspub is a public database schema used in Oracle Applications , This account password can be changed using FNDCPASS.

6-GUEST/ORACLE schema password can't be changed using FNDCPASS , This application user password can only be changed by java API.

In Oracle Apps 11i (Not needed in R12( when changing the password for APPS it is important to manually change the APPS password in the following:

$IAS_ORACLE_HOME\Apache\modplsql\cfg\wdbsvr.app file

$FND_TOP/resource/wfmail.cfg

$AD_TOP/admin/template/CGIcmd.dat