FNDCPASS & AFPASSWD

FNDCPASS is an important utility in Oracle EBS application and it is located in $FND_TOP/bin.  It is used to change password for apps schema, oracle EBS schema password and application user password change.

$FNDCPASS

FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS

FNDCPASS apps/apps 0 Y system/manager ORACLE

FNDCPASS apps/apps 0 Y system/manager USER

When you execute FNDCPASS, it create an log file and one output file. These log and out files are created in the same directory from which FNDCPASS is executed. If the command complete successful ,log file will be completion message else it will contain the error message for the password change

Change APPS/APPLSYS Passwords

FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS <new pass>
Note: AutoConfig must be run and all application tier services restarted after changing the APPS password.

Following things happens as part of this command

(1) applsys validation. (make sure APPLSYS name is correct)
(2) reencrypt all password in FND_USER
(3) reencrypt all password in FND_ORACLE_USERID
(4) update applsys’s password in FND_ORACLE_USERID table.
(5) Update apps password in FND_ORACLE_USERID table. Also changes are made in DBA_USERS table.

If any issues with any of these steps, You will get those reported in FNDCPASS logs

Change Oracle EBS Schema Password (e.g., GL, FA, AR, etc.)

Here is the command to change password for GL schema

FNDCPASS apps/apps 0 Y system/manager ORACLE GL <new pass>

Following things happens as part of this command
(1) re-encrypt the password in FND_ORACLE_USERID
(2) changes are made in DBA_USERS table.

Change All Oracle EBS Schema Passwords (e.g., GL , FA, AR, etc.) in one command using ALLORACLE 

FNDCPASS apps/apps 0 Y system/manager ALLORACLE <new pass>

Change Oracle EBS Application User Password

General syntax is

FNDCPASS apps/apps 0 Y system/manager USER <username> <new pass>

Here is example for change TEST application user

FNDCPASS apps/apps 0 Y system/manager USER TEST <new pass>

The user password is re-encrypted with APPLSYS password and updated in FND_USERS table

AFPASSWD

AFPASSWD is an enhanced version of FNDCPASS, and includes the following features:

(1)AFPASSWD only prompts for passwords required for the current operation, allowing separation of duties between applications administrators and database administrators.

This also improves interoperability with Oracle Database Vault. In contrast, the FNDCPASS utility currently requires specification of the APPS and the SYSTEM usernames and corresponding passwords, preventing separation of duties between applications administrators and database administrators.

(2)When changing a password with AFPASSWD, the user is prompted to enter the new password twice to confirm.

(3)AFPASSWD can be run from the database tier as well as the application tier. In contrast, FNDCPASS can only be run from the application tier

AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-f <FNDUSER>] 
AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-o <DBUSER>] 
AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-a] 
AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-l <ORACLEUSER> [<TRUE>] | [<FALSE>]] 
AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-L [<TRUE>] | [<FALSE>]] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-s] <APPLSYS> 

Lock All Oracle EBS Schema Accounts (R12.1+)

AFPASSWD apps/apps@ -L TRUE

Related Articles

Oracle documentation on Password change in Apps