FNDCPASS is an important utility in Oracle EBS application and it is located in $FND_TOP/bin. It is used to change password for apps schema, oracle EBS schema password and application user password change.
$FNDCPASS FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS FNDCPASS apps/apps 0 Y system/manager ORACLE FNDCPASS apps/apps 0 Y system/manager USER
When you execute FNDCPASS, it create an log file and one output file. These log and out files are created in the same directory from which FNDCPASS is executed. If the command complete successful ,log file will be completion message else it will contain the error message for the password change
Change APPS/APPLSYS Passwords
FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS <new pass> Note: AutoConfig must be run and all application tier services restarted after changing the APPS password.
Following things happens as part of this command
(1) applsys validation. (make sure APPLSYS name is correct)
(2) reencrypt all password in FND_USER
(3) reencrypt all password in FND_ORACLE_USERID
(4) update applsys’s password in FND_ORACLE_USERID table.
(5) Update apps password in FND_ORACLE_USERID table. Also changes are made in DBA_USERS table.
If any issues with any of these steps, You will get those reported in FNDCPASS logs
Change Oracle EBS Schema Password (e.g., GL, FA, AR, etc.)
Here is the command to change password for GL schema
FNDCPASS apps/apps 0 Y system/manager ORACLE GL <new pass>
Following things happens as part of this command
(1) re-encrypt the password in FND_ORACLE_USERID
(2) changes are made in DBA_USERS table.
Change All Oracle EBS Schema Passwords (e.g., GL , FA, AR, etc.) in one command using ALLORACLE
FNDCPASS apps/apps 0 Y system/manager ALLORACLE <new pass>
Change Oracle EBS Application User Password
General syntax is
FNDCPASS apps/apps 0 Y system/manager USER <username> <new pass>
Here is example for change TEST application user
FNDCPASS apps/apps 0 Y system/manager USER TEST <new pass>
The user password is re-encrypted with APPLSYS password and updated in FND_USERS table
AFPASSWD
AFPASSWD is an enhanced version of FNDCPASS, and includes the following features:
(1)AFPASSWD only prompts for passwords required for the current operation, allowing separation of duties between applications administrators and database administrators.
This also improves interoperability with Oracle Database Vault. In contrast, the FNDCPASS utility currently requires specification of the APPS and the SYSTEM usernames and corresponding passwords, preventing separation of duties between applications administrators and database administrators.
(2)When changing a password with AFPASSWD, the user is prompted to enter the new password twice to confirm.
(3)AFPASSWD can be run from the database tier as well as the application tier. In contrast, FNDCPASS can only be run from the application tier
AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-f <FNDUSER>] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-o <DBUSER>] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-a] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-l <ORACLEUSER> [<TRUE>] | [<FALSE>]] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-L [<TRUE>] | [<FALSE>]] AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-s] <APPLSYS>
Lock All Oracle EBS Schema Accounts (R12.1+)
AFPASSWD apps/[email protected] -L TRUE
Related Articles
Oracle documentation on Password change in Apps
Leave a Reply