Sunday, January 9, 2011

FNDCPASS – Oracle Applications 11i & R12

What is FNDCPASS?

To change the password in Oracle Applications 11i & R12, The FND binary which will help us is doing these things is FNDCPASS. This is present in $FND_TOP/bin directory.

FNDCPASS is a utility change password in Oracle Applications 11i and R12.

Using FNDCPASS

Below is the usage for FNDCPASS

You can just type FNDCPASS and press enter , it will give you these details.

$ FNDCPASS

Usage: FNDCPASS logon 0 Y system/password mode username new_password

where logon is username/password[@connect]

system/password is password of the system account of that database

mode is SYSTEM/USER/ORACLE

username is the username where you want to change its password

new password is the new password in unencrypted format

example FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS WELCOME

FNDCPASS apps/apps 0 Y system/manager ORACLE GL GL1

FNDCPASS apps/apps 0 Y system/manager USER VISION WELCOME

1)FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS WELCOME

  • The above syntax is used for changing the password for apps and applsys.
  • Apps and applsys are database schemas of Oracle Applications.
  • Alter user command should never be used to change the apps & applsys accounts.
  • Oracle recommends using FNDCPASS only to change apps and applsys password.
  • Please note that above command will change the password for both apps and applsys.

When we try to change the password, internally the following will take place.

  1. Validations of current applsys & system password
  2. Re-encrypt all password in FND_USER & FND_ORACLE_USERID
  3. Update apps & applsys password in FND_ORACLE_USERID table.
  4. Update DBA_USERS table as well.

2)FNDCPASS apps/apps 0 Y system/manager ORACLE GL GL1

The above syntax is used for changing password for any other product schema like AP,AR,GL etc.

When we try to change the password, internally the following will take place.

  1. Validations of current applsys & system password
  2. update GL new password in FND_ORACLE_USERID table
  3. Update DBA_USERS table as well.

3)FNDCPASS apps/apps 0 Y system/manager USER VISION WELCOME

The above syntax is used for changing the application level passwords like sysadmin etc. front end applications user password.

When we try to change the password, internally the following will take place.

  1. Validations of current applsys & system password
  2. Update VISION NEW password in FND_USER table.

Few Imp Points to Note:

  • The tables that FNDCPASS uses are FND_USER and FND_ORACLE_USERID.
  • All the application passwords and schema passwords are stored in these two tables along with DBA_USERS.
  • Always backup the above 3 tables before using FND_USER
  • Never update apps, applsys and other product schema password directly from database using the alter command.
  • Database core schema's like sys,system passwords can be changed using ALTER command in database.
  • Applsyspub is a public database schema used in Oracle Applications , This account password can be changed using FNDCPASS.
  • GUEST/ORACLE schema password can't be changed using FNDCPASS , This application user password can only be changed by java API.
  • In Oracle Apps 11i (Not needed in R12( when changing the password for APPS it is important to manually change the APPS password in the following:
    $IAS_ORACLE_HOME\Apache\modplsql\cfg\wdbsvr.app file
    $FND_TOP/resource/wfmail.cfg
    $AD_TOP/admin/template/CGIcmd.dat

3 comments:

  1. why we should not use alter command in apps to change apps password why we should use fndcpass

    ReplyDelete
  2. what will happen if u down the database without shutting down the web listener

    ReplyDelete
  3. Regards
    Sridevi Koduru (Senior Oracle Apps Trainer Oracleappstechnical.com)
    LinkedIn profile - https://in.linkedin.com/in/sridevi-koduru-9b876a8b
    Please Contact for One to One Online Training on Oracle Apps Technical, Financials, SCM, Oracle Manufacturing, OAF, ADF, SQL, PL/SQL, D2K at sridevikoduru@oracleappstechnical.com | +91 - 9581017828.

    ReplyDelete