Tuesday, November 2, 2010

Apps Password Expired

Issue:- Apps Passowrd expired.
Overview:-
We have defined 2 dba profiles, one for admin user(apps & system) other one for application users(all other users). Below values are for admin profile:-
PROFILE RESOURCE_NAME LIMIT
ADMIN PASSWORD_REUSE_TIME 180
ADMIN PASSWORD_REUSE_MAX UNLIMITED
ADMIN PASSWORD_VERIFY_FUNCTION NULL
ADMIN PASSWORD_LOCK_TIME 7
ADMIN PASSWORD_GRACE_TIME 14

DBA missed the to check the apps password expiry date and user reported error to us. Forms were not opening as expected.

Since this was apps user, we were bit concerned:-

Troubleshooting:-
In EBUS? apps password got expired, while trying to login we were getting error as apps password has been expired and on prompt it was asking to be changed:-
0) Stop all services prior to start troubleshooting.
1) since apps is not normal user we exited the prompt without changing the password
2) We checked if applysys has been also expired but it has not so no problem their. Since Database policies impact only RDBMS part (DBA_*) and does not impact FND_* realm, we thought of changing password value in dba_user and see if we can move forward.
3) Take backup of dba_users, fnd_user, FND_ORACLE_USERID.
4) Check profile connected to apps user:-
EBUS> select USERNAME,PROFILE from dba_users where username like 'APPS';

USERNAME PROFILE
------------ ------------------------------
APPS ADMIN
5) Check profile values:-
PROFILE RESOURCE_NAME LIMIT
---------- -------------------------------- ----------------------------------------
ADMIN PASSWORD_REUSE_TIME 180
ADMIN PASSWORD_REUSE_MAX UNLIMITED
ADMIN PASSWORD_VERIFY_FUNCTION NULL
ADMIN PASSWORD_LOCK_TIME 7
ADMIN PASSWORD_GRACE_TIME 14
ADMIN PASSWORD_LIFE_TIME 90

As we wanted to set same password for apps, we need to modify password_* profile values, we assigned DEFAULT profile to apps user thus password_* profile value set to unlimited.

6) Check the current value of password from dba_users table for apps user:-
select username,password from dba_users where username like 'APPS';

USERNAME PASSWORD
------------ ------------------------------
APPS 6B6F7C13B5D0

Note:- we are assuming here that password value is same as it was prior to expire state i.e. nobody has changed the password since then, neither on prompt, nor issuing alter user, nor FNDCPASS.

Now issue:-
alter user apps identified by values 'Passowrd from above step';
7) Try to login using apps user.
8) Start application services.