Removing Credentials from a Cloned EBS Database

Hello Everyone!!!

One of the essential duty of Apps DBA is to protect the system from both external and internal threats. When you clone the environment and leave the cloned system to developer for development, you gotta make sure you have cleared the credentials before handing over to external folks.

If you look at the links, you will come to know how easy it is to get the passwords of application users if they have access the applications database or appltop.
To protect the system you should make sure all the passwords are cleaned before handed over to the dev userbase.

http://johanlouwers.blogspot.com/2006/12/oracle-applications-passwords.html
http://awads.net/wp/2006/12/12/oracle-e-business-suite-vulnerability-users-passwords-decrypted/

Here, you have the metalink Note 419475.1 to follow to make the system with new passwords.

1. Step 1 - Clear all credentials
2. Step 2 - Re-establish basic accounts (for runtime:
SYS,SYSTEM,APPLSYSPUB,APPLSYS,APPS + GUEST,SYSADMIN)
3. Step 3 - Prepare scripts for setting additional passwords
4. Step 4 - Assign new passwords to all database users not managed with EBS
5. Step 5 - Assign new passwords to all database users managed with EBS
6. Optional addition steps

Note 419475.1 is for novice and you have been given clear scripts to do all the steps.

Hope this helps you to manage the APPS system in a better way.!!

Happy Learning!!!