Hi Everyone!!
R12.0.4 got released yesterday. Visible fnd feature is "FNDCPASS will enable you to safeguard passwords with advanced Non-Reversible Hash Password encryptions. As of now only SHA algorithm is implemented. It may support other algorithms in future.
FNDCPASS USERMIGRATE utility migrates the encrypted passwords for all FND_USER to a non-reversible hash password scheme.
Migration to hash passwords is one-time, one-way operation that cannot be undone without a system restore from backup. Take backup before running " FNDCPASS USERMIGRATE"
This feature is already part of ATG RUP6 for 11i users.
More details can be found at Note:457166.1
Related Articles:
Removing credentials from cloned EBS system
Keep your system safe.
Happy Learning!!
skip to main |
skip to sidebar
APPLICATIONS DBA ARENA
Search This Blog
Cloud Articles
- RDS Enhancements
- Terraforming: RDS tained Resource
- AWS Cross Account Encrypted RDS DB Cloning
- RDS Troubleshooting
- AWS and Azure Quick Reference
- Cost Optimization Oracle RDS
- Exadata Exodus to Cloud
- Cloud Migration: Network Consideration
- Cloud Migration IO considerations
- Maximum Security Architecture Oracle RDS
- Archiving Oracle Database Backup to S3 Glacier
- Oracle RDS Tracing ORA- errors
- AWS for OCI Architects
- DB Engines and Default ports
- Beginners guide on Oracle RDS on AWS
- EBS to Cloud: FNDFS Failure
- Compute Classic Instance Timezone Change
HIGH AVAILABILITY
Databases
- Restricting Users during maintenance
- 19c: Tuning Simplified
- Automatic Archivelog Purge Scripts
- Resolved: High CPU Load on DB Server
- 19c: Out of synch DR database? Easy way to Fix
- 19c: Upgrade Performance Solution
- Delete Archive Logs Applied on Standby
- Log File Sync Wait Event Resolution
- RMAN: Error Creating Controlfile Backup
- Prod Performance Resolution
- RMAN Setup after upgrades
- DB auto restart
- Library Cache: Mutex X Concurrent Manager
- Library cache pin on Revokes
- Library Cache pin wait
- Tracing ORA Errors
- Monitoring CPU usage of multiple oracle databases running on Shared server
- Recovery using Backup controlfile
- Beware killing sessions with Immediate option
- Beware commit on exit
- Error opening Database
- SQL Tuning using Profiles
- SQL Server DB Clone Part1
- MySQL Quick Reference for Oracle DBAs
SQL Server
Oracle DEMANTRA
- R12-Demantra Integration Overview
-
R12-Demantra Integration Part II
-
R12-Demantra Integration Part III
-
R12-Demantra Integration Part IV
-
R12-Demantra Integration Part V
-
11i: Demantra with DB Vault
-
11g and Demantra R12 - Access Control List (ACL)
-
R12-Demantra Integration patches
-
Vista and Demantra
- R12.1.1 with Demantra 7.3
Oracle Life Sciences
About Me
 | Specialized in Databases. Led, mentored many DBAs and Developers on best practices in database design and performance tuning. Specialized in multiple database engines, Oracle E-Business Suite Setup, Upgrades, Backup and Recovery, Cloning Optimizations, Cloud Migrations, Replication and Disaster Recovery. You can reach me at meet.lsuresh at gmail.com |
| Suresh Lakshmanan, USA View my profile here. | |
Oracle DB POSTS
- 19c: Tuning Simplified
- ORA-600 qksvcGetGuardCol
- 11g Grid with lower DB version
- 12C-DeprecatedCursor_sharing=similar
- 11g: Oracle Multimedia
- 11g: Active Data guard
- 11g: Incident Service Packaging
- 11g: Killing sessions in other RAC instances
- 11g: Snapshot Stanby for EBS R12/11i
- 11g: Invisible Indexes
- 11g: Password Case Sensitivity
- 11g Automatic memory management
- 11G: RAC ADRCI usage
- 11g: Automatic Diagnostic Repository
- 11g: Alert Log location Change
- 11g Online Patching/Rollup Patching
- RDBMS patching in 11g RAC
- DR corruption real world scenario
Oracle 11i POSTS
- Configuring Discoverer SSL with Ebiz - Part III
- Configuring Discoverer SSL with Ebiz - Part II
- Configuring Discoverer SSL with Ebiz - Part I
-
SQL: Workflow Service components Status
- Java for Ebiz 64bit vs 32 bit
- Removing Credentials from cloned system
- FNDCPASS utility changes for DB Vault
- Unlock orcladmin Account
Tools,Books
Oracle R12 POSTS
- R12.2 SSL Setup Debugging
- OAM stops working after SSL
- R12.1 AFPASSWD
- R12: IP/Host name change
- R12: Concurrent Manager Status R12: INST_TOP on NAS
- R12: Novice Apps DBA
- R12: SSL in multinode EBS
- R12 Spam workflow notification emails
- R12 eMC vs 11i eMC
- R12: Isolating DB and Apps Tier from Single User Installation
- R12 Certified DBA
- Why R12 Upgrade
- R12: R12.1.1 Post installation issues
- R12: R12.1.1 - RPM issues with OEL
- R12: R12 or 12i
- R12: opmnctl long option
- R12.1: Autoconfig
- R12: Where is my Context XML
- R12 :CDATA in Context XML
- R12: Appcasts
- R12: No Passwords in appltop
- R12: Integration with BPEL
- R12: OC4J Overview
- R12 and Application Server
- R12: Rapidwiz
- R12: Shared Appltier - Sun JRE 1.5.0.13 upgrade
- R12: Where is my Jinitiator
- R12 Service Management - OPMN
- R12.0.4 FNDCPASS USERMIGRATE
- R12 Installation-In depth Discussion
- R12 Single Node,Single User Installation
- R12:Beware executing rm -rf $COMMON_TOP/_pages/*
- What is new in R12 SSL
- R12 distributed AD
- Unveiled R12 INST TOP
- R12 techstack inventory Report
- R12 XML Publisher/BI Publisher
- R12 Init.ora settings
- R12-Loading Apps User to OID
- R12 with OID/SSO
- INST_TOP in R12
- R12 Architecture
- R12 Intro
11 comments:
Thats really a good blog ! Thanks for putting in the effort :-)
- karnvivek
I am dealing with FNDCPASS USERMIGRATE new utility
do you know if fnd_user_pkg.updateuser also keeps
passwords - non-reversible hash password
after installing atg-rup6 ?
Regards
Finberg Victor-BVF003 from motorola
Finberg,
Nope, I do not see packages keeping passwords in it.
Regards
Suresh
Hi Suresh,
i am currently working in 10g and we have recently implemented rup6 in our applications(11i). i need to use this feature FNDCPASS USERMIGRATE to Enhance Security With Non-Reversible Hash Password.
1) what are the test involved in this.
2) what are the prechecks and post checks involved.
3) will this impact the functioning of the application if we move this with out any proper testing.
waiting for your answer.
-
Thanks & Regards
Ravikumar
Hi Ravikumar,
Do not make any changes without testing in prod.
This is high impact intrusive change. Check the known issues section in the note 457166.1.
If your instance has configurator or ADI you have some special tasks.
Note is pretty straight forward. Take care of each action item mentioned in the note.
Thank you.
Thanks
Suresh
Lakshman,
Thanks for such an informative blog.
I am not an Oracle DBA. i recently installed an R12 instance. I am trying to apply the patches to upgrade to 12.1.1. i guess I have forgotten the SYSTEM oracle schema password. How can i handle such a situation. PLease help me.
Hi Anonymous,
you can login as
sqlplus '/as sysdba' and reset the password using
'alter userer system identified by secretpassword;'
command. leave your name when you give comment to address you.
thank you :)
what s the frequency for clooning
Ram,
Thanks for the comment. Cloning depends on situation, sometime once in few days(during upgrade testing) or could be weekly once or adhoc - ie. whenever required - say for testing a patch. It varies depends on the request on client.
Suresh
Hi lakshaman,
I have a stuation here. i did hashing of passwords on r12.1.3 ebus instance. The change was successfull. Users are able to login ebs and ebs works fine. However discoverer plus (10.1.2) integration with ebus does not work. When users enter application credentials on discoverer plus, the message is invalid username/password. The discoverer setup is correct, as i can connect another ebus r12.1.3 instance (without password hasing) and users are able to login. Are u aware of any such issues with discover integration with ebus "after" password hasging? Seems after password hashing, discoverer plus/viewer not able to decrypt ebus user passwords.
Hi Sahal,
this is the only one note i see which is closer. You might have to create Oracle SR and ask them to route to ATG team.
What version of Discoverer Desktop has the latest FNDPUB for E-Business Suite Password Hash [ID 1088956.1]
with best wishes.
Thanks
Post a Comment