Technology Stack: password

Monday, November 3, 2014

Issues while Upgrading IAS to 10.1.3.5 for R12.1.3

Always remember to set $INST_TOP/ora/10.1.3/{SID_hostname}.env before starting IAS Upgrade.

Issue 1) While doing IAS Upgrade to 10.1.3.5, the following error occurred,

The runInstaller cannot found the opmn port number in opmn_port.
File 10.1.3_ORACLE_HOME/install/opmn_port is null.

To resolve above issue, followed "IAS Upgrade - OPMN Port Information is Unavailable (Doc ID 1545145.1)"

1. Check for correct opmn port of current instance:

$ADMIN_SCRIPTS_HOME/adopmnctl.sh status -port

2. Add it to file 10.1.3_ORACLE_HOME/install/opmn_port:
opmn_port = <the value returned from step1>

3. Click 'OK' in runinstaller to continue the patch application.

Issue 2) oc4jadmin password could become an issue when installing 10.1.3.5 Techstack software in Oracle 12.1.3 EBS. Its important to know that we are providing right oc4jadmin password.

I didn't know password for oc4jadmin, as I also tried to check my luck with some standard passwords like welcome1, welcome, oafm, secret with below command, but not worked

How to verify:

java -jar $IAS_ORACLE_HOME/j2ee/home/jazn.jar -checkpasswd jazn.com oc4jadmin -pw *****
Unsuccessful verification of user/password pair.

***** = oc4jadmin password

The message should be successful. If not the password can be changed in system-jazn-data.xml file, for which I used "How to reset "oc4jadmin" password for standalone OC4J version 10.1.3 (Doc ID 360130.1)"

1. Shutdown all opmn services :

cd $ADMIN_SCRIPTS_HOME
adstpall.sh / adopmnctl.sh stopall

2. cd $ORACLE_HOME/j2ee/home/config

Here ORACLE_HOME= Oracle Application server home, ie, 10.1.3 HOME
Take a backup of system-jazn-data.xml and edit the below content:

<user>
<name>oc4jadmin</name>
<display-name>OC4J Administrator</display-name>
<guid>93E5A2505D1511DEBF8E89BC12E10097</guid>
<description>OC4J Administrator</description>
<credentials>!mynewpassword</credentials>
</user>

Marked in bold is the details to be changed and that is the password. Note an ! mark has to prefixed with the password.

3. Start all opmn services.

Whenever autoconfig is run after this activity, the password changes to encrypted format.

To Verify Again,

java -jar $IAS_ORACLE_HOME/j2ee/home/jazn.jar -checkpasswd jazn.com oc4jadmin -pw *****
Successful verification of user/password pair.

Issue 3) In Post-Installation, while Configuration Assistants run to apply One-Off Patches, I had faced several issues w.r.t. opatch rollback because of bug conflict. (you may or may not face this issue)

Hence checked in /etc/OraInventory logs. Rolled-back some opatches manually, also renamed/moved some files (eg. like which were creating problem while rolling back some patches. After that applied required patches manually OR clicked on Retry button, and completed installation successful.

[cbos -> appebs:/etc/oraInventory/logs] :tail -100f installActions2014-11-15_11-29-40PM.log
The following files had problems with being restored:
1. /d04_r12prodapp/oracle/apps/tech_st/10.1.3/lib32/libnnz10.so

Replying 'Y' will terminate the patch roll-back immediately. It WILL NOT restore any updates that have been performed to this point. It WILL NOT update the inventory.
Replying 'N' will update the inventory showing the patch has been removed.

Do you want to STOP?
Please respond Y|N >
Y (auto-answered by -silent)

ERROR: OPatch failed during patching, possibly due to missing files.
File Back-up Errors!

OPatch did not complete successfully...
------------------------------------------------------------------------------------------------------------
Restore Jar File
OPatch encounters the following file roll-back issues:
The following files had problems with being restored:
1. /d04_r12prodapp/oracle/apps/tech_st/10.1.3/lib32/libnnz10.so

Replying 'Y' will terminate the patch roll-back immediately. It WILL NOT restore any updates that have been performed to this point. It WILL NOT update the inventory.
Replying 'N' will update the inventory showing the patch has been removed.

Do you want to STOP?
Please respond Y|N >
Y (auto-answered by -silent)

File Back-up Errors!
ERROR: OPatch failed during patching, possibly due to missing files.

Workaround: mv /d04_r12prodapp/oracle/apps/tech_st/10.1.3/lib32/libnnz10.so /d04_r12prodapp/oracle/apps/tech_st/10.1.3/lib32/libnnz10.so.orig.151114

I hope this might be useful to you.

Thanks,
Manish

Sunday, May 5, 2013

Script to get Application user passwords !!! don't misuse it :)

Connect to APPS user and create following package to get Application user password.

Package Specification:
------------------------------------------------------------------------------------------------------------

CREATE OR REPLACE PACKAGE get_pwd
AS
FUNCTION decrypt (KEY IN VARCHAR2, VALUE IN VARCHAR2)
RETURN VARCHAR2;
END get_pwd;
/

Package Body:
------------------------------------------------------------------------------------------------------------

CREATE OR REPLACE PACKAGE BODY get_pwd
AS
FUNCTION decrypt (KEY IN VARCHAR2, VALUE IN VARCHAR2)
RETURN VARCHAR2
AS
LANGUAGE JAVA
NAME 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';
END get_pwd;
/

Query:
------------------------------------------------------------------------------------------------------------

SELECT usr.user_name,
get_pwd.decrypt
((SELECT (SELECT get_pwd.decrypt
(fnd_web_sec.get_guest_username_pwd,
usertable.encrypted_foundation_password
)
FROM DUAL) AS apps_password
FROM fnd_user usertable
WHERE usertable.user_name =
(SELECT SUBSTR
(fnd_web_sec.get_guest_username_pwd,
1,
INSTR
(fnd_web_sec.get_guest_username_pwd,
'/'
)
- 1
)
FROM DUAL)),
usr.encrypted_user_password
) PASSWORD
FROM fnd_user usr
WHERE usr.user_name = '&Username';

###############################################################################

How to get APPS Password, that's very interesting...

Step #1 Connect as system or sys User in the database.

[oracle@~~inblrdrdbadm01~~ ~]$ sqlplus system

SQL*Plus: Release 11.2.0.3.0 Production on Fri Jul 25 21:24:58 2013

Copyright (c) 1982, 2011, Oracle. All rights reserved.

Enter password:

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options

Step#2: Create Function to decrypt the encrypted password

SQL> set linesize 200 long 300
SQL> create FUNCTION apps.decrypt_pin_func(in_chr_key IN VARCHAR2,in_chr_encrypted_pin IN VARCHAR2) RETURN VARCHAR2 AS LANGUAGE JAVA NAME 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';
2 /

Function created.

Step#3: Query for password

SQL> select ENCRYPTED_FOUNDATION_PASSWORD from apps.fnd_user where USER_NAME='GUEST';

ENCRYPTED_FOUNDATION_PASSWORD
----------------------------------------------------------------------------------------------------
ZG040B6D2CDF90B3493544F3BC2EFD960DD2F5C5D230E6F2C14D59E59C9F258726756BD7B9227552996F63F8795EAFE62F45

Step#4: Get the Apps password using encrypted guest password

SQL> SELECT apps.decrypt_pin_func('GUEST/ORACLE','ZG040B6D2CDF90B3493544F3BC2EFD960DD2F5C5D230E6F2C14D59E59C9F258726756BD7B9227552996F63F8795EAFE62F45') from dual;

APPS.DECRYPT_PIN_FUNC('GUEST/ORACLE','ZG040B6D2CDF90B3493544F3BC2EFD960DD2F5C5D230E6F2C14D59E59C9F258726756BD7B9227552996F63F8795EAFE62F45')
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
EBSDEVCLONE

Step#5: Test apps password

SQL> conn apps/ebsdevclone
Connected.
SQL> show user
USER is "APPS"
SQL>

I hope, this could be important to get APPS / Any Application User password in-case of loss.

Cheeeers !!!