OAF Page Migration

OAF Page Migration

1. SCP the Directory Structure from Source(DEV) to Target(CRP2).
$ scp -r appldev@mkkserver1:${xx_srcjavatopxx}/xxmkk/oracle/apps/eam/cwsa/* ${JAVA_TOP}/xxmkk/oracle/apps/eam/cwsa/

2. Determine the Name of the XMLs that needs to be imported, webui and lov xmls are the one.
find . -name "*.xml" -print | grep webui

3. Run the XMLImporter Command in TARGET Instance:
adjava oracle.jrad.tools.xml.importer.XMLImporter XXMKKCreatePropVehiclePG.xml -username apps -password ${xx_appspassword} -rootdir ${JAVA_TOP} -dbconnection "(DESCRIPTION= (ADDRESS=(PROTOCOL=tcp)(HOST=mkkserver2.mkkdomain.net)(PORT=1527)) (CONNECT_DATA= (SERVICE_NAME=MKKCRP2) (INSTANCE_NAME=MKKCRP2)))"

4. Restart only OACORE Service, nothing else is required.

HTTP Converted to HTTPS | SSLTERMINATOR in Context File

HTTP Converted to HTTPS | SSLTERMINATOR in Context File

While trying to open using http://mkkserver1.mkkdomain.net:8004/OA_HTML/AppsLocalLogin.jsp its opening the login page and can launch forms, but when going to any JSP Pages like OAM again its throwing error.

IEHTTP Header Log showing the following message:
HTTP/1.1 302 Moved Temporarily
Date: Mon, 14 Mar 2011 06:48:17 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://mkkserver1.mkkdomain.net:8004/OA_HTML/AppsLocalLogin.jsp
Keep-Alive: timeout=15 >>>> Though it was http only, its getting converted to https
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html

I have checked the $CONTEXT_FILE and verified that webentry, login URLs are perfect, but there is no HTTPS. Basically SSLTERMINATOR is creating the issue

Comment out SSLTERMINATOR in xml file and run autoconfig again. That will resolve the issue.
Hash out the s_enable_sslterminator parameter in $CONTEXT_FILE
Old Value: <sslterminator oa_var="s_enable_sslterminator"/>
New Value: <sslterminator oa_var="s_enable_sslterminator">#</sslterminator>

Changing Password of Java Keystores(WebLogic 11g)

Changing Password of Java Keystores(WebLogic 11g)


Set the environment by running setDomainEnv.cmd
${MW_HOME}/user_projects/domains/<domain name>/bin


cd ${JAVA_HOME}/lib/security/cacerts
keytool -list -v -keystore cacerts
It will prompt for password: enter the password ("changeit" is the default cacert password).


Take a backup of the cacerts files and run keytool store password:
keytool -storepasswd -keystore cacerts


Confirm that the Keystore Password is changed:
keytool -list -v -keystore cacerts


Now in the console you can apply the new password for the java keystore passphrase.


Use the below command for changing the password of a custom keystore:
keytool -storepasswd -new new_storepass -keystore <your_custom_keystore.jks>


Cheers !!!!!!!!!!!!!!!!!!!!

Details on ORA_NLS

Details on ORA_NLS:

You can check which NLS setting are valid for this platform by connecting to the database as a DBA and issuing the following command:
SELECT * FROM V$NLS_VALID_VALUES;

If this only returns US7ASCII then ORA_NLSxx was INCORRECTLY set during database startup.

To find out what character set you have, issue the following command:
SELECT * FROM NLS_DATABASE_PARAMETERS;

cd $ORACLE_HOME/nls/data
strings * | grep -i we8mswin1252
where we8mswin1252 is the NLS_CHARACTERSET used.

what is OI_NLS32?
OI_NLS32 is a parameter used by the Oracle Universal Installer and should NOT be altered.

What is the use of this ORA_NLSxx parameter?
ORA_NLSxx is used to indicate where Oracle RDBMS/client software can locate the defintions of Charactersets (used in NLS_LANG or as NLS_CHARACTERSET/NLS_NCHAR_CHARACTERSET), NLS_SORT, NLS_LANGUAGE (or derived/related parameters) or NLS_TERRITORY (or derived/related parameters).
Those definitions are stored in .nlb files who can be found in the ORA_NLSxx directory.

The Priority of NLS Parameters:
select * from NLS_INSTANCE_PARAMETERS;
Priority of NLS Parameter Settings: SESSION >>>> INSTANCE >>>> DATABASE.
NLS instance settings take precedence over NLS database settings, NLS session settings take precedence over NLS instance and NLS database settings.

HOW TO Add Concurrent Program to Request Group from Back End

HOW TO Add Concurrent Program to Request Group from Back End:

set serveroutput on
DECLARE
BEGIN
APPS.FND_PROGRAM.add_to_group
(
PROGRAM_SHORT_NAME => 'XXCTO_GPO_PRINT_REPORT',
PROGRAM_APPLICATION => 'XXCTO',
REQUEST_GROUP => 'XXCTO_REPORT_TEST',
GROUP_APPLICATION => 'SYSADMIN'
);
COMMIT;
exception
when others then
dbms_output.put_line('Request Already Exixts in Request Group');
END;
/

Changing Apps Password in EBS, what needs to be done in OID

Changing Apps Password in EBS, what needs to be done in OID

After updating the APPS user password in the E-Business Suite, user updates From OID to Ebiz fail with the following error:

Using Service Name to connect - URL : jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<<<ebs-db-host>>>)(PORT=1571))(CO
NNECT_DATA=(SERVICE_NAME=<<<ebs-db-sid>>>))),user : APPS
Exception Connecting to DB using service name :java.sql.SQLException: ORA-01017: invalid username/password; logon denied

Retrying with SID ..
Using SID Name to connect - URL : jdbc:oracle:thin:@<<<ebs-db-host>>>:1571:<<<ebs-db-sid>>>,user : APPS
Using Service Name to connect - URL : jdbc:oracle:thin:@<<<ebs-db-host>>>:1571:<<<ebs-db-sid>>>,user : APPS
Exception Connecting to DB :java.sql.SQLException: ORA-01017: invalid username/password; logon denied

Update the Oracle Internet Directory provisioning profile with the new APPS password. This can be done by running the Oracle Internet Directory oidprovtool command-line utility.

oidprovtool operation=modify \
profile_mode=INBOUND profile_status=enabled \
ldap_host=<OID Server hostname> ldap_port=<OID Server Port> \
ldap_user_dn="cn=orcladmin" ldap_user_password=<orcladmin Password> \
application_dn="<The LDAP distinguished name of the application>" \
interface_connect_info=<E-Business Suite connect info of the format, host:port:Sid:username: new updated password>

profile_mode = Run the following SQL as the APPS user
SELECT * FROM fnd_user_preferences WHERE preference_name = 'provisiontype';
1 = BOTH             
2 = INBOUND
3 = OUTBOUND    
4 = BOT

application_dn = Run the following SQL as the APPS user
SELECT * FROM fnd_user_preferences WHERE preference_name = 'USERNAME'

interface_connect_info = E-Business Suite connect info of the format, host:port:Sid:username:password

oidprovtool operation=modify \
profile_mode=INBOUND profile_status=enabled \
ldap_host=<<<ldap-host-name>>> ldap_port=3060 \
ldap_user_dn=cn="orcladmin" ldap_user_password=welcome1 \ 
application_dn="orclApplicationCommonName=ebizqa,cn=EBusiness,cn=Products,cn=OracleContext,dc=us,dc=oracle,dc=com" \
interface_connect_info=ebiz30qa:1521:ebizqa:apps:welcome2

orclODIPProfileName=EA3EFF8640819A51F0301990304E5D0B_EA960F743D5D7552F0301990304E34B3, cn=Provisioning Profiles, cn=Changelog Subscriber,cn=Oracle Internet Directory
The Provisioning Profile for the Application has been modified.

Oracle Developer Suite 10g and Windows 7

Oracle Developer Suite 10g and Windows 7

Yes it is certified... Refer the MOS Note for details......
Certification of Oracle Developer Suite 10g (10.1.2) on Windows 7 (32-bit) [ID 1292919.1]
Win 7 (32 bit) is supported for Dev Suite 10g

Oracle Developer Suite 10g and Windows 7 (64-bit):

Tips to Install:
>> Extract the setup files (version 101202) downloaded from otn.
>> Right click the installer setup.exe and go to properties, set compatibility to Windows XP SP2
>> Edit the virtual memory size to custom size from 1024m to 8000m, Restart it
>> Run the install using setup.exe

In my current assignment most of the PC's and Laptop's are Win 7.... Its working fine....

Profile Options Setup for the Implementation Team/Super User Support Team

Profile Options Setup for the Implementation Team/Super User Support Team

Personalize Self-Service Defn
Description: Personalize Self-Service Definitions
Value at User Level Should be Yes

FND: Diagnostics
Description: Enables Diagnostics Global Button
Value at User Level Should be Yes

Utilities:Diagnostics
Description: Value determines whether diagnostic utilities, such as Examine, may be used
Value at User Level Should be Yes

Hide Diagnostics menu entry
Value at User Level Should be No

How to Resend Failed/Error Workflow Notifications?

How to Resend Failed/Error Workflow Notifications?

Run "Resend Failed/Error Workflow Notifications" concurrent program to resend FAILED notifications.
This concurrent program will resend all the failed notifications to the user again.

How to check whether RELAY is Enabled in SMTP Server for the EBS Application Server

How to check whether RELAY is Enabled in SMTP Server for the EBS Application Server:

$ telnet smtpmail.mailserv.com 25
Trying...
Connected to smtpmail.mailserv.com.
Escape character is '^]'.
220 smtpmail.mailserv.com Microsoft ESMTP MAIL Service ready at Fri, 10 Feb 2012 17:32:03 +0200
EHLO applnode1.mkkdomain.net
250-smtpmail.mailserv.com Hello [10.0.9.74]
250-SIZE
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM LOGIN
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250-XEXCH50
250 XRDST
MAIL FROM: mkhawas1@mailserv.com
250 2.1.0 Sender OK
RCPT TO: mkhawas2@mailserv.com
250 2.1.5 Recipient OK
DATA
354 Start mail input; end with <CRLF>.<CRLF>
Subject: Test message from Malay Khawas
Test message body
.
250 2.6.0 <3f67d977-2da0-45c2-9819-fc935c4fa4d8@smtpmail.mailserv.com> Queued mail for delivery
quit
221 2.0.0 Service closing transmission channel
Connection closed.


Cheers !!!!!!!

IMPORTANT SQLs - Related to Concurrent Processing

Find the OPP Logfile of a Request ID:


SELECT fcpp.concurrent_request_id req_id, fcp.node_name, fcp.logfile_name
FROM apps.fnd_conc_pp_actions fcpp, apps.fnd_concurrent_processes fcp
WHERE fcpp.processor_id = fcp.concurrent_process_id
AND fcpp.action_type = 6
AND fcpp.concurrent_request_id = &req_id;

==================************==================

Query to Find Out the Schedule Concurrent Requests and Request Sets:

SELECT fcr.request_id,
DECODE(fcpt.user_concurrent_program_name,
'Report Set',
'Report Set:' || fcr.description,
fcpt.user_concurrent_program_name) CONC_PROG_NAME,
argument_text PARAMETERS,
NVL2(fcr.resubmit_interval,
'PERIODICALLY',
NVL2(fcr.release_class_id, 'ON SPECIFIC DAYS', 'ONCE')) PROG_SCHEDULE_TYPE,
DECODE(NVL2(fcr.resubmit_interval,
'PERIODICALLY',
NVL2(fcr.release_class_id, 'ON SPECIFIC DAYS', 'ONCE')),
'PERIODICALLY',
'EVERY ' || fcr.resubmit_interval || ' ' ||
fcr.resubmit_interval_unit_code || ' FROM ' ||
fcr.resubmit_interval_type_code || ' OF PREV RUN',
'ONCE',
'AT :' ||
TO_CHAR(fcr.requested_start_date, 'DD-MON-RR HH24:MI'),
'EVERY: ' || fcrc.class_info) PROG_SCHEDULE,
fu.user_name USER_NAME,
requested_start_date START_DATE
FROM apps.fnd_concurrent_programs_tl fcpt,
apps.fnd_concurrent_requests fcr,
apps.fnd_user fu,
apps.fnd_conc_release_classes fcrc
WHERE fcpt.application_id = fcr.program_application_id
AND fcpt.concurrent_program_id = fcr.concurrent_program_id
AND fcr.requested_by = fu.user_id
AND fcr.phase_code = 'P'
AND fcr.requested_start_date > SYSDATE
AND fcpt.LANGUAGE = 'US'
AND fcrc.release_class_id(+) = fcr.release_class_id
AND fcrc.application_id(+) = fcr.release_class_app_id
and DECODE(fcpt.user_concurrent_program_name,
'Report Set',
'Report Set:' || fcr.description,
fcpt.user_concurrent_program_name) like '%'
ORDER BY CONC_PROG_NAME;

Cheers !!!!!!!

After Cloning Managers are not coming up

After Cloning Managers are not coming up

Method#1:
● Clean the FND_NODE Info:
EXEC FND_CONC_CLONE.SETUP_CLEAN;
COMMIT;
EXIT;
●● Run Autoconfig on DB node and then Apps Node
●●● Run $FND_TOP/patch/115/sql/afdcm037.sql script
●●●● Start Services (adstrtal.sh)

Method#2:
● Ensure Concurrent :GSM Enabled profile is set to ‘Y’
●● Run $FND_TOP/patch/115/sql/afdcm037.sql
●●● Do Relinking of FND Conc Libraries:
cd $FND_TOP/bin
adrelink.sh force=y "fnd FNDLIBR"
adrelink.sh force=y "fnd FNDSM"
adrelink.sh force=y "fnd FNDFS"
adrelink.sh force=y "fnd FNDCRM"

Before bringing the managers up, execute CMCLEAN….. In most of the cases it helped….


Cheers !!!!!!!

How to change the SCAN Listener Port After Installation?

How to change the SCAN Listener Port After Installation?

Modify SCAN listener port:
$ ${GRID_HOME}/bin/srvctl modify scan_listener -p <new-SCAN-port>

Restart SCAN listener so the new port will be effective:
$ ${GRID_HOME}/bin/srvctl stop scan_listener
$ ${GRID_HOME}/bin/srvctl start scan_listener

Confirm the change:
$ ${GRID_HOME}/bin/srvctl config scan_listener

Cheers !!!!!!!

Enable Tracing for CRSD Module

Enable Tracing for CRSD Modules:($GRID_HOME/log/<nodename>/crsd/crsd.log)

List all crsd modules: 
${GRID_HOME}/bin/crsctl lsmodules crs

Find out the current trace level for all crsd modules - the output can be used to to revert back to original trace level once the issue is solved:
${GRID_HOME}/bin/crsctl get log crs all

Set trace level to 5 for all modules: 
${GRID_HOME}/bin/crsctl set log crs all:5
Alternatively trace level for each modules can be set individually:
${GRID_HOME}/bin/crsctl set log crs CRSPE:5

Once the issue is solved, set trace level back to original value for all crs modules
$GRID_HOME/bin/crsctl set log crs AGENT:1



Cheers !!!!!!!

Cluster Verification Utility - Concepts and Details

Cluster Verification Utility - Concepts and Details

<<<<<<<<< cluvfy NTP >>>>>>>>>

cluvfy comp clocksync -n all -verbose
....
Result: Clock synchronization check using Network Time Protocol(NTP) passed
Oracle Cluster Time Synchronization Services check passed
Verification of Clock Synchronization across the cluster nodes was successful.

The Cluster Time Synchronization Service (CTSS) is one of the new processes in the Oracle Clustware 11gR2 layer , the CTSS is installed during the GRID infrastructure installation.

CTSS Daemon is responsible for the time management within the cluster. It makes sure each node in the cluster is using the same time. First, CTSS will determine if a Network Time Protocol (NTP) daemon is running in the system and if NTP is not running, then  CTSS will run in active mode and perform the same task as the NTP daemon. If NTP daemon is running,  CTSS will be started  in observer mode.

●● We need to check if there is a time difference on the nodes.
●● We need to make sure ntp is running properly and with -x option



Cheers !!!!!!!

AWR Snapshot - Details

How to Change the AWR Snapshot Settings:

Default is 60 Minutes. Following will change to 30 Minutes:
EXEC DBMS_WORKLOAD_REPOSITORY.MODIFY_SNAPSHOT_SETTINGS( interval => 30);

Changes the interval setting to two hours and the retention setting to two weeks for the local database:
execute dbms_workload_repository.modify_snapshot_settings(interval => 120,retention => 20160);

If you query the DBA_HIST_WR_CONTROL table after this procedure is executed, you will see the changes to these settings.
SELECT * FROM DBA_HIST_WR_CONTROL;

By setting the value of the interval as 0, we set the new interval between each snapshot collection as 110 years:
execute DBMS_WORKLOAD_REPOSITORY.MODIFY_SNAPSHOT_SETTINGS(interval => 0);

The default settings for 'interval' and 'retention' are (60 min and 7 days respectively), and values for both 'interval' and 'retention' dbms_workload_repository.modify_snapshot_settings(...) procedure is expressed in minutes. 

How to Manually Create Snapshots:

When you wish to create performance snapshots outside of the fixed intervals, then DBMS_WORKLOAD_REPOSITORY package can also be used:
EXEC DBMS_WORKLOAD_REPOSITORY.CREATE_SNAPSHOT('TYPICAL');

How to Manually Drop Snapshots Range:

DBMS_WORKLOAD_REPOSITORY.DROP_SNAPSHOT_RANGE( 
low_snap_id IN NUMBER, 
high_snap_id IN NUMBER 
dbid IN NUMBER DEFAULT NULL);


Cheers !!!!!!!

HOW TO - Send Output of Concurrent Request to User's Mail ID

HOW TO - Send Output of Concurrent Request to User's Mail ID

Setup SMTP Related Profile Option:
FND:SMTP Host
FND:SMTP Port

In Submit Request window click on Delivery Option, Go to Email Tab and key in the Mail Details.

Review the Logfile for following Messages:

+------------- 2) DELIVER -------------+
Emailing output to user1@mail.com
Beginning post-processing of request 2065107 on node <<<<<HOSTNAME>>> at 20-JUN-2012 09:50:56.
Post-processing of request 2065107 completed at 20-JUN-2012 09:51:07.
+--------------------------------------+

Cheers !!!!!!!

java thread dump (stack trace) in WebLogic

java thread dump (stack trace) in WebLogic


Why java thread dumps are required?
Sometimes we see a particular thread of the application deployed in Weblogic gets STUCK indifinetely and may require a restart to come out of it. This can happen for a number of reasons. To find out what the application was doing or waiting for which lead it to STUCK state, a thread dump is required to investigate the cause of this situation. The thread dump provides Java stack trace. A Java stack trace is a snapshot of the thread in a Java1 Virtual Machine (JVM). A stack trace can range from few lines to thousands of lines of diagnostics (this depends on how complex the application is).


1. Using kill -3


●● Unix operating systems have a command called 'kill' which sends different signals to a target running process or a daemon. A signal is a form of IPC (inter-process communication) that is used in the Unix operating systems to notify a process (its signal handler) that an event has occurred. Therefore, there are many uses for the kill command. For example, to kill (end / terminate) a process, signal SIGKILL (signal number 9) can be used. This cuases the process to end immediately.
●● Likewise, we can use kill -3 (signal SIGQUIT, quit and dump core) command to send a signal to the process whose dump we require. This signal causes the Java Virtual Machine to generate a stack trace of the process. This signal does terminate the process rather produces a dump.


kill -3 <PID>


●● where PID is the Java process ID in the operating system. Process ID can be found out using ps -ef command which lists all the processes running, and which can be further filetred using grep command with process name (e.g. java) or username as argument etc.


If you have started the Weblogic server using nohup, then dump is redirected to nohup.out.


2. Using jstack utility


By default, the output is redirected to stdout. This can be changed in Weblogic start up script using JAVA_OPTION.
jstack <PID>
To get a forced thread dump (when a process is not responding to jstack), use -F option.


3. Using WebLogic Admin console


Login to AdminConsole >>> Admin Server >>> Monitoring >>> Threads >>> Dump Thread Stacks


4. Using Weblogic Admin utility


java weblogic.Admin -url t3://WLS_hostname:Port -username <user> -password <password> GET -pretty -type JVMRuntime
Before running the above utility, you may have to source the setDomainEnv.sh from the Weblogic_domain_home/bin directory.




Cheers !!!!!


>>>> If you feel that you would like to read on some topics, please feel free to put a comment in the blog, I would definitely help. If you need any help for any Oracle Apps or Database related issues, put a comment.

Updating DB_CACHE_SIZE With Alter System Scope=SPFILE Fails with ORA-384

Updating DB_CACHE_SIZE With Alter System Scope=SPFILE Fails with ORA-384

SQL> alter system set db_cache_size=<new value> scope=spfile;
ORA-384 Insufficient memory to grow cache 

The problem stems from having SGA_TARGET set to a non-zero value.

You need to unset SGA_TARGET, restart your database and modify DB_CACHE_SIZE, and then reset SGA_TARGET as before.

SQL> alter system set sga_target=0 scope=spfile;
SQL> shutdown immediate;
SQL> startup
SQL> alter system set db_cache_size=<new value> scope=spfile;
SQL> alter system set sga_target=<old value> scope=spfile;
SQL> shutdown immediate;
SQL> startup


Cheers !!!!!!!!!!!!!!!!!!

>>>> Before Implementing anything in PROD test properly in atleast 2 test instances to validate the solution.

Issue with changing user password using FNDCPASS

Issue with changing user password using FNDCPASS

From the FNDCPASS Log:
FNDCPASS was not able to decrypt password for IMPMALAYK during applsys password change.
FNDCPASS was not able to decrypt password for APPLSYSPUB during applsys password change.

SQL> update APPLSYS.FND_USER set ENCRYPTED_FOUNDATION_PASSWORD='INVALID', ENCRYPTED_USER_PASSWORD='INVALID' where user_name = 'IMPMALAYK';
1 row updated.

SQL> commit;
Commit complete.

Now try changing the password using FNDCPASS.

Cheers !!!!!!!!!!!!!!!!!!

>>>> Details where I have applied this: EBS 12.1.3, DB 11.2.0.1

FNDCPASS and sec_case_sensitive_logon | APPS Account is getting Locked Frequently

FNDCPASS and sec_case_sensitive_logon | APPS Account is getting Locked Frequently

Database password case sensitivity is a new feature available with 11g database. But as Applications tier do not support case sensitive database passwords, till then this feature cannot be used by default and set to FALSE.

As a workaround, please modify the init.ora manually and add this line:
sec_case_sensitive_logon = FALSE

If by mistake you set this to yes, your APPS Account will be locked frequently.

Cheers !!!!!!!!!!!!!!!!!!

AFPASSWD Utility, Migrate from FNDCPASS

AFPASSWD Utility:(in Use from R12.1.2)

AFPASSWD is an enhanced version of FNDCPASS, and includes the following features:


● AFPASSWD only prompts for passwords required for the current operation, allowing separation of duties between applications administrators and database administrators. This also improves interoperability with Oracle Database Vault. In contrast, the FNDCPASS utility currently requires specification of the APPS and the SYSTEM usernames and corresponding passwords, preventing separation of duties between applications administrators and database administrators.
●● When changing a password with AFPASSWD, the user is prompted to enter the new password twice to confirm.
●●● AFPASSWD can be run from the database tier as well as the application tier. In contrast, FNDCPASS can only be run from the application tier.

FNDCPASS will continue to be shipped with Oracle E-Business Suite, and customers can migrate to the AFPASSWD utility at their discretion.

Note: Migration to hash passwords is one-time, one-way operation that cannot be undone without a system restore from backup.  Please make sure you have a backup of your system prior to running FNDCPASS USERMIGRATE.

Use this command to convert all local Oracle Application User encrypted passwords to a non-reversible, non-recoverable hash scheme:

FNDCPASS <logon> 0 Y <system/password> <mode> <algorithm>

FNDCPASS apps/apps 0 Y system/manager USERMIGRATE SHA

Note: Currently only the SHA hash algorithm is supported.  Other hash algorithms may be supported in the future.

The FNDCPASS log file is written to the directory where FNDCPASS was executed.  Please check this log file for the status of the migration.  This log file contains information regarding the results of USERMIGRATE.  This includes any problems encountered and contains information about the number of users migrated successfully and indicates why other users were not migrated successfully.

Users migrated successfully : 1847 

Users with External passwords : 0 

Users with Invalid passwords : 4 

Users not migrated : 1 of 1852 

System was successfully converted to hash mode.

Check the following note for Known Issues after converting to Hash Mode:

FNDCPASS Utility New Feature: Enhance Security With Non-Reversible Hash Password [ID 457166.1]

Usage:

AFPASSWD [-c <APPSUSER>] [-f <FNDUSER>]

AFPASSWD [-c <APPSUSER>] [-o <DBUSER>]

AFPASSWD [-c <APPSUSER>] [-a]

AFPASSWD [-c <APPSUSER>] [-l <ORACLEUSER> [<TRUE>] | [<FALSE>]]

AFPASSWD [-c <APPSUSER>] [-L [<TRUE>] | [<FALSE>]]

AFPASSWD [-c <APPSUSER>] [-s] <APPLSYS>

●● -f {FNDUSER} - Changes the password for an Applications user. A username that contains spaces must be enclosed in double quotation marks; for example, "JOHN SMITH".

●● -o {DBUSER} - Changes the password for an Oracle E-Business Suite database user. Note: This only applies to users listed in the FND_ORACLE_USERID table, not database users in general.

●● -a - Changes all Oracle (ALLORACLE) passwords (except the passwords of APPS, APPLSYS, APPLSYSPUB) to the same password, in the same way as the ALLORACLE mode does in FNDCPASS.

●● -l - Locks individual {ORACLE_USER} users (except required schemas). {TRUE} = LOCK, {FALSE} = UNLOCK.

●● -L - Locks all Oracle (ALLORACLE) users (except required schemas). {TRUE} = LOCK, {FALSE} = UNLOCK.

●● -s {APPLSYS} - Changes the password for the APPLSYS user and the APPS user. This requires the execution of AutoConfig on all tiers.

●● -h - Displays help.