AFPASSWD (New password utility) in EBS 12.1.3 and 12.2.4

Conceptual comparision with FNDCPASS

In R12.1.1 and before oracle EBS Versions EBS passwords are changed using FNDCPASS. From R12.1.2 Oracle has come up with another Utility AFPASSWD for the same purpose.

AFPASSWD help: AFPASSWD -h (Displays help)

Advantages

1. AFPASSWD utility can be run from DB tier or from Midtierwhere but FNDCPASS can only be run from midtier side.
2. AFPASSWD is an enhanced version of FNDCPASS, and includes the following features: 

• AFPASSWD only prompts for passwords required for the current operation,allowing separation of duties between applications administrators and database administrators.

• Improved interoperability with Oracle Database Vault.In contrast, the FNDCPASS utility currently requires specification of the APPS and the SYSTEM usernames and corresponding passwords, preventing separation of duties between applications administrators and database administrators.

AFPASSWD Usage(Detailed)When changing a password with AFPASSWD, the user is prompted to enter the New password twice to confirm. 

SYNTAX -

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-f <FNDUSER>]

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-o <DBUSER>]

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-a]

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-l <ORACLEUSER> [<TRUE>] |[<FALSE>]]

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-L [<TRUE>] | [<FALSE>]]

• AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] [-s] <APPLSYS>

These options have the following functions:

• -c {APPSUSER}[@{TWO_TASK}] - Specifies the connection string to use, the Applications user, and/or the value of TWO_TASK. This option can be use in combination with others. If it is not specified, default values from the environment will be used.  Note: The password will be prompted for, and is not to be provided in the connection string.

• f {FNDUSER} - Changes the password for an Applications user. A username that contains spaces must be enclosed in double quotation marks; for example, "JOHNSMITH".

• -o {DBUSER} - Changes the password for an Oracle E-Business Suite database user.Note: This only applies to users listed in the FND_ORACLE_USERID table, not database users in general.

• -a - Changes all Oracle (ALLORACLE) passwords (except the passwords of APPS, APPLSYS, APPLSYSPUB) to the same password, in the same way as the ALLORACLE mode does in FNDCPASS.

• -l - Locks individual {ORACLE_USER} users (except required schema). {TRUE} =LOCK, {FALSE} = UNLOCK.

• -L - Locks all Oracle (ALLORACLE) users (except required schema). {TRUE} =LOCK, {FALSE} = UNLOCK.

• -s {APPLSYS} - Changes the password for the APPLSYS user and the APPS user. This requires the execution of auto config (in ALL-TIERS) to distribute the changes on your instance .i.e: DB-TIER and ADMIN-TIER.

2.     Run auto config on db tier and application tier after changing apps password