Passwords in E1Local OEE 11g Database Are Set With an Expiration Date.docx

Passwords in E1Local OEE 11g Database Are Set With an Expiration Date.docx

《Passwords in E1Local OEE 11g Database Are Set With an Expiration Date.docx》由会员分享，可在线阅读，更多相关《Passwords in E1Local OEE 11g Database Are Set With an Expiration Date.docx（11页珍藏版）》请在冰点文库上搜索。

PasswordsinE1LocalOEE11gDatabaseAreSetWithanExpirationDate

@E1:

DB:

PasswordsinE1LocalOEE11gDatabaseAreSetWithanExpirationDate

修改时间22-MAR-2012类型PROBLEM状态PUBLISHED

InthisDocument

Symptoms

Changes

Cause

Solution

References

Appliesto:

JDEdwardsEnterpriseOneTools-Version:

8.98andlater[Release:

8.98andlater]

Informationinthisdocumentappliestoanyplatform.

Symptoms

TheJDELogsontheDeploymentServerareshowingwarningORA-28002whenittriestoaccesstheE1Localdatabaseinstance:

Enterpassword:

ERROR:

ORA-28002:

thepasswordwillexpirewithin6days

Changes

OEEversion11gisrequiredforToolsRelease8.98.4.2andaboveasthelocaldatabaseontheDeploymentServerandclients.

Cause

Oracle11ghaschangedthedefaultprofilevalueforPASSWORD_LIFE_TIMEfromUNLIMITEDinpreviousversionsto180（days）.Thereforeallpasswordsaresettoexpire6monthsafterthelocaldatabaseisinstalled.

Solution

Note:

TheseinstructionsrequireknowledgeofOracledatabaseadministrationandarerecommendedfortheDBA.IfyourequireanyassistancewithfollowingthesestepsthenyoucanalsocontactOracleGCS.

1.Modifythesqlnet.orafilefromtheE1LocalinstallationtoacceptNTSauthentication:

--此处是重点，必需先修改此参数，才会允许使用Windows用户进行本地登录，否则会出现ORA-01031的错误；

SQLNET.AUTHENTICATION_SERVICES=（NTS）

Note:

ThiswillallowyoutosignintotheE1LocalDBinstanceusingaWindowsadministrativeaccountandhavesysdbaprivileges.Remembertheoriginalvalue（bydefaultNONE）soyoucanrollbackthischangeoncethepasswordsexpirationissueisfixed.

2.RestarttheE1LocalDBservice.–必需重启E1LocalDB的服务上面的配置才生效！

3.Usingacommandlinewithadministratorprivileges,enterSQLPluswith:

sqlplus/assysdba

4.Verifytheexpirationdateoftheaccounts:

SQL>setlinesize200;

SQL>selectusername,account_status,expiry_date,lock_datefromdba_users;

Note:

Thecommand"setlinesize200"isoptionalandfordisplaypurposesonlywhileinthesqlplusconsole.Normally,sqlpluswillwrapthelinesat80characters,andselectstatementswearegoingtousewillbelongerthanthat.Thiscommandwillsetthatlimitto200charactersallowingyoutoreadtheresultsproperly.Thissettingisdynamic,inotherwords,ifyousignoutandsigninagaintosqlplus,youwillbebackwiththe80characterlimitperlinevalue.Youshouldalsomodifythelayoutofthecommandlinewindow（Properties>Layout,changeScreenBufferWidthandWindowSizeto200）.

5.ChecktheprofilevalueforPASSWORD_LIFE_TIME:

SQL>select*fromDBA_PROFILESwherePROFILE='DEFAULT';

6.Modifytheprofilevalueinquestion:

SQL>ALTERPROFILEDEFAULTLIMITPASSWORD_LIFE_TIMEUNLIMITED;

7.Verifythepasswordexpirationdateoftheaccountsusingthesecondcommandinstep4.

Note:

Ifthepasswordsarealreadyonthegraceperiodorexpired,youmustsetthepasswordagaininordertotakethenew"unlimited"expiration.

ForJDEaccounts（Ex:

JDE,SPEC_E900,JDESY900,etc.）,theusernameandthepasswordareidenticalbydefault（Ex:

iftheaccountisJDESY900,thepasswordisJDESY900andsoon）.Incasethesepasswordsarecustomized,theymustbeintheJDE.INIunderthe[DSPWD]section.

AndforthesystemaccountrefertoNote1064181.1E1:

DBHowtoRecoverLostorCorruptSYSTEM/SYSPasswordinLocalOracle（OEE）Database?

ForfurtherinformationonencryptingtheE1Localinstance.

8.Changethesystemaccount'spassword

Alterusersystemidentifiedbyadmin;

9.Rollbackthechangestothesqlnet.orafileandrestartE1LocalDBservice.

Note:

Thecommand"sqlplus/assysdba"assumesthattheenvironmentissettoconnecttotheE1Localinstance,assetbydefaultwheninstallingtheOEELocalDBforJDEdwards.

Iftheenvironmenthasbeenmodified,thecommandcouldthrowa"TNS:

Protocoladaptererror",forexamplewhentheORACLE_SIDvariableisnotpointingtoE1Local.

ToovercomethisproblemitispossibletopointtheconnectiontotheE1Localinstanceusing

sqlplus/@E1Localassysdba

E1:

DB:

HowtoRecoverLostorCorruptSYSTEM/SYSPasswordinLocalOracle（OEE）Database?

[ID1064181.1]

修改时间21-MAR-2012类型HOWTO状态PUBLISHED

InthisDocument

Goal

Solution

References

Appliesto:

JDEdwardsEnterpriseOneTools-Version:

8.98to8.98-Release:

8.98to8.98

Informationinthisdocumentappliestoanyplatform.

***checkforrelevance21-MAR-2012***

Goal

ThisdocumentcovershowtorecoveralostorcorruptSYSTEM/SYSpasswordoftheLocal（Oracle）OEEdatabase.

Thisconditioncanhappeninoneofthefollowingsituations:

∙IftheDeploymentServerorFATclientisreplacedwithanewhardwareorharddriveafteracrashoraspartofanupgrade.

∙IftheSYSTEM/SYSpasswordoftheLocalOracledatabaseisnotgettingencryptedforsomereasonandthereareerrorsinC:

\ReconfigureMSDE.log.

Note:

TheseinstructionsrequireknowledgeofOracledatabaseandarebetterfollowedwithassistancefromyourDBA.IfadditionalassistanceisrequiredwiththesestepscontactOracleProductsteam.

Solution

HerearethestepstoconnecttotheLocalOracle（OEE）databasewithNTadministratorcredentials.Onceconnectedasanadmin,thensimplyresettheSYSTEM/SYSpassword.

1.NavigatetotheOEEdirectoryandlocatethesqlnet.orafile.Itshouldbelocatedinthepath

E1Local\network\admin.

2.Changethisfile（sqlnet.ora）andsetSQLNET.AUTHENTICATION_SERVICES=（NTS）.

3.RestarttheOEEE1Localinstance.

4.Logintothemachinewithanadministratoraccount.

5.Connecttothelocaldatabaseusing"sqlplus/assysdba".

6.RuntheSQLcommand:

Alterusersystemidentifiedbyadmin;

7.NowexitsqlplusandrunReconfigureMSDE.exe.YouwillnowbeabletoencryptthepasswordforSYSTEM/SYS.

8.GobackanddisabletheNTauthenticationinOEEbysettingtheSQLNET.AUTHENTICATION_SERVICES=（NONE）inthesamesqlnet.ora.

9.RestartingtheE1Localinstanceisrequired.

Hereareafewadditionalpointstoremember:

∙JDEconnectstotheE1LocaldatabasealwaysusingtheSYSTEMuserandanencryptedpassword.

∙IfyouwanttoconnecttotheE1LocalinstancethenrunReconfigureMSDE.exeandchangethepasswordfromtheencryptedoneto"admin".

∙ReconfigureMSDE.execanberunusingtheGUItoperformthepasswordchangesdirectlyorrefertoDocument798943.1forcommandlineoptions.

∙Itispreferabletousethedefaultpasswordof"admin"sincethatishardcodedintotheReconfigureMSDE.

∙ThisencryptionisbasedontheC:

driveserialnumberofthemachinewhereE1Localisrunning,sochangingtheharddiskorhardwarewillcausetheencryption/decryptiontofail.BeforechangingtheharddriverunReconfigureMSDE.exeandchangethepasswordto"admin".

∙ForassistanceonrecoveringaDeploymentServerlocaldatabase,pleaserefertoDocument1052047.1

∙Whenrunningstep5,theORA-01031:

insufficientprivilegeserrormayappearifoneofthepriorstepsismissedoriftheaccountwithwhichisusedtocurrentlylogintotheserverisnotmemberofORA_DBAgroupontheWindowsOS.

References

NOTE:

1052047.1-E1:

DB:

HowtoBackupandRestoretheLocalPlannerDatabase（OEEorSSE）

NOTE:

798943.1-E1:

DB:

HowtoAccesstheE1LocalOracleDatabaseforE19.0StandaloneasaSystemUser

GotoCommandPromptandRunasAdministrator

Unscrambling:

1.HerewearechangingthesyspasswordfromE1encryptedto“admin”（withoutquotes）–WhichisourDefaultpassword.

Navigatetothebelowlocationandrunthecommandasshownbelow,

-p（asshownisKMDoc）isoptionalasthedefaultpasswordis:

admin

Sotheabovecommandwillwork.

2.Scrambling:

NowtochangesysUserpasswordfrom“admin”toE1encrypted

Navigatetothebelowlocationandrunthecommandasshownbelow,