How to Change password for OIM, MDS, SOAINFRA, OPSS, ORASDPM schema OIM 11g R2 from Oracle
SOLUTION
Description of each of the above schema could be found in the following Document
http://docs.oracle.com/cd/E27559_01/core.1112/e28516/meta.htm
Password change for the following schema can be performed in the following ways.
- Stop all the Managed servers and Application Server.
- Take a back up of the entire domain and take the backup of the database.
- Start the Application Server
- Change the xxxx_OPSS user password.
- Execute the following to change the password for xxxx_OPSS:
- SQL> alter user xxxx_OPSS identified by <new_pwd_here>;
- SQL>commit;
- Invoke wlst (oracle_common\common\bin).
- Run "modifyBootStrapCredential". See Oracle Fusion Middleware Application Security Guide 11g Release 1 (11.1.1) Chapter 10 Managing the Credential Store - 10.5.4 modifyBootStrapCredentia modifyBootStrapCredential(jpsConfigFile='<DOMAIN_NAME>/config/fmwconfig/jps-config.xml', username='<xxxx>_OPSS', password='newpassword')
- Run the setDomainenv.sh under the domain bin folder ( ./setDomainEnv.sh)
- Invoke the following command:
- bin/java weblogic.security.Encrypt
- password: <newpassword>
- {AES}JHyrhOMB5hVRuDU/pV0qX86qz98ZV0xWXBSEAANA4Gs=
- Edit the <DOMAIN_NAME>\Config\jdbc\OPSSdbs.xml file:
- Replace the current encrypted password with the newly encrypted password value e.g.
{AES}JHyrhOMB5hVRuDU/pV0qX86qz98ZV0xWXBSEAANA4Gs= - Save the file.
- Login to Weblogic Console, Navigate to Services->Data Sources
- Click on opss-DBDS->Connection Pool and enter the new password set to xxxx_opss in step 4.2 Save
- Restart Application Server but do not start managed servers.
- Connect to the database with sqlplus as system user
- Execute the following to change the password of xxx_OIM:
- SQL> alter user xxx_OIM identified by <new_pwd_here>;
- SQL>commit
- Execute the following to change the password for xxx_MDS:
- SQL> alter user xxx_MDS identified by <new_pwd_here>;
- SQL>commit;
- Execute the following to change the password for xxx_SOAINFR
- SQL> alter user xxx_SOAINFRA identified by new_pwd_here>;
- SQL>commit
- Execute the following to change the password for xxx_ORASDPM:
- SQL> alter user xxx_ORASDPM identified by <new_pwd_here>;
- SQL>commit;
- Check that the passwords have been changed, by trying to login to the database with sqlplus and the four users and the new passwords
- Open a browser and connect to WebLogic console
- Navigate to Services->Data Sources
- click on oimJMSStoreDS->Connection Pool and enter the new password set to xxx_OIM in step 13.2 above
- Click on oimOperationsDB->Connection Pool and enter the new password set to xxx_OIM in step 13.2 above
- Click on ApplicationDB->Connection Pool and enter the new password set to xxx_OIM in step 13.2 above
- Click on mds-oim->Connection Pool and enter the new password set to xxx_MDS in step 13.5 above
- Click on mds-owsm->Connection Pool and enter the new password set to xxx_MDS in step 13.5 above
- Click on mds-soa->Connection Pool and enter the new password set to xxx_MDS in step 13.5 above
- Click on EDNDataSource->Connection Pool and enter the new password set to xxx_SOAINFRA in step 13.8 above
- Click on EDNLocalTxDataSource->Connection Pool and enter the new password set to xxx_SOAINFRA in step 13.8 above
- Click on SOADataSource->Connection Pool and enter the new password set to xxx_SOAINFRA in step 13.8 above
- Click on SOALocalTxDataSource->Connection Pool and enter the new password set to xxx_SOAINFRA in step 13.8 above
- Click on OraSDPMDataSource->Connection Pool and enter the new password set to xxx_ORASDPM in step 13.11 above
- Change OIMAuthenticationProvider configuration:
- In the WebLogic Administrative console, navigate to Security Realms, myrealm, and then Providers.
- Click OIMAuthenticationProvider
- Click Provider Specific.
- In the DBPassword field, enter the new Oracle Identity Manager database schema password
- Click Save to save the changes
- Change domain credential store configuration:
- 19.1 Login to Enterprise Manager by using the following URL:
- http://ADMIN_SERVER:<PORT_NUMBER>/em
- 19.2 Navigate to Weblogic Domain, and then DOMAIN_NAME.
- 19.3 Right click navigate to Security, Credentials, and then oim.
- 19.4 Select OIMSchemaPassword, and click Edit.
- In the Password field, enter the new password, and click OK
- Restart the WLS AdminServer
- Start the SOA/OIM managed server
No comments:
Post a Comment