{"id":3202,"date":"2012-10-10T11:20:18","date_gmt":"2012-10-10T15:20:18","guid":{"rendered":"https:\/\/pitss.org\/us\/2012\/10\/10\/resetting-the-ods-password-for-oid-and-oam\/"},"modified":"2017-07-10T15:01:28","modified_gmt":"2017-07-10T19:01:28","slug":"ods-password-reset","status":"publish","type":"post","link":"https:\/\/pitss.org\/us\/2012\/10\/10\/ods-password-reset\/","title":{"rendered":"Resetting the ODS Password for OID and OAM"},"content":{"rendered":"

Oracle passwords usually expire after a number of days. There is a known situation where the ODS password used for all OID functionality can expire after so many days. If you run into a situation where your server with OID\/OAM had to be restarted due to applying a patch, power outage, etc. and all login attempts to your application can result in failing with \u201cInvalid username or password\u201d resulting in a showstopping situation. To resolve this problem, an ODS password reset will be required as the OID processes cannot start up until the schema’s password is reset.<\/span><\/p>\n

When this happens, if you check OPMN for your OID Oracle Instance, it should show that everything associated with the process \u201coid1\u201d is either in a \u201cDown\u201d or \u201cStop\u201d state.<\/span><\/p>\n

\"clip_image001\"<\/a><\/p>\n

\u00a0<\/span><\/p>\n

Also, if you look in %OID_ORACLE_INSTANCE%\\diagnostics\\logs\\OID\\oid1 at the bottom of the file \u201coidmon-0000.log\u201d, you will notice the following:<\/span><\/p>\n

\"clip_image003\"<\/a><\/p>\n

\u00a0<\/span><\/p>\n

This means that the root cause proves that ODS needs to have its password reset. You can use the following steps to do this:<\/span><\/p>\n

1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Go to %OID_ORACLE_INSTANCE%\\bin and run \u201copmnctl stopall\u201d to stop OPMN for OID.<\/p>\n

Example: cd D:\\Oracle\\Middleware\\oid_inst_1\\bin, opmnctl stopall<\/p>\n

2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Log into sqlplus using the ods user (sqlplus ods\/ods_password@db_name)<\/p>\n

Example: sqlplus ods\/password@orcl<\/p>\n

\"clip_image004\"<\/a><\/p>\n

3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>When logging in, you should see the ORA-28002 error appear. However, you will still connect without failure.<\/p>\n

\"clip_image005\"<\/a><\/p>\n

4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Change the password for ods to the same password from before: alter user ods identified by ods_password;<\/p>\n

Example: alter user ods identified by password;<\/p>\n

\"clip_image006\"<\/a><\/p>\n

5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>If successful, it should say \u201cUser altered\u201d which means that the password has been updated.<\/p>\n

\"clip_image007\"<\/a><\/p>\n

6.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Repeat steps 2-5 for the following users:<\/p>\n

a.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>ODSSM<\/p>\n

b.\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>DEV_OAM<\/p>\n

c.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>DEV_IAU<\/p>\n

NOTE: The passwords for the above three users will be the same as ODS<\/p>\n

NOTE: If the password has expired, you will be required to type in a password. You may use the same password from before.<\/p>\n

7.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Start up OPMN for OID (opmnctl startall)<\/p>\n

Example: cd D:\\Oracle\\Middleware\\asinst_idm\\bin, opmnctl startall<\/p>\n

8.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Verify with opmnctl status that everything is in an \u201cAlive\u201d state.<\/p>\n

9.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Start up the WebLogic servers for OID and OAM. They should start up without error.<\/p>\n

10.\u00a0\u00a0 <\/span><\/span>You should be able to successfully log into the SSO-protected application.<\/p>\n

NOTE: The ODS user should have sufficient privileges to change its own password. If for some strange reason in step 4 that you get an \u201cInsufficient privileges\u201d error, I would repeat steps 1-4 except you should log in with a sysdba user (sys for example).<\/p>\n","protected":false},"excerpt":{"rendered":"

Oracle passwords usually expire after a number of days. There is a known situation where the ODS password used for all OID functionality can expire after so many days. If you run into a situation where your server with OID\/OAM had to be restarted due to applying a patch, power outage, etc. and all login […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[94,14,19,10],"tags":[11,16,12,47,52,27],"class_list":["post-3202","post","type-post","status-publish","format-standard","hentry","category-access-management","category-resolve-issues","category-unix-linux","category-windows","tag-11g","tag-11gr2","tag-error","tag-oam","tag-oid","tag-oracle-database"],"_links":{"self":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/comments?post=3202"}],"version-history":[{"count":6,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3202\/revisions"}],"predecessor-version":[{"id":9592,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3202\/revisions\/9592"}],"wp:attachment":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/media?parent=3202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/categories?post=3202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/tags?post=3202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}