Managing the APPS and Weblogic password

This topic outlines how to manage the APPS and Weblogic passwords on a virtual EBS instance.

Users may update their APPS and Weblogic passwords during provision/refresh using any version of the EBS connector. To change APPS and Weblogic passwords quickly at any point after the AppsTier VDB is provisioned, users may utilize the password management feature available from EBS connector version 5.0.0 by following the below-mentioned steps:

Changing the APPS and Weblogic Passwords through Delphix UI

  1. Disable the AppsTier VDB dataset only in the Delphix Continuous Data Engine.

  2. Change the APPS and Weblogic admin password on the EBS AppsTier VDB dataset.

    • Select the AppsTier VDB dataset.

    • Go to Configurations > Custom and click the edit pencil icon.

    • Update the Target APPS Password field with the password you would like to set for EBS appsTier.

    • Update the Target Weblogic AdminServer Password field with the password you would like to set for EBS appsTier.
      Note - If the requirement is to change only the APPS password then update the respective field only. EBS connector will take care of it.

  3. The SYSTEM Password fieldis required to configure the virtual AppsTier with the new Apps password.

  4. After providing new passwords in the input fields, save the AppsTier VDB configuration.

  5. Enable AppsTier VDB dataset.

  6. Verify the WebLogic password is changed by logging into the WebLogic console.

  7. (Mandatory)Take a snapshot of the AppsTier VDB dataset.

Manually changing the APPS password

  1. After provisioning/refreshing of virtual EBS AppsTier VDB instance.

  2. Shutdown AppsTier Services using the VDB stop or manually.

  3. Change the APPS password in the virtual EBS instance. You can perform the password change using the FNDCPASS utility.

  4. Run AutoConfig for the newly created APPS password.

  5. Start just Admin Server using $INST_TOP/admin/scripts/adadminsrvctl.sh  (Don't start other services yet)

  6. Change the “apps” password in the WLS Datasource either using console or using perl script txkManageDBConnectionPool.pl

  7. Start all the application tier services using the script below:

    $INST_TOP/admin/scripts/adstrtal.sh

  8. If Integrated SOA Gateway (ISG) is implemented, repeat the steps for “OAEADataSource”.

  9. Verify “oafm_cluster*” managed servers are started successfully.

    1. Now update the new APPS password in the Delphix Continuous Data Engine UI.

    2. Select the appsTier VDB dataset.

    3. Go to Configurations > Custom and click the edit pencil icon.

    4. Update the Target APPS Password field with the new password that you recently changed.

Manually changing the Weblogic password

  1. Shutdown the Application Services using the script below:

    $ADMIN_SCRIPTS_HOME/adstpall.sh

  2. Start the admin server on the Primary node using 

    $ADMIN_SCRIPTS_HOME/adadminsrvctl.sh

  3. Run the below command to create a new password

    perl $FND_TOP/patch/115/bin/txkUpdateEBSDomain.pl -action=updateAdminPassword

  4. Start the Application MiddleWare services using the script below 

    $ADMIN_SCRIPTS_HOME/adstrtal.sh

  5. Login to the admin console to verify that the new WebLogic user password works.

    1. For WebLogic versions older than TKX DELTA 7, use the following steps:

      1. Log in to the WebLogic Administrative console.

      2. Click Lock & Edit and click Domain.

      3. Click on the Security tab and click on the Advanced tab.

      4. Enter the new password that you want for the WebLogic admin user in the Node Manager password.

      5. Click Save and verify that the settings were updated successfully. Then click on Activate Changes.

      6. Click Security Realms and click Myrealm.

      7. Click Users and Groups, select Weblogic User, and enter the new password for the WebLogic user.

      8. Make sure that the settings have been updated successfully.

      9. If you are on R12.AD.C.Delta.7 and R12.TXK.C.Delta.7 or later, we can change the WebLogic admin server password using the below script
        Startup admin server. Do not start any other services

        $. ./EBSapps.env RUN
$ cd $ADMIN_SCRIPTS_HOME
$adadminsrvctl.sh start

      10. Run the script below  

        perl $FND_TOP/patch/115/bin/txkUpdateEBSDomain.pl -action=updateAdminPassword

      11. The script will prompt for current and new Weblogic password and restarts the WebLogic admin server using the new password

      12. (optional)Run fs_clone to propagate the changes to the alternate file system (patch file system).

        $adop phase=fs_clone

      13. Update the Target Weblogic AdminServer Password field with the new password.

      14. After providing new passwords in the input fields, save the AppsTier VDB configuration.

Note: (Mandatory)Take a snapshot of the AppsTier VDB dataset after any password change. 

  1. Change the APPS password on the DBTechStack.

    1. Select the DBTechStack vFiles hosting your virtual EBS database.

    2. Go to Configurations > Custom and click the edit pencil button.

    3. Edit the APPS Password field.

  2. Change the APPS password in any hook operations defined on the EBS virtual database.

    1. Select the VDB utilized by your EBS instance.

    2. On the back of the card, click the Hooks tab.

    3. Edit the relevant hook operations. Typically, you will need to edit the Configureclone and Pre-Snapshot hook operation.

Refreshing or rewinding

The APPS password stored across individual snapshots of a virtual EBS instance will not be consistent after a password change. Old snapshots of EBS data will refer to a different APPS password than new snapshots of EBS data. To perform a refresh or rewind, you must explicitly manipulate the Delphix Engine's copy of the APPS password to ensure that the virtual EBS instance is being accessed with the correct APPS password at every step.

Recipe Not Needed If Password Not Changed

These steps are only necessary if the virtual EBS instance has a different APPS password than the snapshots being targeted by the refresh or rewind.

If the APPS password has not been changed, follow the instructions in Refreshing a Virtual EBS Instance or Rewinding a Virtual EBS Instance.

  1. Before refreshing or rewinding the virtual EBS instance, disable the entire virtual EBS instance. For an outline of this process, see Enabling and Disabling a Virtual EBS Instance.

  2. Identify the APPS password for the snapshots being targeted by the refresh or rewind. Modify the virtual EBS instance to refer to this password.

    1. Change the APPS password on the dbTechStack.

      1. Select the DBTechStack vFiles hosting your virtual EBS database.

      2. On the back of the card, click the Custom tab.

      3. Edit the APPS Password field.

    2. Change the APPS password in any hook operations defined on the EBS virtual database.

      1. Select the VDB utilized by your EBS instance.

      2. Select the Configuration tab, then select the Hooks tab.

      3. Edit the relevant hook operations. Typically, you will need to edit the Pre-Snapshot hook operation running adpreclone and the Configure Clone operation running adcfgclone.

    3. Change the APPS password on the appsTier.

      1. Select the AppsTier vFiles hosting your virtual EBS database.

      2.  Click the Custom tab.

      3. Edit the APPS Password field.

  3. Perform the refresh or rewind while the EBS instance is disabled. See Refreshing a Virtual EBS Instance or Rewinding a Virtual EBS Instance for an outline of these processes.

Enabling passwordless SSH between target application nodes

To enable passwordless SSH between target application nodes complete the following

The following is an example of a two-node EBS AppsTier.

Node 1: test1-ap1

Node 2: test1-ap2

  1. Create Authentication SSH-Kegen Keys on Node 1.

  2. Create .ssh Directory on Node 2.

  3. Upload Generated Public Keys to Node 2.

  4. Set Permissions on Node 2 and log in to verify without a password.