Changing Passwords

Changing passwords depends on whether they are for a schema, a role, or for a user.

Note:

Passwords can contain only these special characters: ~ # ^ - _ + :

Passwords cannot contain these special characters: & ( ) ' % @ { } | ; , $ . * " < > ? ` ! [ / \ ] =

For more information, see:

• Changing the Password for a User
  
• Changing the Password for a Schema or Role Using the SET_PWD Utility
  
• Synchronizing Passwords in the WebLogic Admin Server
  
• Auditing Passwords
  
• Changing the Password for the OCPSUB or RXC_DISC_REP Account
  

Changing the Password for a User

Users can change their own database passwords either in SQL*Plus or with the Oracle Clinical menu by choosing Admin, then Users, and then Database Password.

In the Oracle Database Password window:

1. Type your password in Enter Password text box.

2. Type it again in the Confirm Password text box.

3. Click OK.

Administrators can change the password for an Oracle Clinical user in SQL*Plus as usual:

1. In SQL*Plus, connect to the database as the SYSTEM user.

2. Reset the password for the user:

   alter user user identified by user_password;

Changing the Password for a Schema or Role Using the SET_PWD Utility

The following table lists the Oracle Clinical database objects that are protected by encrypted passwords stored in two locations:

• An Oracle dictionary table

• An Oracle Clinical passwords table

Use the SET_PWD utility to change the passwords for these accounts, encrypt the new password and store it in both locations:

Log in to the database server and, from the windows command prompt or UNIX command line, enter:

opa_setup
set_pwd account/account_pwd

where account is the name of the schema or role from Table 1-4.

Note:

The Oracle Database DEFAULT profile, which applies to all users by default, including these internal roles and schemas, enforces password requirements including an expiration period. You must proactively change their passwords before they expire, or parts of the system will stop working.

In rare cases you may want to change the password of the Wallet itself. See the Oracle Fusion Middleware Administrator's Guide. You must then change the passwords for the accounts.

Table 1-4 Password-Protected Database Objects

Name	Type	Description
RXC_MAA	Schema	Required for Data Extract.
RXC_PD	Schema	Required for Procedure generation.
RXC_REP	Schema	Required for replication.

Synchronizing Passwords in the WebLogic Admin Server

The passwords for the following application middle tier accounts:

• RDC_MIDTIER_PROXY

• BC4J_INTERNAL

• OPS$TMSBROWSER (if you have TMS integrated with Oracle Clinical)

must be changed to the same value in two places:

• in Oracle Clinical or TMS using set_pwd (see Changing the Password for a Schema or Role Using the SET_PWD Utility)

• in the WebLogic Admin Server Connection Pool Manager

Auditing Passwords

Oracle recommends that you turn on the auditing system for roles. For information on the AUDIT command, see the Oracle SQL Reference manual.

To track failed attempts to create, alter, drop, or set a role, issue the following statement:

audit role by access whenever not successful

Changing the Password for the OCPSUB or RXC_DISC_REP Account

The passwords for OCPSUB and RXC_DISC_REP are stored in Oracle Wallets on the database. You cannot use the set_pwd utility to change these passwords. Instead, do the following:

1. Log on as opapps.

2. Set environment variables for the database name and code environment; see Setting Environment Variables on the Command Line

3. Open an MS-DOS window.

4. Set the server environment; see Setting Environment Variables on the Command Line

5. Enter the following command, where wallet_location is the full path to the wallet:

   mkstore -wrl wallet_location - modifyCredential tns_names_entry OCPSUB_or_RXC_DISC_REP  new_password
   

6. The system prompts you for the wallet password.