R12 : Password Change utility - AFPASSWD

Oracle has introduced a new utility to change the Oracle E-Business Suite passwords in R12.1.2. Reason for introducing the utility is to allow separation of duties between DBA and Application DBA.

The traditional FNDCPASS is mostly executed on the concurrent manager node alone and requires APPS, SYSTEM username and passwords. AFPASSWD can be run from the database tier as well as the application tier.

Example : Here I am changing the SYSADMIN password. In my environment, TWO_TASK is set by default therefore I am not giving @

$AFPASSWD -f SYSADMIN
Enter the ORACLE password of Application Object Library 'APPSUSER':
Connected successfully to APPS.
Working...
Enter new password for user [SYSADMIN]:
Verify new password for user [SYSADMIN]:
Password is changed successfully for user SYSADMIN.
Password is changed successfully for user SYSADMIN.
AFPASSWD completed successfully.

You can test the SYSADMIN login with new password. You can get all the different options of the utility by just typing 'AFPASSWD'.

$AFPASSWD
Usage:
AFPASSWD [-c [@]] -f
AFPASSWD [-c [@]] -o
AFPASSWD [-c [@]] -a
AFPASSWD [-c [@]] -l {TRUE|FALSE}
AFPASSWD [-c [@]] -L {TRUE|FALSE}
AFPASSWD [-c [@]] -s

Options:
-c [@]
Specify the connection string to be use, parameters

Application-manager user and/or TWO_TASK value,
this option can be use in combination with the others.
(If not provided, AFPASSWD will try to default the values
from the environment)

is the APPS schema owner.

-f
Change the password for an Application user.

-o
Change the password for an Oracle Applications Database user.

-a Modify ALLORACLE users.

-l {TRUE|FALSE}
Lock|Unlock account for a single Oracle Applications database user.

-L {TRUE|FALSE}
Lock|Unlock accounts for non-essential Oracle Applications database users

-s
Modify APPLSYS user. This requires the execution
of autoconfig (in ALL-TIERS) to distribute the
changes on your instance ie DB-TIER and ADMIN-TIER.

-h
Display this help.

Notes:
- AFPASSWD will prompt for the required passwords.
- AFPASSWD will prompt for new passwords twice for confirmation.
- Data entered for which contains spaces must be enclosed
in double quotes. For example, AFPASSWD -f "SCOTT TIGER"
- The only option permitted in combination with other options is the -c option.
Otherwise, there should only be one option per command (see usage above).
If additional options are provided on the command line, only the first valid
option after -c (if -c is present) will be executed.
$

Reference:

http://download.oracle.com/docs/cd/B34956_01/current/acrobat/120sacg.pdf

http://download.oracle.com/docs/cd/B53825_08/current/acrobat/121sasg.pdf

How to Change Applications Passwords using Applications Schema Password Change Utility (FNDCPASS or AFPASSWD) [ID 437260.1]