Search This Blog

Total Pageviews

Tuesday 14 June 2011

How to change the SYSMAN user password

sysman password change



SQL> !emctl stop dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
https://apt-amd-02.tus.co.uk:1158/em/console/aboutApplication
Stopping Oracle Enterprise Manager 11g Database Control ...

Cannot determine Oracle Enterprise Manager 11g Database Control process. /opt/app/oracle/product/11.2/apt-amd-02.tus.co.uk_orcl/emctl.pid does not exist.

SQL> !emctl status dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
https://apt-amd-02.tus.co.uk:1158/em/console/aboutApplication
Oracle Enterprise Manager 11g is not running.

SQL> exit
Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
oracle@apt-amd-02:~> emctl status dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
https://apt-amd-02.aptus.co.uk:1158/em/console/aboutApplication
Oracle Enterprise Manager 11g is not running.
oracle@apt-amd-02:~> !sql
sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Tue Jun 14 14:16:32 2011

Copyright (c) 1982, 2009, Oracle. All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> alter user sysman identified by vihaan123;

User altered.


$emctl setpasswd dbconsole


oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.tus.co.uk_orcl/sysman/config> emctl setpasswd dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
https://apt-amd-02.aptus.co.uk:1158/em/console/aboutApplication
Please enter new repository password:
Repository password successfully updated.
oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.aptus.co.uk_orcl/sysman/config>




emctl start dbconsole




https://apt-amd-02.tus.co.uk:1158/em/console/aboutApplication



cd $ORACLE_HOME

oracle@apt-amd-02:/opt/app/oracle/product/11.2> cd orcl
-bash: cd: orcl: No such file or directory
oracle@apt-amd-02:/opt/app/oracle/product/11.2> cd apt-amd-02.aptus.co.uk_orcl/


oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.tus.co.uk_orcl> cd sysman/
oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.tus.co.uk_orcl/sysman> ls -ltr
total 8
drwxr----- 3 oracle oinstall 17 2011-01-10 15:44 opmn
drwxr----- 4 oracle oinstall 4096 2011-01-10 15:46 config
drwxr-x--- 3 oracle oinstall 4096 2011-02-07 09:46 log
drwxr----- 5 oracle oinstall 152 2011-02-07 11:14 emd
drwxr----- 4 oracle oinstall 30 2011-02-07 12:00 recv


go to this file

oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.tus.co.uk_orcl/sysman/config> vi emoms.properties

search for this file

oracle.sysman.eml.mntr.emdRepPwd=89b2c01e41fc69697990aae431c32604

to

oracle.sysman.eml.mntr.emdRepPwd=vihaan123


Search for the line:

oracle.sysman.eml.mntr.emdRepPwdEncrypted=TRUE to oracle.sysman.eml.mntr.emdRepPwdEncrypted=FALSE




oracle@apt-amd-02:/opt/app/oracle/product/11.2/apt-amd-02.aptus.co.uk_orcl/sysman/config> emctl start dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
https://apt-amd-02.aptus.co.uk:1158/em/console/aboutApplication
Starting Oracle Enterprise Manager 11g Database Control ........

=================

# Check that the password has been encrypted
Edit the file $ORACLE_HOME/host_sid/sysman/config/emoms.properties

1. Search for the line beginning with:
oracle.sysman.eml.mntr.emdRepPwd=
Check that the password is encrypted
2. Search for the line beginning with:
oracle.sysman.eml.mntr.emdRepPwdEncrypted=
Check that the value is TRUE




#Tue Jun 14 14:41:57 GMT 2011
oracle.sysman.emSDK.svlt.ConsoleServerName=apt-amd-02.aptus.co.uk\:1158_Management_Service
oracle.sysman.eml.mntr.emdRepPwd=04154901177159bfb36808486e4de27b <<<<<---- check this this should be encrypted
emdrep.ping.pingCommand=/usr/sbin/ping6
em_oob_shutdown=false
LargeRepository=false
oracle.sysman.eml.mntr.emdRepPort=1521
oracle.sysman.eml.mntr.emdRepDBName=orcl.aptus.co.uk
EMD_URL=https\://apt-amd-02.aptus.co.uk\:3938/emd/main
em_email_address=%EM_EMAIL_ADDRESS%
oracle.sysman.eml.mntr.emdRepPwdSeed=8927514978106692198
oracle.sysman.emSDK.svlt.ConsoleMode=standalone
em_oob_crash=false
em.oms.dumpModules=omsThread,repos
oracle.sysman.emRep.dbConn.statementCacheSize=50
oracle.sysman.db.isqlplusUrl=http\://apt-amd-02.tus.co.uk\:/isqlplus/dynamic
em_oob_startup=false
oracle.sysman.emSDK.svlt.ConsoleServerPort=1158
oracle.sysman.eml.mntr.emdRepRAC=FALSE
em_from_email_address=%EM_FROM_EMAIL_ADDRESS%
oracle.sysman.eml.mntr.emdRepPwdEncrypted=TRUE <<<<<<----- check this this should be true
oracle.sysman.db.isqlplusWebDBAUrl=http\://apt-amd-02.tus.co.uk\:/isqlplus/dba/dynamic
oracle.sysman.emSDK.svlt.ConsoleServerHost=apt-amd-02.aptus.co.uk
oracle.sysman.eml.mntr.emdRepDBID=1267852645
oracle.sysman.emSDK.svlt.ConsoleServerHTTPSPort=1158
em_email_gateway=%EM_EMAIL_GATEWAY%
oracle.sysman.eml.mntr.emdRepServer=apt-amd-02.aptus.co.uk
oracle.sysman.eml.mntr.emdRepSID=orcl
oracle.sysman.eml.mntr.emdRepConnectDescriptor=(DESCRIPTION\=(ADDRESS_LIST\=(ADDRESS\=(PROTOCOL\=TCP)(HOST\=apt-amd-02.aptus.co.uk)(PORT\=1521)))(CONNECT_DATA\=(SERVICE_NAME\=orcl.aptus.co.uk)))
oracle.sysman.emSDK.sec.ReuseLogonPassword=true
oracle.sysman.emkeyfile=/opt/app/oracle/product/11.2/apt-amd-02.aptus.co.uk_orcl/sysman/config/emkey.ora
em.ip.ui.enable=true
oracle.sysman.eml.mntr.emdRepUser=SYSMAN
oracle.sysman.emSDK.svlt.PublicServletEnabled=true

2 comments:

OsuGrad1988 said...

Anuj. I recently changed the sysman,dbsnmp passwords in OEM because they were going to expire. Since the change, I cannot navigate to OEM for the prod instance. I run emctl status dbconsole and it shows that it is running and I run emctl status agent and the agent is running - however the last successful heartbeat is unknown. The sysman account becomes locked every minute or so after I unlock it.

I have tried the emoms.properties fix with the new password and it appears to encrypt and the emctl status emkey prompts for the new sysman password and is successful.

I get an error when trying to start the dbconsole service which is the routine error code of 2.

Can you suggest some things to try.

Unknown said...

I also found SYSMAN password which locked this account in: $ORACLE_HOME/$INSTANCE/sysman/emd/targets.xml

Oracle DBA

anuj blog Archive