（缺省账号处理）MAY I CLOSE THESE SYSTEM DEFAULT USER? （默认账号关闭问题）

纵横四海

默认账号的处理在1楼的最底部

SR 号  5935170.993   打开日期 06-NOV-06 07:21:01
客户服务号  14036519   名称 Hu Wanjun
Abstract: MAY I CLOSE THESE SYSTEM DEFAULT USER?  
      
解决方案历史记录

.
QUESTION
=========
these are some default user in system,As a security reson,I want to close these
user:
BE_GUEST、OP_CUST_CARE_ADMIN、OP_SYSADMIN、ASGUEST、IBE_ADMIN、IBEGUEST、IRC_EMP_GUEST
、IRC_EXT_GUEST、PORTAL30、PORTAL30_SSO
May i?

.
RESEARCH
=========
(Note: This is INTERNAL ONLY research. No action should be taken by the customer on this information.
This is research only, and may NOT be applicable to your specific situation.)
337150.1 New Users And Roles Defined In Oracle 11.5.10:
189367.1 Best Practices for Securing

.
UPDATE
=======
Hi,
See note 189367.1 Best Practices for Securing
Oracle E-Business Suite:These can be end dated conditionally:
APPSMGR
ASGUEST
IBE_GUEST
IBEGUEST
This one cannot be end dated:
GUEST
-GUEST User cannot to enddated because it is used to create anonymous sessions in APPS.
-- I Alsoy remember about user IBE_GUEST (or IBEGUEST) which is used in iStore to let users navigate/purchase until they checkout, where they are asked by their credentials.
From note 337150.1 New Users And Roles Defined In Oracle 11.5.10:
MOBADM and MOBDEV:
These users are used in ASG Module for Mobile application for administrating and developing Mobile
application. If you disable these accounts, then you will loss the functionality
of Mobile application administration and development for CRM module.
The account XML_USER is a user that is used internally for Oracle Applications that is used for calling PO API from XML gateway.
If you disable it, you will loss the XML Gateway functionality.
Hope this helps you....
Thanks & Regards,
Anitha
@ CUS


New info : huwanjun@baidu.com : may i change the pasword of the following user?
guest/mobadm/mobdev/xml-user

07-NOV-06 03:10:18 GMT
.
UPDATE
=======
Hi,
Yes, you can change all the above change passwords using FNDCPASS utility.
Please refer the note : 140457.1 to do the same.
Thanks & Regards,
Anitha
@ CUS


New info : huwanjun@baidu.com : may i change the password by
System Administrator ->security->user->define
???
Hi,
Except for the Guest user , you could change the passwords of other users ->
1) guest - No
2) mobadm - yes
3) mobdev - yes
4) xml-user - yes
Hope this answers.
Thanks & Regards,
Anitha
@ CUS


10-NOV-06 05:18:39 GMT
Email Update button has been pressed: Sending email to huwanjun@baidu.com.
10-NOV-06 05:23:02 GMT
New info : huwanjun@baidu.com : do you mean that:
can not change the password of guest by "System Administrator
->security->user->define"
and
and mobadm , mobdev ,xml-user can do by ""System Administrator
->security->user->define"
"

??????????

10-NOV-06 05:25:06 GMT
.
UPDATE
=======
Hi,
Yes, you cannot change the password of Guest in the user -> Define screen
For other users ,you can do.
Your understanding is perfect.
Thanks & Regards,
Anitha
@ CUS


Hi,
You can use the following command :
$FND_TOP/bin/FNDCPASS apps/apps 0 Y system/manager USER GUEST <new password >
Not sure why there is an issue in following up the suggested document as it suggests very clearly the
action plan that needs to be carried over to get the requirement satisfied.
I would again suggest you to follow up the document thoroughly , or get in touch w
ith your DBA who would be able to execute the action plan without any issues.
Thanks & Regards,
Anitha
@ CUS

UPDATE
=======
Hi ,
You can refer the note : 303621.1 - How to Change and Which Apps Database Users Passwords Can Be Changed in a Multi-Node Apps Installatio
n?
This will give you a clear picture.
Regards,
Anitha
@ SCL
16-NOV-06 00:00:02 GMT
New info : huwanjun@baidu.com : u have not answered how to deal with the
followting user:
OP_CUST_CARE_ADMIN、OP_SYSADMIN、IBE_ADMIN、IRC_EMP_GUEST、IRC_EXT_GUEST、PORTAL30、PO
RTAL30_SSO
?

16-NOV-06 02:19:24 GMT
.
UPDATE
=======
Hi,
Except for the "PORTAL30_SSO" user, all others can be changed from the user -> Define screen.
You need to make use of FNDPCASS to change the password of " PORTAL30_SSO "
Hope this clarifies.
Thanks & Regards,
Anitha
@ CUS


16-NOV-06 02:19:32 GMT
Email Update button has been pressed: Sending email to huwanjun@baidu.com.
17-NOV-06 02:20:46 GMT
.
FOLLOW UP
==========
Hi Hu,
Please update the SR as soon as possible with the current status and/or requested information so we can continue working the issu
e.
Thank You,
Anitha
STATUS
=======
@CUS -- Waiting for Customer Update




17-NOV-06 05:14:12 GMT
New info : huwanjun@baidu.com : but how to user "FNDPCASS",please provide a
step by step action plan.

17-NOV-06 05:18:13 GMT
.
UPDATE
=======
Hi huwanjun,
Have you tried reading any of the documents provided in the SR , it gives you step by step instruction on the use, usage of the
FNDCPASS utility .
Please follow the documents and let me know in case you need any clarification after that.
You will find the utility under $FND_TOP/bin directory.
Thanks & Regards,
Anitha
@ CUS

17-NOV-06 05:18:25 GMT
Email Update button has been pressed: Sending email to huwanjun@baidu.com.
17-NOV-06 09:36:06 GMT
New info : huwanjun@baidu.com : thanks ,please soft close it.

19-NOV-06 05:23:37 GMT

BE_GUEST	常用密码修改方法		无该用户
OP_CUST_CARE_ADMIN	常用密码修改方法		无职责
OP_SYSADMIN	常用密码修改方法		无职责
ASGUEST	常用密码修改方法		关闭
IBE_ADMIN	常用密码修改方法		无职责
IBEGUEST	常用密码修改方法		关闭
IRC_EMP_GUEST	常用密码修改方法		无职责
IRC_EXT_GUEST	常用密码修改方法		无职责
PORTAL30	常用密码修改方法		无职责
PORTAL30_SSO	特殊的密码修改方法		无职责
APPSMGR	可以关闭	These can be end dated conditionally:
ASGUEST	可以关闭	These can be end dated conditionally:
IBE_GUEST	可以关闭	These can be end dated conditionally，I Alsoy remember about user IBE_GUEST (or IBEGUEST) which is used in iStore to let users navigate/purchase until they checkout, where they are asked by their credentials.
IBEGUEST	可以关闭	These can be end dated conditionally:
GUEST（查了资料不建议修改）	特殊的密码修改方法，$FND_TOP/bin/FNDCPASS apps/apps 0 Y system/manager USER GUEST <new password >	This one cannot be end dated，GUEST User cannot to enddated because it is used to create anonymous sessions in APPS.	不可用
MOBADM	常用密码修改方法	These users are used in ASG Module for Mobile application for administrating and developing Mobile application. If you disable these accounts, then you will loss the functionality of Mobile application administration and development for CRM module.
MOBDEV	常用密码修改方法
XML_USER	常用密码修改方法	The account XML_USER is a user that is used internally for Oracle Applications that is used for calling PO API from XML gateway.

candy

good  document

pack away!

thank  you

kouzhong

不错，好文。

conan005

应该可以参考官方文档也能查吧。

chenshm329

学习了，谢谢。。。

cash

谢谢分享，辛苦了