How to Modify the Password for SYSMAN and other Enterprise Manager Users at the OMS Level and Reposi

Oracle EM 12C 的sysman忘记了，无法进入EM.刚开始凭着感觉以为修改omsdb中的sysman密码即可，发现还是不行。在oracle support中找到如下文章，解决问题，转载分析给大家。

 

--------------------------------------------------------------------------------

修改时间:2013-4-8类型:HOWTO状态:PUBLISHED优先级:2 注释 (0)    
 

In this Document
 Goal
 Solution
  If the current SYSMAN password is known
  If the current SYSMAN password is unknown
 
  
  
 References

 

--------------------------------------------------------------------------------

Applies to:
Enterprise Manager Base Platform - Version 12.1.0.1.0 and later
Information in this document applies to any platform.

Goal
This article provides steps for modifying the password of SYSMAN and other Enterprise Manager users at the OMS/WLS level and the Repository database in a Cloud Control setup.
Simply changing the password in the repository database is not sufficient as the password is also stored in the WLS credential store. The OMS uses sysman account to login into the repository database and if there is a mis-match in the password at the database level and the OMS configuration, the OMS cannot start and function properly.

For steps to follow in the earlier Enterprise Manager versions, refer to:
Note 270516.1: How to Change the Password of SYSMAN User in 10g and 11g Grid Control?

Note:

From 12c onwards, directly modifying the password for sysman or any other repository user at the Repository Database is not recommended.
Hence, ensure that the passwords are changed only using one of the below listed methods.
Solution
If the current SYSMAN password is known
1. Stop all the OMS:

cd <OMS_HOME>/bin
emctl stop oms
Execute the same command on all the OMS machines including the primary OMS machine. Do not include '-all' as the Admin Server needs to be up during this operation.

2. Modify the SYSMAN password:

cd <OMS_HOME>/bin
emctl config oms -change_repos_pwd
 

Note:

- The above command will prompt you for the current password of the SYSMAN user and the new password.
- The password will be modified at the Repository Database as well as the WLS Credential store and the monitoring credentials for the 'OMS and Repository' target.
- Along with the SYSMAN password, this command will modify the password for the ALL the EM users (SYSMAN_MDS, BIP, SYSMAN_OPSS, SYSMAN_APM, SYSMAN_RO, MGMT_VIEW) created in the Repository Database.

Example output:

emctl config oms -change_repos_pwd
Oracle Enterprise Manager Cloud Control 12c Release 12.1.0.1.0
Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
Enter Repository User's Current Password :
Enter Repository User's New Password :

Changing passwords in backend ...
Passwords changed in backend successfully.
Updating repository password in Credential Store...
Successfully updated Repository password in Credential Store.
Restart all the OMSs using 'emctl stop oms -all' and 'emctl start oms'.
Successfully changed repository password.
3. Stop the Admin server on the primary OMS machine and re-start all the OMS:

cd <OMS_HOME>/bin
emctl stop oms -all
emctl start oms
If the current SYSMAN password is unknown

1. Stop all the OMS:

cd <OMS_HOME>/bin
emctl stop oms
Execute the same command on the primary OMS machine as well. Do not include '-all' as the Admin Server needs to be up during this operation.

If the version of OMS is 12.1.0.1 and password is manually changed at the Database level, apply Patch 13697830 on OMS Home and then run the command below to get the password updated in all configurations.
 

2. Modify the SYSMAN password:

cd <OMS_HOME>/bin
emctl config oms -change_repos_pwd -use_sys_pwd -sys_pwd <sys user password> -new_pwd <new sysman password>
Note:

- The '-use_sys_pwd' is used to connect to the database as a SYS user and modify the sysman password in the Repository database.
-  The current sysman password is not prompted for and only the new password needs to be entered. This will allow the reset of the old password to the new password entered.
- The password will be modified at the Repository Database as well as the WLS Credential store and the monitoring credentials for the 'OMS and Repository' target.
- Along with the SYSMAN password, this command will modify the password for the ALL the EM users (SYSMAN_MDS, BIP, SYSMAN_OPSS, SYSMAN_APM, SYSMAN_RO, MGMT_VIEW) created in the Repository Database.

Example output:

emctl config oms -change_repos_pwd -use_sys_pwd -sys_pwd oracle123 -new_pwd oracle12
Oracle Enterprise Manager Cloud Control 12c Release 12.1.0.1.0
Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.

Changing passwords in backend ...
Passwords changed in backend successfully.
Updating repository password in Credential Store...
Successfully updated Repository password in Credential Store.
Restart all the OMSs using 'emctl stop oms -all' and 'emctl start oms'.
Successfully changed repository password.
3. Stop the Admin server on the primary OMS machine and re-start all the OMS:

cd <OMS_HOME>/bin
emctl stop oms -all
emctl start oms

Reference:
Oracle Enterprise Manager Cloud Control Administrator's Guide 12c Release 1 (12.1.0.1), Chapter 11 - Enterprise Manager Security, Topic - Changing the SYSMAN User Password

 

 

 

Known Issues

1. Problem: Modifying the sysman password fails with "java.io.IOException":

cd <OMS_HOME>/bin
emctl config oms -change_repos_pwd
Oracle Enterprise Manager Cloud Control 12c Release 12.1.0.1.0
Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
Enter Repository User's Current Password :
Enter Repository User's New Password :
java.io.IOException
Error occurred. Check the log

Cause: The above error occurs if the Admin server is not running when the sysman password is being modified.
Solution: As advised in the sections above, the Admin Server needs to be up and running when the sysman password is being modified. So, the OMS should not be stopped using 'emctl stop oms -all'.

cd <OMS_HOME>/bin
emctl start oms
emctl stop oms
emctl config oms -change_repos_pwd