How to get Login Passwords for application & Data Base instances

Most often, oracle apps developers have to work in different DB instances for development as well as for testing purposes. In such situations we need to get access to different oracle application instances and data base (dev/test/crp etc.,) instances. So we have to request & follow a lengthy approval process to get those login details, some times you may end up in loosing your delivery schedules.

There is a simple way by which you can get the logins/passwords of your DB & Application with out chasing the DBAs.

Oracle follows an encryption algorithm to encrypt user passwords. Most references to the encryption algorithm point to either the PL/SQL package APPS.FND_WEB_SEC or the Java class "oracle.apps.fnd.security.WebSessionManagerProc".

For decryption and encryption, the following calls are made:

APPS.FND_WEB_SEC >

oracle.apps.fnd.security.WebSessionManagerProc>

oracle.apps.fnd.security.AolSecurity>

oracle.apps.fnd.security.AolSecurityPrivate

The actual encryption and decryption routines are in the "oracle.apps.fnd.security.AolSecurityPrivate" Java class. This Java class is stored both in the database as a Java Stored Procedure and in the operating system directory $COMMON_TOP/java.

Create a package specification: get_pwd

-- Package Specification

CREATE OR REPLACE PACKAGE get_pwd AS

FUNCTION decrypt (KEY IN VARCHAR2,VALUE IN VARCHAR2)RETURN VARCHAR2;

END get_pwd;

Create the package body: get_pwd

-- Package Body 

CREATE OR REPLACE PACKAGE BODY get_pwd AS

FUNCTION decrypt (KEY IN VARCHAR2,VALUE IN VARCHAR2)RETURN VARCHAR2 AS

LANGUAGE JAVA

NAME 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';

END get_pwd;

Call the package function as shown below:

/** Run this on toad, Get the DB apps password */

SELECT (SELECT get_pwd.decrypt (UPPER ((SELECT UPPER (fnd_profile.VALUE ('GUEST_USER_PWD'))

FROM DUAL)), usertable.encrypted_foundation_password)

FROM DUAL) AS apps_password

FROM fnd_user usertable

WHERE usertable.user_name LIKE UPPER ((SELECT SUBSTR (fnd_profile.VALUE ('GUEST_USER_PWD')

,1

, INSTR (fnd_profile.VALUE ('GUEST_USER_PWD'), '/')

- 1

)

FROM DUAL))

Call the package function as shown below:

/** Run this on toad, Get the application usernames and passwords */

SELECT usertable.user_name

, (SELECT get_pwd.decrypt (UPPER ((SELECT (SELECT get_pwd.decrypt (UPPER ((SELECT UPPER (fnd_profile.VALUE ('GUEST_USER_PWD'))

FROM DUAL)), usertable.encrypted_foundation_password)

FROM DUAL) AS apps_password

FROM fnd_user usertable

WHERE usertable.user_name LIKE

UPPER ((SELECT SUBSTR (fnd_profile.VALUE ('GUEST_USER_PWD')

,1

, INSTR (fnd_profile.VALUE ('GUEST_USER_PWD'), '/')

- 1

)

FROM DUAL))))

,usertable.encrypted_user_password)

FROM DUAL) AS encrypted_user_password

FROM fnd_user usertable

WHERE usertable.user_name LIKE UPPER ('username') -- Here username is application login such as 'OPERATIONS'