EBS 中 APPLSYSPUB/GUEST/APPLSYS/APPS 等使用者/角色的含義

1、APPLSYSPUB

This account is used by Oracle Applications to initially connect to the database and check user password during a user signon process before user is connected.

When we login to applications,initially oracle applications connect to public schema, APPLSYSPUB. This schema has sufficient privileges to perform the authentication of an Applications User (FND user), which includes running PL/SQL packages to verify the username/password combination and the privilege to record the success or failure of a login attempt（APPLSYSPUB有權限運作相關的plsql package來确定使用者的密碼是否正确和權限資訊）.

The public ORACLE username and password that grants access to the Oracle E-Business Suite initial sign-on form. The default is APPLSYSPUB/PUB

如何修改APPLSYSPUB的密碼：

To change password of APPLSYSPUB with FNDCPASS:

$FNDCPASS APPS/[apps_pass] 0 Y SYSTEM/[system_pass] ORACLE APPLSYSPUB [new_passs].

0 & Y are flags for FNDCPASS

0 is request id (request ID 0 is assigned to request ID's which are not submitted via Submit Concurrent Request Form)

'Y' indicates that this method is directly invoked from the command-line and not from the Submit Request Form.

All application tier processes (Apaches) must be restarted following the password change.

Once we change the APPLSYSPUB password must propagate the change to application tier configuration files. If the instance is Autoconfig enabled, must edit the CONTEXT file on each tier prior to running Autoconfig.

In the CONTEXT file, locate the autoconfig variable “s_gwyuid_pass” and set it to the new password, then run AutoConfig in each applications nodes.

if Autoconfig is not being used:

 you must manually edit the following configuration files :

1) FND_TOP/resource/appsweb.cfg

2) OA_HTML/bin/appsweb.cfg

3) FND_TOP/secure/HOSTNAME_DBNAME.dbc

2、GUEST

GUEST is a dummy(虛假的) schema.不能直接用這個使用者從頁面或者sqlplus連接配接。

By default it has ORACLE as password.

GUEST/ORACLE password is present in DBC file at $FND_TOP/secure directory as well as at $FND_TOP/secure/SID_hostname directory.（$CONTEXT_FILE裡也有）

If a user logs in without any role mappings, the user will get the Guest role, which has a default permission of "R".

GUEST user is used by JDBC Drivers and Oracle Self Service Web Applications like istore, irecruitment, iprocurement, ipayables, ireceivables etc to make initial Connection.

APPLSYSPUB 和 GUEST 有什麼差別？

3、APPLSYS和apps

APPLSYS user is same as other oracle users like AP, AR, GL etc which hold their set of tables, views etc. In the same manner APPLSYS Account holds its set of tables like FND_USER and FND_APPLICATION, AD_APPLIED_PATCHES etc.

applsys schema has applications technology layer products like FND and AD etc.

關于technology layer的介紹參考：http://blog.csdn.net/cymm_liu/article/details/17445055

Apps is a universal schema, it has synonyms to all base product tables and sequences. This also has code objects for all products (triggers, views, packages, synonyms etc).

APPS is central Schema which holds synonyms for all other Users Database Objects.

Note: APPLSYS and APPS should have same password.

Reason why these contains same password.

Both apps & applsys need to have same password because when you sign on to apps, initially it connects to a public schema called APPLSYSPUB. This validates AOL name and password that we enter (operations/welcome). Once this is verified we select responsibility, this is validated by APPLSYS schema and then it connects to apps schema.

During signon process it uses both applsys and apps, hence this expects both the password to be identical. If the password for applsys & apps are not identical (Different) Try changing apps password to something else and try to login, the validation at the last stage would fail. This would result in failure of application login.

有個網友說了一段比較形象描述APPLSYS使用者的，不精确但是很形象：

The APPLSYS schema owns the AD and FND objects (a better name for APPLSYS would or could be FND, you will not find FND as a schema name in EBS, even though you will find the FND_TOP and FND tables...). In other words, you could compare the APPLSYS schema to any other product schema like GL, PER or similar.