Davis Apps DBA

How to Decrypt WebLogic Admin Passwords Using WLST in Oracle EBS and WebLogic Server Forgetting the Oracle WebLogic Server Admin password or inheriting a system with undocumented credentials is a common challenge for System Administrators and Oracle Middleware DBAs.   When WebLogic services start up, credentials stored in the ' boot.properties'  file are automatically encrypted using AES/Triple-DES keys tied specifically to that WebLogic domain. If you ever need to recover the original plain-text password without triggering a full password reset, you can decrypt the hash directly using the WebLogic Scripting Tool (WLST) .   In this guide, we will break down how WebLogic domain encryption works and walk through a step-by-step process to recover your WebLogic password.  1. How WebLogic Encryption Works To safely decrypt a WebLogic password, it helps to understand the underlying security architecture: boot.properties : Located within your WebLogic server domai...

Fixing ORA-29548: Java System Class Release Mismatch in Oracle EBS R12.2 Post-Clone   When performing post-cloning activities or applying database patchsets in an Oracle E-Business Suite (EBS) R12.2 environment, DBAs frequently run utilities like 'FNDCPASS'  or ' AFPASSWD'  to rotate system credentials.   However, running these utilities can sometimes trigger a critical database JVM error: ORA-29548: Java system class reported: release of Java system classes in the database does not match that of the oracle executable USER ( APPS ) has been detected in FND_WEB_SEC.GET_OP_VALUE. In this post, we will examine why the ORA-29548 error occurs inside the Oracle Database Java Virtual Machine (OJVM), review the diagnostic steps, and walk through a step-by-step SQL script workflow to cleanly reload the database Java system classes. 1. What Causes ORA-29548? The Oracle Database contains an embedded Java Virtual Machine (OJVM) that allows Java stored procedures and core E...

In Oracle Database releases including 12.1.0.2, 12.2.0.1, and 18c (18.1.0.0) , the Oracle Enterprise Manager (EM) Express Console  is not enabled by default. When running database workloads on Oracle Cloud Infrastructure (OCI) —such as Bare Metal, VM, or Exadata DB Systems —enabling EM Express requires configuration across multiple layers: database listener initialization, OS-level firewall updates, OCI Security List rules, and SSL wallet permission fixes.   In this guide, we will walk through the complete process of enabling EM Express at the Pluggable Database (PDB) level, configuring network routing on OCI, and fixing the common "Secure Connection Failed"  HTTPS wallet error. 1. Network Architecture Flow in OCI To understand how a client connects to EM Express running inside a Pluggable Database on OCI, examine the architectural packet flow below: Figure 1: End-to-end packet flow and security rules for accessing EM Express on an OCI DB System. End-to-End Connectio...