Guest User End Dated in apps

Guest User End Dated

Its been long time I did not blog, I was busy in migration. Last week I came accross "Blank Login Page" (EBS R12) issue in one of the development instance, later I found that the functional team end dated GUEST user thinking that it is not used by anyone.

Guest user has lot of importance in EBS, E-Business Suite uses a guest account to represent a user session that is not yet authenticated, so when the account gets locked then you will see a blank page when you try to login to the instance. I had to fix this issue from backend as I could not login to the instance,

I used this script to check when the guest user was end dated.
>> select USER_NAME, END_DATE from fnd_user where USER_NAME like '%GUEST%' ;

Take backup of FND_USER table and run below statement to remove the end_date.
>> update fnd_user set end_date=null where user_name='GUEST';
>> commit;

I tried to login again, it dint worked, then I validated the guest user password with below statement, this should return "Y" if the guest user password is correct, in my case it returned me "N", so I had to reset the GUEST user password aswell.
>> select fnd_web_sec.validate_login('GUEST','ORACLE') from dual;

Below is the procedure to reset the GUEST user password as per metalink:

1. Reset GUEST password:

SQL> exec fnd_vault.del('FND');SQL> commit;
SQL> select FND_WEB_SEC.CHANGE_GUEST_PASSWORD('ORACLE','') from dual;
SQL> commit;

Note: In Above Sql , FND_WEB_SEC.CHANGE_GUEST_PASSWORD needs two inputs one is the new guest user's password which is "ORACLE" and other is applsys user's password that you need to provide as applicable.

2. Test if Profile Updated or not?

DECLAREstat boolean;
BEGINdbms_output.disable;
dbms_output.enable(100000);
stat := FND_PROFILE.SAVE('GUEST_USER_PWD','GUEST/ORACLE','SITE');
IF stat THEN
dbms_output.put_line( 'Stat = TRUE - profile updated' );
ELSE
dbms_output.put_line( 'Stat = FALSE - profile NOT updated' );
END IF;
end;/

3. Change GUEST user password, FNDCPASS should not be used. It will result in error : "FNDCPASS was not able to decrypt password for user 'GUEST' during applsys"
Use following API:

>>java oracle.apps.fnd.security.AdminAppServer APPS/"APPS Password" UPDATE GUEST_USER_PWD=GUEST/"Guest User Password" DB_HOST="Host_Name" DB_PORT="PortNumber"DB_NAME="SID"

Note: Provide all the parameters as applicable for Guest User password as used in step :1 , and DB related details for DB_HOST, DB_PORT and DB_NAME

4. Check the log of FNDCPASS for any error for GUEST user if there is no error for GUEST user then do the next step

5. Compile JSP
>> cd $FND_TOP/patch/115/bin
>> ojspCompile.pl --compile --flush

6. Set GUEST_USER_PWD password in $FND_SECURE/.dbc to GUEST/ORACLE

7. Correct End_Date of GUEST user & its responsibilities by direct launch of FORMS as explained in Note 552301 1 How To Prevent Users From Accessing Forms Directly In Oracle Applications R12

8. Correct the Roles by Workflow Directory Services User/Role Validation" with Parameters:
Fix Dangling User/Roles=YesAdd Missing User/Role Assignments=Yes

9. Bounce Middle Tier Services

10. Retest the issue. .

Note:- I just shared how I fixed the guest user end_date issue, this may not be the soultion in all the case.