Changing APPS password in EBS instances:
1) Use FNDCPASS to change the apps password,Please use the following command
FNDCPASS apps/<existing apps passwd> 0 Y system/manager SYSTEM APPLSYS <new password>
2) In DB Tier please change the password in the following files
$FND_TOP/resource/wfmail.cfg
grep -i connect $FND_TOP/resource/wfmail.cfg
$APPL_TOP/.ebssecure
cat $APPL_TOP/.ebssecure
$ORACLE_HOME/reports60/server/CGIcmd.dat
grep -i userid $ORACLE_HOME/reports60/server/CGIcmd.dat
3) In Apps Tier please change the password in the following files
grep -i userid $ORACLE_HOME/reports60/server/CGIcmd.dat
grep -i password $APACHE_TOP/modplsql/cfg/wdbsvr.app
FYI
cgicmd.dat file located in $ORACLE_HOME/reports/conf is used to hide username/password from URL. In this file we make a key (alias) who maps key into username/password.
wfmail.cfg configuration file for the Oracle Workflow Notification Mailer
wdbsvr.app This file is used by mod_plsql component of Apache to connect to database.
Q Why alter user <> identified.... is not used to change APPS password ?
Because Oracle Application use APPS PASSWORD to encrypt end user's password in fnd_user and oracle user's password in fnd_oracle_userid, you can have a test when you use FNDCPASS to change password of APPS,the column encrypted_oracle_password in two tables changed too, but alter don't do this actions.
0 & Y are flags for FND Executable like FNDCPASS & FNDLOAD where
0 is request id (request ID 0 is assigned to request ID's which are not submitted via Submit Concurrent Request Form.
'Y' indicates the method of invocation. i.e. it is directly invoked from the command-line not from the Submit Request Form.