How to Enable and Disable Oracle Database vault

How to Enable the database vault in Oracle 11gR2

1) Stop the database, Database Control console process, and listener
SQL> SHUTDOWN IMMEDIATE
SQL> EXIT
$ emctl stop dbconsole
$ lsnrctl stop [listener_name]


2) Enable Oracle Database Vault as follows:
$ cd $ORACLE_HOME/rdbms/lib
$ make -f ins_rdbms.mk dv_on lbac_on ioracle
or
chopt enable lbac
chopt enable dv


3) Restart the database, Database Control console process, and listener
SQL> STARTUP
SQL> EXIT
$ emctl start dbconsole
$ lsnrctl start [listener_name]


How to Disable the database vault in Oracle 11gR2

1) Stop the database, Database Control console process, and listener.
SQL> SHUTDOWN IMMEDIATE
SQL> EXIT
$ emctl stop dbconsole
$ lsnrctl stop


2) Disable Oracle Database Vault as follows:
$ cd $ORACLE_HOME/rdbms/lib
$ make -f ins_rdbms.mk dv_off ioracle
or
chopt disable dv
chopt disable lbac

3) Restart the database, Database Control console process, and listener
SQL> STARTUP
SQL> EXIT
$ emctl start dbconsole
$ lsnrctl start [listener_name]

How to check the status of Database Vault

We can check the status of database vault either from the database or from Oracle home binaries


1) select * from v$option where parameter like '%Oracle Database Vault%';

PARAMETER                VALUE
------------------------- ----------
Oracle Database Vault     TRUE

TRUE means DV is enabled



2) $ cd $ORACLE_HOME/rdbms/lib
   $ ar -t libknlopt.a | grep dv

kzvndv.o shows that DV option is DISABLED
kzvidv.o shows that DV option is ENABLED



3) $ ar -t libknlopt.a | grep -c kzvidv.o

For IBM AIX
$ ar -X64 -t libknlopt.a | grep -c kzvidv.o

If the output is 0, the DV option is disabled.
If the output is 1, the DV option is enabled.

APP-FND-02704: Unable to alter user APPS to change password

Error while changing the APPS password using FNDCPASS after integrating Database vault with E-Business suite

FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS welcome123

[appltest@TEST ~]$ cat L3312766.log
+---------------------------------------------------------------------------+
Application Object Library: Version : 12.0.0
Copyright (c) 1979, 1999, Oracle Corporation. All rights reserved.
 module:
+---------------------------------------------------------------------------+
Current system time is 01-MAR-2014 09:58:07
+---------------------------------------------------------------------------+
Working...
APP-FND-02704: Unable to alter user APPS to change password.
+---------------------------------------------------------------------------+
Concurrent request completed
Current system time is 01-MAR-2014 09:58:35
+---------------------------------------------------------------------------+

Solution:
Use DBVACCTMGR instead of system

FNDCPASS apps/apps 0 Y DBVACCTMGR/DBV123 SYSTEM APPLSYS welcome123