Symptom

This note describes the configuration of an SAP installation with the SAP-pecific database user profile SAPUPROF.

Symptom:
SAP system does not start any more.
SAP workprocesses can not connect to the database any more.

SAP trace files contain errors similar to the following:
TRACE-INFO: 101:  [    dbsloci.,00000]  *** ERROR => CONNECT failed with sql error ’28001′
TRACE-INFO: 102:  [     dev trc,00000]     set_ocica() -> SQL error code 28001
TRACE-INFO: 103:  [     dev trc,00000]    >oci_get_errmsg (con_hdl=0,rc=28001)
TRACE-INFO: 104:  [     dev trc,00000]     OCIErrorGet -> SQL error code: 28001
TRACE-INFO: 105:  [     dev trc,00000]     ORA-28001: the password has expired

Other symptoms:
You get ORA-28000 or ORA-28001 or ORA-28002 errors when you try to connect to the database (i.e. as database user SYSTEM).

Reason:

• Oracle Database Release 11.2.0.X.

• Database user profile SAPUPROF is not configured. Check this with the following query (for user SAPSR3):
  SQL> select profile from dba_users where username = ‘SAPSR3′;

• With 11.2, passwords of database users must be changed every 180 days for security reasons.

For full solution, Please go through this note 1519872.

After a lot of searching I have found “Greenshot” which is better than others & can also use in WIN 7. It’s an open source program.

Here is an download link of Greenshot official site http://getgreenshot.org/downloads/

This article answers the following queries :
•         What is the control file in oracle?
•         What are the functions of control file in oracle?
•         What are the control file contents ?
•         Can database function properly without control file?
•         Can we edit control file
•         Who can modify control file?
•         At what time control file will be created?

What is control file in Oracle and what are its functions ?
Control file is a small binary file which is necessary for the database to start and operate successfully.

What are the functions of control file ?
Each control file is associated with only one database.  Oracle continuously updates control file during database use so this file must be available for writing whenever the database is in the open state.  Control file will be created at the same time of database creation.
Whenever a datafile or a redolog file is added to, dropped or renamed in the database, the control file is updated to reflect the physical structural change.
These changes are recorded in control file which facilitates:
>   Oracle to identify the files that are required or available in case database recovery is needed
>   Oracle to identify the datafiles and redolog files to open during database startup.

Can database function properly without control file?
No. Database cannot function properly if the control file is not available.

Can we edit control file? Who can modify control file?
Please note control file cannot be edited by database administrator or by any user. Control file information can only be modified by Oracle.

Contents of control files :
> Control file contains information such as
>   Database name
>   Timestamp of database creation
>   Tablespace information
>   The log history
>   Archive log information
>   Current log sequence number
>   Checkpoint information
>   Names and locations of associated datafiles and redolog files
>   Datafile copy information
>   Datafile offline ranges
>   Backup set and backup related information
>   Backup datafile and redolog information

Procedure to check.

1. go to CMD – “sqlplus / as sysdba”

2. execute statement to check limit of failed login attempts.

SELECT LIMIT FROM DBA_PROFILES
WHERE
PROFILE = ‘DEFAULT’ AND
RESOURCE_NAME = ‘FAILED_LOGIN_ATTEMPTS’;

default limit = 10.

Changing default limit = 10 to unlimited.

ALTER PROFILE DEFAULT LIMIT FAILED_LOGIN_ATTEMPTS UNLIMITED;

now it’s time to change the password of SAPSR3.

CMD>brconnect -u / -c -l E -f chpass -o SAPSR3  -password (whatever_you_want)

Steps to find the issue in Windows Environment.

1. Go to CMD – R3trans -d (it ended with return code 0012)

2. Read the trans.log & search if there any user lock issue found.

if YES then go to below procedure to resolved.

1. Stop the SAP process in SAP MMC.

1. go to sqlplus via “CMD – sqlplus / as sysdba”

2. execute statement to check which user(SAPSR3) is locked.

select username, account_status from dba_users;

find the list of dba users with their status. if SAPSR3 user is locked then execute this below statement to unlock.

alter user SAPSR3 account unlock;

again execute to check whether it’s successful or not.

select username, account_status from dba_users;

if successful log out from SQL & execute “R3trans -d“. it finish with RC=0000.

START SAP & it will start.

I got stuck after changing Portal — User Management — Identity Management — Data Source —- Database only to ABAP System.

After restarting the instance the value of Data Source shows only ABAP system & for somehow if you want to revert to Database only, it’s not possible. There is no any other options rather than ABAP System.

As per SAP note 718383.

dataSourceConfiguration_abap.xml

No change is possible.

This configuration supports all usages (especially SAP Exchange Infrastructure and SAP Enterprise Portal) by making ABAP users and ABAP roles available as users and groups in the UME, and supports the creation of new groups in the UME (which are then stored in the local database) as well.

The below SDN thread talks about same issue:

http://forums.sdn.sap.com/thread.jspa?messageID=10568533

SOLUTION:

You can change the database only(default) option by editing UME properties in Config Tool.

Steps to follow:

·         Config Tool — Global server configuration – services – com.sap.security.core.ume.service

·         ume.persistence.data_source_configuration (Make this value Restore to Default)

·         Restart the instance.

Now when you check again in Portal— User Management — Identity Management — Data Source

It will show the Database only(Default) value.

Enjoy!

You can now “mass extract” all your patches at once by selecting all 50+ files in Windows Explorer and hitting enter on them. If you do this on a laptop now would be a good time for a coffee break.
5. Now the real upgrade can start. Always update your kernel to the latest release first. This involves the following:
• Determine your global kernel directory. Goto transaction AL11 and look for directory mapped to DIR_CT_RUN. In my case(on Linux) this is /usr/sap//SYS/exe/run.
• Log in with your adm user. This will ensure you preserve the correct rights to your files.
• Backup this directory by copying it to somewhere safe.
• Overwrite the files in your DIR_CT_RUN directory with the new kernel files extracted in step 4. These files aren’t used by the SAP System, so you can safely overwrite them while the system is still running.
• On Windows I would recommend rebooting the box, on Unix environments you only need to stop and start the instance.
• During the startup of the instance a program called sapcpe will copy the new kernel files in DIR_CT_RUN to DIR_EXE_ROOT(usr/sap//exe).
6. Now, do a full off line database backup and keep in a safe place.
7. Copy the ABAP Support Pack files extracted in Step 4 to the following location on the SAP Server: /usr/sap/trans/EPS/in.
8. Log on to the SAP System in client 000 with your own user(not SAP* or DDIC).
9. Execute transaction SPAM(what a name…).
10. Load the Support Packages. On the SPAM main menu goto Support Package->Load Packages->From Application Server.
11. Now we hit the stage where P.P.P.P.P.P. You have to read all the notes on all the patches for all the components you want to upgrade. There are many dependencies here and it is easy to stuff up. But a few points:
• Make sure TMS is configured properly and actually working(i.e. test with a transport). This is important on new installs and has burned me in the past.
• Always upgrade SPAM to the latest version first. Always!
• Read the notes on optimal queue definitions, make them as long as possible, but keep the next point in mind…
• Don’t overshoot(see note 70228 for explanation). This is critical if you have add-ons such as XRPM, WFM or even CRM 2007(which now requires a CRT(Conflict Resolution Transport) after every ABAP support pack).
• Write down all the steps you took and queues you used as this will help in the upgrade of downstream systems.
12. If you read the plethora of notes before hand and manage to follow them correctly everything should go fine.
13. If you do it Cowboy style(and ignore point 12 like I do ), SPAM failure is likely. You could try the following, in order:
• Restart the Process. Always do this 2 or 3 times before proceeding, especially with BASIS/ABAP support packs.
• Search for notes on the Service Market Place. You are probably not the first one to mess up. Also, sometimes the support packs contain errors.
• Try to reset the queue and process again.
• If you absolutely have to back out and SPAM does not allow you to reset the queue, you can do the following if you are brave. Run Function Module OCS_RESET_QUEUE in SE37 with the parameters IV_TOOL=SPAM and IV_FORCE=X. Just realize that this will leave your system in an inconsistent state. You may need to do some significant manual fixing.
• Log it with SAP.
• Restore your backup and try again.
Eventually you should have an up-to-date, everything recompiling, SAP System.

Source : johanvanzijl.com

One of my colleague go through this solution.  Hope this helps you.

Some thing new in 11g, If you are using please rectify.

Find the article here.