Article Number
000036703
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1, 8.2, 8.3
Issue
Running the rsautil restore-admin command fails.
An example command and output would be:
/opt/rsa/am/utils> ./rsautil restore-admin -o ocadmin -w support1 -u newuserid -p mypasswd!
Exception in thread "main" com.rsa.common.UnexpectedDataStoreException: org.postgresql.util.PSQLException:
ERROR: Unexpected column(s) Updated on table rsa_rep.ims_principal_data: administrator_flag,
Where: SQL statement "update rsa_rep_cover.ims_principal_data_dg DG
PL/pgSQL function tfx_redirtodg_update_ims_principal_data() line 69 at SQL statement
at com.rsa.ims.admin.dal.sql.PrincipalAccessSQL.setAdministratorFlag(PrincipalAccessSQL.java:2143)
at com.rsa.admin.tools.AdminRestorationCLUCommand.addPrincipalData(AdminRestorationCLUCommand.java:395)
at com.rsa.admin.tools.AdminRestorationCLUCommand.execute(AdminRestorationCLUCommand.java:194)
at com.rsa.admin.tools.AdminRestorationCLU.main(AdminRestorationCLU.java:65)
Caused by: org.postgresql.util.PSQLException: ERROR: Unexpected column(s) Updated on table rsa_rep.ims_principal_data: administrator_flag,
PL/pgSQL function tfx_redirtodg_update_ims_principal_data() line 69 at SQL statement
at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2102)
at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1835)
at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:257)
at org.postgresql.jdbc2.AbstractJdbc2Statement.execute(AbstractJdbc2Statement.java:500)
at org.postgresql.jdbc2.AbstractJdbc2Statement.executeWithFlags(AbstractJdbc2Statement.java:388)
at org.postgresql.jdbc2.AbstractJdbc2Statement.executeUpdate(AbstractJdbc2Statement.java:334)
at com.rsa.ims.admin.dal.sql.PrincipalAccessSQL.setAdministratorFlag(PrincipalAccessSQL.java:2137)
Exception in thread "main" com.rsa.common.SystemException: SQL error occurred while updating records :-ERROR: permission denied for relation ims_principal_admin_role at
com.rsa.admin.tools.AdminRestorationCLUCommand.execute(AdminRestorationCLUCommand.java:216) at com.rsa.admin.tools.AdminRestorationCLU.main(AdminRestorationCLU.java:65)
Cause
The cause of the permission denied error in this case is the command is being executed on a replica system. The rsautil commands that change or update the database may only be run on the primary server.
Resolution
Execute rsautil restore-admin commands on the primary server.
