AnsweredAssumed Answered

AVUSER database schema restore

Question asked by Gabriele Rusconi on May 17, 2019
Latest reply on May 17, 2019 by Kristian Nordman
  • Comment • 1

After a clean installation and configuration of:

  • RSA IGL 7.1.1 Virtual Appliance
  • Standalone Oracle Database Server (RSA provided)

I performed the database backup, following the "Database Setup and Management Guide V7.1.1" with the following command:

expdp avuser/secret@AVDB DumpFile=AVDB_$(date +%Y%m%d_%H%M%S).dmp Directory=AVEKSA_EXPORTIMPORT_DIRECTORY Schemas=AVUSER LogFile=AVDB_expdp_$(date +%Y%m%d_%H%M%S).log

to be able, in future, to restore that dump for reverting system data to the beginning.

 

Now I would like to restore the database and I tried with 000028204 - How to remove all user data stored in the RSA Identity Governance and Lifecycle application database but it does not work.

 

I also tried with https://community.rsa.com/docs/DOC-45917, in particular:

su - oracle
sqlplus / as sysdba
   drop user AVUSER cascade;
   CREATE USER AVUSER identified by secret profile ACMPROFILE;
   ALTER USER AVUSER DEFAULT TABLESPACE DATA_1M TEMPORARY TABLESPACE TEMP;

but then I can't connect to AVUSER because of lack of grant CREATE SESSION permission and, solved that issu, the AVUSER lacks other permissions to import data, etc.

 

 

 

May you help to find the right procedure to revert the AVUSER database date from scratch?

 

KR,

Gabriele. 

Kristian Nordman
Kristian Nordman May 17, 2019 7:20 AM
Correct Answer

Hi,

 

Aveksa ships with two commands available for dealing with database backup/restore: avdbexport and avdbimport

[oracle@ip-172-31-20-2 ~]$ avdbexport --help
Unrecognized command: -dbexport --help
Usage:

Options:
  -h host                    database host (default localhost)
  -P port                    database port (default 1555)
  -u user                    database user (default avuser)
  -p password                database password (has default)
  -s servicename             database service name (default avdb)
  -c url                     connect url (default jdbc:oracle:thin:@//localhost:1555/avdb)
                             localhost, 1555, and avdb will be replaced with host, port, and sid
  -d driver                  driver class (default oracle.jdbc.OracleDriver)
  -D name=value              define property
  -dbexport                  Exports the database to a dump file
     -t tagname              Tag for the output filename
     -o dir                  Optional full path for a directory for output file
     -g                      Optional flag indicating the file should be gzipped
     -e                      Optional flag indicating just an estimate of the size should be calculated (no actual export)

 

[oracle@ip-172-31-20-2 ~]$ avdbimport --help
Unrecognized command: -dbimport -deletemarkerkek -f --help
Usage:

Options:
  -h host                    database host (default localhost)
  -P port                    database port (default 1555)
  -u user                    database user (default avuser)
  -p password                database password (has default)
  -s servicename             database service name (default avdb)
  -c url                     connect url (default jdbc:oracle:thin:@//localhost:1555/avdb)
                             localhost, 1555, and avdb will be replaced with host, port, and sid
  -d driver                  driver class (default oracle.jdbc.OracleDriver)
  -D name=value              define property
  -dbimport                         Imports the database to a dump file
     -t tagname              Tag for the input filename
     -nostatsrefresh         Disables statistics refresh after import
     -deletemarkerkek        deletes the marker KEK file
     -q                      Do not print warning and wait 30 seconds
     -f                      Force the import by terminating any existing sessions
     -d                      Replace data only (for Dev environments only)
     -i dir                  Optional directory where the input file lives
     -g                      Optional flag indicating the file is gzipped


Export for your case would look like this:

[oracle@ip-172-31-20-2 ~]$ avdbimport -t _$(date +%Y%m%d_%H%M%S)

Which creates the file "Export_AVDB_avuser_20190517_113136.dmp"

Importing it:

 

[oracle@ip-172-31-20-2 ~]$ avdbimport -t _20190517_113136

Where "_20190517_113136" is whatever is between "Export_AVDB_avuser" and ".dmp"

 

I have not had any problems with grants while using these. Try them and see if they solve your problems.

See the reply in context
No one else had this question

Outcomes