Logging in to AVCLI

You can log in to the Audit Vault command line interface by using different methods.

About Logging in to AVCLI

You can log in to AVCLI interactively with or without a user name, and with stored credentials.

Before users log in, ensure that the JAVA_HOME environment variable in the server points to JDK installation directory. The user who logs in to AVCLI must be granted the granted the AV_ADMIN role, which you can grant by using the Oracle Database Security Central console.

The ways to log in are as follows:

• By supplying a user name and password by executing the avcli command

• Without supplying a user name and password, but you will be prompted for these credentials after you run avcli

• By using a stored credential, which is useful for situations in which you must run scripts.

Logging in to AVCLI Interactively

You can start AVCLI interactively at the command line with or without a user name.

Except for a few commands where it is optional, all AVCLI commands must end in a semi-colon (;). For simplicity, in this guide we use a semi-colon for all AVCLI commands.

1. Log in to the server where AVCLI is installed as a user who has been granted the AV_ADMIN role.

2. Go to the directory where AVCLI has been installed, and open /bin.

   cd ../<directory_name>/bin/

3. At the command line, use one of the following methods to log in to AVCLI:

   • Logging in with a user name: Use the following syntax:

     avcli -u <username>
     Enter password: <password>

     For example:

     avcli -u psmith
     AVCLI : Release 26.1.0.0.0 - Production on <timestamp>
     Copyright (c) 1996, 2020 Oracle.  All Rights Reserved.
     Enter password for 'psmith': <password>
     
     Connected to:
     Oracle Audit Vault Server 26.1.0.0.0
     
     AVCLI>

   • Logging in without a user name: Use the following syntax:

     avcli
     AVCLI> CONNECT [<username>];

     For example:

     avcli
     
     AVCLI : Release 26.1.0.0.0 - Production on <timestamp>
     Copyright (c) 1996, 2020 Oracle.  All Rights Reserved.
     
     AVCLI> CONNECT psmith
     Enter password: <password>;
     Connected.

     If you do not enter a user name, then you will be prompted for one.

Storing or Overwriting Administrative Credentials

If you are the AVCLI owner (that is, you installed the AVCLI utility) you can store the credentials of one Oracle DBSecCentral administrator in the AVCLI wallet.

Thereafter, that administrator can invoke AVCLI without providing credentials, and can also run scripts without intervention.

As a prerequisite for an administrator to be able to invoke AVCLI without credentials (non-interactively), the AVCLI owner must store that administrator’s credentials. As the AVCLI owner, you can store credentials for only one administrator.

1. As the AVCLI owner, run avcli without connecting to the Audit Vault Server.

   For example:

   avcli
   
   AVCLI : Release Release 26.1.0.0.0 - Production on <timestamp>
   Copyright (c) 1996, 2020 Oracle.  All Rights Reserved.
   
   AVCLI>

2. Run the command STORE CREDENTIALS and provide the administrator’s credentials when prompted.

   For example:

   AVCLI> STORE CREDENTIALS;
   Enter user name:<username>
   Enter password:<password>
   Re-enter password:<password>

   Any previously stored credentials will be overwritten. If this administrator’s password changes, follow this procedure again to store the new credentials.

Logging in to AVCLI Using Stored Credentials

To start AVCLI without having to enter credentials, your credentials must be stored in the Audit Vault Server.

1. Log in to the server where AVCLI is installed as a user who has been granted the AV_ADMIN role.

2. Use one of the following methods to log in to AVCLI using stored credentials:

   • From the shell: In the Oracle Database Security Central console, enter the following command, which logs you in to AVCLI and connects to the Audit Vault Server:

     avcli /@

   • From within AVCLI: If you have invoked AVCLI from the shell without credentials (by typing avcli), connect to the Audit Vault Server by entering:

     AVCLI> CONNECT /@;

     For example:

     avcli
     
     AVCLI : Release 26.1.0.0.0 - Production on <timestamp>
     Copyright (c) 1996, 2020 Oracle.  All Rights Reserved.
     
     AVCLI> CONNECT /@;
     Connected.

Related Topics

• Running AVCLI Scripts