Link to home
Start Free TrialLog in
Avatar of Bud Durland
Bud DurlandFlag for United States of America

asked on

ASA 8 DBA user can't manage users

I have an ASA 8.x server hosted on Win2000.  This afternoon I discovered that when I'm logged in as the DBA, I can't make changes to any of my existing users, and I can't create new ones.

The error that I get is

"ASA error -121: you do not have permission to revoke permissions from <username>"

Or something similar.  There's no DBA user, but there is a DBA group.  Curiously, the DBA group does NOT have the "administer database" box checked in the properties.  I tried to connect using my login name -- I belong to a group that is configured to be able to administer the database, and I get the same result.

What's going on?
Avatar of ChrisKing
ChrisKing

not too sure about ASA, but in ASE you require the sso_role (sso => system security officer)
Avatar of Bud Durland

ASKER

Figured it out on my own -- the "DBA" group had somehow lost the "administer database" priviledge.  Fortunately, my assistant's login account had been granted this priv, and so was able to re-assign it to the DBA group.

ASKER CERTIFIED SOLUTION
Avatar of ee_ai_construct
ee_ai_construct
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial