Unable to run sdadmin sdlogmon or Administration API as the file owner in RSA ACE/Server 5.2.1
2 years ago
Originally Published: 2004-04-30
Article Number
000042249
Applies To
RSA ACE/Server 5.2.1
UNIX (AIX, HP-UX, Solaris)
RSA ACE/Server is started as root and root is not the file owner
Issue
Unable to run sdadmin, sdlogmon, or Administration API as the file owner in RSA ACE/Server 5.2.1
If the ACE/Server is started by the file owner, everything works fine
Error: "There is no connection to server database"
Cause
Permission changes made in RSA ACE/Server 5.2 allows only the user that starts the ACE/Server to read *lk files in the "path"/ace/data directory. When sdadmin is run by another user that cannot read the *lk file, it's interpreted as the server is not running.
Resolution
To resolve this issue, contact RSA Security Customer Support and request hot fix ID 42990.

As a workaround, you can change the permissions on the _mprosrv file as follows:

cd "path"/ace/prog
chmod 4110 _mprosrv

Then stop and start ACE:

aceserver stop
sdconnect shutdown
sdconnect start
aceserver start