Much thanks, I think at this stage I am attempting to set kerberos outbound only. 1. Asked for uncontrained trusted for delegation 2. Found this linek for unlimited JCE https://support.azul.com/hc/en-us/articles/115001122623-Java-Cryptography-Extension-JCE-for-Azul-Zulu-and-Azul-Zing?input_string=jce+unlimited+strength+jurisdiction+policy+files  looks like do not need to download and provide. 3. Will ask to review the URLs you shared re. WIN specific issues Greg, I did run klist on sas server and received output, however, when I did that from klist in SAS private JRE location I received the "credentials cache  C:\Users\my-id\krb5ccname_my-id not found I have not enabled desktop IWA yet nor did the jaas.config implemented, would that be the issue? I did have the AllowTgtSessionKey set. I do appreciate these insights! ... View more

Aha I was hoping you would reply 🙂 we are not opting for the MIT KDC setup, instead going this route of updating WIN registry, per Stuart's article (M2). I was looking at Cloudera's JDBC Hive driver and its manual, even they mention setting up separate MIT KDC and to get file based ticket and KRB5CCNAME setup. Is there a way to figure out to get the memory value just so the ticket could be validated? Like one could put for KRB5CCNAME? Since I have your attention, por favor, I was unclear if I needed to set JAAS config if I am going with memory setup? Much thanks for your input and time! ... View more

I am with you, I discovered it recently too on another project, but totally did not consider, wasn't there a metaautoinit type option (my memory fails me) and did not place it this new way, TY for the memory jog & for your time 🙂 ... View more

TY, AssignMode did it 🙂 ... View more

Ty for the suggestion Carl. I meant using 'meta' libname or even a ODBC based libname they execute fine (using their own auth-domain). I have not generated the libname string from SMC (I will) I will do the test and update. TY very much for your time! ... View more

Much thanks for your time & insight but even on this page the latest is January 2023 (SAS 9.4, Rev. 940_23w05), I have seen more later ship event sas depots.   ... View more

Hello, very informative.  Is this applicable to Viya 3.x or 4.x? Or also for 9.4 (esp. M7/M8)?  Is there a caching recommendation for WORK?   Best, S ... View more

Hi Sajid, thank you for your time and reply.  I do have the WORK location in my config files and I confirmed it via proc options as well.  That is why much surprised when I saw those png and (thank God) few *.sas7bdat.  Any other idea?  So basically sounds like it is a developer training thing. ... View more