topic Re: libname authorization issue for user with more than 16 NFS groups in Linux x64 in SAS Data Management

libname authorization issue for user with more than 16 NFS groups in Linux x64

TimE4SAS — Thu, 03 Feb 2022 15:24:39 GMT

NFS Group needed to access directory referenced in libname statement is group #23 for user and only first 16 groups are being evaluated by Linux. Running from SAS EG 7.15 on Linux X64 SAS 9.4M6. Issuing Linux newgrp command before libname has no effect when run from SAS. Is there a way to reference a Linux group on libname statement? Is there a different way to execute newgrp command so that libname will reference re-ordered security groups? Or another solution. I have PIPEd results in SAS program and have attached. I am able to list the folder with Linux "sg" and referencing appropriate group. When logged into Linux via Putty, I can execute "newgrp" command and see group order is changed via "groups" command.

Re: libname authorization issue for user with more than 16 NFS groups in Linux x64

AMSAS — Thu, 03 Feb 2022 18:36:07 GMT

You are probably going to need to open a TS track for this
Please include the following:
- SAS Version you are running (the following code will report SAS version information)
%put &sysvlong ;
%put &sysscpl ;
%put &syssite ;
- Registry Report (*.txt files) for each server, please clearly name the report files to reflect the server it was executed on.

Please provide more context on the issue
Has this been working in the past
When was it last working
What changed
Do you know it works for the same user with 15 NFS groups in Linux x64

I did search existing tracks and found this (no idea if it helps)

I think we found the issue which is an NFS export option.

The option for more than 16 user groups over NFS is not enabled on this NFS export.

Re: libname authorization issue for user with more than 16 NFS groups in Linux x64

TimE4SAS — Thu, 03 Feb 2022 19:08:40 GMT

Has this been working in the past? We just crossed this issue where a user belongs to more than 16 groups.
What changed? Added more security groups. With a transition to AWS and their EFS(elastic file system), we have added more groups.
Do you know it works for the same user with 15 NFS groups in Linux x64? Yes this works for the same user if there are only 16 groups.

I think this is a matter of how newgrp command works. Even though it is executing okay, it is not changing the groups associated with the already started SAS session. I have seen some posts that suggest sudo usermod -g, however a basic user like myself cannot run usermod. Seems like we would need an elevated priviledge to modify user group within the active SAS session or somehow reduce or reorder the groups before the SAS session is started.

I don't think the NFS export is related. Was there supposed to be a link there? I can't find the article right off.

Thanks,

Tim

I will have to engage on SAS Team to open the TS track. I assumed we might end up here, but they wanted me to submit the question first.

Re: libname authorization issue for user with more than 16 NFS groups in Linux x64

TimE4SAS — Thu, 03 Feb 2022 19:15:28 GMT

I did open SAS tracking number 7613512068, before posting here. Is that what you mean by TS Track?

%put &sysvlong ; 9.04.01M6P110718
%put &sysscpl ; Linux
%put &syssite ; 70152682