topic Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env. in Administration and Deployment

IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

SAS_1001 — Thu, 12 Jul 2018 20:56:09 GMT

Hi,

We are planning to implement IWA in Linux based platform. Can you pl. illustrate from beginning to the end - what steps we need to implement, pre-requisites, etc.

Thanks in advance !

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

AndrewHowell — Fri, 13 Jul 2018 06:37:25 GMT

To help us help you, can you provide any additional information, such as:

Single server or multi-machine installation
What SAS products and/or solutions are you installing?

BTW, have you reviewed the installation documentation on the SAS support page?

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

alexal — Fri, 13 Jul 2018 12:18:44 GMT

@SAS_1001,

Please read the documents I mentioned above. If you have specific questions, let me know.

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

SAS_1001 — Sun, 15 Jul 2018 17:38:42 GMT

Thank you !

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

SAS_1001 — Sun, 15 Jul 2018 17:39:51 GMT

Multiple machines
SAS94, Yes we did, reviewed the documentation

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

shoin — Tue, 04 Sep 2018 21:41:08 GMT

Is QAS needed for SAS9.4TS1M5 on RHEL LAX, 2 machine plus client install, office analytics? I did search but nothing specific jumps out. I am certain I read somewhere that QAS was dropped post M3 but not sure where...anyone has an idea?

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

PaulHomes — Wed, 05 Sep 2018 01:08:37 GMT

You can still use Quest Authentication Services but it is no longer required with recent versions of SAS 9.4. From What’s New in SAS® 9.4 > SAS 9.4 Intelligence Platform

In SAS 9.4M2, Integrated Windows Authentication on Linux systems no longer requires the use of Quest Authentication Services. SAS can leverage the libraries that are shipped with the supported operating system or that are provided in most third-party authentication solutions.

I use the standard GSSAPI & Kerberos 5 libraries for my installs - e.g. https://platformadmin.com/blogs/paul/2015/07/active-directory-authentication-for-sas-on-linux-with-realmd/ and https://platformadmin.com/blogs/paul/2015/01/iwa-sas-94m2-linux/

BTW you'd probably get more feedback if you posted something like this as a new topic rather than at the end of an already solved topic.

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

shoin — Wed, 05 Sep 2018 22:02:28 GMT

Thank you! Could we beg, plead, bribe for the updated blog for RHEL based how to? In your blog the OS you used, is it much different exp when following it to setup on RHEL? (Noted your advice, thx again).

Re: IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

PaulHomes — Wed, 05 Sep 2018 23:09:23 GMT

Thanks for the enthusiasm! I don't think you have to wait for me to update the blog though as the post on realmd at https://platformadmin.com/blogs/paul/2015/07/active-directory-authentication-for-sas-on-linux-with-realmd/ is still the same method I use today. Whilst I mention CentOS 7.1 in the post I have also used it with RHEL 7.4 and CentOS 7.5.

Try it out and if you have any specific questions post them here (as a new question) and I will respond if I can help. You can post the questions on the blog post too but if you post them here then you may also get responses from other SAS admins with experience in this area.

I'd also encourage you search for and read SAS Global Forum papers on IWA and Kerberos by Stuart Rogers, Heesun Park, Zhiyong Li, Mike Roda etc - they've published lots of essential info on these topics. A good place to start is a search of Lex Jansen's excellent SAS papers archive https://www.lexjansen.com/search/searchresults.php?q=kerberos