topic Re: Error validating the SAS Content server in Administration and Deployment

Error validating the SAS Content server

RupaJ — Wed, 08 Aug 2018 20:55:38 GMT

Hello,

I have successfully installed and configured the SAS meta, compute and mid-tier on Rhel 7 virtual server. While validating the content server, I am getting the below error.

[8/8/18 3:18 PM] INFO: Starting simple validation for WebDAV server (level 1) - ping
[8/8/18 3:18 PM] INFO: Ping successful!
[8/8/18 3:18 PM] INFO: Starting extended validation for WebDAV server (level 1) - Making a connection
[8/8/18 3:18 PM] INFO: Path: 'https://abcd:8343/SASContentServer/repository/default/sasfolders/'
[8/8/18 3:18 PM] SEVERE: Exception accessing https://abcd:8343 (sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

Any idea, how do I get past this error?

Thank you.

Re: Error validating the SAS Content server

RupaJ — Wed, 08 Aug 2018 21:01:41 GMT

I see this KB.

http://support.sas.com/kb/39/690.html

But I don't see the path

/usr/jdk/jdk1.5.0_12/jre/lib/security

I am installed,configured 9.4 M5

Re: Error validating the SAS Content server

RupaJ — Thu, 09 Aug 2018 00:42:04 GMT

I see this one which is more specific to SAS 9.4 M3 and higher releases.

http://support.sas.com/kb/52/099.html

I did import the certs with SDM and they were successful. I have configured the mid-tier and able to launch SAS studio/SAS EM. Only validating content server is failing with the mentioned error.

Re: Error validating the SAS Content server

PaulHomes — Thu, 09 Aug 2018 01:05:45 GMT

Just to confirm, on which machines did you use SAS Deployment Manager to import your certs? Did it include the (client?) machine where you are running SAS Management Console to do the validation of the SAS Content Server?

Re: Error validating the SAS Content server

RupaJ — Thu, 09 Aug 2018 13:21:19 GMT

Hi @PaulHomes

Yes, I am launching SASMC from the same server where I imported the certs.

Re: Error validating the SAS Content server

PaulHomes — Fri, 10 Aug 2018 00:13:27 GMT

I that case, if you are running SAS MC on a machine where you have successfully added the CA cert(s) into the SAS Private JRE Trusted CA Bundle then I would expect it to work. I just checked validating the SAS Content Server using SAS MC in my own environment where we have a chain (server>site-intermediate-CA>site-root-CA where both CA's are in the Trusted CA Bundle) and that validated ok:

[10/08/18 9:59 AM] INFO: Starting simple validation for WebDAV server (level 1) - ping
[10/08/18 9:59 AM] INFO: Ping successful!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 1) - Making a connection
[10/08/18 9:59 AM] INFO: Path: 'https://server.sub.example.com:8343/SASContentServer/repository/default/sasfolders/'
[10/08/18 9:59 AM] INFO: Connection successful!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 2) - WebDAV enabled
[10/08/18 9:59 AM] INFO: Server is WebDAV enabled!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 3) - Path existence
[10/08/18 9:59 AM] INFO: Path exists!

In my case I was running SAS Management Console (9.4 M5) on Windows verifying a SAS Content Server on Linux and so the SAS Deployment Manager had been previously used on both Linux and Windows to add the CA certs on both platforms.

I would suggest you double check the CA(s) in your chain are present in your SAS Private JRE Trusted CA Bundle(s). I posted the method I use to confirm this in a blog post: Did I add that CA Certificate to the SAS Trusted CA Bundle?

If that doesn't help locate the source of the problem then I would suggest contacting SAS Technical Support.

Re: Error validating the SAS Content server

RupaJ — Fri, 10 Aug 2018 16:01:44 GMT

Hello @PaulHomes

Thanks much for sharing the article. I do see everything is in place. However still I get the error. I am checking with SAS support.