topic Re: User not able to connect to SAS Server using IWA in Administration and Deployment

User not able to connect to SAS Server using IWA

vkrishna — Tue, 25 Sep 2018 18:13:52 GMT

Hello all,

SAS programmer not able to connect to SAS windows server using Integrated Windows authentication from SAS EG. I found this error - "The buffers supplied to a function was too small" in SAS Integration technologies configuration connection test with Kerberos authentication. The user recently migrated to a new domain in Active Directory. I have verified the appropriate groups for access and user is able to connect to SQL server to from SQL server management studio. It's working for all other users except this user. I'm not sure how to proceed further. Can someone help me with this?

SAS 9.4 M5 - All-in-one server

Windows Server 2012 R2

System.Runtime.InteropServices.COMException (0x80042002): <connectionAttempts>

<description>The buffers supplied to a function was too small.

</description>

<sassecuritypackage>Kerberos</sassecuritypackage>

<sasprogid>SAS.Workspace.1.0</sasprogid>

</connectionAttempt>

</connectionAttempts>

at SASObjectManager.IObjectFactory2.CreateObjectByServer(String Name, Boolean synchronous, IServerDef pIServerDef, String LoginName, String Password)

at SAS.BI.Itconfig.Library.ServerTests.SASServerTest.CreateConnectionWithObjectFactoryMulti()

at SAS.BI.Itconfig.Library.ServerTests.SASServerTest.CreateConnection()

SAS Enterprise Guide errorSAS Integration Technologies

Re: User not able to connect to SAS Server using IWA

alexal — Tue, 25 Sep 2018 18:26:00 GMT

@vkrishna,

Have you had a chance to check metadata server logs?

Re: User not able to connect to SAS Server using IWA

vkrishna — Tue, 25 Sep 2018 18:38:09 GMT

@alexal, I haven't noticed anything unusual in SAS metadata logs. User connection not reaching the metadata server. You want me to enable the trace login?

Re: User not able to connect to SAS Server using IWA

alexal — Tue, 25 Sep 2018 18:47:58 GMT

@vkrishna,

Thanks for the confirmation. I'm wondering if that user has Windows Defender Credential Guard enabled on his machine or the server?

Re: User not able to connect to SAS Server using IWA

vkrishna — Tue, 25 Sep 2018 20:37:57 GMT

@alexal, we tried with different user machine and if it is related to SAS server it should not work for others too right? I think it might be related to the User profile.

Re: User not able to connect to SAS Server using IWA

alexal — Wed, 26 Sep 2018 11:09:18 GMT

@vkrishna,

I'm wondering if that user has Windows Defender Credential Guard enabled on his machine?

Re: User not able to connect to SAS Server using IWA

vkrishna — Wed, 17 Oct 2018 21:42:10 GMT

Thank You @alexal.

We resolved this access issue. Users active directory profile member of more than 100 groups removing the unnecessary groups resolved the Kerberos authentication issue.