topic Re: Run SAS 9.4 Object Spawner under a different account on Linux in Administration and Deployment

Run SAS 9.4 Object Spawner under a different account on Linux

bheinsius — Thu, 01 Aug 2019 15:17:41 GMT

Hi,

We installed SAS Grid 9.4 with an Active Directory (AD) installer account on Linux.

We are having issues with AD accounts on Linux, it is causing problems where SAS sessions sometimes fail to start due to AD integration issues.

We changed our Stored Process Server launch credentials from AD to Linux local accounts and that solved most STP problems.

Can we do the same for the SAS Object Spawner?

Regards,

Bart

Re: Run SAS 9.4 Object Spawner under a different account on Linux

Kurt_Bremser — Thu, 01 Aug 2019 15:22:45 GMT

STP's are usually started with the sassrv account, while the object spawner itself is started from the SAS installer account. IMO both should be local.

Re: Run SAS 9.4 Object Spawner under a different account on Linux

thesasuser — Thu, 01 Aug 2019 15:32:48 GMT

In principle Yes.

Re: Run SAS 9.4 Object Spawner under a different account on Linux

bheinsius — Thu, 01 Aug 2019 15:36:45 GMT

I am sorry I was not clear.

The installation has been done with the AD account and is a fact.

So all files are owned by the AD account.

Because of the issues I want to create a new local account and have the Object Spawner run under that account.

My question is if that is supported.

Changing ownership of install files is not supported so i learned from SAS.

Re: Run SAS 9.4 Object Spawner under a different account on Linux

Kurt_Bremser — Thu, 01 Aug 2019 15:52:02 GMT

You can only try it. The new user needs to have write access to the same locations where the install user has (logs, pid files).

The changeover to the executing user (sassrv or the logged-in user in case of workspace servers) is handled as root anyway.

Re: Run SAS 9.4 Object Spawner under a different account on Linux

SimonDawson — Thu, 01 Aug 2019 20:00:00 GMT

If you /etc/nsswitch.conf has files ahead of whatever mechanism is doing your AD integration you can simply make a local account with the same name, uid, gid setup and the local Linux account will "shadow" the account from the AD, things will work from the SAS side without any modification at all.

For your Linux system administrators this should be dead simple for them to setup.

Re: Run SAS 9.4 Object Spawner under a different account on Linux

bheinsius — Sun, 18 Aug 2019 20:56:29 GMT

I tried it and I experience no problems.

Guess it works then.