topic Re: SAS VIYA 3.5 I don't see user under groups in Administration and Deployment

SAS VIYA 3.5 I don't see user under groups

mctrit8 — Thu, 28 May 2020 16:14:28 GMT

Hi,

I have installesd SAS VIYA 3.5 on Linux, now, after I configured sas.identities.providers.ldap.group, I don't see in SAS the user under the groups.

For example I have in LDAP:

but on SAS I don't see the member:

My SAS configuration:

In general: wich objectClass I have to use for users and for groups? Which field for this objextClasses I have to use in SAS configuration? Thanks a lot in advance!

Re: SAS VIYA 3.5 I don't see user under groups

alexal — Thu, 28 May 2020 16:59:02 GMT

@mctrit8 ,

Please check the most recent log file in /opt/sas/viya/config/var/log/identities/default directory. Do you see any errors there?

Re: SAS VIYA 3.5 I don't see user under groups

gwootton — Thu, 28 May 2020 17:59:06 GMT

Hi @mctrit8,

Are you able to see the member users when examining the user list?

Re: SAS VIYA 3.5 I don't see user under groups

mctrit8 — Thu, 28 May 2020 19:42:16 GMT

I verified, no errors in it.

Re: SAS VIYA 3.5 I don't see user under groups

mctrit8 — Fri, 29 May 2020 07:20:11 GMT

Hi,

I can see the users whne I select Users on SAS but when I select Groups on SAS I see the groups but I don't see the member of the groups.

Re: SAS VIYA 3.5 I don't see user under groups

gwootton — Fri, 29 May 2020 17:42:37 GMT

You may wish to engage SAS Technical Support if you haven't already so they can take a look at your settings and LDAP contents.

From your screen shot it looks like linuxgroup is an OU rather than a group DN, which I haven't seen before. (It's distinguished name is OU=... instead of CN=...) but has attributes associated with a group (objecttype of groupofnames, members, and a CN) Which LDAP server are you using?

Re: SAS VIYA 3.5 I don't see user under groups

mctrit8 — Mon, 01 Jun 2020 07:22:39 GMT

Hi,

sorry, I'm new in LDAP and I don't know what is the right object type for groups, I see there are Objectclass= Organizationalunit but this hasn't the member attribute and the Objectclass=groupOfNames that has the member attribute; exctly what is the Object class you say?

I'm using OpenLDAP for server.

Can you give me an example of a simple group in LDAP? Thank you very much.

Re: SAS VIYA 3.5 I don't see user under groups

gwootton — Mon, 01 Jun 2020 13:48:21 GMT

Thanks @mctrit8 ,

Often a OU is created named something like "Groups" that contains the various groups. So you'd have an organizational unit. This is from OpenLDAP's documentation:

Note you have two OUs, Group and People, and one user within the "People" OU (dn: uid=test1,ou=People,dc=example,dc=com), and one group within the "Group" OU (dn: cn=testgroup,ou=Group,dc=example,dc=com) with a "member" defined as the user:

        cat memberof.ldif
        dn: dc=example,dc=com
        objectclass: domain
        dc: example

        dn: ou=Group,dc=example,dc=com
        objectclass: organizationalUnit
        ou: Group

        dn: ou=People,dc=example,dc=com
        objectclass: organizationalUnit
        ou: People

        dn: uid=test1,ou=People,dc=example,dc=com
        objectclass: account
        uid: test1

        dn: cn=testgroup,ou=Group,dc=example,dc=com
        objectclass: groupOfNames
        cn: testgroup
        member: uid=test1,ou=People,dc=example,dc=com

Re: SAS VIYA 3.5 I don't see user under groups

mctrit8 — Mon, 01 Jun 2020 15:00:46 GMT

Hi,

I've tried to structure an LDAP tree as you say:

On SAS-VIYA:

Then I see th user and the group but I don't see the user as member of the group still:

Thank you for the support.

Re: SAS VIYA 3.5 I don't see user under groups

gwootton — Mon, 01 Jun 2020 16:32:24 GMT

Thanks @mctrit8

You may wish to use the steps here to get more detail in the identities service log on the cause of the member list being empty:

Usage Note 61882: Troubleshooting identities and the identities service in SAS® Viya®