topic Re: Reset the SAS Installer Account in Administration and Deployment

Reset the SAS Installer Account

japsas100 — Wed, 06 Jan 2021 22:54:11 GMT

Hello,

As per the auditing requirement, we need to change the sas external account (sas installer account: sas) password on the regularly basis.

Is this ok to change the installer account password on regularly basis? Can you please also share the steps, we are using unix env.

Re: Reset the SAS Installer Account

SASKiwi — Thu, 07 Jan 2021 00:47:33 GMT

Best practice is for the SAS installer account to be used for installing and configuring SAS software only. If this is how you use it I don't see any problem with resetting it regularly.

On the other hand, if you are using it for any SAS server processes however changing it on a regular basis would be problematic. The SAS Deployment Manager provides a way of resetting certain SAS service accounts' passwords but it isn't foolproof.

Re: Reset the SAS Installer Account

AnandVyas — Thu, 07 Jan 2021 01:07:53 GMT

Hi @japsas100

You can reach out to IT to reset the password based on if it's a local or LDAP account. As long as it's used only for start/stop SAS services, owning the config/home directories/files and NOT a part of SMC it should not be a problem to change the password.

Re: Reset the SAS Installer Account

Mahe001 — Fri, 29 Jan 2021 09:41:11 GMT

Yes, It is okay to change the password for the installer accounts. Just remember, if you are on a grid environment, use the same password on all the servers. And if the requirement is to be done on a regular intervals, keep a pattern so that you would not mess up remembering. Coming to frequency- you can change it frequently like once in a month. And for the point- How to change, you can do it as easily as u do for any other user on a Linux server using the command- passwd . Hope this is useful.

Re: Reset the SAS Installer Account

sandeeppajni2 — Tue, 02 Feb 2021 22:15:29 GMT

Hi @japasas100,

You can get set a policy to use SAS account only with the sudo access to it. This is how it would be easier adhere to the auditing requirements, without changing the SAS account password, but just with changing your account passwords.