topic Re: Sudo user able to login via Mangement Console in one env but not another in Administration and Deployment

Sudo user able to login via Mangement Console in one env but not another

Mushy — Fri, 08 Dec 2023 23:31:47 GMT

Hello,

We have a local linux user(amlbatch) that can be sudoed by other users.

We have added this user in SMC(in all environmnets) and provided the SASAdmin group with default authentication .

when I login to test environmnment via applications such as EG, SMC or DI via amlbatch, I could login with any password or no password.

when I login to staging environmnment via applications such as EG, SMC or DI via amlbatch, I could NOT login with any password or no password.

could anyone help me in find the reason for this behaviour?

Thanks,

Mushy

Re: Sudo user able to login via Mangement Console in one env but not another

gwootton — Mon, 11 Dec 2023 15:12:57 GMT

Normally, when authenticating to the Metadata Server (as you would when logging in to clients), the supplied credentials are passed from the Metadata Server to the host for authentication by way of the sasauth PAM configuration. It would not use sudo to assume the user's identity as on the host, so it sounds like you may have a different PAM configuration on the test and staging environments. Check the contents of /etc/pam.d/sasauth. You can also test this outside of the clients using PROC PERMTEST and examine the sasauth logs to see what is happening.

Using PROC PERMTEST to diagnose UNIX host authentication issues in SAS® 9.2 and later and in SAS® Viya®
https://sas.service-now.com/csm?id=kb_article_view&sysparm_article=KB0036227

Re: Sudo user able to login via Mangement Console in one env but not another

Mushy — Sat, 16 Dec 2023 18:42:29 GMT

Your answer helped me to fix the problem.