topic Re: SAS9.4 Metadata Server And Direct LDAP User Authentication in Administration and Deployment

SAS9.4 Metadata Server And Direct LDAP User Authentication

Eddie305 — Thu, 26 Mar 2026 14:59:38 GMT

My infra colleague ask me about SAS9.4 metadata server configuration with Direct LDAP User Authentication.

Our system is configure according to the doc https://documentation.sas.com/doc/en/bicdc/9.4/bisecag/n0w8oa3erw568vn192xwf0872npk.htm#n00wxuaqr9udn8n1a7y6f83b1oyx

My colleague is asking what account is being used to perform the ldap query to validate the user account and password during the authentication.

I can't find any technical paper or document to discuss this topic. Can anyone show me the direction? Or have some good explanation?

Re: SAS9.4 Metadata Server And Direct LDAP User Authentication

Victor_A — Thu, 26 Mar 2026 18:44:04 GMT

This URL will take you to the configuration document for direct LDAP authentication. SAS Help Center: How to Configure Direct LDAP Authentication

Take a look at ...

LDAP_PRIV_DN	The privileged DN that is allowed to search for users (for example, `cn=useradmin`).
LDAP_PRIV_PW	The password for LDAP_PRIV_DN. You can use the PWENCODE procedure to provide an encoded password.

Re: SAS9.4 Metadata Server And Direct LDAP User Authentication

Eddie305 — Fri, 27 Mar 2026 09:01:44 GMT

Thank you for your sharing.

Our system uses AD as the provider, so we use AD_HOST, AD_PORT, and AD_TLSMODE in our configuration.

Then our infra colleague asked: under this configuration, which service account is being used to perform the ldap query? Any idea how to respond to them?