topic AUTHDOMAIN issue in Administration and Deployment

AUTHDOMAIN issue

sandeep_reddy — Thu, 13 Apr 2017 07:59:01 GMT

Hello Team,

I am using AuthDomain in one of my libname statement and it is perfectly working from SAS DI user written trasformation,when i run from front end. But the same job when i deploy to batch server it is not working. Saying as invalid credentials in LIbname statement.

Thanks In Advance for your help,

Sandeep

Re: AUTHDOMAIN issue

thesasuser — Thu, 13 Apr 2017 17:51:16 GMT

Authdomain option works in batch mode.
something like this should work
%let idinfo=authdomain= sever=... database=;
in procsql you can use the &idinfo macro

Re: AUTHDOMAIN issue

JuanS_OCS — Fri, 14 Apr 2017 07:39:52 GMT

Hello @sandeep_reddy,

I would recommend you a review of the documentation about Authentication Domains http://support.sas.com/documentation/cdl/en/mcsecug/64770/HTML/default/viewer.htm#aboutum.htm#p18zm6n7c8eketn1ggs2opidsuzk and the "SAS Intelligence Platform: Security Administration Guide".

You will need that, the user that is executing the SAS process, would be registered in the SAS metadata with the right permissions and group memberships to access the Authentication Domain you selected. Plus, the process might need to know on what server/configuration level neecs to connect, in case you have more than 1 configuration level in your server running SAS.

So, additionally to ensure that your OS user (batch user) is registered in your SAS Metadata (with the right permissions and group memberships), to ensure the implicit metadata connection and authentication, you can always add to your code the explicit connection to your metadata in your SAS code:

options metaserver="yourserver.com"                                         
        metaport=8561              
        metauser="your_metadata_user"                                     
        metapass="your_metadata_user_password"     
        metaprotocol=Bridge        
        metarepository=Foundation;

Again, the user will need to be registered in the metadata and with the right group membership. In this case, you could use a internal SAS account or an external OS account.

I hope this helps!

Best regards,

Juan

Re: AUTHDOMAIN issue

thesasuser — Sat, 15 Apr 2017 14:56:52 GMT

Further to what I have said yesterday, the following links

http://blogs.sas.com/content/sasdummy/2010/11/23/five-strategies-to-eliminate-passwords-from-your-sas-programs/

http://support.sas.com/documentation/cdl/en/acreldb/63647/HTML/default/viewer.htm#a003175613.htm

http://support.sas.com/kb/38/204.html