topic Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer in Administration and Deployment

SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

MariaD — Wed, 14 Jun 2017 16:35:26 GMT

Hi all,

I'm using SAS 9.2 TSM2 on HP-UX using SAS EG as client application. Currently I'm using LDAP to authenticate access to SAS EG. The Workspace Server is configurated with specific user in Launch Credential (user physically created on Unix), so all process are started with the same user id on server.

This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process.

I understand it's possible continue to use LDAP for authenticate on SAS EG and create each user in Unix too. So, the Workspace Server will be started using the individual user id. My question are:

how to configure the launch credential of SAS Workspace Server to use the user id of each on (previously created on Unix)?
how to associate Unix's user id to LDAP user? Do I need to add the correspondence Unix's user id in "Accounts" tab at "User Properties" in SAS MC? If it's, I will have the two logins (LDAP and Unix ID) under "Accounts" tab for each user?

Thanks,

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

alexal — Wed, 14 Jun 2017 17:26:45 GMT

@MariaD,

>> This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process.

Check this page:

SAS Usage Note 60428: Associating a client user ID with SAS® Workspace Server logs when using Token Authentication. This is exactly what you need in order to identify who executes each process when you use SAS Token Authentication.

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

MariaD — Wed, 14 Jun 2017 18:00:14 GMT

@alexal

Thanks! This solutions is very interesting. I understand, in order to test it, I can change the mentioned files without restart the services. That is correct?

Regards,

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

alexal — Wed, 14 Jun 2017 18:14:34 GMT

@MariaD,

That's correct. You just need to restart your EG session.