topic Re: The authentication server is not SETUID ROOT in Administration and Deployment

The authentication server is not SETUID ROOT

lanna — Thu, 13 Jul 2017 16:00:24 GMT

Hi,

validating the SAS Server from MC i received the error:

The authentication server is not SETUID ROOT.

I run the setuid.sh utility and restarted the services many times.

I just checked the elssrv sasauth sasperm setuid bit. No error in sasauth-debug.log, sasauth-access.log, sasauth-error.log.

Any suggestions?

Thaks,

Luca

Re: The authentication server is not SETUID ROOT

alexal — Thu, 13 Jul 2017 17:19:14 GMT

@lanna,

This is multi-tier environment or everything has been installed on a single machine? Please start the workspace server directly from Linux console:

/<SASConfig>/Lev<X>/SASApp/WorkspaceServer/WorkspaceServer.sh -nodms

and send to me an output from the following SAS program:

%put %sysget(TKPATH);
%put %sysget(TK_PATHLIST);

Re: The authentication server is not SETUID ROOT

lanna — Thu, 13 Jul 2017 21:43:00 GMT

Hi,

thanks for your time. Yes it is all on same machine.

The command output are:

%put %sysget(TKPATH);

WARNING: The argument to macro function %SYSGET is not defined as a system variable.

%put %sysget(TK_PATHLIST);

/data/software/SASFoundation/9.4/sasexe:/data/software/SASFoundation/9.4/utilities/bin

Thanks,

Luca

Re: The authentication server is not SETUID ROOT

alexal — Thu, 19 Oct 2017 12:37:58 GMT

@lanna,

Thanks for your response. Please do the following:

1) Run /<SASConfig>/Lev<X>/ObjectSpawner/ObjectSpawner.sh stop
2) Edit /<SASConfig>/Lev<X>/ObjectSpawner/ObjectSpawner.sh and add the code shown below right after SCRIPT=`basename $0`:

if [ -n "$TKPATH" ]; then
unset TKPATH
fi

if [ -n "$TK_PATHLIST" ]; then
unset TK_PATHLIST
fi

3) Run /<SASConfig>/Lev<X>/ObjectSpawner/ObjectSpawner.sh start

Re: The authentication server is not SETUID ROOT

lanna — Thu, 13 Jul 2017 22:53:28 GMT

So, see you next problem because this is SOLVED !!

Can you explain me the solution?

Well done, thaks so mutch !

Re: The authentication server is not SETUID ROOT

alexal — Fri, 14 Jul 2017 00:02:23 GMT

@lanna,

You are welcome. When you have these variables, the validation will be performed at a wrong place. That's it.

Re: The authentication server is not SETUID ROOT

SDV — Wed, 18 Oct 2017 21:10:56 GMT

I had to put a semicolon after the ] in order for the syntax to be correct in Linux & bash.