topic Re: Permissions issue - Setting up VA in SAS Visual Analytics

Permissions issue - Setting up VA

SarathP — Tue, 02 Oct 2018 14:54:45 GMT

Re: Permissions issue - Setting up VA

FredrikE — Wed, 13 Jun 2018 06:12:57 GMT

Looks like the authorization is wrong for the user you are using:

I think the physical path (/kms/warehouse/default/vaautoload/VALIBLA/Logs) have wrong permissions or the libname in metadata.

I would start with the physical path and grant rwxrwxrwx to test it.

If that doesn't work I would grant RM, WM, R, W to the libname (for SASUSERS) and test again.

//Fredrik

Re: Permissions issue - Setting up VA

JuanS_OCS — Wed, 13 Jun 2018 07:39:47 GMT

Hi @SarathP,

it brings my attention the fact that METAUSER variable is empty (and I guess password would be empty too).

Filename=/sso/biconfig/940/Lev1/Applications/SASVisualAnalytics/VisualAnalyticsAdministrator/Monitoring/PIDs/autoload_VisualAn

      alyticsLASR.pid,

      Owner Name=lasradm,Group Name=kmsuser,

      Access Permission=-rw-rw-rw-,

      Last Modified=06Jun2018:15:00:03

I see you are running the job with the OS user lasradm (and it is part of a certain group).

I suppose lasradm is part of several groups (1 primary and several secondary groups) and kmuser is the primary group... but the "sas" group should be its primary OS group. Can you ensure this?

Also, I expect lasradm should be a SAS (metadata) user, or an account for a SAS (metadata) group. If not, please do so.

And a couple of counsiderations:

If lasradm is a SAS user, then it should be able to run.
If lasradm is an account in a SAS group (and you need the password written in this account), then, you would need to schedule the autoload not with lasradm, but with a SAS (metadata & OS) user that is part of this group. The reason is that group accounts in metadata are not allowed to log in to the SAS metadata, because of good reasons: which user would it be? Accounts in groups are more commonly named outbound connections.

As last tip: while not a best practice and not supported by SAS Technical Support (bear this in mind), you can always overrule the default connection to metadata in the Autoload script (SAS Code), by providing yours

options metapass="sasuser1"
        metaport=8561
        metarepository="Foundation"
        metaserver="a123.us.company.com"
        metauser="myuserid";

http://documentation.sas.com/?docsetId=lrmeta&docsetTarget=n03ph3v01d4e7en1n0v7wm8o3yiu.htm&docsetVersion=9.4&locale=en

Then, you can control the OS user that runs towards the filesystem, and the SAS user that connects to the metadata folders, and control the permissions on the folders on each system (Linux and SAS)

Hope it helps.

Re: Permissions issue - Setting up VA

SarathP — Tue, 02 Oct 2018 15:01:46 GMT

Re: Permissions issue - Setting up VA

SarathP — Tue, 02 Oct 2018 15:02:17 GMT

Re: Permissions issue - Setting up VA

JuanS_OCS — Wed, 13 Jun 2018 08:29:37 GMT

ok, it is good @SarathP. Did you had the chance to check all the others items as recommended above by @FredrikE and myself?

Case this is out of your skills scope/payroll, I would like to advise you to contact SAS (Technical Support, Consulting services or a especialized partner), so they can help you in.

Re: Permissions issue - Setting up VA

alexal — Wed, 13 Jun 2018 11:02:53 GMT

@SarathP,

Please run these two commands and show me the output:

ls -ld /kms/warehouse/default/vaautoload/VALIBLA/Logs/autoload.sas7bdat
id <ID_OF_THE_USER_WHO_STARTS_RUNSAS.SH>

Re: Permissions issue - Setting up VA

FredrikE — Wed, 13 Jun 2018 11:03:43 GMT

I rather sure it is a base libname 🙂

NOTE: Libref DBLOG was successfully assigned as follows:

Engine: BASE

Physical Name: /kms/warehouse/default/vaautoload/VALIBLA/Logs

Check the physical path (/kms/warehouse/default/vaautoload/VALIBLA/Logs) or the libname DBLOG in metadata.

//Fredrik

Re: Permissions issue - Setting up VA

SarathP — Tue, 10 Jul 2018 04:13:23 GMT

ls -ld /kms/warehouse/default/vaautoload/VALIBLA/Logs/autoload.sas7bdat

-rw-r--r--. 1 kmsowner sasapp 131072 Jul 9 10:15 /kms/warehouse/default/vaautoload/VALIBLA/Logs/autoload.sas7bdat

id lasradm

uid=784(lasradm) gid=604(kmsuser) groups=604(kmsuser),602(sasapp

Re: Permissions issue - Setting up VA

SarathP — Tue, 10 Jul 2018 04:17:44 GMT

Where to fine DBLOG Library? is it in SMC...

Re: Permissions issue - Setting up VA

alexal — Fri, 13 Jul 2018 12:21:56 GMT

@SarathP,

Change the ownership information on that file:

sudo chown lasradm:lasradm /kms/warehouse/default/vaautoload/VALIBLA/Logs/autoload.sas7bdat

Then try to start the autoloading again.