topic Re: SSO after Upgrade to 9.4 M5 in SAS Visual Analytics

SSO after Upgrade to 9.4 M5

kkhelif — Fri, 23 Feb 2018 14:15:01 GMT

Hi all,

We just finished upgrading our SAS tiers to 9.4 M5 and we lost our SSO. We get a logon page displayed now even though we had it configured prior to this upgrade.

Does anybody know what config files got overwritten with the new ones. I remember we did a whole bunch way back.

We have Meta and Mid on one server - OA/Compute on another server and VA/Compute on another

Thanks

Re: SSO after Upgrade to 9.4 M5

JuanS_OCS — Fri, 23 Feb 2018 14:17:08 GMT

Hello @kkhelif,

it depends on your SSO configuration. For SSO with IWA, please read: http://documentation.sas.com/?docsetId=bisecag&docsetTarget=n1d1zo1jsf2o0en1ehu4c4simfky.htm&docsetVersion=9.4&locale=en

Re: SSO after Upgrade to 9.4 M5

alexal — Fri, 23 Feb 2018 14:18:44 GMT

@kkhelif,

This is correct link if you are talking about web SSO:

http://go.documentation.sas.com/?docsetId=bimtag&docsetTarget=n1bhp608f0hsoen10i1vi0p9l5f7.htm&docsetVersion=9.4&locale=en#p0om6ml5m87to3n1f7d61uudt267

Re: SSO after Upgrade to 9.4 M5

kkhelif — Fri, 23 Feb 2018 14:27:35 GMT

Our SSO/IWA

Thanks guys for the links I already looked at those. our HTTPS work but we get the login screen now instead of using windows authentication and no Logon.

I should have written down all the files we modified for Single Sign on. I am sure they got all overwritten with the M5 upgrade.

Re: SSO after Upgrade to 9.4 M5

alexal — Fri, 23 Feb 2018 14:30:11 GMT

@kkhelif,

All of the files are listed on these pages. Maybe you did a backup before an upgrade?

Re: SSO after Upgrade to 9.4 M5

kkhelif — Fri, 23 Feb 2018 14:34:55 GMT

Our Production environment is not upgraded yet.. I can look at that and compare.

We did take a snapshot of all 3 tiers in DEV before upgrade. I will try to look at the differences

Re: SSO after Upgrade to 9.4 M5

kkhelif — Fri, 23 Feb 2018 19:00:11 GMT

So I finally got it working again after upgrade and the documentation link is not even close to what we have.

We use SPN/Kerberos/Keytab

So here are the files I ended up modifying as they got overwritten and even the folder content got overwritten.

\SAS\Config\Lev1\Web\WebAppServer\SASServer1_1\conf\Catalina\localhost\SASLogon.xml

\SAS\Config\Lev1\Web\WebAppServer\SASServer1_1\conf\jaas.config

krb5.ini was deleted from the directory structure

and I have done the same for SASServr2_1 andASServer12_1

Thanks to all that responded.