sandeep_reddy Tracker

How to use encrypt=true option in JDBC URL in SAS JVM

sandeep_reddy — Wed, 02 Apr 2025 04:13:19 GMT

Hi there,

I am exploring encrypt=true option in JDBC URL in SAS JVM's for example SASServer1_1.

I am using below option in server.xml file but it fails to start.

url="jdbc:oracle:thin:@server:port/servicename" encrypt="true" user="EVMSID" .

we are not licensed to SAS ACCESS interface to JDBC, so, question here is , is JDBC connections are secure apart from relying on drivers?

How to set other security properties in JDBC URL's in SAS server.xml files?

Thanks in Advance,

Sandeep

HTTP Header Errors on port 8443

sandeep_reddy — Mon, 02 Sep 2024 01:41:05 GMT

Dear Members,

We have enabled reverse proxy and confugured internal proxies in server.xml in SASServer1_1 JVM's.

However, we are notifying by security team that, HTTP headers are missing on ports 8443, we have configured 8443 port for SASServer1_1 JVM as bio.https.port.

We have two web servers configured under F5 load balancer and still we use webservers to redirect the traffic.

If i implement this under server.xml file would resolve this issue

Any inputs in remediating the problem is highly appreciated. Thanks in Advance.

How to update ExternalIdentifier of a user in sas Management console through code

sandeep_reddy — Wed, 03 Jul 2024 05:45:28 GMT

Hi There,

I need to delete externalidentifier of all users which are in SAS Metadata mentioned in MDUCHGVERRORS table.

After that i need to update externalidentifiers of all users which are in MDUCHGVERRORS to SAS Metadata of users.

Manually updating for 500 users is a hectic task and i tried to skip the comparison between AD and Metadata but not helping.

Best Regards,
Sandeep

SAS WebApplication Server DB connections

sandeep_reddy — Tue, 21 Nov 2023 05:57:54 GMT

Hello Everyone,

I need your suggestion in monitoring the slowness from WebApplication servers, particulalry with SASServer1_1 and SASServer8_1 JVM's.

We have resource crunch at DB side, when this happens JVM's are slow and at times not responding to any user requests.

Well, this is a know issue for us, but the question here is , when this happens , the JDBC connections which are already connected to DB should be closed after sometime. These sessions are not getting closed automatically , i need to restart the JVM's to resolve this issue.

Any suggestions to close this sessions without restarting the JVM would be highly appreciated.

Thanks In Advance,

Sandeep

SAS FRAUD MANAGEMENT V61

sandeep_reddy — Tue, 28 Jun 2022 01:42:44 GMT

Hi Team,

I have an customised xml file in SAS FM V6.1 solution and i need to change a condition in my xml file.

<constructor-arg value="Some.Variable" name="key"/>

<constructor-arg value != null name="values"/>

</bean>

I need to check for a variable is not null condiiton in xml file. Is above approach works? Please suggest

Thanks & Regards,
Sandeep

Re: Solr version upgrade from 5.5.5 to 8.6.2

sandeep_reddy — Wed, 10 Nov 2021 22:10:17 GMT

Hi Elizabeth,

I have raised already one but not helping much. My platform version is 9.4M3 which runs on java version 1.7 and solr 8.6.2 requires Java version 1.8.

We have configured separate Java version which is independent to platform SAS version and installed solr 8.6.2. We have verified in apache site regarding attachments and to see the attachments we need to configure another API in solrconfig.xml file, which we are exploring right now.

I am wondering how SAS9.4M6 is integrating with Solr8.6.2 version for attachments.

We still stuck at SASVersionedjavarepositorie calss files, if this is causing an issue or really we require API to be configured.

Thanks in Advance,

Sandeep

Solr version upgrade from 5.5.5 to 8.6.2

sandeep_reddy — Mon, 08 Nov 2021 02:28:54 GMT

Hi Team,

We use solr search in ECM as global search.

We have upgraded solr from 5.5.5 to 8.6.2 version and we are on SAS 9.4M3 version where it uses Java 1.7. We have configured separate Java for solr 8.6.2 which was 1.8 version.

Almost upgrade was successfull and jobs did index on almost all datasets, however, we have found that attachments were missing when we searach a case/CDD cases under SAS ECM.

Please let us know what we have done wrong/ any jars/json files were missing as part of this upgrade.

Thanks in Advance,

Sandeep

Re: gemfire error - Error creating bean with name 'sas_gemfire_cache'

sandeep_reddy — Tue, 30 Mar 2021 00:29:55 GMT

Hi Hacko,

Can you please let me know which hotfixes tech support has suggested.

I am facing this issue while restarting the JVM's and not able to register with gemfire distributed members on time.

Many Thanks In Advance,

Sandeep

Solr with SSL

sandeep_reddy — Thu, 18 Feb 2021 06:33:15 GMT

Hi Team,

I have upgraded solr from 5.5.5 to 8.6.2 version. The unsecured version of this upgrade is working as expected.

Whereas, when i configure solr with SSL i am getting below errors. Solr-8.6.2 is expecting java8 version and i have downloaded from Oracle with open jDK "jdk1.8.0_281" .

The configured SSL's are working fine with 5.5.5 but not with 8.6.2.

Solr.log stops after the below step

INFO (main) [ ] o.e.j.u.s.SslContextFactory x509=X509@15cea7b0(168752868709204338503839cn=xxxxxxxxx, o=xxxxxxxxxx, l=xxxx, st=xxx, c=xxcn=xx internal issuing ad ca - xxx p01, dc=xxx, dc=xxx, dc=com, dc=au,h=[xxxxxxxxxxxxxxxxxxxxxxxxx],w=[]) for Server@29c5ee1d[provider=null,keyStore=file:///truststore.jks,trustStore=file:///truststore.jks]

I am not sure what is this W for and its value is coming as null.

java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
at org.eclipse.jetty.start.Main.start(Main.java:491)
at org.eclipse.jetty.start.Main.main(Main.java:77)
Caused by: java.lang.NullPointerException
at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1234)
at org.eclipse.jetty.util.ssl.SslContextFactory$Server.getKeyManagers(SslContextFactory.java:2260)
at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:321)
at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.server.Server.doStart(Server.java:385)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.xml.XmlConfiguration.lambda$main$1(XmlConfiguration.java:1924)
at java.security.AccessController.doPrivileged(Native Method)
at org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1873)
... 7 more
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

Kindly share any ideas to resolve this issue.

Thanks In Advance,
Sandeep

Re: Starting SAS VA services through code

sandeep_reddy — Wed, 01 Jul 2020 23:45:15 GMT

Dear All,

Thanks for your reply.

I tried suggested "options" statement while running from Foundation and sasbatch, still issue is same.

When I did strace on PID, I am getting "connection timed" out continuously.

The code which executed in Workspace server successfully is doing nothing(no lines in log) in foundation and sasbatch. I am confused here.

How to debug above error?

Best Regards,
Sandeep

Starting SAS VA services through code

sandeep_reddy — Wed, 01 Jul 2020 07:14:46 GMT

Hi Team,

I am trying to start VA services through code line.

I am trying to run a program and failed with base sas.

/path/to/sas restart.sas . This program is getting timed out and failing in starting the services.

But, when i do from ./Workspaceserver.sh -nodms and run the same code, I am able to running an start the services successfully.

/* Start the LASR server process in the cluster */
proc lasr create PORT=10053
path="/opt/sas/sigfiles"
signer="https://hostURL:3443/SASLASRAuthorization"
tablemem=80
logging
(
PATH = "/opt/sas/Logs"

)
;
performance host="firstnamenode" nodes=ALL
install="/opt/sas/TKGrid"
;
run;

Please hep me to run the same code in background like integrating in batch.

Best Regards,
Sandeep

Re: SAS LASR Monitor Process is failing

sandeep_reddy — Wed, 17 Jun 2020 04:01:03 GMT

Hi Anand,

Thanks for the information.

I have set SSH keys manually and copied to all nodes.

I am getting the expected SSH output without any errors ,after running /opt/TKGrid/bin/simsh /opt/TKGrid/bin/simsh hostname.

Attached is the latest error after adding GRIDSHCOMMAND in sasv9_local.cfg file.

Best Regards,
Sandeep

SAS LASR Monitor Process is failing

sandeep_reddy — Wed, 17 Jun 2020 02:58:54 GMT

Hi Team,

I am getting below error while starting LASRMonitor process from SAS Compute node and the error details are below.

java.io.IOException
at com.sas.grid.broker.monitor.ConnectionManager.startTKGridMon(ConnectionManager.java:247)
at com.sas.grid.broker.core.BrokerCore.main(BrokerCore.java:267)

[ERROR@2020-06-17 11:42:41.618] Monitor thread failed to start due to configuration errors.
[ERROR@2020-06-17 11:42:41.619] No I/O produced by the grid monitor, check your SSH key configuration

I have resolved all SSH related issues and i am able to login to main node without password and vice versa to compute node from main node.

Please help me to resolve this issue or any help to understand more about this issue.

Best Regards,
Sandeep

Solr Encrption and authentication

sandeep_reddy — Wed, 12 Feb 2020 04:22:15 GMT

Hi Team,

We have installed Solr and integrated to SAS ECM 6.3.

We have secured the solr with ssl and enabled authentication. No URL of solr is allowed without credentials and it is a BASIC Authentication.

After enabling authentication, Solr search is not showing in ECM screen. Below is the error.

org.apache.solr.client.solrj.impl.HttpSolrServer$RemoteSolrException: Expected mime type application/octet-stream but got text/html. <html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>Error 401 Unauthorized</title>
</head>
<body><h2>HTTP ERROR 401</h2>
<p>Problem accessing /solr/EntCaseMgmtCollection/admin/ping. Reason:
<pre> Unauthorized</pre></p><hr><i><small>Powered by Jetty://</small></i><hr/>

</body>
</html>

Solr URL is updated in SMC under ECM property. Can someone please suggest me how to pass the credentials to Solr URL.

Thanks In Advance,

Sandeep

Re: CLOSE_WAITS increase causing WEBAPP server latency

sandeep_reddy — Wed, 30 Oct 2019 01:14:43 GMT

Hello,

Thanks a lot for your response.

All the limits in /etc/sysctl.conf has been modified to highest number to handle the load.

net.ipv4.tcp_max_syn_backlog: 4096

net.core.somaxconn:6000

net.core.netdev_max_backlog:3000

net.ipv4.tcp_keepalive_time=300
net.ipv4.tcp_keepalive_intvl=60
net.ipv4.tcp_keepalive_probes=20
net.ipv4.tcp_fin_timeout=30
net.core.netdev_max_backlog=3000

What surprises me is that, WebServer has already send ACK to Load balancer for close request. I could see in ssl webserver logs as POST /SASLogon/ClearPass entries.

Even my TCP dump output shows the same. But still my Webserver is not able to reuse/clear the unused sockets and it seems it is still waiting for something(Unknown).

We have 300 users and 6 JVMS with 16GB heap memory. I am not sure where this bottleneck exists.

Thanks & Regards,
Sandeep

Re: CLOSE_WAITS increase causing WEBAPP server latency

sandeep_reddy — Fri, 25 Oct 2019 00:24:22 GMT

Hello,

I have opened a SAS track and below is the update.

1) After investigating on tcp dump and webserver worker threads SAS support asked us to upgrade the WebServer 2.2 to 2.4

2) We have done the same and observing the same behavior.

Any small suggestions in fine tuning as well, happy to test in my environments. Need a direction to close this issue.

Best Regards,
Sandeep

Re: CLOSE_WAITS increase causing WEBAPP server latency

sandeep_reddy — Mon, 14 Oct 2019 10:04:51 GMT

Hello,

This is on Unix and SAS Version 9.4 M3.

Warm Regards,

Sandeep

CLOSE_WAITS increase causing WEBAPP server latency

sandeep_reddy — Mon, 14 Oct 2019 06:38:42 GMT

HI Team,

I am facing issues with CLOSE_WAITS in Web Server. Whenever, i see this number incraeses to > 50 WebAppServer latent/stops responding to the requests.

We have JVM heap memory setting to 16GB and garbage collection is enabled. Initially we suspect that GC is causing this issue but not enough evidences too prove the same.

My Webserver version is 2.2. Please let me know , what are the reasons of increasing this close_waits number.

Best Regards,
Sandeep

Re: WEB Server Upgrade from 2.2 to 2.4

sandeep_reddy — Mon, 14 Oct 2019 05:06:27 GMT

Hi Anand,

Thanks Very Much for your reply.

I have replicated the issue and in our F5 load balancer there was a null host header.

I have asked my network team to assign a value for host and the issue is resolved now.

Thanks & Regards,
Sandeep

WEB Server Upgrade from 2.2 to 2.4

sandeep_reddy — Fri, 11 Oct 2019 01:10:38 GMT

Hello All,

Recently I have upgraded SAS Webserver from 2.2 to 2.4 version and I am getting below issues.

client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23):

2) We have configured Load Balancer before it hits to the Web server . I have kept backup of 2.2 version and when i start the service from 2.2, I am not getting above issue.

3) I have configured all SSL certificates in place.

4) The upgraded version is not able to detect the Load balancer request but able to grant if it is a direct hostname URL.

Please let me know in which i can update the known host details if a connection coming through Load balancer

Thanks in Advance,

Sandeep