BookmarkSubscribeRSS Feed
🔒 This topic is solved and locked. Need further help from the community? Please sign in and ask a new question.
vamsikrishna
Fluorite | Level 6

Hi all,

 

1. How can I know that Object spawner service running as a Local system or it is running under a service level account?. 

2. How to configure SPN's if object spawner running under a service level account.

 

Version: SAS9.4 M3 

Windows server

 

 

Any suggestions..

 

Thanks,

Vamsi

1 ACCEPTED SOLUTION

Accepted Solutions
ChrisHemedinger
Community Manager

The instructions for defining the connection profile to EG users is in this doc.

 

More about IWA and SPNs is in this admin doc.  Pay special attention to the requirement for "Trust for Delegation", necessary for the user auth to make the additional network hop from SAS to SQL Server.  Details on how to do that are here (same doc, different topic).

It's time to register for SAS Innovate! Join your SAS user peers in Las Vegas on April 16-19 2024.

View solution in original post

4 REPLIES 4
SASKiwi
PROC Star

Logon to your server and open Task Manager. Open the Details tab and look for OBJSPAWN.EXE. Under the User Name column it will either say SYSTEM or the actual account the service is run under.

 

Regarding SPNs, I'll leave that up to more knowledgeable contributors.

vamsikrishna
Fluorite | Level 6

Got it. Thanks @SASKiwi. Do you have any idea how to register custom SPN's for SQL server service account?

We are trying to use IWA while connecting to SQL databases from SAS EG.

ChrisHemedinger
Community Manager

The instructions for defining the connection profile to EG users is in this doc.

 

More about IWA and SPNs is in this admin doc.  Pay special attention to the requirement for "Trust for Delegation", necessary for the user auth to make the additional network hop from SAS to SQL Server.  Details on how to do that are here (same doc, different topic).

It's time to register for SAS Innovate! Join your SAS user peers in Las Vegas on April 16-19 2024.
SASKiwi
PROC Star

As far as I'm aware you don't need SPNs.  To connect from SAS to SQL Server we just specify IWA in the database connection string like so:

 

proc sql;
 connect to odbc (noprompt = "server=MyServerName;DRIVER=SQL Server;Trusted Connection=yes;");
  create table Want  as 
  select * from connection to odbc
  (---- Put your SQL Server query here
   )
  ;
  disconnect from odbc;
quit;

As long as you log on to SAS with the service account then the  - Trusted Connection=yes - option does the authentication with the database.

 

If you talking about EG connections to SAS using IWA then indeed SPNs may be involved as @ChrisHemedinger describes.

suga badge.PNGThe SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment. 

Join SUGA 

CLI in SAS Viya

Learn how to install the SAS Viya CLI and a few commands you may find useful in this video by SAS’ Darrell Barton.

Find more tutorials on the SAS Users YouTube channel.

Discussion stats
  • 4 replies
  • 1186 views
  • 5 likes
  • 3 in conversation