Architecting, installing and maintaining your SAS environment

How can a user change his SAS profile password

Accepted Solution Solved
Reply
Contributor
Posts: 41
Accepted Solution

How can a user change his SAS profile password

Hi,

 

      I am new to SAS adn I would like to know how a user can change his initial password without the intervention of the SAS Administrator. If the admin has set an initial password, say 'HiWorld123' and if I would like to change it, then how can I do that?

What steps do I need to take to ensure that my login credentials are refreshed properly


Accepted Solutions
Solution
‎02-09-2016 12:05 PM
Regular Contributor
Posts: 170

Re: How can a user change his SAS profile password

[ Edited ]

Do you have the option of setting up PAM authentication so that it's passed on to LDAP or Active Directory?

 

That's how I've always done it. This way you can bypass having to deal with /etc/passwd maintenance.

 

Have users set up in LDAP and given a home directory (in my company I have to work with Unix Admins and Unix Security teams to get this done).  Configure PAM module according to SAS documentation (on the compute/app tier server).

 

Start around page 10:  http://support.sas.com/documentation/installcenter/en/ikfdtnunxcg/66380/PDF/default/config.pdf

View solution in original post


All Replies
Super User
Posts: 17,829

Re: How can a user change his SAS profile password

That's going to depend on your set up quite a bit. In my old work place we logged into the server via Unix and changed our password using passwd.  Then we also had to use SAS Profile Manager to change our password. 

Contributor
Posts: 41

Re: How can a user change his SAS profile password

In our environment, users only have AD profile and they don't have Unix profile. SAS in installed on unix and accessed through windows clients. So they don't have an option to change their unix password. 

Super User
Posts: 5,256

Re: How can a user change his SAS profile password

When you say profile, I'm thinking of the fat SAS clients profiles. There each user has full access and can change passwords whenever they like.

But if you have policies to change the AD passwords quite often, I would set up some kind of IWA functionality, so the users doesn't have to supply their password when logging in.

Data never sleeps
Super User
Posts: 5,256

Re: How can a user change his SAS profile password

Are we talking of Internal Accounts? They can at least be updated in SMC and in Personal Login manager.

What SAS version, and what SAS clients do the users use?

Data never sleeps
Solution
‎02-09-2016 12:05 PM
Regular Contributor
Posts: 170

Re: How can a user change his SAS profile password

[ Edited ]

Do you have the option of setting up PAM authentication so that it's passed on to LDAP or Active Directory?

 

That's how I've always done it. This way you can bypass having to deal with /etc/passwd maintenance.

 

Have users set up in LDAP and given a home directory (in my company I have to work with Unix Admins and Unix Security teams to get this done).  Configure PAM module according to SAS documentation (on the compute/app tier server).

 

Start around page 10:  http://support.sas.com/documentation/installcenter/en/ikfdtnunxcg/66380/PDF/default/config.pdf

Contributor
Posts: 41

Re: How can a user change his SAS profile password

We are using SAS 9.4M3 and No these aren't internal accounts. The users access SAS using their windows AD userids., I mean domain\userid or userid@xyz.com. 

Super User
Posts: 17,829

Re: How can a user change his SAS profile password

If they're using Windows AD then they would change it using the Windows password manager, ie CTRL+ALT+DELETE.

Since you're setting their id and password, rather than just adding them to a user list that means that they likely have an ID of a different kind as well to access the server

Contributor
Posts: 41

Re: How can a user change his SAS profile password

Hi Reeza,

          This is how I am trying to add a user. Do you mean I have to give their windows AD password in the password field, and if they change their AD login password, will it change the password that is set in SMC as well?

          SAS snip.JPG

Regular Contributor
Posts: 170

Re: How can a user change his SAS profile password

As LinusH said, you can set up IWA to be compatible with your Unix servers.  See this document: http://support.sas.com/documentation/cdl/en/bisecag/63082/HTML/default/viewer.htm#n1d1zo1jsf2o0en1eh...

 

It's nice if users have to change password every 30 days or so, but I think setup is more complicated and likely involves third-party software (like Quest Authentication Services).

 

IMHO, it's alot easier to set up PAM authentication.  Users would have to change password in their EG profile when they change their network password, though.

Contributor
Posts: 41

Re: How can a user change his SAS profile password

Timmy,

    SAS Setup was already done and I am not sure if they are ready to accept implementing the alternate authentication mechanisms. Please let me know how a user can change his password once he changes his AD password/network password. 

Super User
Posts: 17,829

Re: How can a user change his SAS profile password

[ Edited ]

Ask somoene in your workplace, even a previous user can probably tell you. I'd be surprised if you don't have it documented in an user guide somewhere, unless you're just rolling out.

 

As mentioned there's no one specific way, because there are multiple ways to set up your environment.  If that doesn't work, contact SAS tech support and open a ticket.

Regular Contributor
Posts: 170

Re: How can a user change his SAS profile password

Yea, I'm not sure there is any way to sync the two without either having some third-party software that does it or just using alternate authentication method. The whole point of such alternate methods is to bypass having to manage the local /etc/passwd.

Setting up PAM is pretty easy. The SAS documentation is very precise.

If you have a Test environment then it might be worth reading over the SAS documentation and testing it out.

Sorry I can't be of more help.
Contributor
Posts: 41

Re: How can a user change his SAS profile password

Thanks for your help Reeza and Timmy. Will try to test the PAM authentication. Thanks for your time

Regular Contributor
Posts: 170

Re: How can a user change his SAS profile password

My pleasure. Good luck!
☑ This topic is SOLVED.

Need further help from the community? Please ask a new question.

Discussion stats
  • 14 replies
  • 807 views
  • 0 likes
  • 4 in conversation