IWA /Kerberos - SSO - SAS9.4 - Linux Based Env.

[SAS_1001]

Hi,

We are planning to implement IWA in Linux based platform.  Can you pl. illustrate from beginning to the end - what steps we need to implement, pre-requisites, etc.

Thanks in advance !

[AndrewHowell]

To help us help you, can you provide any additional information, such as:

• Single server or multi-machine installation
• What SAS products and/or solutions are you installing?

BTW, have you reviewed the installation documentation on the SAS support page?

[SAS_1001]

Multiple machines
SAS94, Yes we did, reviewed the documentation

[alexal · Accepted solution]

@SAS_1001,

• Integrated Windows Authentication
• How to Configure Integrated Windows Authentication

Please read the documents I mentioned above. If you have specific questions, let me know.

[SAS_1001]

Thank you !

[shoin]

Is QAS needed for SAS9.4TS1M5 on RHEL LAX, 2 machine plus client install, office analytics?  I did search but nothing specific jumps out.  I am certain I read somewhere that QAS was dropped post M3 but not sure where...anyone has an idea?

[PaulHomes]

You can still use Quest Authentication Services but it is no longer required with recent versions of SAS 9.4. From What’s New in SAS® 9.4 > SAS 9.4 Intelligence Platform

In SAS 9.4M2, Integrated Windows Authentication on Linux systems no longer requires the use of Quest Authentication Services. SAS can leverage the libraries that are shipped with the supported operating system or that are provided in most third-party authentication solutions.

I use the standard GSSAPI & Kerberos 5 libraries for my installs - e.g. https://platformadmin.com/blogs/paul/2015/07/active-directory-authentication-for-sas-on-linux-with-r... and https://platformadmin.com/blogs/paul/2015/01/iwa-sas-94m2-linux/

BTW you'd probably get more feedback if you posted something like this as a new topic rather than at the end of an already solved topic.

[shoin]

Thank you! Could we beg, plead, bribe for the updated blog for RHEL based how to? In your blog the OS you used, is it much different exp when following it to setup on RHEL? (Noted your advice, thx again).

[PaulHomes]

Thanks for the enthusiasm! I don't think you have to wait for me to update the blog though as the post on realmd at https://platformadmin.com/blogs/paul/2015/07/active-directory-authentication-for-sas-on-linux-with-r... is still the same method I use today. Whilst I mention CentOS 7.1 in the post I have also used it with RHEL 7.4 and CentOS 7.5.

Try it out and if you have any specific questions post them here (as a new question) and I will respond if I can help. You can post the questions on the blog post too but if you post them here then you may also get responses from other SAS admins with experience in this area.

I'd also encourage you search for and read SAS Global Forum papers on IWA and Kerberos by Stuart Rogers, Heesun Park, Zhiyong Li, Mike Roda etc - they've published lots of essential info on these topics. A good place to start is a search of Lex Jansen's excellent SAS papers archive https://www.lexjansen.com/search/searchresults.php?q=kerberos