SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

[MariaD]

Hi all,

I'm using SAS 9.2 TSM2 on HP-UX using SAS EG as client application. Currently I'm using LDAP to authenticate access to SAS EG. The Workspace Server is configurated with specific user in Launch Credential (user physically created on Unix), so all process are started with the same user id on server.

This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process. 

I understand it's possible continue to use LDAP for authenticate on SAS EG and create each user in Unix too. So, the Workspace Server will be started using the individual user id. My question are:

1. how to configure the launch credential of SAS Workspace Server to use the user id of each on (previously created on Unix)?
2. how to associate Unix's user id to LDAP user? Do I need to add the correspondence Unix's user id in "Accounts" tab at "User Properties" in SAS MC? If it's, I will have the two logins (LDAP and Unix ID) under "Accounts" tab for each user?

 Thanks,

[alexal · Accepted solution]

@MariaD,

>> This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process.

Check this page:

SAS Usage Note 60428: Associating a client user ID with SAS® Workspace Server logs when using Token .... This is exactly what you need in order to identify who executes each process when you use SAS Token Authentication.

[MariaD]

@alexal

Thanks! This solutions is very interesting. I understand, in order to test it, I can change the mentioned files without restart the services. That is correct?

Regards, 

[alexal]

@MariaD,

That's correct. You just need to restart your EG session.