Architecting, installing and maintaining your SAS environment

SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

Accepted Solution Solved
Reply
Contributor
Posts: 69
Accepted Solution

SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

Hi all,

 

I'm using SAS 9.2 TSM2 on HP-UX using SAS EG as client application. Currently I'm using LDAP to authenticate access to SAS EG. The Workspace Server is configurated with specific user in Launch Credential (user physically created on Unix), so all process are started with the same user id on server.

 

This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process

 

I understand it's possible continue to use LDAP for authenticate on SAS EG and create each user in Unix too. So, the Workspace Server will be started using the individual user id. My question are:

 

  1. how to configure the launch credential of SAS Workspace Server to use the user id of each on (previously created on Unix)?
  2. how to associate Unix's user id to LDAP user? Do I need to add the correspondence Unix's user id in "Accounts" tab at "User Properties" in SAS MC? If it's, I will have the two logins (LDAP and Unix ID) under "Accounts" tab for each user?

 

 Thanks,


Accepted Solutions
Solution
‎06-14-2017 04:33 PM
SAS Employee
Posts: 284

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

@Natalia,

 

>> This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process.

 

Check this page:

SAS Usage Note 60428: Associating a client user ID with SAS® Workspace Server logs when using Token .... This is exactly what you need in order to identify who executes each process when you use SAS Token Authentication.

View solution in original post


All Replies
Solution
‎06-14-2017 04:33 PM
SAS Employee
Posts: 284

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

@Natalia,

 

>> This configuration is easy to manteinace but has a big problem: it's not easy to identify who executes each process.

 

Check this page:

SAS Usage Note 60428: Associating a client user ID with SAS® Workspace Server logs when using Token .... This is exactly what you need in order to identify who executes each process when you use SAS Token Authentication.

Contributor
Posts: 69

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

@alexal

 

Thanks! This solutions is very interesting. I understand, in order to test it, I can change the mentioned files without restart the services. That is correct?

 

Regards, 

SAS Employee
Posts: 284

Re: SAS 9.2: LDAP to authenticate SAS EG and Unix's user ID to connect with WorkspaceServer

@Natalia,

 

That's correct. You just need to restart your EG session.

☑ This topic is solved.

Need further help from the community? Please ask a new question.

Discussion stats
  • 3 replies
  • 153 views
  • 0 likes
  • 2 in conversation