SAS users can not login SAS EV Manager(Administration part) anymore

[Norman]

recently we update our SAS server from sas9.4 TS1M3 to TS1M4, after this, everything are working fine, but the SAS users can not login SAS Ev Manager anymore, SAS EV manager log as follows.

==============================================

 21-09-2017 19:58:14,731 MDT ERROR [SenderThread] [SenderThread@490] Error sending measurements: Unable to contact server @ https://<SAS server name>:7443/lather: java.net.ConnectEx
ception: A remote host refused an attempted connect operation.
org.hyperic.hq.bizapp.client.AgentCallbackClientException: Unable to contact server @ https://<>server_name>:7443/lather: java.net.ConnectException: A remote host refused an att
empted connect operation.
        at org.hyperic.hq.bizapp.client.AgentCallbackClient.invokeLatherCall(AgentCallbackClient.java:176)
        at org.hyperic.hq.bizapp.client.AgentCallbackClient.invokeLatherCall(AgentCallbackClient.java:146)
        at org.hyperic.hq.bizapp.client.MeasurementCallbackClient.measurementSendReport(MeasurementCallbackClient.java:62)
        at org.hyperic.hq.measurement.agent.server.SenderThread.sendBatch(SenderThread.java:457)
        at org.hyperic.hq.measurement.agent.server.SenderThread.sendData(SenderThread.java:645)
        at org.hyperic.hq.measurement.agent.server.SenderThread.run(SenderThread.java:630)
        at java.lang.Thread.run(Thread.java:798)
21-09-2017 19:58:14,731 MDT INFO  [SenderThread] [SenderThread@493] retrying measurement send

========================================================================

any advise ?

[JackMcGuire]

The problem could be with the HTTPS connection. If you are using a CA signed certificate you may need to add the certificate to the Trusted CA Bundle, you can do this using SAS Deployment Manager:

Manage Certificates in the Trusted CA Bundle Using the SAS Deployment Manager

[Norman]

Hi JackMcGuire,

Thanks for your reply. you know, I just confirmed from SAS support that only users who have SAS administrator priviledge can access SAS Environment Manager. it is confused since before update from sas9.4 ts1m3 to m4, all sasusers can access SAS EV Manager.

 so far, the solution is only sas adminstrators can access SAS EV manager.

[angieh]

I'm going to clarify a few things in this thread. There was an update made in SAS 9.4 M4 to fix a security hole for SAS Environment Manager, and as part of that fix, access to the Administration interface within SAS Environment Manager now requires you are a member of either the "Management Console: Advanced" role or "Management Console: Content Management" role. This was done to ensure that if you have access to Management Console plug-ins, you have the same level of access to corresponding functionality in SAS Environment Manager. You should not require membership in the SAS Administrators group for this functionality.



That being said, there is on-going discussion with SAS R&D to enhance this functionality to allow a custom role to assume the same type of privileges. That is not the current state of things however, so for now, you need to ensure users that require access to the Administration interface in SAS Environment Manager are a member of one of the two Management Console roles noted above.



Regards,

Angie (SAS Consulting)

[Norman]

Hi Angieh,

Great@ excellent solution! ! one more question, right now by default, sasusers can see each other after's ID after  login SAS EV managers. I disabled the permisison,  that means sasusers can not see each other's ID  including groups, but if disable the permision to allow to be able to see each other's id, they are not able to login SAS EV Manager again.

any advise, please!

[Norman]

since we are going to ask all sasuser to sychronize password by login SAS EV manager instead of SAS Perosnal Login Manager. we do not  want to allow them to see each others. That would be time consuming for them, we have hundreds of user and groups.