SAS9.4 Metadata Server And Direct LDAP User Authentication

[Eddie305]

My infra colleague ask me about SAS9.4 metadata server configuration with Direct LDAP User Authentication. 

Our system is configure according to the doc https://documentation.sas.com/doc/en/bicdc/9.4/bisecag/n0w8oa3erw568vn192xwf0872npk.htm#n00wxuaqr9ud... 

My colleague is asking what account is being used to perform the ldap query to validate the user account and password during the authentication.

I can't find any technical paper or document to discuss this topic. Can anyone show me the direction? Or have some good explanation? 

[Victor_A]

This URL will take you to the configuration document for direct LDAP authentication.  SAS Help Center: How to Configure Direct LDAP Authentication

Take a look at ...

LDAP_PRIV_DN	The privileged DN that is allowed to search for users (for example, cn=useradmin).
LDAP_PRIV_PW	The password for LDAP_PRIV_DN. You can use the PWENCODE procedure to provide an encoded password.

[Eddie305]

Thank you for your sharing.

Our system uses AD as the provider, so we use AD_HOST, AD_PORT, and AD_TLSMODE in our configuration.

Then our infra colleague asked: under this configuration, which service account is being used to perform the ldap query? Any idea how to respond to them?