Betreff: user ID or password is not valid SAS EG

[Thala]

Executing 

/.../SASHome/SASFoundation/9.4/utilities/bin/setuid.sh

from root user helped pass the authentication without any error.

[jcFranklin]

Did you ever run the PROC PERMTEST? If so, check the logs that you enabled. What do you see in the logs? That should help point to where the failure is occurring. 

[sathya66]

Sorry I was away from Work.

Yes, we did. We are getting Access denied ERROR. see below 

  1? proc permtest;

  2? run;

Authentication Test

Enter userid:

testuser

Enter password:

NOTE: Access denied.

ERROR: Access denied.Authentication failed.

Sasauth-debug.log-

20210205-12:42:04 Adding auth method pw

20210205-12:42:04 Initializing pw

20210205-12:42:04 Initialized 1 methods.

20210205-12:42:04 Loading method gss from <config>/SASFoundation/9.3/utilities/bin/authgss.so

20210205-12:42:04 Could not load authentication method <config>/SASFoundation/9.3/utilities/bin/authgss.so. Reason:    0509-022 Cannot load module <config>/SASFoundation/9.3/utilities/bin/authgss.so.

              0509-150   Dependent module libvas64.so could not be loaded.

              0509-022 Cannot load module libvas64.so.

              0509-026 System error: A file or directory in the path name does not exist.

              0509-022 Cannot load module <config>/SASFoundation/9.3/utilities/bin/authgss.so.

              0509-150   Dependent module <config>/SASFoundation/9.3/utilities/bin/authgss.so could not be loaded.

20210205-12:42:04 GSS could not be loaded.

20210205-12:42:04 Using maxtries: 5

20210205-12:42:04 Using maxtries period: 60

20210205-12:42:04 Using maxtries wait: 300

20210205-12:42:04 Authenticating user testuser via pw

20210205-12:42:04 Authenticating user testuser via password database

20210205-12:42:05 User testuser did not authenticate. Reason: 'User password uses unknown/unsupported encryption.' (pw)

20210205-12:42:05 Request failed: 'User password uses unknown/unsupported encryption.'

Sasauth-access.log:-

20210205-12:42:05 User testuser did not authenticate. Reason: 'User password uses unknown/unsupported encryption.' (pw)

[alexal]

Switch to PAM and let your system decrypt the passwords: https://support.sas.com/kb/49/432.html 

[sathya66]

Thanks,
Any idea why the password encryption is not working now. what might have changed . This is working fine for already existing user (tried to reset the password for already existing user and it is not working for the user so we put non expiry settings for the rest of the users for now).
If we go for PAM, do we need to change any config changes from sas side (methods=pam in sasuath.conf ?) other than in the link below.

[alexal]

Something has been changed on your system, so the encryption method has changed. SAS doesn't support the encryption method that you are currently using, thus you need to use PAM and let your system decrypt passwords. No, you do not have to change anything other than sasauth.conf and /etc/pam.d/sasauth file and restart both metadata and object spawner.

[sathya66]

will it work for AIX 7.1 (AIX 64) platform?

[alexal]

Yes, as it stated in SAS note, a similar approach can be used in other UNIX environments by copying lines in the /etc/pam.conf file for the "login" service to define the "sasauth" service.