How to integrate the Active Directory with SAS server

[SurajChand]

Dear Team,

     I want to Integrate active directory with sas server. So request to you please share complete steps or documentation. SAS server is installed & configured with Linux platform.

Thanks

Suraj

[SurajChand · Accepted solution]

If you want to use your active directory authentication with SAS server you need to do these things on your Linux platform.

1. Firstly you have to join your domain (service provider) example.com

• visit this URL to join your linux machine into active directory

• https://www.youtube.com/watch?v=qwxinaUZycY

See after doing all these things are you able to login with your domain user.

2. check LDAP, Kerbrose & 389 port is enable with filewall on AD server.

3. Open & terminal & edit the sasv9_usermod.cfg file with your domain information.

• cd Lev1/SASMeta/MetadataServer
• vim sasv9_usermod.cfg
• /* Set environment variables for binding to Active Directory. */
  -set AD_HOST example.com
  -set AD_PORT 389
  
  /* Specify the authentication provider. */
  -AUTHPD (ADIR: example.com)
  
  /* OPTIONAL: Specify the domain name of the primary authentication provider. */
    -PRIMPD example.com
• save & exit the file.
• restart your metadata & object spawner services.
• Open SAS Enterprise Guide & Run macros code for check authentication are readble or not.
• If your are able to see your domain user it's mean your authentication is working perfectly.

4. Now you need to resgistered this code with SAS store process.

• open SAS Management console use sasadm@saspw user.
• go to folder tab select SAS folder
• right click on folder then select new & new store process
• define any name (Active Directory Users) then Next
• select SASAPP at application server then click on store code in metadata and edit the source code
• Paste here AD-1 code then select stream then Next & finish.
• do same thing for AD-2 as previous (AD-1)

5. open your broswer & login with localhost:7980/SASStoredProcess/do

• login with sasadm@saspw & select list avilable option
• now expand the folder you will see here AD-1 option select it & try to import the users in SASMC.

6. If successfully imported then see in SASMC & try to login with domain credential.