BookmarkSubscribeRSS Feed
MaxBeijer
Fluorite | Level 6

Hi,

 

If I make a export in SAS EG 6.1 M1 to excel from our bussinesserver I got the error:

 

Error creating XLSX file -> \\infra\d$\SAS\ONT\BI\SASEGProjects\_EDWH\Controlescripts\BBO\Testje..xlsx . It is either not an 
Excel spreadsheet or it is damaged. Error code=8000101D
Requested Output File is Invalid
ERROR: Export unsuccessful. See SAS Log for details.

 

This is the code i run:

 

data testje;
vandaag = today();run;

 

proc export data = testje
outfile = "\\infra\S$\SAS\ONT\BI\SASEGProjects\_EDWH\Controlescripts\BBO\Testje..xlsx"
dbms=xlsx replace;
sheet = Zorgverlener;
run;

 

If I run the code on our ETL Server it's working fine. 

 

We have the license for the SAS/ACCESS Interface to PC File. We are on SAS 9.4 M1 

 

Kindly help me in resolving the issue.

 

Thanks

Max

11 REPLIES 11
Kurt_Bremser
Super User

Are business and ETL server different physical or virtual machines? It might be that the business server has the resource mounted read-only.

 

Prime avenue for research are the permissions and user rights, IMO.

MaxBeijer
Fluorite | Level 6

Hi Kurt,

The business and ETL servers are installed on the same physical machines in a grid environment on windows. With my administrator account it is working on both servers. With the normal user account it is only working on the business server.

MaxBeijer
Fluorite | Level 6
What are the permissions to check because both servers are using the same metadata and the same "normal" user?
Kurt_Bremser
Super User

@MaxBeijer wrote:
What are the permissions to check because both servers are using the same metadata and the same "normal" user?

That has to be done on the "physical" side, concerning how shares are mounted and how permissions for users are propagated across systems.

It means you will have to check with your system and network admins.

 

Windows allows some very fine granularity through Active Directory, which can complicate things quite a lot if used.

JuanS_OCS
Amethyst | Level 16

@Kurt_Bremser, all,

 

I think I have clarified the problem a little bit, however not sure how to move forward.

 

This is a problem happening on EG. The same code executed from a WorkspaceServer.bat session (in any Grid node, any SASApp) runs without problems. And this happens only for UNC paths, apparently, not on local paths.

 

Just a libname to that location it gets :

ERROR: User does not have appropriate authorization level for library XXXXXX.

 Which does not make much sense, because the same UNC path works OK from the server itself, so it cannot be solved with a setspn.

 

@ChrisHemedinger, you are our guru on EG and SAS/ACCESS to PC Files. Do you have any clue? I am sure I am missing something really fundamental here.

 

 

ChrisHemedinger
Community Manager

Hi @JuanS_OCS - is it possible that your server machine is not configured as Trusted for Delegation?  That's needed for Windows to pass on your identity to access another network resource.

 

When run directly from the server, Trusted for Delegation is not needed.  But when you access via EG, which connects to your server using your network identity, Windows will not allow your access to go beyond that server to another network share (or network device, like a printer) unless this Active Directory setting is changed.

It's time to register for SAS Innovate! Join your SAS user peers in Las Vegas on April 16-19 2024.
JuanS_OCS
Amethyst | Level 16

Hello @ChrisHemedinger,

 

thanks a lot for chiming in!

 

I thought about it, but I am not sure on which way that makes sense. I mean, and to summarize:

 

It was tested either proc export or libname to the UNC (both give same results) on the following scenarios:

 

  1. - EG connection with Application server 1 (Etl): works
  2. EG connection with Application server 2 (BS): not working
  3. - local connection with Application server 1 (Etl): works
  4. - local connection with Application server 2 (BS): works

 

I would think your statement would make 100% sense if scenario 1 and 2 would give same result, but not in this case.

 

For your information:

- the Grid is Windows based, 3 nodes. 

- All SASApps are deployed the same on the 3 machines, equally.

- EG is on Citrix.

 

A question, on an attempt to follow that thread of possibility: what AD account needs to be trusted for delegation? The 3 server nodes? My account? the Citrix server? I will check that 🙂

 

 

Kurt_Bremser
Super User

@ChrisHemedinger wrote:

Hi @JuanS_OCS - is it possible that your server machine is not configured as Trusted for Delegation?  That's needed for Windows to pass on your identity to access another network resource.

 

When run directly from the server, Trusted for Delegation is not needed.  But when you access via EG, which connects to your server using your network identity, Windows will not allow your access to go beyond that server to another network share (or network device, like a printer) unless this Active Directory setting is changed.


Windows: a tool to make administrator's lives miserable.

SCNR.

JuanS_OCS
Amethyst | Level 16

We could see that the 3 nodes are not Trusted for Delegation. 

 

I still wonder why one SAS Application Server can do the job with UNC and other cannot. Don't you?

 

Before asking the Security teams to open such a big security hole, I would like to be sure about why there is a difference and on what.

 

Something else: the 3 Object Spawners run under the Local System account.

 

@Kurt_Bremser, totally true and understandable.

ChrisHemedinger
Community Manager

I don't know the answer, but sometimes the Windows event log (for the machine in question) can reveal what's going on.  An admin should be able to connect/view the Windows event log for the server. 

 

eventvwr.png

 

Since the event log gets crowded quickly, I'd suggest running the test that fails and view the most recent log entries immediately.

It's time to register for SAS Innovate! Join your SAS user peers in Las Vegas on April 16-19 2024.

sas-innovate-2024.png

Join us for SAS Innovate April 16-19 at the Aria in Las Vegas. Bring the team and save big with our group pricing for a limited time only.

Pre-conference courses and tutorials are filling up fast and are always a sellout. Register today to reserve your seat.

 

Register now!

SAS Enterprise Guide vs. SAS Studio

What’s the difference between SAS Enterprise Guide and SAS Studio? How are they similar? Just ask SAS’ Danny Modlin.

Find more tutorials on the SAS Users YouTube channel.

Click image to register for webinarClick image to register for webinar

Classroom Training Available!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 11 replies
  • 18577 views
  • 4 likes
  • 4 in conversation