Issue with a single user spawning SAS Studio

[dlawto2]

I have a Viya Cluster (CAS, MicroServices, SPRE, 7 workers) and currently have 57 users logged into Studio without issue.  This is a LINUX RHEL7 environment with Viya 3.5 installation.  One of my users, after changing her password, cannot log on to Studio.  She is getting the following error, :

I have flushed QAS, etc. to no avail.  I do have a ticket opened with Tech support but haven't heard much back today.  In the logs there is the following:

Studio Log:

FROM sasstudiov (microservices)

2021-10-07 18:52:00.261  INFO 19343 --- [-auto-1-exec-63] c.s.c.html.pet.util.PetAwareUtilHelper   : lyao(7b09b10d) [e1921e02adefaa26] Found a user theme preference of sas_ignite

2021-10-07 18:52:00.308  INFO 19343 --- [-auto-1-exec-63] c.s.commons.html.taglib.ApplicationTag   : lyao(7b09b10d) [e1921e02adefaa26] sasstudiov ApplicationSwitcher enabled=true

2021-10-07 18:52:00.308  INFO 19343 --- [-auto-1-exec-63] c.s.commons.html.taglib.ApplicationTag   : lyao(7b09b10d) [e1921e02adefaa26] sasstudiov ApplicationSwitcher enabled=true

2021-10-07 18:52:12.389 ERROR 19343 --- [-auto-1-exec-59] com.sas.commons.rest.ExceptionLog        : lyao(7b09b10d) [a2e5dd30f378e1a0] com.sas.studio.exceptions.ServerOperationException: Unable to create compute server session.

        Failed to launch process.

        Failed to launch process: host=apsld0135.uhc.com port=45252 ssl=true

        Failed to connect to server.

        Server error: status=0x80BFD100 messages=[Failed to authenticate to Launcher Server.]

Launcher Log:

2021-10-07 19:17:00.857 TRACE 16094 --- [7-auto-1-exec-3] c.sas.identities.IdentityQueryProcessor  : sas.logon [96d30ddb3c417473] Invoking fetch query against provider 'local': identity=lyao

2021-10-07 19:17:00.858 TRACE 16094 --- [7-auto-1-exec-3] c.sas.identities.IdentityQueryProcessor  : sas.logon [96d30ddb3c417473] Invoking fetch query against provider 'ldap': identity=lyao

2021-10-07 19:17:00.858 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Performing operation: query user 'lyao'

2021-10-07 19:17:00.858 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Executing fetch: baseDN='CN=Users,DC=ms,DC=ds,DC=uhc,DC=com', filter='(&(sAMAccountName=lyao)(&(objectCategory=person)(objectClass=user)(memberof=CN=sas,OU=Groups,OU=Unix,OU=Servers,OU=UHT,OU=UHG,DC=ms,DC=ds,DC=uhc  ,DC=com)(!(userAccountControl:1.2.840.113556.1.4.803:=2))))'

2021-10-07 19:17:00.865 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Retrieved identity 'lyao' from ldap server

2021-10-07 19:17:00.866 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Performing operation: query memberships for user 'lyao'

2021-10-07 19:17:00.866 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Executing fetch: baseDN='CN=Users,DC=ms,DC=ds,DC=uhc,DC=com', filter='(&(sAMAccountName=lyao)(&(objectCategory=person)(objectClass=user)(memberof=CN=sas,OU=Groups,OU=Unix,OU=Servers,OU=UHT,OU=UHG,DC=ms,DC=ds,DC=uhc  ,DC=com)(!(userAccountControl:1.2.840.113556.1.4.803:=2))))'

2021-10-07 19:17:00.877 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Found 1 memberships for identity 'lyao'

2021-10-07 19:17:00.877 TRACE 16094 --- [7-auto-1-exec-3] c.s.i.p.l.LdapIdentityQueryRepository    : sas.logon [96d30ddb3c417473] Performing operation: query memberships for group 'unx_grp_sas'

2021-10-07 19:17:00.878 DEBUG 16094 --- [7-auto-1-exec-3] com.sas.identities.MembershipManager     : sas.logon [96d30ddb3c417473] The member "CASHostAccountRequired" (CASHostAccountRequired) in provider scim is excluded.  A member with the same id was already processed.

2021-10-07 19:17:02.301 TRACE 16094 --- [7-auto-1-exec-1] c.sas.identities.IdentityQueryProcessor  : lyao(b187902f) [70e51e5cebb725ec] Invoking fetch query against provider 'local': identity=lyao

2021-10-07 19:17:02.301 TRACE 16094 --- [7-auto-1-exec-1] c.sas.identities.IdentityQueryProcessor  : lyao(b187902f) [70e51e5cebb725ec] Invoking fetch query against provider 'ldap': identity=lyao

2021-10-07 19:17:02.301 TRACE 16094 --- [7-auto-1-exec-1] c.s.i.p.l.LdapIdentityQueryRepository    : lyao(b187902f) [70e51e5cebb725ec] Performing operation: query user 'lyao'

2021-10-07 19:17:02.301 TRACE 16094 --- [7-auto-1-exec-1] c.s.i.p.l.LdapIdentityQueryRepository    : lyao(b187902f) [70e51e5cebb725ec] Executing fetch: baseDN='CN=Users,DC=ms,DC=ds,DC=uhc,DC=com', filter='(&(sAMAccountName=lyao)(&(objectCategory=person)(objectClass=user)(memberof=CN=sas,OU

[gwootton · Accepted solution]

Do they have their old password stored in Environment Manager under My Credentials?

[dlawto2]

No most of my users have no idea they can even look at SAS Environment Manager (and I am perfectly happy about that, lol)

[dlawto2]

I was so very wrong....... Thank you, Thank you, Thank you.