BookmarkSubscribeRSS Feed
🔒 This topic is solved and locked. Need further help from the community? Please sign in and ask a new question.
shoin
Lapis Lazuli | Level 10

(Qualifier: Could be just me)

 

I find the section of install related ID requirements rather confusing.

 

For install cas and sas IDs are needed, with group membership in gid sas.  (In my env. gid is sasg and I understand I could change that in vars.yml)  But my confusion is whether IDs sas and cas will also be created as host authenticated IDs?  What if my env. does NOT allow host authenticated IDs?

 

So far on my LDAP:

sas:sasg

cas:sasg

Users (all have their own AD via PAM) setup

All IDs have /home/id setup

 

Also, is this accurate that SASStudio on programming service, does not use AD/LDAP credentials and require host authenticated local ID?

 

Also if all my IDs are AD based and not local, should I turn off the sas_user value to false in var.yml and list my gid (sasg not sas) in the cas user section?

 

Will my install fail if I do not allow for local IDs (host)?

 

Thank you in advance,

 

1 ACCEPTED SOLUTION

Accepted Solutions
PaulHomes
Rhodochrosite | Level 12

In my SAS Viya install my sas & cas users, and sas group are all from AD (configured via realmd, sssd etc) and the install worked fine. In my vars.yml I set setup_sas_users to false.

 

You might find the discussions on this post with @ErwanGranger's responses useful: https://communities.sas.com/t5/Administration-and-Deployment/Best-practice-for-OS-accounts-when-depl... ... since that early investigation I have since switched to AD accounts.

 

If you haven't seen it yet you might be interested in checking the prerequisites using VIRK: https://communities.sas.com/t5/SAS-Communities-Library/Many-hands-make-light-VIRK/ta-p/429329

View solution in original post

1 REPLY 1
PaulHomes
Rhodochrosite | Level 12

In my SAS Viya install my sas & cas users, and sas group are all from AD (configured via realmd, sssd etc) and the install worked fine. In my vars.yml I set setup_sas_users to false.

 

You might find the discussions on this post with @ErwanGranger's responses useful: https://communities.sas.com/t5/Administration-and-Deployment/Best-practice-for-OS-accounts-when-depl... ... since that early investigation I have since switched to AD accounts.

 

If you haven't seen it yet you might be interested in checking the prerequisites using VIRK: https://communities.sas.com/t5/SAS-Communities-Library/Many-hands-make-light-VIRK/ta-p/429329

Ready to join fellow brilliant minds for the SAS Hackathon?

Build your skills. Make connections. Enjoy creative freedom. Maybe change the world. Registration is now open through August 30th. Visit the SAS Hackathon homepage.

Register today!
Discussion stats
  • 1 reply
  • 1052 views
  • 0 likes
  • 2 in conversation