About bheinsius

bheinsius · ‎03-18-2021

Hi @gwootton Thanks for you explanation. You write: This order matches the order of SASCFGPATH, with the last one being the last one applied. That does not appear to be the case, as: SASCFGPATH="$APPSERVER_ROOT/sasv9.cfg, $APPSERVER_ROOT/sasv9_usermods.cfg, $CONFIGDIR/sasv9.cfg, $CONFIGDIR/sasv9_usermods.cfg" implies the order of execution would be: $APPSERVER_ROOT/sasv9.cfg $APPSERVER_ROOT/sasv9_usermods.cfg $CONFIGDIR/sasv9.cfg $CONFIGDIR/sasv9_usermods.cfg where the last one wins, where the order that I find - and would expect and that is documented - is this: $CONFIGDIR/sasv9.cfg $CONFIGDIR/sasv9_usermods.cfg $APPSERVER_ROOT/sasv9.cfg $APPSERVER_ROOT/sasv9_usermods.cfg What I miss and have missed over time - and what the actual background of my question is - is a sasv9.cfg for the Lev, so $LEVEL_ROOT/sasv9.cfg and $LEVEL_ROOT/sasv9.cfg. The customer has now built that into every (Workspace|StoredProcess|PooledWorkspace)server.sh as: SASCFGPATH="$LEVEL_ROOT/sasv9.cfg, $APPSERVER_ROOT/sasv9.cfg, $APPSERVER_ROOT/sasv9_usermods.cfg, $CONFIGDIR/sasv9.cfg, $CONFIGDIR/sasv9_usermods.cfg" How would you implement this using usermods files only? Sorry for now mixing up 2 questions in 1 post.

bheinsius · ‎03-17-2021

Hi, My out-of-the-box WorkspaceServer.sh script has this line for the SASCFGPATH: SASCFGPATH="$APPSERVER_ROOT/sasv9.cfg, $APPSERVER_ROOT/sasv9_usermods.cfg, $CONFIGDIR/sasv9.cfg, $CONFIGDIR/sasv9_usermods.cfg" To determine the order of execution of these config files, I added different settings to each of them and found out that this is the actual order of execution, where the last one wins: 1. $CONFIGDIR/sasv9.cfg 2. $CONFIGDIR/sasv9_usermods.cfg 3. $APPSERVER_ROOT/sasv9.cfg 4. $APPSERVER_ROOT/sasv9_usermods.cfg I cannot relate that to the order in the SASCFGPATH string: SASCFGPATH="$APPSERVER_ROOT/sasv9.cfg, $APPSERVER_ROOT/sasv9_usermods.cfg, $CONFIGDIR/sasv9.cfg, $CONFIGDIR/sasv9_usermods.cfg" I can't find official documentation on this setting, does anyone understand how this works? The reason for asking is that my customer wants to add a custom sasv9.cfg file to his configuration and the question is where it should go. -Bart

bheinsius · ‎03-06-2021

Hi @StuartRogers I'm sorry, I had included the wrong output, I have constrained delegation setup for the service account: ldifde -f delegation.ldf -d "CN=svc-sasspawner,OU=Admins,DC=eom,DC=local" -l msDS-AllowedToDelegateTo dn: CN=svc-sasspawner,OU=Admins,DC=eom,DC=local changetype: add msDS-AllowedToDelegateTo: sascas/sasviya35win.eom.local msDS-AllowedToDelegateTo: sascas/sasviya35win Thank you, Bart

bheinsius · ‎03-05-2021

Hi @StuartRogers Removing the duplicate SPN worked as the spawner log now says: IWA context established using Kerberos package. I now see the Workspace Server running under my account on the Viya server. The next step is connecting to CAS from that Workspace Server session. The SPNs are there: C:\Users\svc-sasinst>setspn -Q SAS/sasviya35win.eom.local Checking domain DC=eom,DC=local CN=svc-sasspawner,OU=Admins,DC=eom,DC=local SAS/sasviya35win SAS/sasviya35win.eom.local Existing SPN found! I configured constrained delegation for the computer account: dn: CN=sasviya35win,OU=VirtualMachines,DC=eom,DC=local changetype: add msDS-AllowedToDelegateTo: sascas/sasviya35win.eom.local msDS-AllowedToDelegateTo: sascas/sasviya35win I set the SAS_CONSTRAINED_DELEG_ENABLED environment variable to 1. From the SAS Workspace Server session: 28 %put NOTE: %sysget(SAS_CONSTRAINED_DELEG_ENABLED); NOTE: 1 But connecting to CAS fails: 28 options set=CASCLIENTDEBUG=1; 29 options cashost="sasviya35win.eom.local" casport=5570; 30 cas casauto; NOTE: HOMEDRIVE: C: NOTE: HOMEPATH: \Users\svc-sasinst NOTE: Client is using the token identity provider NOTE: Calling ClientContextInit NOTE: First call to initialize context ERROR: Error in SSPI function InitializeSecurityContext. Error -2146893042 (No credentials are available in the security package ). ERROR: Access denied. ERROR: Unable to connect to Cloud Analytic Services localhost on port 5570. Verify connection parameters and retry. Did I miss a step? Thanks, Bart

bheinsius · ‎03-04-2021

Hi @StuartRogers I removed the SPN for the SAS/<computer-account> but it returned right after restarting Viya. Checking the logs I see that the SAS Connect Spawner registers an SPN: 2021-03-04T16:45:30,543 INFO [00000008] :SYSTEM@STASASVIYAP01 - SPN registration succeeded for current host. It doesn't say it's the SPN for the SAS service class but I think it is. Should the SAS/CONNECT service also be running as the spawner service account? And should its usermods file then also have this line: Set USERMODS_OPTIONS=-sspi and its Windows Service re-installed? Thanks for your time, Bart

bheinsius · ‎03-02-2021

There seem to be duplicate SPN's for SAS/<hostname>, that's not right for sure. I will have one removed and report back.

bheinsius · ‎03-02-2021

Hi, My BRT is not working because it identifies the reverse proxy as the mid-tier and so expects to find SAS Deployment Agent listening to port 5660 there. Obviously it does not and the backup fails. I tried to manually specify the servers in SMC but it doesn't seem to work. Re-initializing the BRT also doesn't work since it doesn't get beyond this point. Where does it get the server names from? Any ideas? Thanks, Bart

bheinsius · ‎03-01-2021

Hi, I followed Stuart Rogers' blog at https://communities.sas.com/t5/SAS-Communities-Library/SAS-Viya-3-5-Object-Spawner-with-Kerberos/ta-p/638484 to connect EG83 to a SAS Viya 3.5 Workspace Server on Windows, using Kerberos. I created SPN's and defined constrained delegation. In EG, I set the Security Package in the SAS Workspace Server definition explicitly to Kerberos, the Workspace Server session starts. The Object Spawner log mentions: IWA context established using NTLM package I had expected Kerberos here instead of NTLM, is that correct? I then try to start a CAS session from that Workspace Server and get the following errors 28 options cashost=localhost; 29 options casport=5570; 30 cas; ERROR: Error in SSPI function AcquireCredentialsHandle. Error -2146893042 (No credentials are available in the security package ). ERROR: Unable to load extension: (tkcident) ERROR: The Kerberos extension failed to load. Kerberos is not functional in this environment. ERROR: Unable to connect to Cloud Analytic Services localhost on port 5570. Verify connection parameters and retry. Any ideas? - Bart

bheinsius · ‎11-04-2020

Hi, My client wants EG to be installed with default external styles as documented here . I found that EG creates the file %Appdata%\SAS\SharedSettings\Styles\ExternalStyles.xml to store the list of external styles. Is there a way to have this file set as default, to be copied into a user's profile when he starts EG for the first time, like it works with EGoptions.xml ? Bart

bheinsius · ‎05-25-2020

Bedankt Richard. Does anyone else know if this is possible, so import a report directly into a specific folder instead of having the original folder structure recreated?

bheinsius · ‎05-22-2020

SAS VA reports

bheinsius · ‎05-21-2020

From the promotion training I found that you cannot do that in Environment Manager: EV does not allow copy or multiple select on any actions. and to use SAS Drive for that.

bheinsius · ‎05-20-2020

Hi, I can move a report from one folder to another by selecting it and rmb -> Move to folder. I have hundreds of reports that I need to move to a different folder. I cannot seem to select multiple reports and move them all at once. Is there a way? Regards, Bart

bheinsius · ‎05-20-2020

Hi Richard, Did you find an answer to your question? Or another way to import to a different folder than the source? Regards, Bart

bheinsius · ‎05-11-2020

I checked with SAS Support and they replied that the documentation is incorrect. This does not seem to be well documented in SAS doc VA 7.5 Reports: 'Using URL Parameters to View a Report'. Also SAS Note 64546 does not seem to be correct. What I did find to work is the following: Change: http://sasviya35.eom.local/links/resources/report?uri=%2Freports%2Freports%2F1cfe024b-e6d3-4b65-8231-34f8e27ecedd&page=vi6&reportViewOnly=true&appSwitcherDisabled=true&sas-welcome=false into: http://sasviya35.eom.local/SASVisualAnalytics/?reportUri=%2Freports%2Freports%2F1cfe024b-e6d3-4b65-8231-34f8e27ecedd&page=vi6&reportViewOnly=true&appSwitcherDisabled=true&sas-welcome=false And this indeed works.

Online Status	Offline
Date Last Visited	‎04-04-2024 12:27 AM

Re: Programmatically detect an active CAS session?

Programmatically detect an active CAS session?

Re: What are the New Capabilities of SAS® Analytics Pro Advanced Progr...

Re: SAS Viya table scope

Re: Cleanup CASUSER tables

Re: Cleanup CASUSER tables

Cleanup CASUSER tables

Re: SAS Viya 3.5 Identities Service - LDAP port 636 gives Unprocessed ...

SAS Viya 3.5 Identities Service - LDAP port 636 gives Unprocessed Cont...

DI Studio Table Loader - try the option METAOUT=DATA

Azure Storage for SAS Architects

Re: SAS Viya 3.5 Deployment failed: The generated orchestration is not...

Re: Promotion Viya to Viya : Change folder location of report.

Re: Promotion Viya to Viya : Change folder location of report.

Re: Promotion Viya to Viya : Change folder location of report.

DI Studio Table Loader - try the option METAOUT=DATA

Re: SAS Viya table scope

Re: Cleanup CASUSER tables

Cleanup CASUSER tables

Re: SAS Viya 3.5 Identities Service - LDAP port 636 gives Unprocessed ...

Re: SASCFGPATH in SAS 9.4 - order of execution?

SASCFGPATH in SAS 9.4 - order of execution?

Re: SAS Viya 3.5 Object Spawner with Kerberos fails (Windows)

Re: SAS Viya 3.5 Object Spawner with Kerberos fails (Windows)

Re: SAS Viya 3.5 Object Spawner with Kerberos fails (Windows)

Re: SAS Viya 3.5 Object Spawner with Kerberos fails (Windows)

SAS Deployment Backup and Recovery tool - Reverse Proxy

SAS Viya 3.5 Object Spawner with Kerberos fails (Windows)

SAS Enterprise Guide default External Styles

Re: Promotion Viya to Viya : Change folder location of report.

Re: SAS Viya - move multiple reports to another folder

Re: SAS Viya - move multiple reports to another folder

SAS Viya - move multiple reports to another folder

Re: Promotion Viya to Viya : Change folder location of report.

Re: SAS VA on Viya - how to disable the welcome tour on first logon?

SUGA

SAS Inner Circle Panel

SAS Innovate 2025

SAS Global Forum 2019

SAS Global Forum 2016