About AnandVyas

AnandVyas · ‎10-15-2020

In the attached logs, I can see below error. Looks like the certificate isn't in correct order or the key used to generate csr was different. "[exec] No certificate matches private key" You can check if an SSL certificate matches a Private Key by using the 3 easy commands below: For your SSL certificate: openssl x509 –noout –modulus –in <file>.crt | openssl md5 For your RSA private key: openssl rsa –noout –modulus –in <file>.key | openssl md5 For your CSR: openssl req -noout -modulus -in <file>.csr | openssl md5 You just need to replace <file> with your file’s name. If all the three match, the SSL certificate matches the Private Key. Ref link

AnandVyas · ‎10-13-2020

I think you should engage support for this. Usually for the other Web Application servers SASServerX_X there is a secure file with the passphrase that is used to encode the passwords. I tried looking for some hyperic docs and could see some sections where the passphrase is generated randomly. I am not sure if that's the case for SAS EVM, but if it is then I don't know if you can figure that out any way. If server.encryption-key is SAS encrypted and you know which password it is, I think you can generate it yourself using PWENCODE?

AnandVyas · ‎10-12-2020

Hi @RupaJ Will you be performing upgrade in place, full migration using SMU or partial using promotion? My answers to your questions: 1) What third party software are you referring to, Can you share some examples? If you mean SAS provided data servers, web servers etc, then they will be upgraded using SAS Wizard. You don't have to worry about them. If there are any specific software required for a particular SAS solution, then I would suggest you read the pre-requirements document for the solution. 2) I don't think you will have to revert any configuration files, unless there is some custom configuration developed and deployed at your site. Take note that any changes to the configuration files like SASV9.cfg, setenv.sh, server.xml will be overwritten during the upgrade. It's better to take a backup of these changes. 3) Yes it's recommended to run the content assessment tool. If you are looking for partial promotion SAS9 Inventory can help you list all the different type of objects in your deployment.

AnandVyas · ‎10-11-2020

Thanks @Kurt_Bremser . I fetched the pass directly from file and it worked. options mprint mlogic; %include "/mypath/test.sas"; %test; %let username=%sysfunc(getoption(metauser)); filename env '/mypath/test.sas'; data _null_; infile env termstr=CRLF length=c scanover truncover; input @'metapass=' pass $50.; quote1=find(pass, '"'); quote2=find(pass, '";'); pass=substr(pass, quote1+1, quote2-2); call symput('pwd', pass); run; %let host=mytestserver.com; %let port=7980; %let appserver=SASApp; /* Get a TGT and store the response and headers*/ filename resp TEMP; filename headers TEMP; proc http method="POST" url="http://&host.:&port./SASLogon/v1/tickets" in="username=&username.%nrstr(&password)=&pwd" headerout=headers out=resp HEADEROUT_OVERWRITE; run; %global tgturl; data _null_; infile headers termstr=CRLF length=c scanover truncover; input @'Location:' tgt $119.; put tgt=; run; Log: tgt=http:/mytestserver.com:7980/SASLogon/v1/tickets/TGT-12345-hfkhlhlalkhkglajljlsdhalhlibalsdhlsajfiijalldanhiilandlanlsi NOTE: 1 record was read from the infile HEADERS. NOTE: DATA statement used (Total process time): real time 0.00 seconds cpu time

AnandVyas · ‎10-11-2020

Yes, it doesn't work as intended. options mprint mlogic; %include "/mypath/test.sas"; %test; %let username=%sysfunc(getoption(metauser)); %let pwd=%sysfunc(getoption(metapass)); %let host=mytestserver.com; %let port=7980; %let appserver=SASApp; filename resp TEMP; filename headers TEMP; proc http method="POST" url="http://&host.:&port./SASLogon/v1/tickets" in="username=&username.%nrstr(&password)=&pwd" headerout=headers out=resp HEADEROUT_OVERWRITE; run; %global tgturl; data _null_; infile headers termstr=CRLF length=c scanover truncover; input @'Location:' tgt $119.; put tgt=; call symput('tgturl', trim(tgt)); %put &tgturl.; run; Log: 104 %global tgturl; 105 106 data _null_; 107 infile headers termstr=CRLF length=c scanover truncover; 108 input @'Location:' tgt $119.; 109 put tgt=; 110 call symput('tgturl', trim(tgt)); 111 %put &tgturl.; 112 run; If I just hardcode the password, it works. options mprint mlogic; %include "/mypath/test.sas"; %test; %let username=%sysfunc(getoption(metauser)); %let pwd={SAS002}FHIHJKLNAHIFGHRTY; %let host=mytestserver.com; %let port=7980; %let appserver=SASApp; /* Get a TGT and store the response and headers*/ filename resp TEMP; filename headers TEMP; proc http method="POST" url="http://&host.:&port./SASLogon/v1/tickets" in="username=&username.%nrstr(&password)=&pwd" headerout=headers out=resp HEADEROUT_OVERWRITE; run; %global tgturl; data _null_; infile headers termstr=CRLF length=c scanover truncover; input @'Location:' tgt $119.; put tgt=; call symput('tgturl', trim(tgt)); %put &tgturl.; run; Log: tgt=http:/mytestserver.com:7980/SASLogon/v1/tickets/TGT-12345-hfkhlhlalkhkglajljlsdhalhlibalsdhlsajfiijalldanhiilandlanlsi NOTE: 1 record was read from the infile HEADERS. NOTE: DATA statement used (Total process time): real time 0.00 seconds cpu time

AnandVyas · ‎10-11-2020

Hi @Hacko I also tried the code shared by @gwootton . I have noticed that it will works with "Group Name" and NOT with "Group Display Name". While for most of the groups both are same, I could see for some groups it was not. Did you try with name or display name? Also as @SASKiwi mentioned, it's good to take metadata backup before making any changes using code.

AnandVyas · ‎10-10-2020

Yes, as I mentioned in my post that I have read the documentation and it’s working as expected. I’m seeking help for any alternative approach in this scenario.

AnandVyas · ‎10-10-2020

Hi Experts, I have a .sas file "test.sas" which has a macro with ID and pass. %macro test; options metauser="testuser" metapass="{SAS002}FHIHJKLNAHIFGHRTY"; %mend; I want to read the metauser and metapass values into a variable in my program. options mprint mlogic; %include "/mypath/test.sas"; %test; %let id=%sysfunc(getoption(metauser)); %let pass=%sysfunc(getoption(metapass)); %put &id; %put &pass; Log: 79 %let id=%sysfunc(getoption(metauser)); 80 %let pass=%sysfunc(getoption(metapass)); 81 %put &id; testuser 82 %put &pass; XXXXXXXX I am able to read the username but password is always XXXXX. I read the documentation for getoption and it's behaving as expected for passwords. Please advise good way to read the ID and pass in this scenario.

AnandVyas · ‎10-10-2020

filename resp TEMP; filename headers TEMP; proc http method="GET" url="http://www.google.com" headerout=headers out=resp HEADEROUT_OVERWRITE; run; data _null_; infile headers; input; put _infile_; run; data _null_; infile headers scanover truncover; input @'HTTP/1.1' code 4. message $255.; call symputx('status_code',code,'g'); call symputx('status_message',trim(message),'g'); %put status_code=&status_code; %put status_message=&status_message; run; Log: data _null_; 90 infile headers scanover truncover; 91 input @'HTTP/1.1' code 4. message $255.; 92 call symputx('status_code',code,'g'); 93 call symputx('status_message',trim(message),'g'); 94 %put status_code=&status_code; status_code=200 95 %put status_message=&status_message; status_message=OK 96 run;

AnandVyas · ‎10-09-2020

Can you check if there are any errors in log file - SASContentServer9.4.log? For the validation part I was asking to use same client that you have used to validate the content server to do the import. If you have validated content server using SMC installed on Desktop, then use the same to import. If you have launched directly from compute server then use the same to import just to be sure. Even though SAS Content server is deployed on middle-tier actual documents/files are hosted on SharedServices database which is on the compute host. https://go.documentation.sas.com/?cdcId=bicdc&cdcVersion=9.4&docsetId=bimtag&docsetTarget=p08mq2p1qsknxin11kvw65dpklpr.htm&locale=en

AnandVyas · ‎10-09-2020

I don't think it's possible unless the other user is admin. I think admin user has all the privileges.

AnandVyas · ‎10-09-2020

Hi @rabindrakumar1 Have you validated the content server from the same client from where you are trying to do the import or is it different?

AnandVyas · ‎10-09-2020

Could you share more on why you want to do this? Since you can use SMC to make change to users group and role memberships, what is that you are trying to achieve by export/import?

AnandVyas · ‎10-08-2020

Hi @sathya66 Thanks for the log and update. Don't see much help from the logs. I hope you have already raised a support track with SAS TS. If not I would suggest you to raise it so they can advise more steps on troubleshooting this issue. Please update the outcome once resolved. Thanks!

AnandVyas · ‎10-08-2020

Error looks related to JMS connection. Is the activemq services up and running? Can you check activemq logs and verify if there are any errors in it? I would advise a clean restart and try again. Also validate if compute tier services are running without any error.