Found the java config opts it is pointing to:   /opt/sas/viya/config/etc/SASSecurityCertificateFramework/cacerts/trustedcerts.jks   These are messages from our IT partner - anyone have any ideas for troubleshooting? ... View more

I have found another location containing those files:   /opt/sas/yiva/home/SASSecurityCertificateFramework/cacerts   So the question is which does viya use? If it is the above, this could be the issue. ... View more

Msg from log file is: unable to find valid certification path to requested target   (target being ldaps service on DC)   I have verified cert in question on DC has not renewed yet. Have also verified that the DC cert has been added to both trustedcerts.pem and the trustedcerts.jks keystore.   Wondering if it is possible that the saslogon service is initializing with a different keystore. ... View more

IT is telling me it appears to be Java certificates this time? ... View more

HI There   We are experiencing this issue again today, however this time our LDAP SSL certificate in active directory has not expired?  Any suggestions? ... View more

Hi Alexal   Well I am pleased to report that we resolved issue without engaging the consultants.  You were absolutely correct, a certificate on our LDAP had expired and was replaced.  We copied the new certificate onto the Linux SAS server.  Excellent news.   So that being said, we never had this issue in VA or SAS 9.4 on our old install, seems to be new with our recent Viya install, so we noticed that the certificate we just applied expires January 2019.  We are assuming this issue will occur again then, we don't appear to get any warning about this certificate expiring, maybe I should see if IT can add some sort of alert to our SAS administrator.   Thanks so much for your support and quick replies on this issue, greatly appreciated. ... View more

The certificate location is empty ...   [root@cawina06 default]# pwd /opt/sas/viya/config/etc/consul.d/default [root@cawina06 default]# ls [root@cawina06 default]#   At this point we feel we have exhausted our ability to resolve the issue and are looking to engage Zencos.  Thanks for your support in helping us pinpoint the issue. ... View more

OK thanks we'll give it a try. ... View more

Our IT guy is saying that he is not aware of any changes and that the LDAP server is one of the domain controllers? ... View more

Here is what we get:   2018-09-13 11:25:21.962 ERROR 24451 --- [o-auto-1-exec-2] w.a.UsernamePasswordAuthenticationFilter : service [804d145fb06de916] An internal error occurred while trying to authenticate the user.   org.springframework.security.authentication.InternalAuthenticationServiceException: cawinc01.cyphersystems.com:3269; nested exception is javax.naming.CommunicationException: cawinc01.cyphersystems.com:3269 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]   ... View more

Another Log Snip     [root@cawina06 default]# grep ERROR sas-saslogon_2018-09-09_10-27-48.log 2018-09-09 10:28:26.901 ERROR 24451 --- [n Asynchronous4] c.s.credentials.bootstrap.DomainLoader   : service [82854b7902879700] [domain.create.error.fmt.log] Error creating credentials domain Domain: /credentials/domains/kerberos (GSSCredential) 405 Method Not Allowed 2018-09-09 10:28:26.909 ERROR 24451 --- [n Asynchronous5] c.s.c.bootstrap.ConfigurationLoader      : service [01b40d7d4017b355] [CONFIGURATION_BOOTSTRAP_RESTCLIENT_EXCEPTION] POST encountered an exception attempting to invoke the [HTTPMethod=com.sas.configuration.bootstrap.ConfigurationLoader@7b91d9f][endPoint=/configuration/definitions] 2018-09-09 10:28:28.240 ERROR 24451 --- [n Asynchronous4] c.s.credentials.bootstrap.DomainLoader   : service [82854b7902879700] [domain.create.error.fmt.log] Error creating credentials domain Domain: /credentials/domains/kerberos (GSSCredential) 405 Method Not Allowed 2018-09-09 10:28:31.911 ERROR 24451 --- [n Asynchronous4] c.s.credentials.bootstrap.DomainLoader   : service [82854b7902879700] [domain.create.error.fmt.log] Error creating credentials domain Domain: /credentials/domains/kerberos (GSSCredential) 405 Method Not Allowed 2018-09-09 10:28:31.916 ERROR 24451 --- [n Asynchronous5] c.s.c.bootstrap.ConfigurationLoader      : service [25697dcb24315ddc] [CONFIGURATION_BOOTSTRAP_RESTCLIENT_EXCEPTION] POST encountered an exception attempting to invoke the [HTTPMethod=com.sas.configuration.bootstrap.ConfigurationLoader@7b91d9f][endPoint=/configuration/definitions] 2018-09-09 10:28:36.981 ERROR 24451 --- [n Asynchronous4] c.s.credentials.bootstrap.DomainLoader   : service [82854b7902879700] [domain.create.error.fmt.log] Error creating credentials domain Domain: /credentials/domains/kerberos (GSSCredential) 405 Method Not Allowed 2018-09-09 10:28:41.925 ERROR 24451 --- [n Asynchronous5] c.s.c.bootstrap.ConfigurationLoader      : service [e20c3168892a974b] [CONFIGURATION_BOOTSTRAP_RESTCLIENT_EXCEPTION] POST encountered an exception attempting to invoke the [HTTPMethod=com.sas.configuration.bootstrap.ConfigurationLoader@7b91d9f][endPoint=/configuration/definitions] 2018-09-09 10:28:49.371 ERROR 24451 --- [n Asynchronous4] c.s.credentials.bootstrap.DomainLoader   : service [82854b7902879700] [domain.create.error.fmt.log] Error creating credentials domain Domain: /credentials/domains/kerberos (GSSCredential) 405 Method Not Allowed ... View more

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target         at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)         at   Looks like some sort of certificate issue - forgive me I am not a server administrator, and am working with our IT dept who has little experience with this as Zencos did the install - so if you have any trouble shooting steps that would be appreciated. ... View more

From the "SAS Home" link to login into Viya for VA ... View more