Usage Note 36831: SAS Stored Process Web Application does not accept encoded passwords on the _PASSWORD parameter by default
 |  |  |  |
The SAS® 9.2 Stored Process Web Application does not, by default, accept encoded passwords on the _PASSWORD parameter when it is included on the URL for a SAS® Stored Process request.
However, if you want to allow encoded passwords on this parameter, you can set the AllowEncodedPassword Initialization Parameter for the SAS Stored Process Web Application. Complete these steps:
- Log on to SAS® Management Console.
- Select Application Management.
- Navigate to Configuration Manager ► Stored Process Web App 9.2.
- Select Properties ► Advanced (tab).
- Click the Add button and define a new property:
Property Name: AllowEncodedPassword
Property Value: true
- Click OK to save the new property.
- Restart the Middle Tier Web Server after making this change.
When you specify the encoded password, replace any special characters with their hexadecimal escape representation. The URLENCODE function is helpful for this. Here is an example:
proc pwencode in="mypass1";
run;
run;
/* The encoded value is: {sas001}bXlwYXNzMQ== */
data _null_;
val =urlencode("{sas001}bXlwYXNzMQ==");
put val=;
run;
val =urlencode("{sas001}bXlwYXNzMQ==");
put val=;
run;
/* The value is: %7Bsas001%7DbXlwYXNzMQ%3D%3D */
So, the _PASSWORD value is as follows:
_PASSWORD=%7Bsas001%7DbXlwYXNzMQ%3D%3D
Here is an example SAS Stored Process request that uses the encoded password.
http://your.server:8080/SASStoredProcess/do?
_program=%2FProducts%2FSAS+Intelligence+Platform%2FSamples%2FSample%3A+Hello+World
&_username=user123&_password=%7Bsas001%7DbXlwYXNzMQ%3D%3D
_program=%2FProducts%2FSAS+Intelligence+Platform%2FSamples%2FSample%3A+Hello+World
&_username=user123&_password=%7Bsas001%7DbXlwYXNzMQ%3D%3D
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | SAS Integration Technologies | Microsoft Windows Server 2003 Enterprise 64-bit Edition | 9.2 TS2M0 | |
| Microsoft Windows Server 2003 Datacenter 64-bit Edition | 9.2 TS2M0 | |||
| Microsoft® Windows® for 64-Bit Itanium-based Systems | 9.2 TS2M0 | |||
| z/OS | 9.2 TS2M0 | |||
| Microsoft Windows XP 64-bit Edition | 9.2 TS2M0 | |||
| Microsoft® Windows® for x64 | 9.2 TS2M0 | |||
| Microsoft Windows Server 2003 Datacenter Edition | 9.2 TS2M0 | |||
| Microsoft Windows Server 2003 Enterprise Edition | 9.2 TS2M0 | |||
| Microsoft Windows Server 2003 Standard Edition | 9.2 TS2M0 | |||
| Microsoft Windows XP Professional | 9.2 TS2M0 | |||
| Windows Vista | 9.2 TS2M0 | |||
| 64-bit Enabled AIX | 9.2 TS2M0 | |||
| 64-bit Enabled HP-UX | 9.2 TS2M0 | |||
| 64-bit Enabled Solaris | 9.2 TS2M0 | |||
| HP-UX IPF | 9.2 TS2M0 | |||
| Linux | 9.2 TS2M0 | |||
| Linux for x64 | 9.2 TS2M0 | |||
| OpenVMS on HP Integrity | 9.2 TS2M0 | |||
| Solaris for x64 | 9.2 TS2M0 | |||
The SAS® 9.2 Stored Process Web Application does not, by default, accept encoded passwords on the _PASSWORD parameter that can be included on the URL for a SAS® Stored Process request. However, you can modify the default behavior.
| Type: | Usage Note |
| Priority: |
| Date Modified: | 2019-01-04 11:42:01 |
| Date Created: | 2009-08-12 16:52:44 |