Usage Note 37180: The SAS® 9.2 authentication server does not work with PAM on SLES 10, HPUX 11.23, or HPUX 11.31 on Itanium
 |  |  |  |
When using sasauth with the Pluggable Authentication Module (PAM), authentication will fail due to unresolved symbols coming from pam_unix2.so.
The problem occurs on SLES 10. It does
not occur on SLES 11.
The problem occurs on HP-UX 11.23 for Itanium.
If LDAP is being accessed from HP-UX 11.23 or HP-UX 11.31, see
Usage Note 38157.
In each of these cases, the problem is the operating system's dynamic linker, and the way it loads libraries.
Messages similar to the following appear in the sasauth access log:
20090710-16:35:14 User noecw8 did not authenticate. Reason: 'PAM is not configured correctly for sasauth.' (pam) 20090710-16:36:20 User noecw8 did not authenticate. Reason: 'PAM is not configured correctly for sasauth.' (pam) 20090710-16:36:36 User noecw8 did not authenticate. Reason: 'PAM is not configured correctly for sasauth.' (pam)
Messages similar to the following appear in the UNIX system log:
Jul 24 11:46:20 sarek sasauth: PAM unable to dlopen(/lib64/security/pam_unix2.so) Jul 24 11:46:20 sarek sasauth: PAM [dlerror: /lib64/security/pam_unix2.so: undefined symbol: pam_syslog] Jul 24 11:46:20 sarek sasauth: PAM adding faulty module: /lib64/security/pam_unix2.so
For problems on SLES 10, please contact Novell's technical support group and enquire about a fix.
SAS Technical support does not have the Novell defect or patch number.
SAS is offering a workaround to this operating system problem by providing a sasauth module that is statically linked to the PAM libraries. The file in .zip format can be downloaded from the following location:
For 64-bit SAS:
ftp://ftp.sas.com/techsup/download/unix/ZQJsasauth.pam.sles10.zip
For 32-bit SAS: ftp://ftp.sas.com/techsup/download/unix/ZQJsasauth.pamstatic32.zip
The included sasauth file must be installed in SAS9.2/utilities/bin, and it must be setuid root.
In the following example, !SASROOT is the absolute path to the SAS 9.2 installation directory:
$ su root # cd !SASROOT/utilities/bin # chown root sasauth # chmod 4755 sasauth # exit
For problems on HP-UX, please contact Hewlett-Packard.
When contacting HP, refer to ID# QXCR1000962691.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | Base SAS | Linux for x64 | 9.2 TS2M2 | |
| HP-UX IPF | 9.2 TS2M2 | |||
| Type: | Usage Note |
| Priority: |
| Date Modified: | 2010-03-11 12:55:04 |
| Date Created: | 2009-09-15 13:13:51 |