Providing software solutions since 1976

• Log in
• Create profile
• Welcome
  [Log out]
• Edit profile

• Print  |
• Feedback  |
• Share

  • E-mail

  
  
  

  E-mail This Page

  Your Name:*
  Your E-mail:*
  Recipient E-mail:*
  Send a copy to me
  Personal Message:
  
  

  * indicates a required field

The information in this Usage Note applies to SAS® 9.2 and 9.3.
Please see Usage Note 33751 for instructions for using PROC PERMTEST in SAS 9.1.3.

A message of the following type can mean that an authentication failure has occurred at the host level:

     20081022:15.50.27.30: 00000000:ERROR: Access denied.

PROC PERMTEST provides a low-level tool to test authentication, and you can use it to determine if the authentication problem is in fact occurring at the host level. PROC PERMTEST performs two functions: It calls the sasauth module to test host-based authentication, then it tests user permissions.

Before running PROC PERMTEST, you will need to enable logging. Here are instructions:

Modify the SASFoundation/SAS9.x/utilities/bin/sasauth.conf file. Note that the following lines in that file are commented out:

debugLog=/tmp/sasauth-debug.%d.log
accessLog=/tmp/sasauth-access.%d.log
errorLog=/tmp/sasauth-error.%d.log
logOwner=0

You must UNcomment those lines. In addition, you should set the value for logOwner to the uid number of the userid being used to install SAS 9.2. To obtain that uid number, issue this command from the UNIX system prompt:

id installer_id

where installer_id is the real userid being used to install SAS. For example:

id sas 

The results will be similar to the following:

uid=21987(sas) gid=344(sas) groups=33536(),36599(),105(techsup)

Note the value for uid= in your results and substitute that value for logOwner when you modify the sasauth.conf file. For example:

logOwner=21987

Once you have modified and saved the sasauth.conf file, run PROC PERMTEST by invoking SAS from the SASFoundation/9.2 directory as follows:

     ./sas -path ./utilities/src/auth -nodms

In NODMS mode, you are prompted with a ? for SAS statements. As shown in the example below, enter the PROC PERMTEST; statement, followed by a RUN; statement.

When prompted, enter the userid and password to be tested.

If the authentication test is successful, then the host authentication is working properly. If the authentication test fails, however, then your UNIX system administrator must determine why host authentication is failing.

Next, the permissions test begins. This will show whether or not the user has appropriate permissions, allowing a file to be written. When prompted, enter the absolute path to a location where a file can be created.

NOTE: If you do not provide an absolute path, an attempt is made to create the file in the !SASROOT directory. Most users do not have write permissions for that directory, so the test will fail. Avoid this problem by providing an absolute path.

Following is an example of the output PROC PERMTEST generates:

       1? proc permtest;
       2? run;
     Authentication Test
     Enter userid:
     testuser
     Enter password:
     Authentication successful.

     Permissions Test
     Enter a scratch filename:
     /tmp/testfile
     Test file written successfully.

     NOTE: PROCEDURE PERMTEST used (Total process time):
           real time           36.15 seconds
           cpu time            0.01 seconds
   

       3? endsas;


     NOTE: SAS Institute Inc., SAS Campus Drive, Cary, NC USA 27513-2414
     NOTE: The SAS System used:
           real time           48.67 seconds
           cpu time            0.06 seconds

Operating System and Release Information