When you use Integrated Windows Authentication (IWA) to authenticate to your SAS servers, the following errors might display in the Log window when you try to update table metadata in the Data Library Manager in SAS^® Management Console:

ERROR: Invalid credentials
ERROR: Access denied.

In SAS Management Console, the computer value that you specify for your login profile must match exactly the value for the -METASERVER system option in the sasv9.cfg file in your application server configuration directory.

When the SAS Object Spawner launches the SAS Workspace Server, the SAS Object Spawner issues a one-time-use password for the current user that establishes a connection to the SAS^® Metadata Server. The Update Metadata task explicitly assigns the -METASERVER option again in its generated code. The value of the computer name set in the login profile is used. If the computer names in both locations do not match exactly, then the METALIB procedure in the generated code tries to use the generated one-time-use password to open an additional connection to the SAS Metadata Server.

For example, if you have a fully qualified computer name in one location but a short name or localhost in the other location, the errors occur. The one-time-use password has expired and cannot be used again.

To work around this issue, modify the computer name in your login profile so it matches exactly the computer name in the application server configuration file. As long as the computer names match, PROC METALIB is able to reuse the existing metadata server connection, and the update succeeds.

Operating System and Release Information