58121 - Intermittent failures occur when you attempt to log on to SAS® Visual Analytics or other SAS® client applications

Problem Note 58121: Intermittent failures occur when you attempt to log on to SAS® Visual Analytics or other SAS® client applications

An intermittent failure might occur when you attempt to log on to SAS Visual Analytics or another SAS client application.

The error message reported to the SAS-configuration-directory/Web/WebAppServer/SASServer##/logs/server.log file might look similar to the following:

2016-04-27 14:03:12,350 ERROR (tomcat-http--50) [org.apache.catalina.core.ContainerBase.[Catalina].[localhost]. [/SASVisualAnalyticsViewer].[jsp]] Servlet.service() for servlet [jsp] in context with path [/SASVisualAnalyticsViewer] threw exception java.lang.IllegalStateException: Unable to find local session... at com.sas.svcs.authentication.helper.UserSessionFactory.getLocalSession(UserSessionFactory.java:187) ... Caused by: com.sas.services.security.CredentialLoginServiceException: The application could not log on to the server "mymetahost.mycompany.com:8561". The user ID "myuser" or the password is incorrect. [ com.sas.services.security.login.CredentialException: The application could not log on to the server "mymetahost.mycompany.com:8561". The user ID "myuser" or the password is incorrect. [ com.sas.services.connection.InvalidCredentialsException: The application could not log on to the server "mymetahost.mycompany.com:8561". The user ID "myuser" or the password is incorrect. [ org.omg.CORBA.NO_PERMISSION: Access denied. [ com.sas.iom.SASIOMDefs.GenericError: Unable to contact the LDAP server. [ com.sas.iom.SASIOMDefs.GenericError: Possible cause: Server certificate not found, port not SSL enabled [ com.sas.iom.SASIOMDefs.GenericError: LDAP SSL Message ldapsNegotiate() failed -2143305722. [ com.sas.iom.SASIOMDefs.GenericError: Possible cause: Server certificate not found, port not SSL enabled [ com.sas.iom.SASIOMDefs.GenericError: LDAP SSL Message ldapsNegotiate() failed -2143305722. [ com.sas.iom.SASIOMDefs.GenericError: Possible cause: Server certificate not found, port not SSL enabled [ com.sas.iom.SASIOMDefs.GenericError: LDAP SSL Message ldapsNegotiate() failed -2143305722. [ com.sas.iom.SASIOMDefs.GenericError: Possible cause: Server certificate not found, port not SSL enabled [ com.sas.iom.SASIOMDefs.GenericError: LDAP SSL Message ldapsNegotiate() failed -2143305722. ] ] ] ] ] ] ] ] ] ] ] ] at com.sas.services.user.UserContext.authenticate(UserContext.java:2471) ... Caused by: com.sas.iom.SASIOMDefs.GenericError: Unable to contact the LDAP server. at com.sas.iom.orb.brg.Engine.parseErrorXML(Engine.java:2049) ... 103 more Caused by: com.sas.iom.SASIOMDefs.GenericError: Possible cause: Server certificate not found, port not SSL enabled ... 104 more Caused by: com.sas.iom.SASIOMDefs.GenericError: LDAP SSL Message ldapsNegotiate() failed -2143305722.

The error occurs when SSL has been configured for the connection to the LDAP/Active Directory server.

The error stack traces show that the return code of -2143305722 is logged many times. This error code indicates that a time-out has occurred during the negotiation of the SSL connection to the LDAP/Active Directory server.

Without debug logging enabled, the metadata server log located in the SAS-configuration-directory/SASMeta/MetadataServer/Logs directory might report the following message:

2016-03-05T12:28:41,084 WARN [84315] :sas - New client connection (2147) rejected from server port 8561 for user myuser. Peer IP address and port are [::ffff:10.182.29.54]:54236 for APPNAME=Visual Analytics Transport Service 7.1.

In order to verify that you are encountering the problem, you need to enable debug logging as discussed in SAS Note 51911: "Troubleshooting SAS^® Metadata Server authentication issues in SAS^® 9.3 and later."

The debug logging shows that the following messages occur in the log just prior to the "New client connection (####) rejected" message:

2016-03-05T12:28:41,083 DEBUG [84315] :sas - called tkWait, status: -2143305722 2016-03-05T12:28:41,084 DEBUG [84315] :sas - Leaving ldapNegotiate, status: -2143305722 2016-03-05T12:28:41,084 DEBUG [84315] :sas - ldapsNegotiate failed 2016-03-05T12:28:41,084 TRACE [84315] :sas - ldap_open: failed 2016-03-05T12:28:41,084 DEBUG [84315] :sas - tkldOpen encountered a failure in ldap_open. 2016-03-05T12:28:41,084 DEBUG [84315] :sas - Provider failed: 80bfd100

To work around the problem, disable SSL when connecting to the LDAP/Active Directory server.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Metadata Server	Microsoft® Windows® for x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8 Enterprise 32-bit	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8 Enterprise x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8 Pro 32-bit	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8 Pro x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8.1 Enterprise 32-bit	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8.1 Enterprise x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8.1 Pro 32-bit	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 8.1 Pro x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows 10	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2008	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2008 R2	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2008 for x64	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2012 Datacenter	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2012 R2 Datacenter	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2012 R2 Std	9.4	9.4_M4		9.4 TS1M4
		Microsoft Windows Server 2012 Std	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Enterprise 32 bit	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Enterprise x64	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Home Premium 32 bit	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Home Premium x64	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Professional 32 bit	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Professional x64	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Ultimate 32 bit	9.4	9.4_M4		9.4 TS1M4
		Windows 7 Ultimate x64	9.4	9.4_M4		9.4 TS1M4
		64-bit Enabled AIX	9.4	9.4_M4		9.4 TS1M4
		64-bit Enabled Solaris	9.4	9.4_M4		9.4 TS1M4
		HP-UX IPF	9.4	9.4_M4		9.4 TS1M4
		Linux for x64	9.4	9.4_M4		9.4 TS1M4
		Solaris for x64	9.4	9.4_M4		9.4 TS1M4

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

Type:	Problem Note
Priority:	medium

Date Modified:	2016-05-09 09:53:48
Date Created:	2016-04-27 11:08:51

Support

Problem Note 58121: Intermittent failures occur when you attempt to log on to SAS® Visual Analytics or other SAS® client applications

Operating System and Release Information