Problem Note 62324: The SAS® 9.4 Deployment Backup and Recovery tool prints SAS® encoded password values in the backupserver.log file
The Deployment Backup and Recovery tool prints SAS encoded password values in the backupserver.log file. This file is located in SAS-configuration-directory\LevN\Backup\.
In the example here, the SAS encoded password for the sasadm@saspw user is printed in the log as {sas002}1D57933958C580064BD3DCA81A33DFB2.
Executing the command: backup -source content -client BackupService -sessionid 2018-04-18T18_57_44 -configbase C:\SAS\Config\Lev1/Backup -sharedvaultbase \\hostmachine\CentralVault -sasroot C:\Program Files\SASHome/SASFoundation/9.4 -sashome C:\Program Files\SASHome -host yourhost.domain.com -port 80 -user sasadm@saspw -pw {sas002}1D57933958C580064BD3DCA81A33DFB2 -httpprotocol http -tier tier1
For SAS deployments in UNIX operating environments, the backupserver.log file is owned by the account that installed the SAS software. However, for SAS deployments in Microsoft Windows operating environments, SAS® Deployment Wizard creates default security permissions for some folders and files. Therefore, in Windows environments that have such settings, users other than the user who performed the installation might be able to read the backupserver.log.
Click the Hot Fix tab in this note to access the hot fix for this issue.
The hot fix replaces the SAS encoded password values with masked values.
Operating System and Release Information
SAS System | SAS Deployment Backup and Recovery Tool | Microsoft® Windows® for x64 | 9.4 | 9.43 | 9.4 TS1M0 | 9.4 TS1M5 |
64-bit Enabled AIX | 9.4 | 9.43 | 9.4 TS1M0 | 9.4 TS1M5 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Type: | Problem Note |
Priority: | high |
Date Modified: | 2018-06-05 14:05:35 |
Date Created: | 2018-05-15 14:21:20 |