Problem Note 62933: A one-time password (OTP) for a job flow instance can incorrectly be used again by a job flow instance for another user
 |  |  |  |  |
In SAS® Infrastructure for Risk Management, a one-time password (OTP) for a job flow instance can incorrectly be used again by a job flow instance for another user. You encounter this issue in the following scenarios:
- Tasks declare the requirement of OTP in Business Process Model and Notation (BPMN).
- Tasks contain generic library data that require OTP.
There are no errors or warnings.
The root cause of this issue is that the worker threads that are running the tasks are stored in a worker pool and are reused. So, the stored UserContext could be from a previously run task by a different user.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Infrastructure for Risk Management | Microsoft® Windows® for x64 | 3.4 | 3.5 | 9.4 TS1M5 | 9.4 TS1M5 |
| Linux for x64 | 3.4 | 3.5 | 9.4 TS1M5 | 9.4 TS1M5 | ||
A fix for this issue for SAS Infrastructure for Risk Management 3.4 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/B5C.html#62933
In SAS® Infrastructure for Risk Management, a one-time password for a job flow instance can be used again by a job flow instance for another user.
| Type: | Problem Note |
| Priority: | high |
| Topic: | Analytics ==> Financial Analysis |
| Date Modified: | 2018-10-03 10:34:30 |
| Date Created: | 2018-09-17 11:12:36 |