63608 - SAS® Cloud Analytic Services might fail to determine effective access controls for users

Problem Note 63608: SAS® Cloud Analytic Services might fail to determine effective access controls for users

SAS Cloud Analytic Services might be unable to determine the user's level of access when querying identities for group membership. This problem occurs when the Identities service has been configured to use the userPrincipalName attribute for the accountID (for example, user@domain).

In this scenario, you might see an error similar to the following in the CAS server logs:

2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2016] - SubmitRequestWithFiles: uri='https://example.com:443/identities/users/test/memberships?depth=10&implicit=true&limit=9999', correlator='X-SAS-Correlator: 2E5FDB8B-3840-044B-A544-0B73BA4CB285;'.

2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2019] - SubmitRequestWithFiles: status=8dbff828 httpStatus=404 'Not Found'.

2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2043] - HTTP error returned from service.

2019-01-09T18:11:45,675 INFO  [00000007] cas local 11725 sas.reportImages 3947 [tkidentmid.c:452] - No groups found for user test.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS Viya	Linux for x64	3.4

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

An update for this issue is available for SAS Viya 3.4. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.4 for Linux Deployment Guide at

http://documentation.sas.com/?softwareId=administration&softwareVersion=3.4&softwareContextId=softwareUpdates

Viya on Linux: An update for this issue is available for SAS Viya 3.4. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.4 for Linux Deployment Guide at

http://documentation.sas.com/?softwareId=administration&softwareVersion=3.4&softwareContextId=softwareUpdates

CAS might be unable to determine the user's level of access when querying identities for group membership. You see an error similar to the following: "ERROR [00000007]...SubmitRequestWithFiles...httpStatus=404 'Not Found'...HTTP error returned from service...No groups found for user test."

Type:	Problem Note
Priority:	high

Date Modified:	2019-02-19 13:30:10
Date Created:	2019-02-04 16:41:32

Support

Problem Note 63608: SAS® Cloud Analytic Services might fail to determine effective access controls for users

Operating System and Release Information