Problem Note 63608: SASĀ® Cloud Analytic Services might fail to determine effective access controls for users
SAS Cloud Analytic Services might be unable to determine the user's level of access when querying identities for group membership. This problem occurs when the Identities service has been configured to use the userPrincipalName attribute for the accountID (for example, user@domain).
In this scenario, you might see an error similar to the following in the CAS server logs:
2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2016] - SubmitRequestWithFiles: uri='https://example.com:443/identities/users/test/memberships?depth=10&implicit=true&limit=9999', correlator='X-SAS-Correlator: 2E5FDB8B-3840-044B-A544-0B73BA4CB285;'.
2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2019] - SubmitRequestWithFiles: status=8dbff828 httpStatus=404 'Not Found'.
2019-01-09T18:11:45,675 ERROR [00000007] cas local 11725 sas.reportImages 3947 [tkmtrbMethods.c:2043] - HTTP error returned from service.
2019-01-09T18:11:45,675 INFO [00000007] cas local 11725 sas.reportImages 3947 [tkidentmid.c:452] - No groups found for user test.
Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.
Operating System and Release Information
SAS System | SAS Viya | Linux for x64 | 3.4 | | | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
CAS might be unable to determine the user's level of access when querying identities for group membership. You see an error similar to the following: "ERROR [00000007]...SubmitRequestWithFiles...httpStatus=404 'Not Found'...HTTP error returned from service...No groups found for user test."
Type: | Problem Note |
Priority: | high |
Date Modified: | 2019-02-19 13:30:10 |
Date Created: | 2019-02-04 16:41:32 |