You encounter an issue in which Kerberos tickets are not automatically removed under the following conditions:

• SAS Workload Orchestrator has been configured for Negotiate authentication on UNIX.
• You connect from Internet Explorer using Integrated Windows Authentication (IWA).
• You have applied Hot Fix E3Y005.

To determine whether you are encountering this issue, monitor the /tmp directory of the SAS Workload Orchestrator master host when logging in with Internet Explorer. You will see a number of files with the naming convention /tmp/tktXXXXXX appear from initial login, and the number of these files increases every few seconds as the dashboard in the web interface is updated.

To work around this issue, use Mozilla Firefox or Google Chrome instead of Internet Explorer.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS Workload Orchestrator	64-bit Enabled AIX	9.46		9.4 TS1M6
		64-bit Enabled Solaris	9.46		9.4 TS1M6
		HP-UX IPF	9.46		9.4 TS1M6
		Linux for x64	9.46		9.4 TS1M6
		Solaris for x64	9.46		9.4 TS1M6

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

---

A fix for this issue for SAS Threaded Kernel Core Routines 9.4_M6 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/E3Q.html#65188

---

When SAS Workload Orchestrator has been configured for Negotiate authentication on UNIX, connecting from Microsoft Internet Explorer using Integrated Windows Authentication (IWA) creates Kerberos tickets on the SAS Workload Orchestrator master that are not automatically removed.

Type:	Problem Note
Priority:	high

Date Modified:	2020-01-23 08:57:37
Date Created:	2019-12-03 09:09:08