Problem Note 65188: Kerberos tickets from IWA connections to SAS® Workload Orchestrator from IE are not automatically removed from the tmp directory
 |  |  |  |  |
You encounter an issue in which Kerberos tickets are not automatically removed under the following conditions:
- SAS Workload Orchestrator has been configured for Negotiate authentication on UNIX.
- You connect from Internet Explorer using Integrated Windows Authentication (IWA).
- You have applied Hot Fix E3Y005.
To determine whether you are encountering this issue, monitor the /tmp directory of the SAS Workload Orchestrator master host when logging in with Internet Explorer. You will see a number of files with the naming convention /tmp/tktXXXXXX appear from initial login, and the number of these files increases every few seconds as the dashboard in the web interface is updated.
To work around this issue, use Mozilla Firefox or Google Chrome instead of Internet Explorer.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Workload Orchestrator | 64-bit Enabled AIX | 9.46 | 9.4 TS1M6 | ||
| 64-bit Enabled Solaris | 9.46 | 9.4 TS1M6 | ||||
| HP-UX IPF | 9.46 | 9.4 TS1M6 | ||||
| Linux for x64 | 9.46 | 9.4 TS1M6 | ||||
| Solaris for x64 | 9.46 | 9.4 TS1M6 | ||||
A fix for this issue for SAS Threaded Kernel Core Routines 9.4_M6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/E3Q.html#65188
When SAS Workload Orchestrator has been configured for Negotiate authentication on UNIX, connecting from Microsoft Internet Explorer using Integrated Windows Authentication (IWA) creates Kerberos tickets on the SAS Workload Orchestrator master that are not automatically removed.
| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2020-01-23 08:57:37 |
| Date Created: | 2019-12-03 09:09:08 |