The SAS/CONNECT client executing on UNIX and Windows does not initiate a Kerberos SIGNON to a SAS/CONNECT spawner when the SASCMD
SAS global option is set. Instead, when the SAS option SASCMD is set, an MP Connect / SASCMD SAS session is initiated.

A temporary workaround is to clear the value specified for the SASCMD option.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.

After applying the associated hot fix, you can force the Kerberos SIGNON by specifying USER=_SSPI_ in the SIGNON statement regardless of the value that is specified for SASCMD option.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS/CONNECT	Solaris for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Linux for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		HP-UX IPF	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		64-bit Enabled Solaris	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft® Windows® for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8 Enterprise 32-bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8 Enterprise x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8 Pro 32-bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8 Pro x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8.1 Enterprise 32-bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8.1 Enterprise x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8.1 Pro 32-bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 8.1 Pro x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 10	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows 11	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2008	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2008 R2	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2008 for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2012 Datacenter	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2012 R2 Datacenter	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2012 R2 Std	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2012 Std	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2016	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2019	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Microsoft Windows Server 2022	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Enterprise 32 bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Enterprise x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Home Premium 32 bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Home Premium x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Professional 32 bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Professional x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Ultimate 32 bit	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Windows 7 Ultimate x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

---

Viya on Linux: An update for this issue is available for SAS Viya 3.5. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.5 for Linux Deployment Guide at

http://documentation.sas.com/?softwareId=administration&softwareVersion=3.5&softwareContextId=softwareUpdates

---

A fix for this issue for Base SAS 9.4_M7 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/I9R.html#69105

---

To add Kerberos SIGNON support for UNIX client and to add support to force Kerberos SIGNON when SASCMD option is set

Type:	Problem Note
Priority:	medium

Date Modified:	2026-04-28 10:56:53
Date Created:	2022-04-18 23:53:34