The SAS® Stored Process Server will not start successfully if the SAS Trusted User account or the SAS General Servers login account is an Unrestricted User. The following error messages will appear in the SAS Object Spawner log file.
Error authenticating user sassrv in function LogonUser.<br>
Error 1326 (Logon failure: unknown user name or bad password.).
The credentials specified for the SASApp - Stored Process Server
(A5IWT4CP.AV000005) server definition failed to authenticate.<br>
Therefore this server definition will not be included.<br>
The password obtained from the metadata indicates that it was
obtained by an user that has unrestricted access.
Please check your configuration.
If you run the Validate test for your SAS Stored Process Server using SAS® Management Console, you will receive the following error message:
SEVERE: Connection refused: connect
If you encounter these error messages, use SAS Management Console and follow these steps to verify the metadata properties that are assigned to the SAS Trusted User and the SAS General Servers group.
- Under the User Manager plug-in, open the properties for the SAS Administrator group.
- Select the Members tab to show the members of this group.
- The SAS Trusted User and SAS General Servers group should not be members of the SAS Administrator group. If necessary, remove SAS Trusted User and SAS General Servers group from the SAS Administrator group.
- Log on to SAS Management Console using the sassrv user account. Then, check the message at the bottom of the window. If the message says sassrv as Unrestricted User, then the sassrv account is an unrestricted-user account.
- Log on to SAS Management Console using the sastrust@saspw user account. Then, check the message at the bottom of the window. If the message says sastrust@saspw as Unrestricted User, then the sastrust@saspw account is an unrestricted-user account.
- Under User Manager in SAS Management Console,
- Check the Members tab in the properties for the Metadata Server: Unrestricted role. Verify that neither the SAS General Servers group (which uses the sassrv login account) nor the SAS Trusted User is a member of the role.
- Check the Groups and Roles tab in the properties for SAS Trusted User. The SAS Trusted User should be a member of the SAS General Servers group and the SAS System Services group.
- Check the Members tab in properties for the SAS General Servers group. For troubleshooting purposes, the only member of SAS General Servers should be the SAS Trusted User.
- Check the Groups and Roles tab in the properties for the SAS General Servers group. For troubleshooting purposes, SAS General Servers should not be a member of any groups or have any roles assigned.
- Check the adminUsers.txt file for SAS® Metadata Server to verify that neither sastrust@saspw nor sassrv is listed in this file.
Restart the SAS Object Spawner after any changes are made in the User Manager plug-in.
Check the start-up messages at the top of the Object Spawner log file, to ensure that the messages above no longer appear.
If your SAS Stored Process Server still does not start successfully, then it should be helpful to turn on additional logging for your object spawner. For details, see SAS Note 34893, "Turning on additional logging for the SAS Object Spawner."