On SAS 9.4M8, if you use Integrated Windows Authentication (IWA) to log on to the following Java clients, you need to apply the hot fixes available in SAS Note 71112:

• SAS^® Enterprise Miner^™ Client
• SAS^® Forecast Studio
• SAS^® Forecast Project Manager
• SAS^® Time Series Studio

In addition to applying the hot fixes, you need to complete the following steps on each middle-tier node in order for IWA to work with these clients:

1. Go to the /<SASHome>/SASWebInfrastructurePlatform/9.4/Configurable/wars/sas.svcs.logon/
   WEB-INF/classess directory.
2. Make a backup of the application.properties.orig file in a different location (that is, /backups).
3. Add the following lines to the end of the application.properties.orig file:

##

# Enable to keep the old TGT behavior for the Java clients like SAS Enterprise Miner Client and SAS Forecast Studio.

#

sas.ticket.createtgt.keepoldtgt=true

4. Save the change.
5. Rebuild and redeploy the SAS^® Web Infrastructure Platform web application. See Administer SAS Web Applications in the Middle-Tier Administration Guide for more details.
6. After you complete the rebuild and redeploy of the SAS Web Infrastructure Platform web application, ensure that the /<SASConfig>/Lev#/Web/WebAppServer/SASServer1_1/sas_webapps/sas.svcs.logon.war/WEB-INF/classes/application.properties file has the sas.ticket.createtgt.keepoldtgt=true setting was added.
7. Restart SASServer1_1 to pick up the change:

• • For Unix systems, go to the <SASConfig>/Lev#/Web/WebAppServer/SASServer1_1/bin directory and run the following commands:
    • ./tcruntime-ctl.sh stop
    • ./tcruntime-ctl.sh start
  • For Windows systems, go to the Windows Services dialog box, locate SASServer1_1, and restart it.

Notes:

• The instructions are the same for Windows servers except the forward slashes are changed to backslashes. 
• If future maintenance or upgrades are done, this change might be reverted, and you might need to complete these steps again.