PH08265: CANNOT REMOVE AUDIT NOTIFICATION: SECJ7387E: AUDIT NOTIFICATION IN USE.

9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• Cannot delete an Audit Notification even after disabling the
  "Audit Monitor". Get msgs:
  An error occurred deleting xxxx_NOTIFICATION
  SECJ7357E: Configuration error detected in the audit
  configuration
  SECJ7387E: Audit notification in use.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.5                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Deleting Audit Notification fails       *
  *                      with: SECJ7357E: Configuration error    *
  *                      detected in the audit configuration     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Customer creates a Audit Notification. They then enable Audit
  Notification Monitor. They later decide to delete the Audit
  Notification, this fails with message:
  SECJ7357E: Configuration error detected in the audit
  configuration
  SECJ7387E: Audit notification in use.
  Disabling the Audit Notification Monitor, nor disabling Audit
  itself allows the Notification to be deleted.
  

Problem conclusion

• The code changed to allow the deletion of Audit
  Notifications.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.16 and 9.0.5.0.  Please refer to the
  Recommended Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?
  rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R850 PSY

     UP