PH16017: FFDC DATA OUTPUT MAY DISPLAY JAAS CONFIGURATION INFORMATION

8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3

APAR status

• Closed as program error.

Error description

• During the generation of FFDC data files on WebSphere
  Application Server, usually during an exception, the JAAS
  configuration may be output to the FFDC file.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Provide an option to turn off JAAS      *
  *                      config dump in FFDC                     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  By default, WebSphere writes current JAAS configuration
  into FFDC file. In case JAAS configuration contains sensitive
  information, it is good to have an option to not to include
  the JAAS configuration in the FFDC file.
  

Problem conclusion

• This apar will provide an option to not to include JAAS
  configuration information into FFDC file.
  
  When following security custom property is set to false,
  JAAS configuration information will not be written into FFDC
  file.
  
  Property: com.ibm.websphere.security.dumpJaasConfig
  Value   : false (Default value is true)
  
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.17 and 9.0.5.3.  Please refer to the
  Recommended Updatespage for delivery information:
  http://www.ibm.com/support/docview.wss?
  rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP