Fixes are available
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
APAR status
Closed as program error.
Error description
The following error while starting OSGi application is in SystemOut.log and the application fails to start: RoleBasedAuth E SECJ0326E: No received or invocation credential exist on the thread. The Role based authorization check will not have an accessId of the caller to check. The parameters are: role name administrator. The stack trace is java.lang.Exception: Invocation and received credentials are both null at com.ibm.ws.security.role.RoleBasedAuthorizerImpl.isGrantedAnyRol e (RoleBasedAuthorizerImpl.java:990) at com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess (AdminAuthorizerImpl.java:787) at com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess (AdminAuthorizerImpl.java:252) at com.ibm.ws.management.repository.FileRepository.checkInvocationP ermission(FileRepository.java:2504) at com.ibm.ws.management.repository.FileRepository.extract(FileRepo sitory.java:1105) at com.ibm.ws.management.repository.FileRepository.extract(FileRepo sitory.java:1067) at com.ibm.ws.management.repository.FileRepository.extract(FileRepo sitory.java:1056) at com.ibm.websphere.management.application.EditionHelper.getApplic ationEditions(EditionHelper.java:519) at com.ibm.ws.xs.httpsession.component.XSDDComponentImpl.createMeta Data(XSDDComponentImpl.java:284)
Local fix
Testfix for that issue was provided and BPM L2 support tested it. Official fix is required.
Problem summary
**************************************************************** * USERS AFFECTED: WebSphere Application Server users of OSGi * * applications * **************************************************************** * PROBLEM DESCRIPTION: "SECJ0326E: No received or invocation * * credential exist on the thread." * * occurs when starting an OSGi * * application. * **************************************************************** * RECOMMENDATION: * **************************************************************** The BundleBasedModuleLifeCycleManager failed to set up the required invocation credentials on the thread when notifying BundleBasedModuleLifeCycleParticipants, typically MetaDataFactory objects registered with the runtime, of application state changes.
Problem conclusion
The BundleBasedModuleLifeCycleManager was modified to set up the required invocation credentials on the thread when notifying registered BundleBasedModuleLifeCycleParticipants of state changes for the OSGi application. The fix for this APAR is currently targeted for inclusion in fix pack 8.5.5.9. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PI52887
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2015-11-23
Closed date
2016-02-03
Last modified date
2016-02-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R850 PSY
UP
Document Information
Modified date:
28 April 2022