PI54809: THE "COM.IBM.WEBSPHERE.SECURITY.SPNEGO.USERACMAPMAPPINGTOSAF" PROPERTY IS NOT DISPLAYED CORRECTLY IN THE ADMIN CONSOLE.

8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• In the admin console under Global Security -> SPNEDO web
  authentication, the "Map Kerberos principles to SAF identities
  using the SAF RACMAP profiles" checkbox is displayed
  incorrectly.  If the
  "com.ibm.websphere.security.spnego.useRACMAPMappingToSAF"
  property has a value of true, the "Map Kerberos
  principles to SAF identities using the SAF RACMAP profiles"
  checkbox will remain unchecked in the admin console.
  
  In the admin console, if the "Map Kerberos principles to
  SAF identities using the SAF RACMAP profiles" checkbox is
  enabled and the changes are saved, the
  "com.ibm.websphere.security.spnego.useRACMAPMappingToSAF"
  property will be set to true.  However, once the user logs out
  and logs back in to the admin console the "Map Kerberos
  principles to SAF identities using the SAF RACMAP profiles"
  checkbox will be unchecked.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.0 and V8.5                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: The one of the fields of the SPNEGO     *
  *                      web authentication panel in the         *
  *                      AdminConsole is not display the value   *
  *                      properly.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The check box named "Map Kerberos principals to SAF identities
  using the SAF RACMAP profiles" of the SPNEGO web
  authentication panel in the Admin Console might not properly
  set the collect value. This is due to the code defect while
  propagating the configured information.
  

Problem conclusion

• With this fix, the value is properly set.
  
  APAR PI54809 is currently targeted for inclusion in Fix Packs
  8.0.0.13 and 8.5.5.10 of WebSphere Application Server.
  
  Please refer to the Recommended Updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  
  In addition, please refer to URL:
  http://www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack PTF information.
  
  _WL3SEC _TWAS _ZOS _ADMINCONSOLE _SPNEGO
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R800 PSY

     UP