PK85098: I5/OS: LAUNCHWSADMINLISTENER MUST ADOPT USERPROFILE QEJBSVR PERMISSION AUTHORITIES

Fixes are available

APAR status

Closed as program error.

Error description

On i5/OS, an application being installed with the embedder's
toolkit script may encounter permission problems if the
userProfile used to envoke the script does not have sufficient
authorities.

Local fix

Webshpere administrative scripts will adopt QEJBSVR authority

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application      *
*                  Server v7.0 on i5/OS                        *
****************************************************************
* PROBLEM DESCRIPTION: On i5/OS, authority problems may        *
*                      result if the userProfile used to       *
*                      invoke the embedder's toolkit script    *
*                      does not have sufficient authority to   *
*                      objects that may be needed.             *
*                                                              *
****************************************************************
* RECOMMENDATION:  Apply a fixpack that contains this fix.     *
****************************************************************
On i5/OS, Websphere Application Server most client scripts
use the i5/OS handler that is invoked when the script is
called. This handler contains both a preInvoke() and a
postInvoke() method. The preInvoke() method calls a native
program that is used to swap the job's userProfile to QEJBSVR.
 The postInvoke() method is called after the script has run to
swap back to the calling userProfile.  The userPrfile QEJBSVR
is the same userProfile used to run the job in which the
Websphere Application Server is run.  It has all the required
authorities to Websphere objects.  The embedder's toolkit
script was not architected to invoke the 15/OS script handler
and did not swap to use the QEJBSVR userProfile. This means
that the calling userProfile must have sufficent authorities
to all objects that may be touched in the coarse of running
the script. Some userProfiles could run the embedder's toolkit
script where others could not.

Problem conclusion

The code has been changed to so that the embedder's
toolkit script now uses the i5/OS script handler and will swap
userProfiles to run as QEJBSVR.

The fix for this APAR is currently targeted for inclusion in
fix pack 7.0.0.5.  Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK85098
Reported component name
WEBSPHERE APP S
Reported component ID
5724J0800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-04-21
Closed date
2009-06-23
Last modified date
2009-06-23

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBSPHERE APP S
Fixed component ID
5724J0800

Applicable component levels

R700 PSY
UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
25 October 2021

Tips

PK85098: I5/OS: LAUNCHWSADMINLISTENER MUST ADOPT USERPROFILE QEJBSVR PERMISSION AUTHORITIES

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

Document Information

Share your feedback

Need support?