PM25325: NAMEFORMAT ATTRIBUTE IS NOT BEING SET CORRECTLY

7.0.0.17: Java SDK 1.6 SR9 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.19: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.21: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere
7.0.0.23: Java SDK 1.6 SR10 FP1 Cumulative Fix for WebSphere
7.0.0.25: Java SDK 1.6 SR11 Cumulative Fix for WebSphere Application Server
7.0.0.27: Java SDK 1.6 SR12 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• The NameFormat property of the SAML Attribute
  MaximumStringLength is always set to the string "NameFormat"
  regardless of the specified property.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server V7.0 users *
  *                  of WS-Security enabled JAX-WS applications  *
  *                  and SAML                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: The NameFormat property of the          *
  *                      MaximumStringLength SAML attribute      *
  *                      is always set to the string             *
  *                      "NameFormat"                            *
  ****************************************************************
  * RECOMMENDATION:  Install a fix pack that includes this APAR  *
  ****************************************************************
  When a user attempts to set the NameFormat property of the
  MaximumStringLength SAML attribute they will find that it is
  always set to the string "NameFormat", ignoring the set value.
  
  For example, if the NameFormat attribute was being set to
  "http://www.w3.org/2001/XMLSchema#integer" you would see the
  following attribute in the SAML token:
  
  "<saml:Attribute Name="MaximumStringLength"
  NameFormat="NameFormat">
  <saml:AttributeValue>6</saml:AttributeValue></saml:Attribute></s
  aml:AttributeStatement></saml:Assertion>"
  
  instead of:
  
  "<saml:Attribute Name="MaximumStringLength"
  NameFormat="http://www.w3.org/2001/XMLSchema#integer">
  <saml:AttributeValue>6</saml:AttributeValue></saml:Attribute></s
  aml:AttributeStatement></saml:Assertion>"
  

Problem conclusion

• An incorrect assignment in the code set the NameFormat
  property of the MaximumStringLength SAML attribute to the
  value "NameFormat".
  
  The code fix resolves this incorrect assignment to the correct
  property value.
  
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 7.0.0.17.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R700 PSY

     UP