PM68019: JVM LEAK CAN OCCUR WHEN A SECJ0053E ERROR OCCURS

7.0.0.27: WebSphere Application Server V7.0 Fix Pack 27
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
7.0.0.27: Java SDK 1.6 SR12 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• A memory leak can occur in
  com/ibm/ws/security/config/SecurityConfigResource when a
  SECJ0053E occurs.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Version 7.                           *
  ****************************************************************
  * PROBLEM DESCRIPTION: When SECJ0053E errors occur             *
  *                      com/ibm/ws/security/config/SecurityConf *
  *                      igResource objects may be leaked        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Error handling in EJSSecurityCollaborator is not sufficient to
  clean up the SecurityConfigResource object when
  some authorization errors occur. If there are many thousands
  of SECJ0053E errors it could result in a Out of Memory, OOM,
  error.
  Here is an example of the SECJ0053E:
  [8/15/12 15:57:51:499 EDT] 00000039 SecurityColla A
  SECJ0053E: Authorization failed for
  myhost.company.com:389/myuser2 while invoking
  (Home)quickSec50EAR.ear#messengerEJB.jar#messengerEJB
  create::2  is not granted any of the required roles:
  AuthUser
  

Problem conclusion

• EJSSecurityCollaborator error handling has been updated to
  perform proper cleanup.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 7.0.0.27.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R61A PSY

     UP

• R61H PSY

     UP

• R61I PSY

     UP

• R61P PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R61Z PSY

     UP