PM71412: WRONG USERID IN AUDIT FILE

8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2

APAR status

• Closed as program error.

Error description

• After enabling security auditing for ADMIN_REPOSITORY_SAVE
  with SUCCESS events.
  The binary audit file  doesn't show the userid
  (AppUserName) who did the configuration change  but shows
  server:
  PRCELLENetwork_PREDNODEManager_WSPEDEP in AppUserName field.
  

Local fix

• no
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.5                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: After enabling Security                 *
  *                      Auditing, Websphere Application Server  *
  *                      does not display on the Audit files     *
  *                      the user who makes configuration        *
  *                      changes.                                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  After enabling Security Auditing Websphere Application Server
  is not displaying on the Audit files the user who made
  configuration changes.
  

Problem conclusion

• Support has been modified such that everytime a configuration
  change is done, the user id gets displayed on the Audit Files.
  
  APAR PM71412 is currently targeted for inclusion in
  Fix Pack 8.5.0.2 of WebSphere Application Server.
  
  Please refer to the Recommended Updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  
  In addition, please refer to URL:
  http://www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack PTF information.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R850 PSY

     UP