PM72151: LOGIN MIGHT FAIL WHEN USER ID CONTAINS A POUND SIGN.

8.5.0.1: WebSphere Application Server V8.5 Fix Pack 1
8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2

APAR status

• Closed as program error.

Error description

• This issue is due to how to handle "#" (pound sign). According
  to specification which IBM is using, this character is only
  escaped when it appears as a first character after equal sign.
  However some of LDAP implementations do escape "#" no matter
  where it exists.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server with Standalone LDAP User registry.  *
  ****************************************************************
  * PROBLEM DESCRIPTION: Login might fail when user ID           *
  *                      contains a pound sign.                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to code defect, Standalone LDAP user registry might not
  treat LDAP distinguished name which contains a pound sign. As
  a result, LDAP search command is invoked with incorrect
  distiguished name, then the search request fails.
  

Problem conclusion

• With this fix, a pound sign is now handled properly.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.6 and 8.5.0.2.  Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP