PM83482: A DELAY MAY BE EXPERIENCED WITH SYSTEM MANAGEMENT OPERATIONS FOR LARGE TOPOLOGIES USING GLOBAL SECURITY AND LDAP REPOSITORIES

Fixes are available

APAR status

Closed as program error.

Error description

When upgrading from an earlier WebSphere Application Server fix
pack level to V7.0.0.27, V8.0.0.5, or V8.5.0.1, a performance
delay might be observed when performing administrative tasks
when global security is enabled with a LDAP repository.
This is due to a regression introduced by APAR PM66913.  The
delay will occur for each "queryNames" call, which could come
from a wsadmin script or an action taken in the administrative
console.  The delay will be more noticeable in large topologies
that include many nodes, as the queryNames call will be sent to
each node agent.  The delay will only occur the first time that
a queryNames call establishes a connection to a node agent when
it has to authenticate.  On subsequent calls, the login data is
found in the security cache, and the authentication will not
need to be done again, which prevents the problem.

In a trace of the System Management and Security components,
delays between queryNames calls will be seen:

[2/23/13 17:18:01:254 EST] 00000d0c AdminServiceI 3 remote
queryNames against:
[2/23/13 17:18:01:676 EST] 00000d0c AdminServiceI 3 remote
queryNames against:
[2/23/13 17:18:02:089 EST] 00000d0c AdminServiceI 3 remote
queryNames against:
[2/23/13 17:18:02:513 EST] 00000d0c AdminServiceI 3 remote
queryNames against:
[2/23/13 17:18:02:954 EST] 00000d0c AdminServiceI 3 remote
queryNames against:

This is due to a delay in the tokenBasedAuth method in the
Security component:

[2/23/13 17:18:02:091 EST] 00000062 CallRouter  > route Entry
                               opName=queryNames,
objName=WebSphere:type=ListenerPort,name=FN.Router.Priority1QLis
tener,*
secDataFilled=true, authByToken=true, token length=276, map={}
[2/23/13 17:18:02:091 EST] 00000062 CallRouter  > tokenBasedAuth
Entry
[2/23/13 17:18:02:092 EST] 00000062 CallRouter  3 Attemping to
extract subject from a V6+ token.  <----------THIS RUNS FOR HALF
A SECOND
[2/23/13 17:18:02:510 EST] 00000062 CallRouter  < tokenBasedAuth
Exit

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application      *
*                  Server                                      *
****************************************************************
* PROBLEM DESCRIPTION: A delay may be noticed for Large        *
*                      Topologies using Global Security        *
*                      and LDAP repositories.                  *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
When upgrading to WebSphere Application Server 7.0.0.27,
8.0.0.5 or 8.5.0.1 there may be a delay when doing
LDAP requests.
The delay may happen with large topologies with LDAP
queries or logging into the Administration Console.

Problem conclusion

Our code was changed in order to prevent this
delay. The cause for this issue was that everytime an LDAP
query was run a schema check that took extra time was run.

The fix for this APAR is currently targeted for inclusion in
fix pack 7.0.0.29, 8.0.0.6 and the fixpack that follows
8.5.0.2.
Please refer to the Recommended Updates page for delivery
information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PM83482
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-02-24
Closed date
2013-04-08
Last modified date
2013-04-09

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800

Applicable component levels

R700 PSY
UP
R800 PSY
UP
R850 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 October 2021

Tips

PM83482: A DELAY MAY BE EXPERIENCED WITH SYSTEM MANAGEMENT OPERATIONS FOR LARGE TOPOLOGIES USING GLOBAL SECURITY AND LDAP REPOSITORIES

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

R800 PSY

R850 PSY

Document Information

Share your feedback

Need support?