IBM Support

PM84805: CAN NOT ADD SECURITY DOMAIN USERS TO BUS CONNECTOR ROLE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • -> Reproduction steps
    1. Define a security domain and assign all buses that exist
    within that cell to the domain.
    
    2. Add any arbitrary users to the defaultWIMFileBasedRealm of
    the domain defined in step 1, then restart the deployment
    manager.
    
    3. Navigate to 'Service Integration' -> 'Buses' and select
    any bus, then select 'Security' under Additional properties.
    
    4. Select 'Users and groups in the bus connector role' in the
    upper right corner
    
    5. Press 'New..''
    
    6. Select 'Users', leave * as Search pattern and press 'Next'
    => The assumption is that now the users that exist within the
    security domain the bus to belongs are displayed, however ONLY
    the users that exist on cell level are displayed.
    
    -> Expected vs. actual results
    exp.:  the users that exist within the security domain the
    bus belongs to are displayed,
    
    actual:  ONLY the users that exist on cell level are
    displayed.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of the default messaging provider     *
    *                  for IBM WebSphere Application Server        *
    ****************************************************************
    * PROBLEM DESCRIPTION: Can't add security domain users to      *
    *                      bus connector role                      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    After configuring SIBus to use a specific Security Domain,
    instead of the default Global Security Domain the users listed
    under the custom Security Domain are not listed while trying
    to add them for bus connector role.
    Note: A Security Domain is one which has its own set of
    users/repository which could be an LDAP or a Federated
    Repository.
    

Problem conclusion

  • The defect has been fixed and the Custom Security domain users
    can be added successfully.
    
    The fix for this APAR is currently targeted for inclusion in
    fix packs 8.0.0.8 and 8.5.5.1. and as an interim fix for
    8.0.0.7.
    Please refer to the Recommended Updates page for delivery
    information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM84805

  • Reported component name

    WAS SIB & SIBWS

  • Reported component ID

    620800101

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2013-03-14

  • Closed date

    2013-09-13

  • Last modified date

    2013-09-16

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS SIB & SIBWS

  • Fixed component ID

    620800101

Applicable component levels

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
11 January 2022