PM87608: JAAS SYSTEM LOGIN OF THE SECURITY DOMAIN NOT SHOWN IN ADMINISTRATIVE CONSOLE

8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• Web Service Provider:
  If you go to:
  
  Enterprise Applications > webServiceProvider > Service provider
  policy sets and bindings > SAMPLE_Binding > WS-Security >
  Authentication and protection > request:BitsSamlToken
  
  the drop down list for JAAS login only shows the JAAS System
  Logins of the global Security.  Each entry has (Global
  security) at the end. No JAAS System Login of the Security
  Domain is shown, hence not configurable.
  
  The same applies to the web service consumer.
  

Local fix

• If you deploy the applications with an included Binding, that
  means the ear file contains a bindings.xml file, the bindings
  configured in the bindings.xml file work well.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server administrative console who create    *
  *                  application level bindings with security    *
  *                  domains                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: Creating an application level binding   *
  *                      wih the application mapped to a         *
  *                      security domain does not display all    *
  *                      the JAAS options                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The console does not include the security domain JAAS system
  logins in the drop down lists displayed in the application
  level bindings panels.
  

Problem conclusion

• We now check the application to see if one of its targets has
  a security domain. If so, we add the JAAS system logins to the
  drop down options list.
  
  The fix for this APAR is currently targeted for inclusion in
  fix packs 8.0.0.7 and 8.5.5.  Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP