PM91110: AD LDAP ON TIP SERVER OCCASIONALLY FAILS TO AUTHENTICATE CERTAIN USERS.

7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• AD LDAP on TIP server occasionally fails to authenticate
  certain users, other users authenticate without a problem.
  
  [11/13/12 12:29:13:206 CST] 0000002c JTAHelper     E
  com.ibm.ws.wim.tx.JTAHelper handleException
  [11/13/12 12:29:13:219 CST] 0000002c BridgeUtils   E
  com.ibm.ws.wim.registry.util.MembershipBridge logException
  [11/13/12 12:29:13:230 CST] 0000002c UserRegistryI E
  SECJ0363E: Cannot
  create credential for the user e034631 because of the following
  exception com.ibm.websphere.wim.exception.WIMSystemException:
  CWWIM4520E
  The 'javax.naming.CommunicationException:
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V7.0                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Concurrent Modification of data while   *
  *                      refreshing the policy files. Multiple   *
  *                      threads were simultaneous changing      *
  *                      data.                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Login fails for users occasionally on Tivoli Integrated Portal
  (TIP) with the following exception:
  SECJ0363E: Cannot create credential for the user e034631
  because of the following exception
  com.ibm.websphere.wim.exception.WIMSystemException: CWWIM4520E
  The 'javax.naming.CommunicationException:
  

Problem conclusion

• Argus component was corrected so that the code is thread safe
  and also changed the type of the for loop.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 7.0.0.31.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R700 PSY

     UP