PM92139: THE JMS PROVIDER IS INCORRECTLY OPENING AN UNAUTHENTICATED PORT

8.5.5.1: WebSphere Application Server V8.5.5 Fix Pack 1
8.5.5.2: WebSphere Application Server V8.5.5 Fix Pack 2
8.5.5.3: WebSphere Application Server V8.5.5 Fix Pack 3
8.5.5.4: WebSphere Application Server V8.5.5 Fix Pack 4
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14

APAR status

• Closed as program error.

Error description

• For the <wasJmsEndpoint> element in the server.xml, if you do
  not specify a host attribute, it falls back to '*', all
  interfaces, as per the metatype in
  com.ibm.ws.messaging.comms.server below:
  <AD id="host" name="%host" description="%host.desc"
  required="false" type="String" default="*" />
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: For the <wasJmsEndpoint> element in     *
  *                      the server.xml, if you do not specify   *
  *                      a host attribute, it falls back to      *
  *                      '*', all interfaces, as per the         *
  *                      metatype in                             *
  *                      com.ibm.ws.messaging.comms.server       *
  *                      below:                                  *
  *                      <AD id="host" name="%host"              *
  *                      description="%host.desc"                *
  *                      required="false" type="String"          *
  *                      default="*" />                          *
  *                      This is an issue, as it means that      *
  *                      any machine connected to server can     *
  *                      connect to client                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  host is set to * by default in server that means any other
  machine which is connected to server also will be able to
  connect to client
  

Problem conclusion

• The default host value for JMS provider should be given as
  localhost instead of * in server.xml this will be done as part
  of fix to this defect.
  
  
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack  8.5.5.1. Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP