PM93174: TEMPORARY QUEUE NAME PREFIX LONGER THAN 12 CHARACTERS RESULTS IN AN AUTHORIZATION EXCEPTION

8.5.5.1: WebSphere Application Server V8.5.5 Fix Pack 1
8.5.5.2: WebSphere Application Server V8.5.5 Fix Pack 2
8.5.5.3: WebSphere Application Server V8.5.5 Fix Pack 3
8.5.5.4: WebSphere Application Server V8.5.5 Fix Pack 4
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14

APAR status

• Closed as program error.

Error description

• [4/15/13 14:24:53:845 CDT] 0000002c
  com.ibm.ws.jca.service.ConfigPropertyService                 W
  J2CA8500E: An error occurred while attempting to configure a
  property temporaryQueueNamePrefix of configuration element
  jms/JSFlowCF on the class
  com.ibm.ws.sib.api.jmsra.impl.JmsJcaManagedQueueConnectionFactor
  yImpl: javax.jms.JMSException: CWSJR1025E: The prefix
  DeTempQtoLongtoWork is longer than twelve characters
  
  we also get an error message that makes no sense at all:
  
  [4/15/13 14:24:53:906 CDT] 0000002c SystemOut
                                    O JMS resource create
  exception in processMDB() in DeliveryJetStreamClient:
  CWSIA0057E: The authorization for persona1 was not successful.
  [4/15/13 14:24:53:906 CDT] 0000002c SystemErr
                                    R
  com.ibm.wsspi.sib.core.exception.SINotAuthorizedException:
  CWWKM3010W: The user persona1 is not authorized to perform
  action CREATE on destination .
  [4/15/13 14:24:53:907 CDT] 0000002c SystemErr
                                    R     at
  com.ibm.ws.sib.processor.impl.ConnectionImpl.checkTempDestinatio
  nCreation(ConnectionImpl.java:6307)
  [4/15/13 14:24:53:907 CDT] 0000002c SystemErr
                                    R     at
  com.ibm.ws.sib.processor.impl.ConnectionImpl.createTemporaryDest
  ination(ConnectionImpl.java:3647)
  
  This error will lead the customer to think there is a security
  authorization error, but really there is not.   The real
  problem is that the temporary destination name prefix is too
  long
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: A temporary queue name prefix in  the   *
  *                      server.xml that is longer than 12       *
  *                      characters results in an authorization  *
  *                      exception                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Configure a temporary queue name prefix that is longer than 12
  characters, for example:
  <jmsQueueConnectionFactory jndiName="jms/JSFlowCF">
  <properties.wasJms
  temporaryQueueNamePrefix="DeTempQtoLongtoWork" />
  </jmsQueueConnectionFactory>
  Since the maximum allowed is 12 you will get a warning message
  as expected like this:
  [4/15/13 14:24:53:845 CDT] 0000002c
  com.ibm.ws.jca.service.ConfigPropertyService                 W
  J2CA8500E: An error occurred while attempting to configure a
  property temporaryQueueNamePrefix of configuration element
  jms/JSFlowCF on the class
  com.ibm.ws.sib.api.jmsra.impl.JmsJcaManagedQueueConnectionFactor
  yImpl: javax.jms.JMSException: CWSJR1025E: The prefix
  DeTempQtoLongtoWork is longer than twelve characters
  You also get the following error message:
  [4/15/13 14:24:53:906 CDT] 0000002c SystemOut
  O JMS resource create
  exception in processMDB() in DeliveryJetStreamClient:
  CWSIA0057E: The authorization for persona1 was not successful.
  [4/15/13 14:24:53:906 CDT] 0000002c SystemErr
  R
  com.ibm.wsspi.sib.core.exception.SINotAuthorizedException:
  CWWKM3010W: The user persona1 is not authorized to perform
  action CREATE on destination .
  [4/15/13 14:24:53:907 CDT] 0000002c SystemErr
  R     at
  com.ibm.ws.sib.processor.impl.ConnectionImpl.checkTempDestinatio
  nCreation(ConnectionImpl.java:6307)
  [4/15/13 14:24:53:907 CDT] 0000002c SystemErr
  R     at
  com.ibm.ws.sib.processor.impl.ConnectionImpl.createTemporaryDest
  ination(ConnectionImpl.java:3647)
  This error could lead you to think there is a security
  authorization error, but really there is not.   The real
  problem is that the temporary destination name prefix is too
  long
  

Problem conclusion

• The root cause was that the prefix value was not set when it
  is > 12 characters. This leads to a null value for the prefix
  and causes the authorization exception.
  To fix it we will throw a message after setting the prefix
  value. We will check and if it is greater than 12, we will
  throw a SIInvalidDestinationPrefixException exception.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.2. Please refer to the Recommended Updates page
  for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP