PM97618: MIGRATED USER CAN''T LOGON ADMINISTRATIVE CONSOLE AFTER SETTING THE CUSTOM PROPERTY FOR CUSTOM HASH PASSWORD

8.5.5.1: WebSphere Application Server V8.5.5 Fix Pack 1
8.5.5.2: WebSphere Application Server V8.5.5 Fix Pack 2
8.5.5.3: WebSphere Application Server V8.5.5 Fix Pack 3
8.5.5.4: WebSphere Application Server V8.5.5 Fix Pack 4
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14

APAR status

• Closed as program error.

Error description

• Once the custom property for the custom hash password support
  is set then the old users with non custom hashed passwords are
  not able to login because their passwords are not able to
  match.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.5                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Users that are migrated to the file     *
  *                      registry are not able to login to the   *
  *                      console due to an authentication        *
  *                      failure.                                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Once the custom property customHashImplClassName is set to
  support the custom hash password functionality, then the
  old users which are migrated to file registry having
  non-custom hashed passwords are not able to login to the
  administrative console because there is an authentication
  failure while matching their passwords. This failure only
  occured if the previously mentioned custom property is set.
  

Problem conclusion

• With this fix, the migrated users to the file registry with non
  custom hashed password will be able to login to the
  administrative console even if the custom property
  customHashImplClassName is set in the file registry.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.1.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP