IBM Support

PI30682: USER RUNAS ROLES DEFAULTS TO USING THE GLOBAL/ADMIN REALM AND THERE IS NO PULLDOWN TO SELECT THE REALM.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • User RunAs roles across multiple realms does not give you the
    pulldown menu to select the appropriate realm and instead
    defaults to the global/admin realm.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server V7.0                                 *
    ****************************************************************
    * PROBLEM DESCRIPTION: On V7.0 environment, setting the User   *
    *                      RunAs roles for EJBs may fail with      *
    *                      console message "User ID or password    *
    *                      did not match." when the EJB runs in    *
    *                      an Application security domain.         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The failing environment is a V7.0 environment, when a Multi
    Security Domain( MSD ), also known as an Application domain is
    configured. In the MSD an EJB is deployed. Setting the RunAs
    role for this EJB may fail with console message "User ID or
    password did not match." if the MSD has a different security
    realm
    In error, WebSphere Application Server(WSAS) security code
    attempts to authenticate the RunAs user in the global domain
    instead of the MSD domain. This problem was corrected in base
    code of V8.0 and higher.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI30682

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2014-12-02

  • Closed date

    2015-03-30

  • Last modified date

    2015-03-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
17 October 2021