IBM Support

PI46546: NOT ENOUGH INFORMATION PROVIDED WHEN A CUSTOM CLASS IS NOT FOUND IN SAML WEB SSO

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When a custom class is used with SAML Web SSO, if the custom
    class cannot be found, the TAI will not load and will not give
    any information about why it will not load.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Application Server            *
    *                  administrators of SAML Web Single Sign-on   *
    *                  (SSO)                                       *
    ****************************************************************
    * PROBLEM DESCRIPTION: More information required when custom   *
    *                      class not found in SAML Web SSO         *
    ****************************************************************
    * RECOMMENDATION:  Install a fix pack that contains this       *
    *                  APAR.                                       *
    ****************************************************************
    When a custom class is specified for use with SAML Web Single
    Sign-on trust association interceptor (TAI), if the custom
    class cannot be loaded, the TAI will not load and will not give
    any information about why it will not load.  Information
    should be provided to indicate that the custom class cannot be
    loaded.
    

Problem conclusion

  • The SAML TAI is updated to provide more information when a
    class cannot be loaded:
    
    There will be two FFDCs, one from
    com.ibm.ws.wssecurity.util.ConfigUtil.instantiate and one from
    the com.ibm.ws.security.web.TrustAssociationManager.initialize.
    
    This error a stack will be in SystemErr.log:
    
    [1/14/16 13:12:52:927 CST] 00000001 SystemErr R
    com.ibm.wsspi.wssecurity.core.SoapSecurityException:
    CWWSS5007E: The com.barbja.garbage1 class cannot be located.:
    java.lang.ClassNotFoundException: com.barbja.garbage1
    
    This error a stack will be in SystemOut.log:
    
    [1/14/16 13:12:52:959 CST] 00000001 TrustAssociat E
    SECJ0384E: Trust Association Init Error.  The Trust Association
    interceptor implementation
    com.ibm.ws.security.web.saml.ACSTrustAssociationInterceptor
    initialization failed.  The error status/exception is
    com.ibm.websphere.security.WebTrustAssociationFailedException:
    com.ibm.wsspi.wssecurity.core.SoapSecurityException:
    CWWSS5007E: The com.barbja.garbage1 class cannot be located.:
    java.lang.ClassNotFoundException: com.barbja.garbage1
    
    You will only get these once during server startup, not on
    each request.
    
    The fix for this APAR is currently targeted for inclusion in
    fix packs 7.0.0.41, 8.0.0.13, and 8.5.5.10.  Please refer to
    the Recommended Updates page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    
    Keywords: IBMWL3WSS SAMLWSSO
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI46546

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-08-07

  • Closed date

    2016-01-15

  • Last modified date

    2016-01-15

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 850

Reference #: PI46546

Modified date: 15 January 2016