PK86285: MISSING REALM ATTRIBUTE CAUSES FAILURE TO REGISTER SERVERS WITH WITH THE LOCATION SERVICE.

Fixes are available

APAR status

Closed as program error.

Error description

When the realm attribute does not exist as part of the
registry configuration there is the failure to register the
servers with the location service.  This results in not being
able to get a direct IOR from an indirect IOR.  This can
negatively impact high availability if the location
service cannot dynamically determine the server that a given
object (for example, a bean's home object) resides in.

org.omg.CORBA.NO_PERMISSION
com.ibm.ws.security.auth.ContextManagerImpl.runAs 4101
Exception = org.omg.CORBA.NO_PERMISSION
Source = com.ibm.ws.security.auth.ContextManagerImpl.runAs
probeid = 4101
Stack Dump = org.omg.CORBA.NO_PERMISSION:
>> SERVER (id=11c328fe, host=austin.ibm.com) TRACE
START:
>>    org.omg.CORBA.NO_PERMISSION: Failed to verify caller
subject
vmcid: 0x49424000  minor code: 303  completed: No
>>  at
com.ibm.ws.orbimpl.services.lsd.LocationServiceImpl.register_ser
ver(Loca
tionServiceImpl.java:177)

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application Server
****************************************************************
* PROBLEM DESCRIPTION: For a WebSphere Application Server, a   *
*                      missing realm attribute in the custom   *
*                      user registry definition in the         *
*                      security.xml causes the a failure to    *
*                      register the server with the location   *
*                      service.                                *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
For WebSphere Application Server, when the realm attribute for
a custom user registry is missing from the security.xml file,
the registration of the server with the location service fails
with a org.omg.CORBA.NO_PERMISSION exception. The stack trace
in the node agent process looks like,

org.omg.CORBA.NO_PERMISSION
com.ibm.ws.security.auth.ContextManagerImpl.runAs 4101
Exception = org.omg.CORBA.NO_PERMISSION
Source = com.ibm.ws.security.auth.ContextManagerImpl.runAs
probeid = 4101
Stack Dump = org.omg.CORBA.NO_PERMISSION:
 >> SERVER (id=11c328fe, host=hostname) TRACE
START:
 >>    org.omg.CORBA.NO_PERMISSION: Failed to verify caller
subject
vmcid: 0x49424000  minor code: 303  completed: No
 >>  at
com.ibm.ws.orbimpl.services.lsd.LocationServiceImpl.register_ser
ver(LocationServiceImpl.java:177)

Problem conclusion

The security code was modified to attempt to obtain the realm
name from the user registry if the realm name attribute is not
available in the security.xml file.

The fix for this APAR is currently targeted for inclusion in
fix pack 6.1.0.29 and 7.0.0.13.  Please refer to the
Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK86285
Reported component name
WEBSPHERE APP S
Reported component ID
5724J0800
Reported release
61W
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-05-11
Closed date
2010-04-19
Last modified date
2010-04-19

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBSPHERE APP S
Fixed component ID
5724J0800

Applicable component levels

R61A PSY
UP
R61H PSY
UP
R61I PSY
UP
R61P PSY
UP
R61S PSY
UP
R61W PSY
UP
R61Z PSY
UP
R700 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 December 2021

Tips

PK86285: MISSING REALM ATTRIBUTE CAUSES FAILURE TO REGISTER SERVERS WITH WITH THE LOCATION SERVICE.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R61A PSY

R61H PSY

R61I PSY

R61P PSY

R61S PSY

R61W PSY

R61Z PSY

R700 PSY

Document Information

Share your feedback

Need support?