IBM Support

PM22482: Application GroupMemberShip will be deleted if group members does not exist rather than throwing

Fixes are available

7.0.0.19: WebSphere Application Server V7.0 Fix Pack 19
8.0.0.1: WebSphere Application Server V8.0 Fix Pack 1
7.0.0.21: WebSphere Application Server V7.0 Fix Pack 21
8.0.0.2: WebSphere Application Server V8.0 Fix Pack 2
8.0.0.3: WebSphere Application Server V8.0 Fix Pack 3
7.0.0.23: WebSphere Application Server V7.0 Fix Pack 23
8.0.0.4: WebSphere Application Server V8.0 Fix Pack 4
7.0.0.25: WebSphere Application Server V7.0 Fix Pack 25
8.0.0.5: WebSphere Application Server V8.0 Fix Pack 5
7.0.0.27: WebSphere Application Server V7.0 Fix Pack 27
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server
7.0.0.19: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.21: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere
7.0.0.23: Java SDK 1.6 SR10 FP1 Cumulative Fix for WebSphere
7.0.0.25: Java SDK 1.6 SR11 Cumulative Fix for WebSphere Application Server
7.0.0.27: Java SDK 1.6 SR12 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Virtual member manager (VMM) will not return current member
    results for an application group if a previous member user has
    been deleted from the LDAP. Instead it returns:
    
    com.ibm.websphere.wim.exception.EntityNotFoundException:
    CWWIM4527E The
    LDAP entry 'uid=user1,ou=users,dc=ibm,dc=com'
    was not
    found: 'javax.naming.NameNotFoundException: [LDAP: error code 32
    - No
    Such Object]; remaining name
    'uid=user1,ou=users,dc=ibm,dc=com'; resolved
    object
    com.sun.jndi.ldap.LdapCtx@85f085f'.
    

Local fix

  • -Backup VMM database
    -The problem can be resolved by deleting the member entry from
    DBGRPREL
    table using the SQL statement you mentioned below.
     Delete from <dbname>.DBGRPREL where GRP_ID=79 and
    EXT_ID='uid=user1,ou=users,dc=ibm,dc=com';
      (GRP_ID 79 is for cn=appGroup1,o=dbRep) )
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server V6.1 and V7.0                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: Application GroupMemberShip will be     *
    *                      deleted if group members do not exist   *
    *                      rather than throwing an                 *
    *                      EntityNotFoundException                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    VMM will not return current member results for an application
    group if a previous member user has been deleted from the LDAP.
    Instead it returns:
    com.ibm.websphere.wim.exception.EntityNotFoundException
    

Problem conclusion

  • VMM logic has been updated to show up the remaining
    members rather than throwing EntityNotFoundException
    by deleting the groupmembership of non existing members only
    if user has defined custom property as
    "repositoriesForMemberDeletion" and its value will be
    ";" separated list of repositoryIDs of which user wants to
    delete the groupmembership of non existing member.
    
    Details for applying this fix are as follows:
    
    1) define as custom property for the DB repository where Group
    resides using following CLI command.
    example:
    "wsadmin>$AdminTask setIdMgrCustomProperty { -id "DB2Repos"
    -name "repositoriesForMemberDeletion" -value "TDS;AD" }"
    
    where
    
    id:-  DB repoId (where group resides)
    
    name:-  this is the custom property name
    ("repositoriesForMemberDeletion") that VMM will look for
    deleting the nonexistent members from group membership.
    NOTE:- please do not change the name of this property.
    
    value:- this is the set of Repositories ID (where group member
    resides initially) separated via delimiter ";" for which client
    wants to delete the membership from group in DB.
    
    NOTE:- If the value of the property is set as "*" then
    all non existing members will be removed from the group
    membership of application group.
    2) restart the server.
    
    
    
    The fix for this APAR is currently targeted for inclusion in
    fix packs 6.1.0.39 and 7.0.0.17.  Please refer to the
    Recommended Updates page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM22482

  • Reported component name

    WEBSPHERE APP S

  • Reported component ID

    5724J0800

  • Reported release

    61A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2010-09-14

  • Closed date

    2011-01-28

  • Last modified date

    2012-12-21

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE APP S

  • Fixed component ID

    5724J0800

Applicable component levels

  • R61A PSY

       UP

  • R61H PSY

       UP

  • R61I PSY

       UP

  • R61P PSY

       UP

  • R61S PSY

       UP

  • R61W PSY

       UP

  • R61Z PSY

       UP

  • R700 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 6.1

Reference #: PM22482

Modified date: 21 December 2012