IC94582: AUTHENTICATION AND AUTHORIZATION ERRORS, CDISR2518E AND CDISC5102E OR CDISR2503E, CAUSED BY LARGE GROUPS.

 

APAR status

  • Closed as fixed if next.

Error description

  • The Authentication and Authorization Service (AAS) is a
    management service that authenticates and authorizes operations
    for the instance.
    The AAS uses the getgrgid_r function to obtain information
    about a user's groups.  If the getgrgid_r function returns more
    than 16 KB of information (for example if the group contains
    many members), the AAS might incorrectly indicate that a user
    does not have authority to perform an action.
    When the problem occurs, the AAS log contains messages that
    include similar information to the following:
    calling getgrgid_r(<group-id>)
    getgrgid_r(<group-id>) failed
    Basic authentication operation to get group failed.
    If a user belongs to multiple groups and the problematic group
    is not the one that is associated with the access control list
    (ACL) for InfoSphere Streams, the AAS may nonetheless fail.
    

Local fix

  • To work around the problem, remove the user from the
    problematic groups or change the security-config.xml for the
    instance to use specific user permissions instead of group
    permissions. See the article "Setting up security for IBM
    InfoSphere Streams" in the IBM InfoSphere Streams Information
    Center
    

Problem summary

  • Users Affected: Users who use the large user groups.
    
    
    Problem Description: See Error Description.
    
    Problem Conclusion: This problem is fixed in Version 3.1 Fix
    Pack 1 and later fix packs.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IC94582

  • Reported component name

    INFOSPHERE STRE

  • Reported component ID

    5724Y95IS

  • Reported release

    310

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-08-01

  • Closed date

    2013-10-29

  • Last modified date

    2013-10-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

  • R310 PSY

       UP

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

InfoSphere Streams

Software version:

3.1

Reference #:

IC94582

Modified date:

2013-10-29

Translate my page

Machine Translation

Content navigation