PH29643: BAQR0407W is written after z/OS Connect EE is updated to version V3.0.30.0 or later.

APAR status

• Closed as unreproducible in next release.

Error description

• When using a custom TAI with an instance of z/OS Connect EE to
  allow for authentication with the custom algorithm(s) used in
  JWTs, the following messages are written to server's
  messages.log when using z/OS Connect EE v3.0.30.0:
  
  BAQR0407W: The <entity> entity containing the user name
             associated with this request was not found.
  BAQR0428W: The <interceptor> interceptor encountered an error
             while processing a request for API <api> under
             request URL <url>.
  
  The failing Java code in the TAI sets the User Principal
  after some processing of the JWT. In reviewing the Liberty
  trace file it showed that a null was being returned for the
  getUserPrincipal.
  
  Addition search words: BAQR0407W msgBAQR0407W msgBAQR0407
  BAQR0428W msgBAQR0428W msgBAQR0428
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of z/OS Connect EE V3 with a       *
  *                 Trust Association Interceptor (TAI).         *
  ****************************************************************
  * PROBLEM DESCRIPTION: BAQR0407W is written after z/OS Connect *
  *                      EE is updated to version V3.0.30.0 or   *
  *                      later.                                  *
  ****************************************************************
  Messages BAQR0407W and BAQR0428W were issued when a request was
  made with valid authentication credentials and a Trust
  Association Interceptor (TAI) had been deployed to process those
  credentials. The request was rejected with an authentication
  error.
  

Problem conclusion

Temporary fix

Comments

• z/OS Connect EE has been updated to use the correct
  authentication credentials and not result in the reported
  invalid authentication failure.
  
  The fix for this APAR is expected to be delivered by the PTF for
  z/OS Connect EE V3.0.39.0 (PH30278).
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  Z/OS CONNECT EE

• Fixed component ID

  5655CE300

Applicable component levels