IBM Support

PI54809: THE "COM.IBM.WEBSPHERE.SECURITY.SPNEGO.USERACMAPMAPPINGTOSAF" PROPERTY IS NOT DISPLAYED CORRECTLY IN THE ADMIN CONSOLE.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • In the admin console under Global Security -> SPNEDO web
    authentication, the "Map Kerberos principles to SAF identities
    using the SAF RACMAP profiles" checkbox is displayed
    incorrectly.  If the
    "com.ibm.websphere.security.spnego.useRACMAPMappingToSAF"
    property has a value of true, the "Map Kerberos
    principles to SAF identities using the SAF RACMAP profiles"
    checkbox will remain unchecked in the admin console.
    
    In the admin console, if the "Map Kerberos principles to
    SAF identities using the SAF RACMAP profiles" checkbox is
    enabled and the changes are saved, the
    "com.ibm.websphere.security.spnego.useRACMAPMappingToSAF"
    property will be set to true.  However, once the user logs out
    and logs back in to the admin console the "Map Kerberos
    principles to SAF identities using the SAF RACMAP profiles"
    checkbox will be unchecked.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server V8.0 and V8.5                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: The one of the fields of the SPNEGO     *
    *                      web authentication panel in the         *
    *                      AdminConsole is not display the value   *
    *                      properly.                               *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The check box named "Map Kerberos principals to SAF identities
    using the SAF RACMAP profiles" of the SPNEGO web
    authentication panel in the Admin Console might not properly
    set the collect value. This is due to the code defect while
    propagating the configured information.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI54809

  • Reported component name

    WEBSPHERE FOR Z

  • Reported component ID

    5655I3500

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-01-04

  • Closed date

    2016-02-02

  • Last modified date

    2016-02-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE FOR Z

  • Fixed component ID

    5655I3500

Applicable component levels

  • R800 PSY

       UP



Document information

More support for: WebSphere Application Server for z/OS
General

Software version: 800

Reference #: PI54809

Modified date: 02 February 2016


Translate this page: