PK78648: Administrative console does not remove request token policies after message level protection is disabled

Fixes are available

APAR status

Closed as program error.

Error description

Using the IBM WebSphere Application Server version 7
administrative console navigate to Services > Policy Sets >
Application Policy Sets
1. Create a new policy set by clicking the New button
2. Type in a name, such as "ws_policySet"
3. In the Policies section, click the Add dropdown menu button
and select WS-Security
4. Click the WS-Security link in the Policies table
5. Click the "Main policy" link
6. Under Policy Details, click the "Request token policies" link
7. Click the "Add Token Type" dropdown menu button, and select
X.509
8. Type "x509" in the "X.509 token name" field and click OK.
9. Click the "Main policy" link in the breadcrumb trail at the
top of the page. This returns the user to the Main policy panel.
10. Uncheck the "Message level protection" check box and click
the Apply button.
11. Under Policy Details, click the "Request token policies"
link
12. Select the checkbox next to the x509 Token identifier, and
click the Delete button.

Notice that the x509 request token policy has not been deleted.
This will also occur with the Response token policies.
This only occurs when there is only one request token policy or
one response token policy in the "Supported token types" table.

Local fix

The request token policies and response token policies may  be
deleted if you enable the"Message level protection", remove the
last token policy, then disable the "Message level protection"
checkbox.

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application      *
*                  Server V7.0                                 *
****************************************************************
* PROBLEM DESCRIPTION: Cannot delete request token when        *
*                      disabling message level protection      *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
If message level protection is disabled, a request token
cannot be deleted from the administrative console. You may
click the delete button, but the token is not deleted.
The problem is that console passes an empty list to the admin
code when message level protection is disabled and the admin
code ignores the empty list.

Problem conclusion

To fix this, PolicyAttributesUtil.java is updated to take an
extra parameter includeEmptyList and when the console sets it
to be true, the admin code will continue processing even if
the list is empty.

The fix for this APAR is currently targeted for inclusion in
fix pack 7.0.0.5.  Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK78648
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-01-14
Closed date
2009-04-15
Last modified date
2009-04-15

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800

Applicable component levels

R700 PSY
UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
24 October 2021

Tips

PK78648: Administrative console does not remove request token policies after message level protection is disabled

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

Document Information

Share your feedback

Need support?