PM69861: CSIv2 inbound message authentication with basic authentication causes callback operations to fail on eXtreme Scale.

Download WebSphere DataPower XC10 Appliance V2.1.0.2 firmware

APAR status

• Closed as program error.

Error description

• If you configure WebSphere Application Server to require CSIv2
  inbound message authentication with basic authentication, you
  cannot use WebSphere eXtreme Scale functions that require a
  callback, such as the session cache. WebSphere eXtreme Scale
  does not send a credential on the callback, except for the
  case where it is running under WebSphere Application Server.
  
  FFDCs on the XC10 will show an error in the callback
  
  com.ibm.ws.objectgrid.DistributedCommandImpl$DistributedCommandC
  allbackWrapper.commandCallback 266
  Exception = org.omg.CORBA.TRANSIENT
  Source =
  com.ibm.ws.objectgrid.DistributedCommandImpl$DistributedCommandC
  allbackWrapper.commandCallback
  probeid = 266
  Stack Dump = org.omg.CORBA.TRANSIENT: initial and forwarded IOR
  inaccessible  vmcid: IBM  minor code: E07  completed: No
      at
  com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.ja
  va:1272)
  
  
  
  Caused by: org.omg.CORBA.COMM_FAILURE:
  CAUGHT_EXCEPTION_WHILE_CONFIGURING_SSL_CLIENT_SOCKET: JSSL0080E:
  javax.net.ssl.SSLHandshakeException
  

Local fix

• The workaround is to use byte[] data type which does not
  require a callback.
  
  ** This workaround does not suffice for session cache.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of WebSphere eXtreme Scale whose  *
  *                  clients run in a WebSphere Application      *
  *                  Server environment.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: WebSphere eXtreme Scale functions that  *
  *                      use agents require server-to-client     *
  *                      callback, which can causes failures     *
  *                      to occur.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Internal functions that use agent functions were updated to no
  longer run a callback from the server to the client.
  These functions include copy to bytes, HTTP session
  replication, and dynamic cache implementations.
  

Problem conclusion

• An interim fix is available for this problem.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WS EXTREME SCAL

• Fixed component ID

  5724X6702

Applicable component levels

• R850 PSY

     UP