IOException: Unable to deserialize the subjects in this context are shown in the SystemOut

Technote (troubleshooting)


Problem(Abstract)

When you change a security provider, (for example, from LDAP or Kerberos or from the default file repository to LDAP), the following exception can be seen in the SystemOut.log of DataService Cluster members.
J2EEContext   E   ASYN9999E: Unexpected Exception Occurred: com.ibm.websphere.asynchbeans.SerialDeserialException: Exception while deserializing a saved service.  Service=security. Unable to deserialize the Subjects in this Context, cause: java.security.PrivilegedActionException: com.ibm.wsspi.wssecurity.core.SoapSecurityException: org.ietf.jgss.GSSException: org.ietf.jgss.GSSException, major code: 8, minor code: 0

Cause

When the WebSphere Application Server creates a scheduler, it saves the security subject in the scheduler table.
WebSphere Application Server does not update this security subject until the scheduler is cancelled.
When the existing scheduler runs a scheduling task, WebSphere Application Server is not be able to authenticate from the old security subject in schedule tables. This exception is logged in the SystemOut.log

Environment

Integrated Information Core 1.5

Diagnosing the problem

The following exception can be seen in the SystemOut.log of DataService Cluster members.
J2EEContext   E   ASYN9999E: Unexpected Exception Occurred: com.ibm.websphere.asynchbeans.SerialDeserialException: Exception while deserializing a saved service.  Service=security. Unable to deserialize the Subjects in this Context, cause: java.security.PrivilegedActionException: com.ibm.wsspi.wssecurity.core.SoapSecurityException: org.ietf.jgss.GSSException: org.ietf.jgss.GSSException, major code: 8, minor code: 0

Resolving the problem

Create a security disabled work manager for SubscriptionScheduler.

Login to WebSphere Administrative Console.


  1. Go to Resources > Schedulers  > SubscriptionScheduler
    - In Related Items, click Work managers
    - In Scope, select Cluster=IICDASvcs, and then click New
    - Name : subscriptionWorkManager
    - JNDI : wm/subscriptionWorkManager
    - Deselect Security
    - Select Internationalization
    - Select WorkArea
    - Click Ok

    - Go to Resources > Schedulers  > SubscriptionScheduler
    - Change Work manager JNDI name to wm/subscriptionWorkManager
    - Click Ok, and then Save configuration.

  2. Go to Servers > ClusterStop IICDASvcs
    - Go to Resources > Schedulers
    - Select SubscriptionScheduler, and then click Drop tables
    - When Drop tables is successful, click Create tables.

  3. Synchronize all Nodes.
    - Restart IICDASvcs Cluster

Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Integrated Information Core

Software version:

1.5

Operating system(s):

Windows 2008 server

Reference #:

1594748

Modified date:

2012-08-08

Translate my page

Machine Translation

Content navigation