IBM Support

IOException: Unable to deserialize the subjects in this context are shown in the SystemOut

Troubleshooting


Problem

When you change a security provider, (for example, from LDAP or Kerberos or from the default file repository to LDAP), the following exception can be seen in the SystemOut.log of DataService Cluster members. J2EEContext   E   ASYN9999E: Unexpected Exception Occurred: com.ibm.websphere.asynchbeans.SerialDeserialException: Exception while deserializing a saved service.  Service=security. Unable to deserialize the Subjects in this Context, cause: java.security.PrivilegedActionException: com.ibm.wsspi.wssecurity.core.SoapSecurityException: org.ietf.jgss.GSSException: org.ietf.jgss.GSSException, major code: 8, minor code: 0

Cause

When the WebSphere Application Server creates a scheduler, it saves the security subject in the scheduler table.
WebSphere Application Server does not update this security subject until the scheduler is cancelled.
When the existing scheduler runs a scheduling task, WebSphere Application Server is not be able to authenticate from the old security subject in schedule tables. This exception is logged in the SystemOut.log

Environment

Integrated Information Core 1.5

Diagnosing The Problem

The following exception can be seen in the SystemOut.log of DataService Cluster members.
J2EEContext   E   ASYN9999E: Unexpected Exception Occurred: com.ibm.websphere.asynchbeans.SerialDeserialException: Exception while deserializing a saved service.  Service=security. Unable to deserialize the Subjects in this Context, cause: java.security.PrivilegedActionException: com.ibm.wsspi.wssecurity.core.SoapSecurityException: org.ietf.jgss.GSSException: org.ietf.jgss.GSSException, major code: 8, minor code: 0

Resolving The Problem

Create a security disabled work manager for SubscriptionScheduler.

Login to WebSphere Administrative Console.

  1. Go to Resources > Schedulers  > SubscriptionScheduler
    - In Related Items, click Work managers
    - In Scope, select Cluster=IICDASvcs, and then click New
    - Name : subscriptionWorkManager
    - JNDI : wm/subscriptionWorkManager
    - Deselect Security
    - Select Internationalization
    - Select WorkArea
    - Click Ok

    - Go to Resources > Schedulers  > SubscriptionScheduler
    - Change Work manager JNDI name to wm/subscriptionWorkManager
    - Click Ok, and then Save configuration.

  2. Go to Servers > Cluster,  Stop IICDASvcs
    - Go to Resources > Schedulers
    - Select SubscriptionScheduler, and then click Drop tables
    - When Drop tables is successful, click Create tables.

  3. Synchronize all Nodes.
    - Restart IICDASvcs Cluster

[{"Product":{"code":"SS8TBK","label":"IBM Integrated Information Core"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF033","label":"Windows"}],"Version":"1.5","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
17 June 2018

UID

swg21594748

Page Feedback