PH16420: NON-PARTICIPATING REPOSITORIES ARE ACCESSED FROM WIM GET API

8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3

APAR status

• Closed as program error.

Error description

• Calls to the WIM GET API can result in calls to
  non-participating repositories when the GET request contains a
  uniqueName in the form of a distinguished name (DN) and that DN
  more closely matches the base entry of the repository than that
  of a participating repository. This implies that there is a
  participating repository whose base entries overlap with a
  non-participating repository's base entries.
  
  For example,
  o=ibm (participating) and ou=organization,o=ibm
  (non-participating) and a DN of cn=group,ou=organization,o=ibm.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server users of   *
  *                  federated repositories                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Non-participating repositories are      *
  *                      accessed from WIM get API               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Non-participating repositories are accessed from the WIM get
  API. This can lead to lookups failing because the wrong
  repository is being searched.
  

Problem conclusion

• The code has been updated to restrict the repositories
  searched to those participating in the realm.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.17 and 9.0.5.3.  Please refer to the
  Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?
  rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP