IBM Support

PI38061: CASE-SENSITIVE COMPARISONS ON CASE-INSENSITIVE LDAP FIELDS MAY CAUSE RLKS ART LDAP CONFIGURATION TO SILENTLY FAIL

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • After successfully configuring the IBM Rational License Key
    Server (RLKS) Administration and Reporting Tool (ART) to use
    LDAP, users may not be able to log in to the ART.
    
    Analysis of ART debug logs during a failed LDAP setup and a
    failed login attempt revealed that the OU information was coming
    back with inconsistent case. Some users were in LDAP
    "Organizational unit" (OU) "AllUsers" and others were in
    "allusers". Organizational Unit information, as well as domain
    components, are defined as case insensitive strings.
    

Local fix

  • There is currently no workaround, though a testfix may be
    available for the current release of the ART.
    
    In many cases, the only way to regain access to the ART is to do
    a clean-slate reinstall of the ART. This would entail:
    1) Uninstalling the ART using IBM Installation Manager
    2) deleting the "RLKSAdmin" directory, which was left behind by
    the uninstall.
    3) Installing a fresh RLKS ART instance.
    4) Logging in with the default admin password
    5) Re-adding the servers.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All Users who have been using LDAP-based User Management in  *
    * RLKS Administration and Reporting Tool.                      *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * If there is a difference in case between any attribute for a *
    * User in a LADP Group and the corresponding User DN, the      *
    * match fails leading into a login failure.                    *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • The root cause has been fixed in 8147. User DN and User
    attributes in a group will match case-insensitively. Upgrade
    RLKS Administration and Reporting tool to version 8.1.4.7.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI38061

  • Reported component name

    RATIONAL LICENS

  • Reported component ID

    5648LIC00

  • Reported release

    814

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-03-30

  • Closed date

    2015-04-17

  • Last modified date

    2015-04-17

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    RATIONAL LICENS

  • Fixed component ID

    5648LIC00

Applicable component levels

  • R814 PSY

       UP



Document information

More support for: Rational License Key Server

Software version: 814

Reference #: PI38061

Modified date: 17 April 2015