PI39369: NullPointerException error may occur when security is enabled and provisioning is disabled.

8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• NullPointerException error may occur when security is enabled
  and provisioning is disabled, i.e., when the "Start
  components as needed" option is not checked from the admin
  console.
  
  The following call stack can be seen in log files:
  
  [23.02.15 07:57:07:634 CET] 0000002c webapp E
  com.ibm.ws.webcontainer.webapp.WebApp logServletError
  SRVE0293E: [Servlet-Fehler]-[ServletNameNotFound]:
  java.lang.NullPointerException
  
  at
  com.ibm.ws.security.web.WebConstraintsTable.getRequiredRoles(Web
  ConstraintsTable.java:205)
  at
  com.ibm.ws.security.core.PermissionRoleMap.getRequiredRoles(Perm
  issionRoleMap.java:104)
  at
  com.ibm.ws.security.web.WebCollaborator.getRequiredRoles(WebColl
  aborator.java:1907)
  at
  com.ibm.ws.security.web.WebCollaborator.authorize(WebCollaborato
  r.java:612)
  at
  com.ibm.ws.security.web.EJSWebCollaborator.preInvoke(EJSWebColla
  borator.java:434)
  ... ...
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server with security enabled.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: NullPointerException error may occur    *
  *                      when security is enabled and            *
  *                      provisioning is disabled.               *
  ****************************************************************
  * RECOMMENDATION:  Apply a fix pack that contains this APAR.   *
  ****************************************************************
  When the following <security-constraint>, without any
  <auth-constraint> or <user-data-constraint>, was configured in
  the web.xml:
  <security-constraint>
  <display-name>Test Service</display-name>
  <web-resource-collection>
  <web-resource-name>Test Service</web-resource-name>
  <url-pattern>/servlet/TestServiceImpl</url-pattern>
  </web-resource-collection>
  </security-constraint>
  The NullPointerException error occurred when server
  provisioning was disabled.
  

Problem conclusion

• The error occurred because the Web constraints table was not
  correctly initialized for this configuration.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.11 and 8.5.5.7.  Please refer to the Recommended
  Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R700 PSY

     UP

• R850 PSY

     UP