PM63093: LOCAL OS USERS WITH CYRILLIC PASSWORD CAN NOT LOGIN

8.0.0.4: WebSphere Application Server V8.0 Fix Pack 4
7.0.0.25: WebSphere Application Server V7.0 Fix Pack 25
8.5.0.1: WebSphere Application Server V8.5 Fix Pack 1
8.0.0.5: WebSphere Application Server V8.0 Fix Pack 5
7.0.0.27: WebSphere Application Server V7.0 Fix Pack 27
8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
7.0.0.25: Java SDK 1.6 SR11 Cumulative Fix for WebSphere Application Server
7.0.0.27: Java SDK 1.6 SR12 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• Users with cyrillic/National characters can not login to
  WebSphere Application Server, as virtual member manager (VMM)
  is not able to encode it and forward it to the underlying
  Local Operating System user registry.
  It fails with the following error:
  [4/6/12 16:54:33:668 IST] 00000089 exception     W
  com.ibm.ws.wim.adapter.urbridge.URBridge login
  
  com.ibm.websphere.wim.exception.PasswordCheckFailedException:
  CWWIM4513E  The password match failed for the 'cyruser'
  principal name.
  at
  com.ibm.ws.wim.adapter.urbridge.URBridge.login(URBridge.java:735
  )
  at
  com.ibm.ws.wim.ProfileManager.loginImpl(ProfileManager.java:3822
  )
  at
  com.ibm.ws.wim.ProfileManager.genericProfileManagerMethod(Profil
  eManager.java:347)
  at com.ibm.ws.wim.ProfileManager.login(ProfileManager.java:455)
  at
  com.ibm.websphere.wim.ServiceProvider.login(ServiceProvider.java
  :506)
  at
  com.ibm.ws.wim.registry.util.LoginBridge.checkPassword(LoginBrid
  ge.java:171)
  at
  com.ibm.ws.wim.registry.WIMUserRegistry$1.run(WIMUserRegistry.ja
  va:234)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Users residing in LocalOS registry      *
  *                      having National characters              *
  *                      (cyricllic,umlauts) in their            *
  *                      passwords cannot login.                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  LocalOs users who have cyrillic/umlaut characters in the
  password cannot login to WebSphere Application Server.
  The umlauts/cyrillic characters in the password are not passed
  properly to the underlying LocalOS registry adapter. Hence the
  adapter itself cannot treat and recognize them as
  cyrillic/umlauts and fails to authenticate user.
  

Problem conclusion

• The character encoding is done prior to handing passwords to the
  underlying LocalOs registry handler.
  
  The fix for this APAR is currently targeted for inclusion in
  fix packs 6.1.0.45 , 7.0.0.25 , 8.0.0.5 , 8.5.0.1.  Please
  refer to the Recommended Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R61A PSY

     UP

• R61H PSY

     UP

• R61I PSY

     UP

• R61P PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R61Z PSY

     UP

• R700 PSY

     UP

• R800 PSY

     UP

• R850 PSY

     UP