JR53142: ADMINISTRATOR CLIENT NOT ABLE TO VIEW USERS THAT HAVE A ROLE OTHER THEN ADMINISTRATOR WITH WEBSPHERE CLUSTER

InfoSphere Information Server, Version 11.5 for Linux
InfoSphere Information Server, Version 11.5.0.1 for Windows
InfoSphere Information Server, Version 11.5.0.2 for Linux
InfoSphere Information Server, Version 11.5.0.2 for AIX
InfoSphere Information Server, Version 11.5.0.2 for Windows
InfoSphere Information Server, Version 11.5.0.1 for AIX

APAR status

• Closed as fixed if next.

Error description

• Users have reported problems with DataStage Administrator not
  being able to add users with none "Administrator" roles.
  When they add users with the "Administrator" role - it adds
  successfully.  If they change the role to for example
  "Developer" it appears to get added, but when they click OK and
  go back into the Administrator, the user is no longer shown.
  
  Technically, role assignment is working, this can be verified by
  logging onto the system with the newly added user credentials,
  or use the DirectoryCommand to list user roles.
  Issue appears to be with the Administrator's retrieval of roles
  - no client side errors are thrown, but five
  WebApplicationExceptions such as the following are recorded in
  System.Out on the services tier:
  
  RequestProces I org.apache.wink.server.internal.RequestProcessor
  logException The following error occurred during the invocation
  of the handlers chain: WebApplicationException (404 - Not Found)
  with message 'null' while processing GET request sent to
  https://<DOMAIN-NAME>/ibm/iis/datastage/roleprojectprincipals/Da
  taStageOperationsViewer/<PROJECT-NAME>
  
  This only happens on installations configured to use WebSphere
  Clustering
  

Local fix

• In the HTTPServer httpd.conf, in Section 1 (the global
  section), add
  SetEnv websphere-nocanon 1
  
  Instead of setting AllowEncodedSlashes to ON, now set it to
  AllowEncodedSlashes NoDecode
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Use of DataStage Administrator with non-Admin roles on a
  WebSphere Cluster
  ****************************************************************
  PROBLEM DESCRIPTION:
  DataStage Administrator not being able to add users with none
  "Administrator" roles.   When they add users with the
  "Administrator" role - it adds successfully.  If they change the
  role to for example "Developer" it appears to get added, but
  when they click OK and go back into the Administrator, the user
  is no longer shown.
  ****************************************************************
  RECOMMENDATION:
  FIXED IN NEXT RELEASE
  ****************************************************************
  

Problem conclusion

Temporary fix

• In the HTTPServer httpd.conf, in Section 1 (the global section),
   add
  SetEnv websphere-nocanon 1
  
  Instead of setting AllowEncodedSlashes to ON, now set it to
  AllowEncodedSlashes NoDecodeN/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• RB30 PSN

     UP

• RB31 PSN

     UP