JR54882: DIRECTORYCOMMAND in a stand-alone LDAP system is not assigning project user roles if full distinguished name is not specified

Download ISF roll-up 4 for InfoSphere Information Server Version 8.7.0.2
Download ISF roll-up 5 for InfoSphere Information Server Version 11.3.1.2
Download ISF roll-up 6 for InfoSphere Information Server Version 11.3.1.2
Download ISF roll-up 7 for InfoSphere Information Server Version 11.3.1.2
Download ISF roll-up 8 for InfoSphere Information Server Version 11.3.1.2
Download ISF roll-up 3 for InfoSphere Information Server Version 8.7.0.2
IBM InfoSphere Information Server, Version 11.5.0.1 (Fix Pack 1)
Download ISF roll-up 10 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 4 for InfoSphere Information Server Version 11.3.1.2

APAR status

• Closed as program error.

Error description

• DirectoryCommand when the code is verifying that the
  specified user ID has the DataStageUser role.  The issue is that
   the specified user ID is being compared with the unique user
  ID, which is the full DN when configured to use stand-alone
  LDAP.  The comparison will never find the matching user ID with
  the DataStageUser role and therfore, never assigns the project
  user roles for the specified project.
  

Local fix

• to work-around the issue by specifying the user as the full
  DN.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Information Server Users
  ****************************************************************
  PROBLEM DESCRIPTION:
  DirectoryCommand is not assigning project user roles if full
  distinguished name is not specified
  ****************************************************************
  RECOMMENDATION:
  Refer to Security bulletin
  http://www-01.ibm.com/support/docview.wss?uid=swg21975827 for
  actions to perform.
  ****************************************************************
  

Problem conclusion

• fix coded
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WIS DATASTAGE

• Fixed component ID

  5724Q36DS

Applicable component levels

• R870 PSY

     UP

• R912 PSY

     UP

• RB31 PSY

     UP

• RB50 PSY

     UP