PM23610: NULLPOINTEREXCEPTION FROM CONTEXTMANAGERIMPL.SETFIRSTAUTHUSER WHEN CALLING WSSUBJECT.SETRUNASSUBJECT WITH SMF ENABLED

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When using the
  com.ibm.websphere.security.auth.WSSubject.setRunAsSubject API, a
  NullPointerException may occur if SMF is enabled. The stack
  trace is shown below:
  
  java.lang.NullPointerException
   at
  com.ibm.ws.security.auth.ContextManagerImpl.setFirstAuthUser(Con
  textMana
  gerImpl.java:4656)
   at
  com.ibm.ws.security.auth.ContextManagerImpl.setInvocationSubject
  (Context
  ManagerImpl.java:4376)
   at
  com.ibm.websphere.security.auth.WSSubject$1.run(WSSubject.java:4
  47)
   at
  com.ibm.ws.security.util.AccessController.doPrivileged(AccessCon
  troller.
  java:118)
   at
  com.ibm.websphere.security.auth.WSSubject.setRunAsSubject(WSSubj
  ect.java
  :444)
   at
  com.ibm.SomeApplication.somemethod(SomeApplication.java)
  

Local fix

• To prevent the NullPointerException, please disable SMF on the
  server where the problem happens
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM WebSphere Application       *
  *                 Server V6.1.0 for z/OS running with SMF      *
  *                 enabled and with a subject that does not     *
  *                 contain a WSCredential.                      *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: A NullPointerException may be thrown    *
  *                      by ContextManagerImpl.setFirstAuthUser. *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The code incorrectly assumes the presense of a WSCredential in
  the subject's public credential set. If it is not there, a
  NullPointerException will be thrown on zOS if SMF is enabled.
  

Problem conclusion

• The code was corrected to check whether the WSCredential is
  null before attempting to call a method on it.
  
  APAR PM23610 is currently targeted for inclusion in Service
  Level (Fix Pack) 7.0.0.13 of WebSphere Application Server V7.0.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM18634

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• BBGUBINF BBOUBINF
  

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R700 PSY UK61146

     UP10/10/21 P F010

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.