IT26900: NO RESULTS ARE RETURNED SEARCHING AUDIT LOG WHEN USING AN LDAP USER.

APAR status

• Closed as program error.

Error description

• When searching the IBM Spectrum Protect Plus audit
  log in the UI, for an LDAP user (myname@ibm.com),
  no results are shown although there are matching entries.
  Versions affected: 10.1.0, 10.1.1, 10.1.2
  Keywords: TS001522608 SPP ISPP
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus levels 10.1.2.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in IBM Spectrum Protect Plus level     *
  * 10.1.3                                                       *
  ****************************************************************
  

Problem conclusion

• IBM Spectrum Protect Plus internally treats Lightweight
  Directory Access Protocol
  (LDAP) users and native users in a different manner, where
  native users are identified by unique numeric user IDs while
  LDAP users are identified by their string-based usernames. Prior
  
  to this fix, filtering of the audit log was approached the same
  for native and LDAP users, which disregarded the identification
  differences between each type of user. This fix recognizes the
  internal differences between native and LDAP users and properly
  filters the audit log based on the type of user (i.e. native
  users are filtered by user ID while LDAP users are filtered by
  username). The difference in identification for native and LDAP
  users is hidden from the end-user. This provides the SPP
  end-user with a seamless experience, filtering both native and
  LDAP users through the same User Interface (UI) field on the
  audit log page, while performing the filtering in the backend
  according to the specific type of user being filtered (e.g.
  native or LDAP).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels