JR55329: YOU RECEIVE THE CWLLG1087W ERROR MANY TIMES IN THE SYSTEMOUT.LOGFILE WHEN YOU USE GROUP FILTERS TO HIDE LDAP GROUPS

8.5.0.1-WS-BPM-IFJR55329
8.0.1.3-WS-BPM-IFJR55329
bpm.8570.cf2016.06.delta.repository.1of2
bpm.8570.cf2016.06.delta.repository.2of2
8.5.0.2-WS-BPM-IFJR55329

APAR status

• Closed as program error.

Error description

• If you defined a group search filter for an LDAP directory in
  the Federated Repositories configuration, you might see many
  occurrences of the following warning message:
  
  CWLLG1087W User <user name> is a member of '<group name>', but
  this role does not exist. Ignoring.
  

Local fix

• Depending on your IBM BPM version, you might be able to suppress
  the log warnings but not without also suppressing potentially
  useful warnings. For more information, see “Why are my BPM
  SystemOut logs full of these warnings? CWLLG1087W: User
  (some-user) is a member of ''(some-group)'', but this role does
  not exist. Ignoring.” at
  m-systemout-logs-full-of-these-warnin.html.
  

Problem summary

• When IBM BPM queries for information from the user registry
  about a user, one of the results is the list of group
  memberships the user is included on. IBM BPM then tries to look
  up each of the groups in that list in the user registry.
  
  If a group cannot be resolved, a warning message is logged
  because the membership information stored in your LDAP directory
  might not be consistent with group availability in the
  directory.
  
  However, when you defined a group search  filter for an LDAP
  directory in your Federated Repositories configuration, the same
  message is issued for the groups that cannot be accessed
  because of filtering.
  

Problem conclusion

• A fix is/will be available for IBM BPM V8.5.0.1 that allows you
  to configure whether to  log the message.
  
  On Fix Central (http://www.ibm.com/support/fixcentral), search
  for JR55329:
  
  1. Select IBM Business Process Manager with your edition from
    the product selector, the installed version to the fix pack
    level, and your platform, and then click Continue.
  
  2. Select APAR or SPR, enter JR55329 , and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  
  To change the value, edit your 100Custom.xml file for IBM
  Process Center or IBM Process Server to contain an entry that is
  similar to the following entry:
  
   <common merge="mergeChildren">
    <security merge="mergeChildren">
     <warn-of-membership-referring-to-missing-group
      merge="replace">true
     </warn-of-membership-referring-to-missing-group>
    </security>
   </common>
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels