PM99516: AUTHENTICATION FOR LDAP USERS FAILS FOR OSLC QUERIES IF THERE ISANY GROUP DEFINED AS RESTRICTED.

Rational ClearQuest Fix Pack 15 (8.0.0.15) for 8.0
Rational ClearQuest Fix Pack 8 (8.0.1.8) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.0.16) for 8.0
Rational ClearQuest Fix Pack 9 (8.0.1.9) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.0.17) for 8.0
Rational ClearQuest Fix Pack 10 (8.0.1.10) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.0.18) for 8.0
Rational ClearQuest Fix Pack 11 (8.0.1.11) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.0.19) for 8.0
Rational ClearQuest Fix Pack 12 (8.0.1.12) for 8.0.1
Rational ClearQuest Fix Pack 20 (8.0.0.20) for 8.0
Rational ClearQuest Fix Pack 13 (8.0.1.13) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.0.21) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.1.14) for 8.0.1
Rational ClearQuest Fix Pack 15 (8.0.1.15) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.1.16) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1
Rational ClearQuest Fix Pack 20 (8.0.1.20) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.1.21) for 8.0.1
Rational ClearQuest Fix Pack 22 (8.0.1.22) for 8.0.1
Rational ClearQuest Fix Pack 23 (8.0.1.23) for 8.0.1
Rational ClearQuest Fix Pack 24 (8.0.1.24) for 8.0.1
Rational ClearQuest Fix Pack 25 (8.0.1.25) for 8.0.1

APAR status

• Closed as program error.

Error description

• When when an LDAP CQ user tries to run an OSLC query the
  authentication fails if there is any group set as restricted in
  the CQWeb server to which the OSLC queries are directed.
  The dialog box prompting for user name and password keeps on
  reappearing even if the correct credentials are used.
  As a result the user is unable to run any OSLC query. This
  behavior exists in CQ versions 7.1.2.12, 8.0.0.8 and 8.0.1.1.
  
  Steps to reproduce:
  
  - In CQWeb Site Administration -? Site Configuration -? Security
  Options, enter group name in the  'Restricted User Groups' text
  box and apply the changes
  - Log out from CQWeb and run any OSLC query, such as
  (substituting the appropriate DBSET and USERDB values)
  http://localhost/cqweb/oslc/repo/DBSET/db/USERDB
  - When prpmpted for authentication, enter the valid credentials
  for an LDAP authenticated user
  - Note that the authentication dialog box returns, even if the
  credentials are correct
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ClearQuest Web OSLC                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When a ClearQuest LDAP user tries to run an OSLC query, the  *
  * authentication fails if there is any group set as Restricted *
  * on the CQ Web server to which the OSLC queries are directed. *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in ClearQuest 8.0.0.15 and 8.0.1.8.
  When a ClearQuest LDAP user tries to run an OSLC query, the
  authentication succeeds when there is a group set as Restricted
  on the CQ Web server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R800 PSY

     UP

• R801 PSY

     UP