ZZ00358: THE LOGINS FOR LDAP USERS HANG

IBM Cloud Orchestrator Fix Pack 2 (2.4.0.2) for 2.4
IBM Cloud Orchestrator Fix Pack 3 (2.4.0.3) for 2.4
IBM Cloud Orchestrator Interim Fix 1 for 2.4.0.2

APAR status

• Closed as program error.

Error description

• ICO 2.4 -
  The logins for ldap users hang for about 50 minutes and then die
  

Local fix

Problem summary

• The logins for ldap users hang for about 50
  minutes and then fail
  ****************************************************************
  * USERS AFFECTED: All users of SmartCloud Orchestrator 2.4.0.1
  using LDAP
  ****************************************************************
  * PROBLEM DESCRIPTION:
  When using Microsoft Active Directory and ICO 2.4.0.0 or 2.4.0.1
  Logins for ldap users would hang for approximately 50 minutes
  and then the login would fail
  ****************************************************************
  * RECOMMENDATION:
  Issue is fixed in 2.4.0.2 and later
  It is Recommended that users upgrade to 2.4.0.2
  
  Manual fix is possible by performing the following actions
  add the line conn.set_option(ldap.OPT_REFERRALS,0)
  after the line
  conn=ldap.initialize(ldap_config.url)
  in the file
  /usr/lib/python2.6/site-packages/keystone/middleware/ldapauth.py
  
  This is also documented in 2.4.0.3 documentation as a fix for
  2.4.0.0 and 2.4.0.1
  

Problem conclusion

• After Upgrading to 2.4.0.2 or applying the manual change to
  ldapauth.py the user should no longer see the issue outlined in
  this APAR
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SMRTCLOUD ORCHS

• Fixed component ID

  5725H2800

Applicable component levels

• R240 PSY

     UP