ZZ00510: IN SOME CASES, NO CONTENTS ARE SEEN ON THE SELF-SERVICE UI DASHBOARD WHEN ICO IS SETUP WITH LDAP.

IBM Cloud Orchestrator Fix Pack 4 (2.4.0.4) for 2.4

APAR status

• Closed as program error.

Error description

• When ICO is setup with LDAP, and the user attribute
  (user_name_attribute) used for authentication sometimes
  contains empty values, then although user can login
  successfully into ICO self-service UI, no contents on the
  dashboard are seen.
  
  As an example, the mail user attribute in Bluepages LDAP
  sometimes contains empty values. Hence, when  ICO is setup with
  Bluepages LDAP, and the 'mail' user attribute
  (user_name_attribute) is used for authentication , then no
  contents are seen on the ICO self-service UI dashboard. The
  user is able to successfully login to the ICO self-service UI,
  but the dashboard contents are not seen. Moreover user is also
  able to successfully login to Horizon UI.
  

Local fix

• The code change was provided in a JAR file.
  
  File com.ibm.orchestrator.vmm.adapter.keystone.jar was provided
  & had to be placed on the CS2 server in the below mentioned
  
  paths:
  
  1. /opt/ibm/ico/BPM/v8.5/lib/ext/
  
  2.
  
  /opt/ibm/ico/BPM/v8.5/profiles/Node1Profile/installedApps/PCCell
  
  
  
  1/OrchestratorEAR.ear/lib/
  
  After that restart the bpm-server. (systemctl restart
  
  bpm-server)
  

Problem summary

• When ICO is setup with LDAP, and the user attribute
  
  (user_name_attribute) used for authentication sometimes
  
  contains empty values, then although user can login
  
  successfully into ICO self-service UI, no contents on the
  
  dashboard are seen.
  
  
  
  As an example, the mail user attribute in Bluepages LDAP
  
  sometimes contains empty values. Hence, when  ICO is setup with
  Bluepages LDAP, and the 'mail' user attribute
  
  (user_name_attribute) is used for authentication , then no
  
  contents are seen on the ICO self-service UI dashboard. The
  
  user is able to successfully login to the ICO self-service UI,
  
  but the dashboard contents are not seen. Moreover user is also
  
  able to successfully login to Horizon UI.
  

Problem conclusion

• The fix included  to search the specific User by name and Domain
  combined, in the OpenstackClient included in
  com.ibm.orchestrator.vmm.adapter.keystone.jar .The jar needs to
  be updated in ICO server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SMRTCLOUD ORCHS

• Fixed component ID

  5725H2800

Applicable component levels

• R240 PSY

     UP

• R250 PSY

     UP