IT25724: LDAP ERROR MESSAGE DOES NOT CONTAIN CAUSE OF PROBLEM

APAR status

• Closed as program error.

Error description

• When using LDAP to authenticate administrative access, and if
  SSL is being used, then, if there is a problem with the SSL
  configuration, the root cause is not reported in the BIP2702
  message when authentication is attempted.
  
  This makes it difficult for a system administrator to tell if a
  user was not authenticated because they were not in the remote
  LDAP search or if they were not authenticated due to a
  configuration problem.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus version 10 or App Connect
  Enterprise version 11 using LDAP authentication for
  administrative access with SSL.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When using LDAP to authenticate administrative access, and if
  SSL is being used, then if there is a problem with the SSL
  configuration, the root cause is not reported in the BIP2702
  message when authentication is attempted.
  
  This makes it difficult for a system administrator to tell if a
  user was not authenticated because they were not in the remote
  LDAP search, or if they were not authenticated due to a
  configuration problem.
  

Problem conclusion

• The BIP2702 message has been enhanced to include the Java
  message text for the original root cause exception and any
  nested exception to make it easier for an administrator to
  diagnose the cause of the problem.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.14
  v11.0      11.0.0.2
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels