IBM Support

JR52517: WHEN USING A CUSTOM AUTHENICATION PLUGIN WITH PROCESS DESIGNER, HTTP 500 ERRORS OCCUR FOR EXTERNAL WEB PAGES.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as fixed if next.

Error description

  • When using a custom authenication plugin with Process Designer,
    Http 500 errors occur for external web pages.
    
    The browser will show a 500 error and
    StringIndexOutOfBoundsException.
    
    In the app cluster SystemOut logs, you will also see this
    exception.
    
    com.ibm.ws.webcontainer.servlet.ServletWrapper service
    SRVE0068E: An exception was thrown by one of the service
    methods of the servlet [/redirect-login.jsp] in application
    [IBM_BPM_Teamworks_AppCluster].
    Exception created : [java.lang.StringIndexOutOfBoundsException
    at java.lang.String.substring(String.java:1148)
    at
    com.ibm._jsp._redirect_2D_login._jspService(_redirect_2D_login.j
    ava:145)
    at
    com.ibm.ws.jsp.runtime.HttpJspBase.service(HttpJspBase.java:99)
    
    
    This will only occur when using a custom authentication plugin
    for Process Designer:
    http://www-01.ibm.com/support/knowledgecenter/SSFPJS_8.5.5/com.i
    bm.wbpm.imuc.ebpm.doc/topics/tsec_custom_authenticator.html
    
    If the failing URL is viewed for redirect-login.jsp, it will
    contain null credentials.
    

Local fix

Problem summary

  • ERROR DESCRIPTION -
    When you use IBM Process Designer to access the IBM Process
    Center console, viewing the process documentation by selecting
    Generate Report for a specific business process definition (BPD)
    results in an exception in the external browser.
    
    
    PRODUCTS AFFECTED
    IBM Business Process Manager (BPM) Advanced
    IBM BPM Standard
    IBM BPM Express
    
    LOCAL FIX -
    Set <add-redirect-url-credentials> to ?true?.
    
    
    PROBLEM SUMMARY
    If you select Generate Report to view the process documentation
    from Process Designer when the property
    <add-redirect-url-credentials> is set to ?false?, an exception
    occurs in the external web browser.
    
    The URL constructed will be similar to this:
    
    https://localhost:9443/bpm/dev/WebViewer/redirect-login.jsp?jses
    sionId=null&credentials=null&redirect=...
    
    This issue occurs because of the null ?credentials? parameter in
    the HTTP request. The server side cannot handle the null
    credentials and throws an exception. However, Process Designer
    does not store user credential information if the property
    <add-redirect-url-credentials> is set to ?false?.
    
    You might see the following exception in the log files:
    
    ServletWrappe E com.ibm.ws.webcontainer.servlet.ServletWrapper
    service SRVE0068E: An exception was thrown by one of the service
    methods of the servlet [/redirect-login.jsp] in application
    [IBM_BPM_Teamworks_AppCluster]. Exception created :
    [java.lang.StringIndexOutOfBoundsException]
    

Problem conclusion

  • A fix is released in IBM BPM V8.5.7.0. Because no user
    credentials are passed in the request, the browser prompts the
    user to log in to view the process documentation.
    
    To obtain the fix, apply the V8.5.7.0 refresh pack.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR52517

  • Reported component name

    BPM ADVANCED

  • Reported component ID

    5725C9400

  • Reported release

    855

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-02-10

  • Closed date

    2015-04-13

  • Last modified date

    2015-12-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

  • R856 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTN5","label":"IBM Business Process Manager Advanced"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
04 December 2015