Direct links to fixes
APAR status
Closed as program error.
Error description
In an cluster environment, you might be unable to create failed events with an exception that reports ?Unauthenticated or missing subject/credentials?: [7/20/15 16:32:39:504] 00000052 RoleBasedAuth X Unauthenticatedor missing subject/credentials. java.lang.Exception: Unauthenticated or missing subject/credentials. at com.ibm.ws.security.role.RoleBasedAuthorizerImpl. getEffectiveCredentials(RoleBasedAuthorizerImpl.java:1191) at com.ibm.ws.security.role.RoleBasedAuthorizerImpl. checkAccess(RoleBasedAuthorizerImpl.java:343) at com.ibm.ws.management.AdminServiceImpl.preInvoke (AdminServiceImpl.java:2362) at com.ibm.ws.management.AdminServiceImpl$1.run (AdminServiceImpl.java:1308) at com.ibm.ws.security.util.AccessController.doPrivileged (AccessController.java:118) at com.ibm.ws.management.AdminServiceImpl.invoke (AdminServiceImpl.java:1224) at com.ibm.ws.management.discovery.Utils. getParentAdminClient(Utils.java:161) at com.ibm.ws.management.discovery.Utils. getDmgrAdminClient(Utils.java:113) at com.ibm.ws.management.AdminServiceImpl. getDeploymentManagerAdminClient(AdminServiceImpl.java:1836) at com.ibm.wbiserver.manualrecovery.util. FailedEventManagerAdmin.getDeploymentTarget (FailedEventManagerAdmin.java:123) at com.ibm.wbiserver.manualrecovery.ejb.BaseRecoveryMDBHelper. getDeploymentTarget(BaseRecoveryMDBHelper.java:473) ... Subsequently this authentication or authorization issue is reported in the trace: [7/20/15 16:32:39:505] 00000052 RoleBasedAuth X SECJ0305I:The role-based authorization check failed for admin-authz operation Discovery:getParent. The user UNAUTHENTICATED (unique ID: unauthenticated) was not granted any of the following required roles: deployer, operator, configurator, monitor, administrator, adminsecuritymanager, auditor.
Local fix
Problem summary
Failed Event Manager uses a Deployment Manager Admin Client facility to look up the target an application is deployed on. If the call to this facility is not run with adequate authorization, it fails. PRODUCTS AFFECTED IBM Business Process Manager (BPM) Advanced
Problem conclusion
A fix is planned to be made available for IBM BPM V7.5.1.1 that corrects the Failed Event Manager code to ensure it runs with sufficient privileges. On Fix Central (http://www.ibm.com/support/fixcentral), search for JR53963: 1. Select IBM Business Process Manager with your edition from the product selector, the installed version to the fix pack level, and your platform, and then click Continue. 2. Select APAR or SPR, enter JR53963, and click Continue. When you download fix packages, ensure that you also download the readme file for each fix. Review each readme file for additional installation instructions and information about the fix.
Temporary fix
Not applicable
Comments
APAR Information
APAR number
JR53963
Reported component name
BPM ADVANCED
Reported component ID
5725C9400
Reported release
751
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2015-07-29
Closed date
2015-09-29
Last modified date
2015-09-29
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
BPM ADVANCED
Fixed component ID
5725C9400
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFTN5","label":"IBM Business Process Manager Advanced"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.1","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
31 August 2023