JR57235: ADDING SWITCH FOR WEB SERVICE SECURITY HEADER TIMESTAMP CHECKING

bpm.8570.cf2017.03.delta.repository
Downloading IBM Business Process Manager V8.5.7 Cumulative Fix 2017.03

APAR status

• Closed as program error.

Error description

• When you use a web service in IBM Business Process Manager
  (BPM), you might see the following error if the clock of the web
   service provider server and the clock of client are not in
  sync:
  
  org.apache.axis2.engine.AxisEngine receive the timestamp is
  invalid, creation of timestamp - <TimeStamp> too far in future.
  

Local fix

• Correct this issue in one of the following ways:
  
  -Synchronize the server and client clocks so that their
  timestamps are in sync.
  -Switch the security and policy from Use Basic Security to Use
  Policy Set in the IBM BPM web service or web service
  integration.
  

Problem summary

• No additional information is available
  
  PRODUCTS AFFECTED
  IBM BPM Advanced
  IBM BPM Standard
  IBM BPM Express
  

Problem conclusion

• A fix is available for IBM BPM V8.5.6.0 CF2 that make the ws
  security header timestamp checking can be switched off.
  
  If you do not have IBM BPM V8.5.6 cumulative fix 2 installed,
  download and install IBM BPM V8.5.6 cumulative fix 2 from
  http://www.ibm.com/support/docview.wss?uid=swg24041303.
  
  With IBM BPM V8.5.6 cumulative fix 2 installed, search for
  JR57235 on Fix Central (http://www.ibm.com/support/fixcentral):
  
      1. Select IBM Business Process Manager with your edition
  from the product selector, the installed version to the fix pack
  level, and your platform, and then click Continue.
      2. Select APAR or SPR, enter JR57235, and click Continue.
  
  When you download fix packages, ensure that you also download
  the readme file for each fix. Review each readme file for
  additional installation instructions and information about the
  fix.
  
  With this interim fix applied, you can configure a switch by
  adding system property with the name
  "com.ibm.bpm.ws.inbound.timestamp.checking.disable" and value
  set to "true" for IBM Process Center or IBM Process Server.
  

Temporary fix

• Correct this issue in one of the following ways:
  
  -Synchronize the server and client clocks so that their
  timestamps are in sync.
  -Switch the security and policy from Use Basic Security to Use
  Policy Set in the IBM BPM web service or web service
  integration.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM ADVANCED

• Fixed component ID

  5725C9400

Applicable component levels

• R856 PSY

     UP

• R857 PSY

     UP