IBM Support

LI73778: WHEN USER DN CONTAINS ESCAPE CHARACTER, DB2 LDAP GROUP PLUGIN CA N'T FIND USER'S GROUP

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The following problem will only affect those users who
    configureDB2 to use the DB2 LDAP plugins to authenticate and
    retrieve user groups with a LDAP server.
    
    If the DN of a user entry contain(s) escape character sequence
    such as '\,' then the DB2 LDAP group plugin will not be able to
    retrieve the user's groups and SQL30060 is returned.
    
    Users affect will find similar log entries in the db2diag.log
    file:
    2008-08-14-17.06.16.159692+120 I631185E389   LEVEL: Error
    PID   : 31346 TID : 46912637033008
    FUNCTION: DB2 Common, Security, Users and Groups,
    secLogMessage,
    probe: 20
    DATA #1 : String, 171 bytes
    LDAP findGroupsByMember: group search failed with ldap rc=87
    (Bad search filter)
    dn='CN=Smith\,John,OU=Users,DC=ACME,DC=com'
    

Local fix

  • Do not use an escape character in the DN.
    

Problem summary

  • WHEN USER DN CONTAINS ESCAPE CHARACTER, DB2 LDAP GROUP PLUGIN CA
    N'T FIND USER'S GROUP
    

Problem conclusion

  • fixed in fp3
    

Temporary fix

Comments

APAR Information

  • APAR number

    LI73778

  • Reported component name

    DB2 UDE ESE LIN

  • Reported component ID

    5765F4104

  • Reported release

    950

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-09-15

  • Closed date

    2009-10-05

  • Last modified date

    2009-10-05

  • APAR is sysrouted FROM one or more of the following:

    LI73733

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DB2 UDE ESE LIN

  • Fixed component ID

    5765F4104

Applicable component levels

  • R950 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSEPGG","label":"DB2 for Linux, UNIX and Windows"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"950","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
05 October 2009