LI73778: WHEN USER DN CONTAINS ESCAPE CHARACTER, DB2 LDAP GROUP PLUGIN CA N'T FIND USER'S GROUP

DB2 Version 9.5 Fix Pack 3b for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4  for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 3a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 3 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• The following problem will only affect those users who
  configureDB2 to use the DB2 LDAP plugins to authenticate and
  retrieve user groups with a LDAP server.
  
  If the DN of a user entry contain(s) escape character sequence
  such as '\,' then the DB2 LDAP group plugin will not be able to
  retrieve the user's groups and SQL30060 is returned.
  
  Users affect will find similar log entries in the db2diag.log
  file:
  2008-08-14-17.06.16.159692+120 I631185E389   LEVEL: Error
  PID   : 31346 TID : 46912637033008
  FUNCTION: DB2 Common, Security, Users and Groups,
  secLogMessage,
  probe: 20
  DATA #1 : String, 171 bytes
  LDAP findGroupsByMember: group search failed with ldap rc=87
  (Bad search filter)
  dn='CN=Smith\,John,OU=Users,DC=ACME,DC=com'
  

Local fix

• Do not use an escape character in the DN.
  

Problem summary

• WHEN USER DN CONTAINS ESCAPE CHARACTER, DB2 LDAP GROUP PLUGIN CA
  N'T FIND USER'S GROUP
  

Problem conclusion

• fixed in fp3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  LI73733

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 UDE ESE LIN

• Fixed component ID

  5765F4104

Applicable component levels

• R950 PSY

     UP