PH19164: IF CUSTOM ENCRYPTION MODULE THROWS PASSWORDENCRYPTEXCEPTION OR PASSWORDDECRYPTEXCEPTIO ,IT CAN CORRUPT PASSWORDS IN SECURITY.XML

APAR status

• Closed as program error.

Error description

• When custom encryption module throws PasswordEncryptException
  or PasswordDecryptException, passwords in configuration files
  have inconsistent encryption tag.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: If custom password encoding module      *
  *                      fails to encrypt default                *
  *                      xor-encoded password, security.xml      *
  *                      becomes unusable.                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When custom password encryption module fails to encrypt
  xor password, WebSphere puts original xor-encoded passwords
  back.  However, it incorrectly keeps the custom encryption tag
  for the xor-encoded password. As a result, security.xml becomes
  unusable because WebSphere has mismatched algorithm (custom)
  for the xor-encoded password.
  

Problem conclusion

• The bug was fixed.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.18 and 9.0.5.4.  For more information, see
  'Recommended Updates for WebSphere Application Server':
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP