PH21890: EXTERNAL AUTHENTICATION RETRIEVED USER VIA TAI INTERCEPT AS UNAUTHENTICATED FAILED WITH NULL FOR GETUSERPRINCIPAL

APAR status

• Closed as program error.

Error description

• If an authenticated user's name ends with the same
  string as predefined unauthenticated user name,
  WebSphere treat the user as unauthenticated user.  For this
  user, Servlet API: getUserPrincipal() returns null instead of
  the user name.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: An authenticated user is treated as     *
  *                      unauthenticated if the username ends    *
  *                      with predefined unauthenticated user.   *
  ****************************************************************
  * RECOMMENDATION:  Avoid user name that ends with              *
  *                  "UNAUTHENTICATED" (distributed) or          *
  *                  "WSGUEST"(zOS) . For example, do not use    *
  *                  "ABC_UNAUTHENICATED" or "MY_WSGUEST"        *
  ****************************************************************
  There was incorrect logic in authentication logic, that
  incorrectly mark user as unauthenticated .
  

Problem conclusion

• The bug was fixed.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.18 and 9.0.5.4.  For more information, see 'Recommended
  Updates for WebSphere Application Server':
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP