PH23240: ADDING A NODE FROM 9051+ DMGR FAILS FOR 85517+ NODE WITH CWWIM5106E

APAR status

• Closed as program error.

Error description

• Adding a 85517+ node from 9051+ DMGR fails with CWWIM5106E
  indicating the down-level node doesn't support the
  PBKDF2WithHmacSHA1 hashing algorithm when 85517+ does support
  it.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Adding 8.5.5.17+ node from 9.0.5.1+     *
  *                      deployment manager fails with           *
  *                      CWWIM5106E.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When adding a 8.5.5.17+ node from a 9.0.5.1+ deployment
  manager, the following exception may be encountered:
  CWWIM5106E The [InternalFileRepository] repositories in the
  "admin" security domain use the PBKDF2WithHmacSHA1 hashing
  algorithm that is not supported by the node being added.
   »
  The PBKDF2WithHmacSHA1 algorithm was delivered in 8.5.5.17 and
  9.0.5.1 and these checks were added to prevent configuring a
  down-level node with a hashing algorithm that it did not
  support. However; 8.5.5.17+ does indeed support the new
  algorithm. The issue is due to errant code that was checking
  the major version of the deployment manager instead of the
  node being added.
  Note, the CwWIM5106E error message is expected when the node
  being added is not a version that supports the new hashing
  algorithm.
  

Problem conclusion

• Update the version checks to check against the proper major
  version of the node instead of major version of the DMGR.
  
  The fix for this APAR is targeted for inclusion in fix packs
  8.5.5.18 and 9.0.5.4. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP