IBM Support

PH24587: MULTIPLE "LOG OUTS" AT THE SAME TIME FOR USERS ON THE LOGIN ACTIVITY LOG REPORT.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • The client is seeing multiple "Log Outs" at the same time for
    users on the Login Activity Log Report. In the Actor_Audit_Trail
    we also see multiple logouts
    
    Steps to recreate:
    Multiple session objects are being created, and when the garbage
    collector finally cleans them up and calls the finalize() method
    is when they will be 'logged off'.
    
    Our system internals are misleadingly being logged as "log outs"
    of users when that is not really happening. The report should
    clearly indicate when an actual user is logging in or out.
    
    The extra logouts in the report are caused by a side-effect of
    the design of some of our system internal processing on behalf
    of users in 8.x
    It does not represent any malicious or error activity on their
    server, it is basically 'expected behavior' of the as-is design.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * OpenPages Users                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * MULTIPLE "LOG OUTS" AT THE SAME TIME FOR USERS ON THE LOGIN  *
    * ACTIVITY LOG REPORT.                                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Customers should download OpenPages with Watson 8.2 Fix Pack *
    * 2 (8.2.0.2). See the following document for details on       *
    * obtaining OpenPages 8.2.0.2:                                 *
    * https://www.ibm.com/support/pages/openpages-watson-82-fix-pa *
    * ck-2                                                         *
    ****************************************************************
    

Problem conclusion

  • During Workflow backend calls multiple Aurora Session objects
    are created for single Aurora Access Token.  The logout audit
    log is generated every time.  The solution was to mark these
    sessions as "internal" so the code would not call the logout
    call that generates extra logout audit log.
    
    Customers should download OpenPages with Watson 8.2 Fix Pack 2
    (8.2.0.2). See the following document for details on obtaining
    OpenPages 8.2.0.2:
    https://www.ibm.com/support/pages/openpages-watson-82-fix-pack-2
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH24587

  • Reported component name

    OPENPAGES GRC

  • Reported component ID

    5725D5100

  • Reported release

    810

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-04-20

  • Closed date

    2021-03-25

  • Last modified date

    2021-03-25

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    OPENPAGES GRC

  • Fixed component ID

    5725D5100

Applicable component levels

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFUEU","label":"IBM OpenPages with Watson"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"810"}]

Document Information

Modified date:
26 March 2021