PH26842: SAML WEB SSO CLASSNOTFOUNDEXCEPTION FOR TRUSTASSOCIATIONUTIL IN 9.0.5.4

PH26842:SAML Web SSO ClassNotFoundException for TrustAssociationUtil in 9.0.5.4

APAR status

• Closed as program error.

Error description

• When running WebSphere Application Server fixpack 9.0.5.4,
  when a URL is invoked that is protected by the SAML Web SSO
  TAI, during the processing of the request a classloader error
  occurs.
  
  java.lang.NoClassDefFoundError:
  com.ibm.ws.security.web.TrustAssociationUtil
  at com.ibm.ws.secu
  rity.web.saml.util.SAMLTaiState.saveReqURL(SAMLTaiState.java:289
  )
  at com.ibm.ws.security.web.saml.ACSTrustAssociationIntercepto
  r.invokeTAIafterSSO(ACSTrustAssociationInterceptor.java:663)
  ...
  
  Caused by: java.lang.ClassNotFoundException:
  com.ibm.ws.security.web.TrustAssociationUtil cannot be found by
  com.ibm.wsfp.main_8.5.5
  at
  org.eclipse.osgi.internal.loader.BundleLoader.findClassInternal(
  BundleLoader.java:501)
  ...
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server and SAML Web SSO                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: A ClassNotFoundException error          *
  *                      occurs for TrustAssociationUtil in      *
  *                      SAML Web SSO on fixpack 9.0.5.4.        *
  ****************************************************************
  * RECOMMENDATION:  Install a fix pack or interim fix that      *
  *                  includes this APAR. An interim fix for      *
  *                  9.0.5.4 is available to download at         *
  *                  https://www.ibm.com/support/pages/node/6242 *
  *                  376 .                                       *
  ****************************************************************
  After upgrading to 9.0.5.4, the SAML Web SSO trust association
  interceptor (TAI) will no longer function.  The TAI will emit
  the following error:
  java.lang.NoClassDefFoundError:
  com.ibm.ws.security.web.TrustAssociationUtil
  at com.ibm.ws.secu
  rity.web.saml.util.SAMLTaiState.saveReqURL(SAMLTaiState.java:28
  9
  )
  at com.ibm.ws.security.web.saml.ACSTrustAssociationIntercepto
  r.invokeTAIafterSSO(ACSTrustAssociationInterceptor.java:663)
  ...
  Caused by: java.lang.ClassNotFoundException:
  com.ibm.ws.security.web.TrustAssociationUtil cannot be found by
  com.ibm.wsfp.main_8.5.5
  

Problem conclusion

• The com.ibm.ws.security.web package is added to the imports
  list in the MANIFEST.MF file in the
  com.ibm.wsfp.main.jar file, preventing the
  ClassNotFoundException error for the
  com.ibm.ws.security.web.TrustAssociationUtil class.
  
  The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.5
  For more information, see 'Recommended Updates for
  WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R900 PSY

     UP