APAR status
Closed as program error.
Error description
In some environment, Audit information to log the request hostname has unexpected performance impact. This APAR will provide an option to turn it off.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM WebSphere Application * * Server * * who have audit function enabled. * **************************************************************** * PROBLEM DESCRIPTION: Depending the DNS configuration, * * getting * * the requestHost information for Audit * * log * * could take some time * **************************************************************** * RECOMMENDATION: * **************************************************************** The performance issue is resolved if the audit function is disabled (Security > Security auditing, uncheck "Enabled). Further investigation showed security component trigger the hostname lookup. -----Sample stack ------- 3XMTHREADINFO3 Java callstack: 4XESTACKTRACE at java/net/Inet6AddressImpl.getHostByAddr(Native Method) 4XESTACKTRACE at java/net/InetAddress$2.getHostByAddr(InetAddress.java:1052) 4XESTACKTRACE at java/net/InetAddress.getHostFromNameService(InetAddress.java:633 ) 4XESTACKTRACE at java/net/InetAddress.getCanonicalHostName(InetAddress.java:604) 4XESTACKTRACE at com/ibm/ws/webcontainer/channel/WCCRequestImpl.getRemoteHost(WCC RequestImpl.java:483) 4XESTACKTRACE at com/ibm/ws/webcontainer/srt/SRTServletRequest.getRemoteHost(SRTS ervletRequest.java:819) 4XESTACKTRACE at javax/servlet/ServletRequestWrapper.getRemoteHost(ServletRequest Wrapper.java:284) 4XESTACKTRACE at com/ibm/ws/security/web/FormLoginExtensionProcessor.formLogin(Fo rmLoginExtensionProcessor.java:887) -----------------------
Problem conclusion
The following security custom property disables the hostname lookup in the audit function. Property: com.ibm.websphere.security.audit.includeHostName Value: false Default value: true This property can be configured from adminconsole: Click Security > Global security > Custom properties. Then click New to add a new custom property and its associated value. The fix for this APAR is targeted for inclusion in fix pack 9.0.5.9 and 8.5.5.21. For more information, see 'Recommended Updates for WebSphere Application Server': https://www.ibm.com/support/pages/node/715553
Temporary fix
Comments
APAR Information
APAR number
PH36593
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-04-22
Closed date
2021-08-04
Last modified date
2021-08-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R850 PSY
UP
R900 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
02 November 2021