PH59672: WEBUI IS SLOW WHEN ADMIN SECURITY IS ENABLED AGAINST AN LDAP BACKEND

APAR status

• Closed as program error.

Error description

• If administrative security is enabled on an Integration Node,
  and this is configured to authorize against a remote LDAP server
  then an excessive number of LDAP requests may be made. this can
  cause the WebUI to be slow to load and appear unresponsive.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of LDAP based admin security in IBM Integration Bus
  for z/OS 10.1.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  If administrative security is enabled on an Integration Node,
  and this is configured to authorize against a remote LDAP server
  then an excessive number of LDAP requests may be made. this can
  cause the WebUI to be slow to load and appear unresponsive.
  

Problem conclusion

• IBM Integration Bus for z/OS can now be configured to cache
  authorization results from the LDAP server via three new
  properties which are available on the "server" object  of the
  "webadmin" component. These three properties are:
  
  * ldapAuthorizationCacheEnabled - A boolean value controlling
  whether caching of LDAP authentication and authorization results
  should be performed. By default this property is set to "true".
  * ldapAuthorizationCacheMaxSize - An positive integer value
  specifying how many entries should be stored the in-memory
  cache. The minimum value is 100, the default value is 1024. If a
  new entry needs to be added to the cache and it is full, then
  the oldest half of the cache will be discarded.
  * ldapAuthorizationCacheMaxEntryAge - A positive integer value
  specify the number of minutes that an entry should be kept in
  the cache for. The minimum value is 1, the default value is 30.
  If an entry has not been used for at least as long as specified
  by this property then it will be evicted from the cache.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.1      10.1.0.4
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INT BUS FOR Z/O

• Fixed component ID

  5655AB110

Applicable component levels