PH66129: JAX-WS WS-SECURITY MIGHT CAUSE A CONCURRENTMODIFICATIONEXCEPTION

APAR status

• Closed as program error.

Error description

• JAX-WS WS-Security might cause a
  java.util.ConcurrentModificationException.  In this case you may
  see the following in trace and dumps:
  
  [3/24/25 11:21:19:351 EET] 0000052d ORBRas        <
  com.ibm.rmi.iiop.ReplyMessage _getSystemException:373
  WebContainer : 0 Exit
                                  org.omg.CORBA.NO_PERMISSION:
  
  	>> SERVER (id=4bcd9337,
  host=clab2258node14.netact.nsn-rdnet.net) TRACE START:
  	>>    org.omg.CORBA.NO_PERMISSION:
  java.util.ConcurrentModificationException
  
  AND:
  
  A checkForComodification
  thread id: 3936642
   name:          ORB.thread.pool : 3
   Thread object: com/ibm/ws/util/ThreadPool$Worker @ 0x124eb0ff0
   Native info:   !j9vmthread 0x5109d00  !stack 0x5109d00
  
  at java.util.Vector$Itr.checkForComodification(Vector.java:1229)
  
  at Object java.util.Vector$Itr.next(Vector.java:1182)
  	objects: 0x1ba9498b0 0x1ba5817c8 0x1ba5817c8 0x1ba94a1f8
  at com.ibm.ws.wssecurity.platform.websphere.wssapi.token.impl.w
  ssTokenPropagationInboundLoginModule.purgeInvalidTokens(wssToke
  nPropagationInboundLoginModule.java:320)
  at com.ibm.ws.wssecurity.platform.websphere.wssapi.token.impl.w
  ssTokenPropagationInboundLoginModule.login(wssTokenPropagationI
  nboundLoginModule.java:209)
  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcce
  ssorImpl.java:90)
  
  AND:
  
  15:19:48.706361953  0x5109D00 mt.1                 Entry
  >java/util/Vector.remove(Ljava/lang/Object;)Z compiled method,
  this = 0x1ba5817c8
  15:19:48.706362148  0x5109D00 j9trc_aux.0          Event
  jstacktrace:
  	at java.util.Vector.remove (Vector.java:815) (Compiled Code)
  	at com.ibm.ws.wssecurity.platform.websphere.wssapi.token.impl.
  wssTokenPropagationInboundLoginModule.purgeInvalidTokens(wssToke
  	at com.ibm.ws.wssecurity.platform.websphere.wssapi.token.impl.
  wssTokenPropagationInboundLoginModule.login(wssTokenPropagationI
  	at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  
  	at sun.reflect.NativeMethodAccessorImpl.invoke
  (NativeMethodAccessorImpl.java:90) (Compiled Code)
  	at sun.reflect.DelegatingMethodAccessorImpl.invoke
  (DelegatingMethodAccessorImpl.java:55) (Compiled Code)
  	at java.lang.reflect.Method.invoke (Method.java:508) (Compiled
  Code)
  	at javax.security.auth.login.LoginContext.invoke
  (LoginContext.java:788) (Compiled Code)
  	at javax.security.auth.login.LoginContext.access$000
  (LoginContext.java:196)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  *                  users of JAX-WS WS-Security                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: JAX-WS WS-Security might emit a         *
  *                      java.util.ConcurrentModificationExcepti *
  *                      o                                       *
  *                      n error and fail to process the         *
  *                      WebSphere Subject.                      *
  ****************************************************************
  * RECOMMENDATION:  Install a fix pack that contains this       *
  *                  APAR.                                       *
  ****************************************************************
  JAX-WS WS-Security might emit a
  java.util.ConcurrentModificationException error when tokens
  being
  processed on the WebSphere Subject during login.
  

Problem conclusion

• The WebSphere WS-Security runtime is updated so that it does not
  cause a java.util.ConcurrentModificationException error.
  
  
  The fix for this APAR is targeted for inclusion in fix packs
  8.5.5.28 and 9.0.5.24. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels