PI24274: PASSWORD STRENGTHENING ALGORITHM FOR LDAP LOGIN INVALID

IBM AnthillPro Fix Pack 3 (5.0.0.3) for 5.0
IBM AnthillPro 5.0.1
IBM AnthillPro Fix Pack 1 (5.0.1.1) for 5.0.1

APAR status

• Closed as program error.

Error description

• Trying to login to an LDAP realm on 5.0.0.2 might produce an
  error due to an incorrect algorithm being used on trying to
  strengthen the login password.
  
  2014-08-13 17:14:17,889 ERROR http-0.0.0.0-443-5
  com.urbancode.anthill3.domain.security.AuthorityDaoSql -
  Internal Error: Unable to construct a Datum from the specified
  input
  java.sql.SQLException: Internal Error: Unable to construct a
  Datum from the specified input
      at
  oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError
  .java:112)
      at
  oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError
  .java:146)
      at oracle.jdbc.driver.SQLUtil.makeDatum(SQLUtil.java:964)
      at
  oracle.jdbc.driver.SQLUtil.makeOracleDatum(SQLUtil.java:1332)
      at
  oracle.jdbc.driver.UpdatableResultSet.updateObject(UpdatableResu
  ltSet.java:2113)
      at
  oracle.jdbc.driver.UpdatableResultSet.updateString(UpdatableResu
  ltSet.java:1896)
      at
  oracle.jdbc.driver.OracleResultSet.updateString(OracleResultSet.
  java:2862)
      at
  org.apache.commons.dbcp.DelegatingResultSet.updateString(Delegat
  ingResultSet.java:493)
      at
  org.apache.commons.dbcp.DelegatingResultSet.updateString(Delegat
  ingResultSet.java:493)
      at
  com.p6spy.engine.spy.P6ResultSet.updateString(P6ResultSet.java:5
  42)
      at
  com.urbancode.anthill3.domain.security.AuthorityDaoSql.updatePas
  sword(AuthorityDaoSql.java:124)
      at
  com.urbancode.anthill3.domain.security.AuthorityDaoSql.authentic
  ate(AuthorityDaoSql.java:68)
  

Local fix

• APAR to be created
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Issues with LDAP authentication                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in IBM AnthillPro 5.0.0.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ANTHILLPRO

• Fixed component ID

  5725M7400

Applicable component levels

• R500 PSN

     UP

• R500 PSY

     UP