PI26950: MESSAGE "IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND"

8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• Message "IRR012I Verification Failed. User profile not found"
  is seen when using the zosLocalAdapters (WOLA) service with a
  non-SAF user registry.
  The WebSphere Application Server for z/OS Liberty Profile
  server instance is attempting to authenticate users against
  SAF, regardless of which user registry is being used.  This
  happens when the zosLocalAdapters-1.0 service is enabled, and
  the angel process is started.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile for z/OS             *
  ****************************************************************
  * PROBLEM DESCRIPTION: Some configurations unnecesarrily have  *
  *                      an implicit dependancy on having a      *
  *                      configured SAF registry.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  An error like "IRR012I VERIFICATION FAILED. USER PROFILE NOT
  FOUND" may be issued when certain features (such as
  zosLocalAdapters) that rely on authorized services involving the
  Angel process are enabled, even though a SAF registry has not
  been configured and feature zosSecurity has not been enabled.
  

Problem conclusion

• A code change has been made to avoid checking the SAF registry
  when it has not been configured.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 8.5.5.5.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

• A workaround is to configure a SAF registry, for example:
  
  (a) Create SAF SERVER profile BBG.SECPFX.BBGZDFLT
  (b) Grant the Liberty Profile server READ to that profile
  (c) In the server.xml specify an ID that exists in SAF, or
  create
  'Fred' in SAF
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY - Z/OS

• Fixed component ID

  5655W6514

Applicable component levels

• R850 PSY

     UP