IBM Support

PI50589: Liberty profile needs a meaningful message in the NO_PERMISSION exception when failing to decode a GSSUP token.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • For Liberty profile, a message needs to be set in the
    NO_PERMISSION exception when the server cannot decode the
    GSSUP token sent by a client.  The console.log file
    currently shows the error as follows,
    
    [ERROR   ] SASException
                 com.ibm.ws.transport.iiop.security.SASException
    at
    com.ibm.ws.transport.iiop.security.config.tss.TSSGSSUPMechCo
    nfig.check(TSSGSSUPMechConfig.java:103)
    at [internal classes]
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty Profile - Security           *
    ****************************************************************
    * PROBLEM DESCRIPTION: Liberty profile needs a meaningful      *
    *                      message in the NO_PERMISSION exception  *
    *                      when failing to decode a GSSUP token.   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    For Liberty profile, a message needs to be set in the
    NO_PERMISSION exception when the server cannot decode the GSSUP
    token sent by a client.  The console.log file currently shows
    the error as follows,
    
    [ERROR   ] SASException
    
    com.ibm.ws.transport.iiop.security.SASException
    	at
    com.ibm.ws.transport.iiop.security.config.tss.TSSGSSUPMechConfig
    .check(TSSGSSUPMechConfig.java:103)
    	at [internal classes]
    

Problem conclusion

  • The code was modified to add a message to the NO_PERMISSION
    exception created when the GSSUP token received cannot be
    decoded.  The length of GSSUP tokens greater than 127 bytes is
    read and written in the format expected by WebSphere Application
    Server Classic.
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 8.5.5.8.  Please refer to the Recommended Updates page for
    delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI50589

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    855

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-10-15

  • Closed date

    2015-10-30

  • Last modified date

    2015-10-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • R855 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
16 October 2021