PI54477: ADD ABILITY TO DISABLE LOGGING OF SECJ0371W EXPIRED LTPA TOKEN MESSAGES

8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• SECJ0371W messages fill the logs and the customer does not find
  them useful. They would like to turn off the logging of these
  messages.
  
  WL3SEC
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.0 and higher.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: Users would like to be able to disable  *
  *                      SECJ0371W messages                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  SECJ0371W messages log every event of an LTPA token
  expiration. LTPA token expirations are expected under normal
  circumstances. Although at times these messages can alert
  customers to unexpected conditions. For instance a client
  continues to send an expired token repeatedly.
  The customer is requesting the ability to disable the logging
  of the SECJ0371W message.
  

Problem conclusion

• A security custom property will be used to disable the logging
  of the SECJ0371W message. Setting this property to true will
  disable future logging of the message.
  com.ibm.websphere.security.ltpa.disableSECJ0371W=true
  
  The fix for this APAR is currently targeted for inclusion in
  fix packs 8.0.0.13 and 8.5.5.10.  Please refer to the
  Recommended Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP