PI61386: THE PASSWORD DECODING UTILITY FAILS TO DECODE ENCODED PASSWORD STARTING LIBERTY 8.5.5.9

APAR status

• Closed as program error.

Error description

• Liberty 8.5.5.9 doesn't support anymore the current
  configuration of the Liberty password decoding utility that is
  based on referencing the com.ibm.ws.crypto.passwordutil.* jar
  file in the classloader. The PasswordUtil class that
  encodes/decoded password is not public in Liberty and cannot be
  used as an API.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * MobileFirst administrators                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Liberty Profile 8.5.5.9 doesn't support anymore the current  *
  * configuration of the Liberty password decoding utility that  *
  * is based on referencing the com.ibm.ws.crypto.passwordutil.* *
  * jar file in the classloader.                                 *
  * The PasswordUtil class that encodes/decoded password is not  *
  * public in Liberty and cannot be used as an API. So the       *
  * decoding of the encode password of JNDI properties fails and *
  * the MobileFirst components may not start.                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• An SPI is used and a Liberty custom feature is installed.  The
  feature manifest file and the jar file are installed in the
  usr/extension sub directory of the Liberty installation
  directory during installation and update of a MobileFirst
  component.
  When installing a MobileFirst component a new feature
  :usr:MFPDecoderFeature-1.0 is added in the server.xml.
  When MobileFirst is already installed in a Liberty Server, since
  updating the MobileFirst components doesn't modify the
  server.xml file, this file must be manually edited to :
  1) Add <feature>usr:MFPDecoderFeature-1.0</feature>
  2) Remove in the classloader of the administration services,
  runtimes the reference to the
  com.ibm.ws.crypto.passwordutil_*.jar file.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MFPF/WORKLIGHT

• Fixed component ID

  5725I4301

Applicable component levels

• R620 PSY

     UP

• R630 PSY

     UP

• R700 PSY

     UP

• R710 PSY

     UP