Fixes are available
9.0.0.5: WebSphere Application Server traditional V9.0 Fix Pack 5
9.0.0.6: WebSphere Application Server traditional V9.0 Fix Pack 6
9.0.0.7: WebSphere Application Server traditional V9.0 Fix Pack 7
9.0.0.8: WebSphere Application Server traditional V9.0 Fix Pack 8
9.0.0.9: WebSphere Application Server traditional V9.0 Fix Pack 9
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
9.0.5.4: WebSphere Application Server traditional Version 9.0.5 Fix Pack 4
9.0.5.5: WebSphere Application Server traditional Version 9.0.5 Fix Pack 5
WebSphere Application Server traditional 9.0.5.6
9.0.5.7: WebSphere Application Server traditional Version 9.0.5 Fix Pack 7
9.0.5.8: WebSphere Application Server traditional Version 9.0.5.8
9.0.5.9: WebSphere Application Server traditional Version 9.0.5.9
9.0.5.10: WebSphere Application Server traditional Version 9.0.5.10
9.0.5.11: WebSphere Application Server traditional Version 9.0.5.11
APAR status
Closed as program error.
Error description
After migrating from WAS 6.1 to WAS 9.0, some images in admin console return error 500 instead of displaying. Since WAS 9.0, admin console supports security integration for HTTP session. In order to support the session security, "com.ibm.wsspi.security.web.webAuthReq" setting needs to be set to "persisting". The flag needs to be changed from "lazy" to "persisting" during migration process.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM WebSphere Application * * Server Configuration Migration * **************************************************************** * PROBLEM DESCRIPTION: After migrating a profile to version * * 9.0, images don't display in the * * admin console * **************************************************************** * RECOMMENDATION: * **************************************************************** After a migration, it appears that many external resources to admin console pages, such as stylesheets and images, are missing. The admin console functions, but the layout is incorrect. In security.xml, the webAuthReq setting has a value of "lazy," which used to be the default many releases ago but this has since been changed. The profile will likely have been created in an older release, and have been migrated forward, sometimes several times. The admin console application was changed in version 9.0 to require HTTP session security, even for external resources linked from the page, such as images. The setting of "lazy" does not use HTTP session security for external resources--the setting must be "persisting" for the admin console to work correctly in version 9.0.
Problem conclusion
Migration was updated to change the webAuthReq setting in security.xml to "persisting" if it is set to "lazy" in the old release. This will not resolve the issue in profiles that have already been migrated, but will prevent it from occurring in profiles migrated after the fix has been applied. Use the temporary fix to resolve the issue in profiles which have already been migrated and are exhibiting this issue. The fix for this APAR is currently targeted for inclusion in fix pack 9.0.0.5. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Set the webAuthReq setting to "persisting" in security.xml either in the old profile before running WASPreUpgrade, or in the backup directory created by WASPreUpgrade before running WASPostUpgrade to migrate into the new profile.
Comments
APAR Information
APAR number
PI78881
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
900
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-03-27
Closed date
2017-07-06
Last modified date
2017-08-16
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R900 PSY
UP
Document Information
Modified date:
03 May 2022