IBM Support

PI82715: REMOVENODE FROM ADMIN CONSOLE FAILS WHEN AES PASSWORD ENCRYPTION IS ENABLED.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When remove node command is issued from Administrative console
    after enabling AES password encryption, the process is failed
    on the remote node which is being removed.
    When this condition happens, the following FFDC data is logged
    on the a node which is being removed.
    
    5/10/17 9:49:14:581 EDT] FFDC
    Exception:com.ibm.websphere.management.exception.AdminException
    SourceId:com.ibm.ws.management.util.SecurityUtil.decryptAllPassw
    ords ProbeId:12345
    com.ibm.websphere.management.exception.AdminException:
    ADMU0071E: Exception occurred during security authentication.
    at
    com.ibm.ws.management.util.SecurityUtil.decode(SecurityUtil.java
    :690)
    at
    com.ibm.ws.management.util.SecurityUtil.decryptPassword(Security
    Util.java:434)
    at
    com.ibm.ws.management.util.SecurityUtil.decryptAllPasswords(Secu
    rityUtil.java:414)
    at
    com.ibm.ws.management.util.SecurityUtil.decryptPasswordsIfExists
    (SecurityUtil.java:366)
    at
    com.ibm.ws.management.tools.AdminTool.parseArgs(AdminTool.java:4
    51)
    at
    com.ibm.ws.management.tools.AdminTool.parseAndSetTrace(AdminTool
    .java:196)
    at
    com.ibm.ws.management.tools.AdminTool.executeUtility(AdminTool.j
    ava:243)
    at
    com.ibm.ws.management.tools.NodeRemovalUtility.main(NodeRemovalU
    tility.java:101)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at
    sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
    Impl.java:95)
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: remove node task from Administrative    *
    *                      Console might fail after AES password   *
    *                      encryption is enabled.                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    After AES password encryption is enabled in the federated
    environment, a remove node task from Administrative Console
    might fail. The cause of the issue is that when a node agent
    starts an application client environment for performing a
    remove node script, the password is encrypted by using AES
    encryption which the application client cannot decrypt.
    

Problem conclusion

  • With this fix, the node agent use default encoding method for
    masking the password when it launches an application client
    for remove node task.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 9.0.0.5.  Please refer to the Recommended Updates
    page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI82715

  • Reported component name

    WEBSPHERE APP S

  • Reported component ID

    5724J0800

  • Reported release

    900

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-06-08

  • Closed date

    2017-06-19

  • Last modified date

    2017-08-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE APP S

  • Fixed component ID

    5724J0800

Applicable component levels

  • R900 PSY

       UP

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU029","label":"Software"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"900"}]

Document Information

Modified date:
17 June 2021