IBM Support

PI96597: THERE IS AN ISSUE WITH THE CACHE

Fixes are available

18.0.0.2: WebSphere Application Server Liberty 18.0.0.2
18.0.0.3: WebSphere Application Server Liberty 18.0.0.3
18.0.0.4: WebSphere Application Server Liberty 18.0.0.4
19.0.0.1: WebSphere Application Server Liberty 19.0.0.1
19.0.0.2: WebSphere Application Server Liberty 19.0.0.2
19.0.0.3: WebSphere Application Server Liberty 19.0.0.3
19.0.0.4: WebSphere Application Server Liberty 19.0.0.4
19.0.0.5: WebSphere Application Server Liberty 19.0.0.5
19.0.0.6: WebSphere Application Server Liberty 19.0.0.6
19.0.0.7: WebSphere Application Server Liberty 19.0.0.7
19.0.0.8: WebSphere Application Server Liberty 19.0.0.8
19.0.0.9: WebSphere Application Server Liberty 19.0.0.9
19.0.0.10: WebSphere Application Server Liberty 19.0.0.10
19.0.0.11: WebSphere Application Server Liberty 19.0.0.11
19.0.0.12: WebSphere Application Server Liberty 19.0.0.12
20.0.0.1: WebSphere Application Server Liberty 20.0.0.1
20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5
20.0.0.6: WebSphere Application Server Liberty 20.0.0.6
20.0.0.7: WebSphere Application Server Liberty 20.0.0.7
20.0.0.8: WebSphere Application Server Liberty 20.0.0.8
20.0.0.9: WebSphere Application Server Liberty 20.0.0.9
20.0.0.10: WebSphere Application Server Liberty 20.0.0.10
20.0.0.11: WebSphere Application Server Liberty 20.0.0.11
20.0.0.12: WebSphere Application Server Liberty 20.0.0.12

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • There is an issue with the cache
    

Local fix

  • Disable the AuthCache
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty - Security                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: Performance issue in CSIv2 request      *
    *                      after migrating from WebSphere          *
    *                      traditional to Liberty                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    There was a problem in Authenticating lookup using LTPAToken.
    Although the same token is used in requests,  cached Subject was
    not found.  As a result, Liberty was always calling LDAP to
    retrieve user information to recreate a new Subject, causing the
    performance issue.
    In security trace (com.ibm.ws.security.*=all) ,
    findSubjectByTokenContents always finds null even when same
    user's token was used.
    
    ===============================
    [11/04/18 11:12:04:740 CEST] 00000060 Authenticatio >
    findSubjectByTokenContents Entry
    
    com.ibm.ws.security.authentication.internal.cache.AuthCacheServi
    ceImpl@2d0ff53c
                                     null
                                     [B@d458df67,len=240
                                      |0000| C7292533 6203349A
    31D730BA 97199900 A1ED03C9 CCD5D1E6 DAEF67EC CDE172B7
    
    [11/04/18 11:12:04:740 CEST] 00000060 AuthCacheServ >
    getSubject Entry
                                     [B@d458df67,len=240
                                      |0000| C7292533 6203349A
    31D730
    
    
    
    [11/04/18 11:12:04:745 CEST] 00000060 Authenticatio <
    findSubjectByTokenContents Exit
                                     null
    =============================
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI96597

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    CD0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-04-11

  • Closed date

    2018-04-26

  • Last modified date

    2018-04-26

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • RCD0 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"CD0","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
19 October 2021