IBM Support

PI97974: INVALID USER ID THAT CONTAINS A PARENTHESIS SHOULD BE ESCAPED FOR STANDALONE LDAP CONFIGURATION

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • User's supply an invalid user ID in the SOAP header's Security
    section.  If this user id contains LDAP query formatting such
    as '*)' or ')(' the server returns LDAP specific errors such as
    ?InvalidSearchFilterException: Unbalanced parenthesis? or
    ?InvalidSearchFilterException: Missing Equals? rather than
    simply rejecting the login.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: A Request to WebSphere Standalone       *
    *                      LDAP Registry API causes an             *
    *                      "Unbalanced Parenthesis error"          *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Users logging in with parentheses in their names cause
    "unbalanced parethesis error"
    Note: This APAR is for Standalone LDAP configuration. For the
    same issue with Federated Repository, following APAR is
    available.
    PI93225: A request to WebSphere Federated Repositories cause
    an "Unbalanced Parenthesis error"
    ---Sample error for PI97974  ---------------------------
    [4/10/18 15:19:17:064 UTC]     FFDC
    Exception:com.ibm.websphere.security.CustomRegistryException
    SourceId:com.ibm.ws.security.registry.ldap.LdapRegistryImpl.chec
    kPassword ProbeId:355
    Reporter:com.ibm.ws.security.registry.ldap.LdapRegistryImpl@adfb
    31fd
    javax.naming.directory.InvalidSearchFilterException:
    Unbalanced parenthesis; Remaining name: 'dc=rtp,dc=ibm,dc=com'
    at
    com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:167)
    at
    com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:66)
    at
    com.sun.jndi.ldap.LdapClient.search(LdapClient.java:538)
    at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1977)
    at
    com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1839)
    at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1764)
    at
    com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentD
    irContext.java:380)
    at
    com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Parti
    alCompositeDirContext.java:350)
    at
    org.apache.aries.jndi.DelegateContext.search(DelegateContext.jav
    a:360)
    at
    javax.naming.directory.InitialDirContext.search(InitialDirContex
    t.java:227)
    at
    com.ibm.ws.security.registry.ldap.LdapRegistryImpl.performAuthen
    tication(LdapRegistryImpl.java:2278)
    at
    com.ibm.ws.security.registry.ldap.LdapRegistryImpl.search(LdapRe
    gistryImpl.java:2224)
    -----------------------------------
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI97974

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-05-15

  • Closed date

    2018-08-24

  • Last modified date

    2018-08-24

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R850 PSY

       UP

  • R900 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
23 November 2021