IBM Support

PI98758: SETTING ENABLEFAILOVER TO FALSE FOR THE SAFREGISTRY CAN PRODUCE MISLEADING MESSAGES IF AUTHORIZED SERVICES ARE NOT AVAILABLE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When enableFailover is set to false on the safRegistry, the
    expectation is that when SAF requests are made they will not
    be
    rerouted to a USS security function in the event that the
    angel
    and/or authorized services are not available.  However, the
    following message is written in this situation:
    
    FFDC1015I: An FFDC Incident has been created:
    "com.ibm.ws.security.registry.RegistryException: Unix System
    Service __passwd failed for user xxx with errno 157
    (EMVSERR)
    and errno2 x90c02af ...
    
    which gives the impression that the USS functions are being
    used.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty for z/OS                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: Setting the enableFailover attribute    *
    *                      under the safRegistry element to false  *
    *                      incorrectly prompts the use of USS      *
    *                      security services                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When the enableFailover attribute under the safRegistry
    configuration element is set to false, and no authorized
    services are enabled on the server (i.e angel process is not
    active), the server incorrectly attempts to use USS services for
    authentication.
    

Problem conclusion

  • Code was added to prevent the use of USS services from being
    used when the enableFailover attribute is set to false.
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 18.0.0.3.  Please refer to the Recommended Updates page for
    delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI98758

  • Reported component name

    LIBERTY PROF -

  • Reported component ID

    5655W6514

  • Reported release

    CD0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-05

  • Closed date

    2018-08-20

  • Last modified date

    2018-08-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    LIBERTY PROF -

  • Fixed component ID

    5655W6514

Applicable component levels

  • RCD0 PSY

       UP

[{"Business Unit":{"code":"BU011","label":"Systems - zSystems software"},"Product":{"code":"SG19M"},"Platform":[{"code":"PF054","label":"z/OS"}],"Version":"CD0"}]

Document Information

Modified date:
17 June 2021