Fixes are available
6.0.2: WebSphere Application Server V6.0 Refresh Pack 2 for AIX platforms
6.0.2: WebSphere Application Server V6.0 Refresh Pack 2 for HP-UX platforms
6.0.2: WebSphere Application Server V6.0 Refresh Pack 2 for Solaris platforms
6.0.2: WebSphere Application Server V6.0 Refresh Pack 2 for Windows platforms
6.0.2: WebSphere Application Server V6.0 Refresh Pack 2 for Linux platforms
APAR status
Closed as program error.
Error description
If virtual host definition created with port number as wildcard (asterisk), java.lang.NumberFormatException logged in SystemOut.log sample virtualhosts.xml entry for HostAlias with port="*" <aliases xmi:id="HostAlias_1" hostname="*" port="*"/> Exception: [02.02.05 13:00:51:779 CET] 00000032 WebApp E SRVE0026E: [Servlet-Fehler]-[/secure/logon.jsp]: java.lang.NumberFormatException: For input string: "*" at java.lang.NumberFormatException.forInputString(NumberFormatExcep tion.java:63) at java.lang.Integer.parseInt(Integer.java(Compiled Code)) at java.lang.Integer.parseInt(Integer.java(Compiled Code)) at com.ibm.ws.security.web.WebCollaborator.getHTTPSPort(WebCollabor ator.java:1838) at com.ibm.ws.security.web.WebCollaborator.getRedirectURL(WebCollab orator.java:2346) at com.ibm.ws.security.web.WebCollaborator.checkDataConstraints(Web Collaborator.java:2058) at com.ibm.ws.security.web.WebCollaborator.authorize(WebCollaborato r.java:466) at com.ibm.ws.security.web.EJSWebCollaborator.preInvoke(EJSWebColla borator.java:300) at com.ibm.ws.webcontainer.webapp.WebAppSecurityCollaborator.preInv oke(WebAppSecurityCollaborator.java:134) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(Ser vletWrapper.java:431) at com.ibm.wsspi.webcontainer.servlet.GenericServletWrapper.handleR equest(GenericServletWrapper.java:117) at com.ibm.ws.jsp.webcontainerext.JSPExtensionServletWrapper.handle Request(JSPExtensionServletWrapper.java:171) at com.ibm.ws.jsp.webcontainerext.JSPExtensionProcessor.handleReque st(JSPExtensionProcessor.java:230) at com.ibm.ws.webcontainer.extension.DefaultExtensionProcessor.hand leRequest(DefaultExtensionProcessor.java:429) at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java: 2841) at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.j ava:220) at com.ibm.ws.webcontainer.VirtualHost.handleRequest(VirtualHost.ja va:204) at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer. java:1681) at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLin k.java:77) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscr imination(HttpInboundLink.java:421) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewIn formation(HttpInboundLink.java:367) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpI nboundLink.java:276) at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sen dToDiscriminaters(NewConnectionInitialReadCallback.java:201) at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.com plete(NewConnectionInitialReadCallback.java:103) at com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(Wor kQueueManager.java:548) at com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueue Manager.java:601) at com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueue Manager.java:934) at com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueu eManager.java:1021) at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1332)
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: WebSphere Application server 6.0 security * * users. * **************************************************************** * PROBLEM DESCRIPTION: Exception occurs if port number in * * virtual host contains wildcard. * **************************************************************** * RECOMMENDATION: * **************************************************************** If HostAlias in virtualhosts.xml contains non-numerical port, java.lang.NumberFormatException is raised.
Problem conclusion
Security should ignore and not validate those ports, as security does not use them. The fix for this APAR is currently targeted for inclusion in fixpack 6.0.0.3. Please refer to the Recommended Updates page for delivery dates: http://www-1.ibm.com/support/docview.wss?rs=180&context= SSEQTP&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PK00848
Reported component name
WAS NETWRK DEPL
Reported component ID
5630A3601
Reported release
60W
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2005-02-09
Closed date
2005-03-04
Last modified date
2005-03-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
SECURITY
Fix information
Fixed component name
WEBSPH APP SERV
Fixed component ID
5724J0800
Applicable component levels
R60A PSY
UP
R60H PSY
UP
R60I PSY
UP
R60P PSY
UP
R60S PSY
UP
R60W PSY
UP
R60Z PSY
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
18 October 2021