PM92968: INVALIDPASSWORDDECODINGEXCEPTION FROM BOOTSTRAP.PROPERTIES DURING SERVER STARTUP

8.5.5.1: WebSphere Application Server V8.5.5 Fix Pack 1
8.5.5.2: WebSphere Application Server V8.5.5 Fix Pack 2
8.5.5.3: WebSphere Application Server V8.5.5 Fix Pack 3
8.5.5.4: WebSphere Application Server V8.5.5 Fix Pack 4
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14

APAR status

• Closed as program error.

Error description

• All passwords in bootstrap.properties are encoded using
  com.ibm.ws.crypto.passwordutil_1.0.1.jar\com.ibm.websphere.
  crypto.PasswordUtil.encode(password, "aes").
  But server does not start and fails with the following
  InvalidPasswordDecodingException.
  
  --------------
  [6/26/13 14:32:11:617 EDT] 00000022 LogService-62-com.ibm.ws.
  jdbc E CWWKE0701E:  [com.ibm.ws.jdbc.
  dataSource.properties.db2.jcc(172)] The activate method has
  thrown an exception Bundle:com.ibm.ws.jdbc(id=62)
  com.ibm.websphere.crypto.  InvalidPasswordDecodingException
  at com.ibm.websphere.crypto.PasswordUtil.decode(PasswordUtil.
  java:129)
  at com.ibm.ws.jdbc.internal.PropertyService.activate(
  PropertyService.java:153)
  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke
  (NativeMethodAccessorImpl.java:88)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke
  (DelegatingMethodAccessorImpl.java:55)
  at java.lang.reflect.Method.invoke(Method.java:613)
  at org.apache.felix.scr.impl.helper.BaseMethod.invokeMethod(
  BaseMethod.java:228)
  at org.apache.felix.scr.impl.helper.BaseMethod.access$500(
  BaseMethod.java:37)
  --------------
  
  Keywords:
  double slash slashes
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: A server may fail to start due to       *
  *                      password decryption error.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to a behavior of WebSphere Application Server variable
  expansion,some of string sequences might be substituted. For
  example, if there are two slashes, it might be substituted by
  one slash character. (i.e., abc//abc might be substituted by
  abc/abc). If that happens for encrypted password string, it
  won't be decrypted properly.
  

Problem conclusion

• With this fix, Application Server variable expansion
  will not substitute some character sequences for password
  string.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.1. Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP