IBM Support

IO19676: CONTENT NAVIGATOR 2.0.2 IS NOT RETRIEVING THE USER NAME CORRECTLY FROM THE PRINCIPAL NAME VIA LDAP.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • ** Clinet admin userID has been changed in APAR documentation**
    
    When upgrading from Content Navigator 2.0.1 to Contenet
    Navigator 2.0.2, the application is configured with
    administrator account which has functional WAS admin access and
    is listed in the SQL database settings.navigator.default table
    under adminUsers=[adminaccount1]. The admin account was
    configured and successfully utilized in Content Navigator 2.0.1
    deployment. Content Navigator (ICN) reaches out to client LDAP
    and is extracting the principal user as 'filenet'.  In LDAP the
    user attribute OU=filenet, which is what ICN is retrieving as
    the actual user name and then comparing w/ the list of admin
    users that are defined in the configuration. In the admin
    configuration, adminUsers=[adminaccount1]. Since 'filenet' is
    not part of this list, ICN is generating a login error:
    
    Error Code : CIWEB1655
    
    Error Details:
    
    You do not have the appropriate permission to log in to the
    admin desktop.
    
    If you need access to this desktop, ask your system
    administrator to add you to the list of users who can access
    the admin desktop.
    

Local fix

  • Add the principal name which ICN is looking for to the
    databasesettings.navigator.default table:
    
     adminUsers=[filenet]
    
    Not applicable workaround, as ALL users will then have access
    to the Admin Desktop despite privilege levels.
    

Problem summary

  • fixed
    

Problem conclusion

  • fixed
    

Temporary fix

Comments

APAR Information

  • APAR number

    IO19676

  • Reported component name

    CONTENT NAVIGAT

  • Reported component ID

    ISCONTNAV

  • Reported release

    202

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2013-09-13

  • Closed date

    2013-12-26

  • Last modified date

    2013-12-26

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    CONTENT NAVIGAT

  • Fixed component ID

    ISCONTNAV

Applicable component levels

  • R202 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEUEX","label":"IBM Content Navigator"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.0.2","Edition":"","Line of Business":{"code":"LOB18","label":"Miscellaneous LOB"}}]

Document Information

Modified date:
26 December 2013