PK76851; 7.0.0.1: Cannot View a Security Repository

Download Description

PK76851 resolves the following problem:

ERROR DESCRIPTION:
WebSphere Application Server version 7 administration console does not allow user to create a new security repository when using Microsoft Active Directory Server or Microsoft Active Directory Application Mode.

The problem is the listIdMgrLDAPAttrs task is returning name-values pairs information that have a null name.

Steps to recreate:
1. Using the administration console, navigate to
Security -> Global security
2. Select the Federated repositories realm and configure
3. Select the Manage repositories link
4. Add a new repository, use Directory type: Microsoft Windows
Active Directory
5. Save the new repository
6. Select the repository and notice the console error
7. The error seen is a java.lang.NullPointerException. This is the first entry in the stack trace:
at com.ibm.ws.console.security.IdMgrRepositoryLDAP.
LDAPRepositoryDetailActionGen.
populateLDAPRepositoryDetailForm
(LDAPRepositoryDetailActionGen.java:636)

LOCAL FIX:

KEYWORDS: NullPointerException NPE VMM WIM LDAP populateLDAPRepositoryDetailForm

PROBLEM SUMMARY

USERS AFFECTED:
All users of WebSphere Application Server who use Microsoft Windows Active Directory for their Federated repository.

PROBLEM DESCRIPTION:
Console error 500 occurs when attempting to modify Federated repository configuration for Microsoft Active Directory Server.

RECOMMENDATION:
None

The error happens when the Directory type is "Microsoft Windows Active Directory" or "Microsoft Active Directory Application Mode". The problem is the listIdMgrLDAPAttrs task is returning name-values pairs of information that have a null name.

PROBLEM CONCLUSION:
The fix for this APAR is to reverse the if statement to the following:
if("kerberosId".equals(propertyValue))

This handles the case where the property Value is null.

The fix for this APAR is currently targeted for inclusion in fixpack 7.0.0.3. Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980