CWSIT0034E AND CWSIT0110E caused by SECJ9314E exception in WebSphere Application Server V7 and Service Integration Bus.
PM21308 resolves the following problem:
The following exception is recorded in the SystemOut.log, causing a messaging engine to messaging engine communications link to fail, within a service integration bus.
CWSIT0034E and CWSIT0110E errors are also logged.
[8/13/10 17:21:54:879 CST] 0000003a Krb5LoginModu E
SECJ9314E: An unexpected exception occurred when trying to run
method : GSSException: org.ietf.jgss.GSSException, major code:
10, minor code: 0
ext() method : GSSException: org.ietf.jgss.GSSException, major
code: 10, minor
major string: Defective token
minor string: Bad token tag: -27
Users of the default messaging provider for IBM WebSphere Application Server Version 7,
with multiple messaging engines in secure service integration bus
CWSIT0034E and CWSIT0110E before SECJ9314E when using secure messaging
The application server's security layer might not be able to accurately determine the type of the security token which the messaging engines use to authenticate with each other. When authentication fails due to incorrect detection of the token type, the messaging engines within the bus are unable to communicate with each other.
The fix for this APAR updates the service integration bus code to explicitly state the security token type when authenticating a remote messaging engine within the bus. This avoids the need for the auto-detection code to run, which in turn prevents the security layer from misidentifying the token type being used.
The fix for this APAR is currently targeted for inclusion in fix pack 18.104.22.168. Please refer to the Recommended Updates page for delivery information:
Please download the UpdateInstaller below to install this fix.
Please review the readme.txt for detailed installation instructions.
Contact IBM Support using SR (http://www.ibm.com/software/support/probsub.html), visit the WebSphere Application Server support web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV (U.S. only).
15 June 2018