IBM Support

Workflow System unable to start after changing password of the bootstrap user.

Flashes (Alerts)


Abstract

In CPE 5.5.0, the Workflow System can't be started after changing the password of the bootstrap user.

Content

Only CPE 5.5.0 is affected by that behavior. Here are examples of errors  shown in the logs:

PE log:

2018/10/05 15:04:09.844+0400 RPCHandler 600ab735 [Info] Can't get ProcessEngineConfiguration at startup, retrying in 5 minutes. Error: The user is not authenticated. Message was: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580 ]; Exception: com.filenet.api.exception.EngineRuntimeException: FNRCE0040E: E_NOT_AUTHENTICATED: The user is not authenticated. Message was: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580 ]

P8 log shows similar error:

2018-10-05T15:04:09.797 600AB735 SEC FNRCE0000D - DEBUG [UnifiedApiImpl] beginImp 0x77afd9c1 username=#3wwBl+Q34wbhQvuP+Jr

2018-10-05T15:04:09.797 600AB735 SEC FNRCE0000D - DEBUG [UnifiedApiImpl] _endImp 0x77afd9c1 ucxt=null

2018-10-05T15:04:09.797 600AB735 SEC FNRCE0000D - DEBUG [UniTokenImpl] client-side constructor username=#3wwBl+Q34wbhQvuP+Jr

2018-10-05T15:04:09.797 600AB735 SEC FNRCE0000D - DEBUG [UnifiedApiImpl] getPeServiceSubject 0x77afd9c1

2018-10-05T15:04:09.844 600AB735 ERR FNRCE0040D - DEBUG com.filenet.api.exception.EngineRuntimeException: FNRCE0040E: E_NOT_AUTHENTICATED: The user is not authenticated. Message was: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580 ]\n at com.filenet.apiimpl.core.UserPasswordToken.getSubject(UserPasswordToken.java:131)\n at com.filenet.apiimpl.core.UserPasswordToken.getSubject(UserPasswordToken.java:73)\n at com.filenet.engine.context.CallState.getSubject(CallState.java:456)\n at com.filenet.engine.context.CallState.getSystemSubject(CallState.java:399)\n at com.filenet.engine.unified.UnifiedApiImpl.getPeServiceSubject(UnifiedApiImpl.java:132)\n at com.filenet.engine.unified.UnifiedApiImpl.beginImp(UnifiedApiImpl.java:89)\n at com.filenet.engine.util.EngineToApiInjecter.beginImp(EngineToApiInjecter.java:298)\n at com.filenet.apiimpl.util.ApiToEngineBridge.beginImp(ApiToEngineBridge.java:339)\n at com.filenet.apiimpl.util.UnifiedUtil.beginImp(UnifiedUtil.java:68)\n at filenet.jpe.security.cemp.CEConnectUtil.pushSystemCEConForThreadWithPCH(CEConnectUtil.java:201)\n at filenet.jpe.security.cemp.CEConnectUtil.pushSystemCEConForThread(CEConnectUtil.java:185)\n at filenet.jpe.security.cemp.CEMPIsolatedRegionHelper.getSubsystemConfiguration(CEMPIsolatedRegionHelper.java:366)\n at

Please advise users - Do not change the password of bootstrap user in CPE 5.5.0.

If the customer has already changed the password,  there are two ways to recover:

a)  Change the password of the bootstrap user back to original value.

OR

b)  Upgrade the CPE 5.5.0 to 5.5.1.  In CPE 5.5.1 users is able to change the password of bootstrap users using ACCE.

 

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNW2F","label":"FileNet P8 Platform"},"Component":"Process Engine","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"CPE 5.5.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
26 September 2022

UID

ibm10739669