PQ94279: NO_PERMISSION INVOKING EJB DEPLOYED ON ZOS. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![]() APAR status Closed as program error. Error description When invoking a resource on zOS from other WebSphere platforms (excluding iSeries) and the invocation Subject is the special subject "UNAUTHENTICATED", the request will fail with a NO_PERMISSION even if the resource is unprotected. One scenario where this will be seen is an unprotected servlet making an EJB call to a bean deployed on a zOS server. The special Subject UNAUTHENTICATED is automatically associated with the request in this scenario. Internal defect 212176.Local fix Problem summary **************************************************************** * USERS AFFECTED: All WebSphere Application Server users who * * have enabled security and are making * * calls to an EJB on z/OS from another * * platform. * **************************************************************** * PROBLEM DESCRIPTION: A NO_PERMISSION exception is returned. * **************************************************************** * RECOMMENDATION: * **************************************************************** A NO_PERMISSION exception is returned when an EJB call from an unprotected servlet is made to a z/OS platform server. The exception occurred due to the special Subject UNAUTHENTICATED which designates a user which the system has not authenticated. z/OS does not recognize this special Subject, however.Problem conclusion A CSIv2 context is not sent when the invocation Subject is UNAUTHENTICATED. Without a CSIv2 context, the target server is free to handle the request as appropriate.Temporary fix OkComments
APAR is sysrouted FROM one or more of the following: APAR is sysrouted TO one or more of the following: Modules/Macros
Publications Referenced
|
Product categories: Software > Application Servers >
Distributed Application & Web Servers > WebSphere Application
Server > General
Operating system(s):
Software version: 00A
Software edition:
Reference #: PQ94279
IBM Group: Software Group
Modified date: Oct 25, 2004
(C) Copyright IBM Corporation 2000, 2008. All Rights Reserved.