APAR status
Closed as program error.
Error description
A change under
PQ88573 was done to fix some security holes,
but it breaks the name server code and Naming code needs to
be changed to use the right credentials for its persistent
name space upates.
Local fix Problem summary
****************************************************************
* USERS AFFECTED: WebSphere Application Server V5 users of *
* Naming *
****************************************************************
* PROBLEM DESCRIPTION: A change made under
PQ88573 to fix a *
* security hole breaks the naming server *
* code, in which a user with a authority *
* updates the persistent part of the *
* name space, the operation will fail *
* as if they do not have the authority *
* to do such an update. *
****************************************************************
* RECOMMENDATION: *
****************************************************************
A change made under
PQ88573 to fix a security hole breaks the
naming server code, in which a user with a authority updates
the persistent part of the name space, the operation will fail
as if they do not have the authority to do such an update. This
was because the name server does not set the credentials to
system credentials when it updates the persistent name space.
Problem conclusion
To prevent the persistent name space update fail, set
credentials to system credentials when creating/updating
namestore.xml.
Temporary fix Comments
APAR information |
APAR number |
PQ92229 |
Reported component name |
WAS BASE 5.0 |
Reported component ID |
5630A3600 |
Reported release |
00W |
Status |
CLOSED PER |
PE |
NoPE |
HIPER |
NoHIPER |
Special Attention |
NoSpecatt |
Submitted date |
2004-07-30 |
Closed date |
2004-09-16 |
Last modified date |
2004-09-16 |
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
Publications Referenced
Applicable component levels |
R003 PSY |
UP |
R00A PSY |
UP |
R00H PSY |
UP |
R00I PSY |
UP |
R00P PSY |
UP |
R00S PSY |
UP |
R00W PSY |
UP |
R103 PSY |
UP |
R10A PSY |
UP |
R10H PSY |
UP |
R10I PSY |
UP |
R10P PSY |
UP |
R10S PSY |
UP |
R10W PSY |
UP |
|