PQ74897: Intermittent authentication & authorization failures concurrent logins on 4.02. CNTR0019E findByPrivilegeAttributeId | |||||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||||
![]() APAR status Closed as program error. Error description Users encounter intermittent authorization failures under load. Caused by multithreading defect in WebSphere 4.0x using LDAP registry, fixed in cumulative efix for 4.05, but backport to WebSphere 4.02 is required by customer.Local fix Use admin.config setting to disable cachingProblem summary **************************************************************** * USERS AFFECTED: WebSphere Application Server users who have * * enabled security and configured an LDAP user * * registry. * **************************************************************** * PROBLEM DESCRIPTION: Authentication or authorization fails * * intermittently due to search failure * * against the LDAP server. * **************************************************************** * RECOMMENDATION: * **************************************************************** On high volume servers with multiple concurrent logins, authentication or authorization failures may occur occasionally due to concurrent access to the same DirContext used in LDAP search. In an administration server trace, a NullPointException in JNDI code may be seen. Another more common symptom not visible in a trace is corruption of the user's security name or group information. Both symptoms are highly intermittant.Problem conclusion LDAP user registry code used to share Directory Contexts between multiple threads. The algorithm has been modified to supply a copy of a directory context to each thread or create a new Directory context if necessary.Temporary fix Testing fix provided.Comments
APAR is sysrouted FROM one or more of the following: APAR is sysrouted TO one or more of the following: Modules/Macros SRLS
|
Document Information |
Product categories: Software > Application Servers >
Distributed Application & Web Servers > WebSphere Application
Server > General
Operating system(s):
Software version: 400
Software edition:
Reference #: PQ74897
IBM Group: Software Group
Modified date: Jun 17, 2003
(C) Copyright IBM Corporation 2000, 2006. All Rights Reserved.