JR63295: COMPONENTS THAT USE USER MANAGEMENT SERVICE'S SCIM INTERFACE TO OBTAIN GROUP MEMBERS MIGHT FAIL TO RETRIEVE THE MEMBER LIST

APAR status

• Closed as program error.

Error description

• In IBM Business Automation Studio and in the Process Admin
  Console in IBM Business Automation Workflow, which use the User
  Management Service (UMS) SCIM interface to obtain group members,
   the list of users for a group might be empty.
  
  
  PRODUCTS AFFECTED
  IBM Cloud Pak for Automation
  

Local fix

Problem summary

• This issue occurs because User Management Service in Cloud Pak
  for Automation doesn't allow recursive searches in LDAP queries.
  
  PRODUCTS AFFECTED
  IBM Cloud Pak for Automation
  

Problem conclusion

• A fix is available or will be available that repackages
  https://github.com/OpenLiberty/open-liberty/issues/15822 and
  enables recursive searches to be configured for LDAP queries.
  
  Because recursive searches have not been enabled by default
  before this fix and because this expensive way of searching is
  not required in all customer configuration, you must enable the
  new behavior by using the following setting in the custom
  resource for deploying IBM Cloud Pak for Automation:
  
  ldap_configuration
    lc_ldap_recursive_search: "true"
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLOUD PAK FOR A

• Fixed component ID

  5737I2300

Applicable component levels