Fixes are available
APAR status
Closed as program error.
Error description
After successfully configuring the IBM Rational License Key Server (RLKS) Administration and Reporting Tool (ART) to use LDAP, users may not be able to log in to the ART. Analysis of ART debug logs during a failed LDAP setup and a failed login attempt revealed that the OU information was coming back with inconsistent case. Some users were in LDAP "Organizational unit" (OU) "AllUsers" and others were in "allusers". Organizational Unit information, as well as domain components, are defined as case insensitive strings.
Local fix
There is currently no workaround, though a testfix may be available for the current release of the ART. In many cases, the only way to regain access to the ART is to do a clean-slate reinstall of the ART. This would entail: 1) Uninstalling the ART using IBM Installation Manager 2) deleting the "RLKSAdmin" directory, which was left behind by the uninstall. 3) Installing a fresh RLKS ART instance. 4) Logging in with the default admin password 5) Re-adding the servers.
Problem summary
**************************************************************** * USERS AFFECTED: * * All Users who have been using LDAP-based User Management in * * RLKS Administration and Reporting Tool. * **************************************************************** * PROBLEM DESCRIPTION: * * If there is a difference in case between any attribute for a * * User in a LADP Group and the corresponding User DN, the * * match fails leading into a login failure. * **************************************************************** * RECOMMENDATION: * ****************************************************************
Problem conclusion
The root cause has been fixed in 8147. User DN and User attributes in a group will match case-insensitively. Upgrade RLKS Administration and Reporting tool to version 8.1.4.7.
Temporary fix
Comments
APAR Information
APAR number
PI38061
Reported component name
RATIONAL LICENS
Reported component ID
5648LIC00
Reported release
814
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2015-03-30
Closed date
2015-04-17
Last modified date
2015-04-17
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
RATIONAL LICENS
Fixed component ID
5648LIC00
Applicable component levels
R814 PSY
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSTMW6","label":"Rational License Key Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"814","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
08 January 2022