Fixes are available
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
APAR status
Closed as program error.
Error description
The issue can be identified by issuing IP VERBX LEDATA in a dump and looking at the LOCAL SUBPOOL USAGE SUMMARY The problem surfaced when a the application server attempts to authenticate a userid that had an expired password. A large number of the following tracepoint is another symptom that can lead up to the problem Trace: 2014/07/31 04:22:11.951 02 t=9ACE00 c=UNK key=S2 tag= (13007004) SourceId: com.ibm.ws.security.zOS.PlatformCredentialManager ExtendedMessage: BBOO0222I: SECJ6219I: Basic authentication failed for user "XXXXX". The native service results related to the au Authentication failure are: WebSphere service=BBOSSNAP, WebSphere returnCode=33, SAF service=IRRSIA00 INTA_CREATE, SAF returnCode=8, SAF product returnCode=8, SAF product reasonCode=24, SAF Message=Password is expired.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM WebSphere Application * * Server V8.0 and V8.5 * **************************************************************** * PROBLEM DESCRIPTION: ABEND878 can occur due to leaked * * storage in Subppol 249 Key 2. This * * storage was leaked over a long period * * of time in error path code. * **************************************************************** * RECOMMENDATION: none * **************************************************************** RACF RACO storage is not being freed. The failing code is unsuccessfully freeing the RACO storage after a call to RACF "create RACO" service. If the service fails, returning an non-zero return code, we fail to free the RACO. One such example noted is if a users password is expired. Due to the nature of the code error, it would take a very long time to leak and experience an 878.
Problem conclusion
Code has been updated to free the RACO storage when the create-RACO service returns a non-zero return code. APAR PI23823 is currently targeted for inclusion in Fix Packs 8.0.0.11 and 8.5.5.5 of WebSphere Application Server. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980 In addition, please refer to URL: http://www.ibm.com/support/docview.wss?rs=404&uid=swg27006970 for Fix Pack PTF information.
Temporary fix
Comments
APAR Information
APAR number
PI23823
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2014-08-13
Closed date
2014-12-02
Last modified date
2014-12-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500
Applicable component levels
R850 PSY
UP
Document Information
Modified date:
28 April 2022