PH25855: LTPATOKEN2 VALUE IS SAME AFTER RELOGIN

APAR status

• Closed as program error.

Error description

• LTPAToken 2 value is same after ibm_security_logout logout and
  j_security_check login for a few times within a minute.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: A user's LtpaToken value is the same    *
  *                      even after the user logged out, then    *
  *                      logged back in very quickly.            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A user's LtpaToken value is the same even after the user logged
  out, then logged back in very quickly.
  

Problem conclusion

• The code is updated to ensure the token value is always
  different for the user once the user logout and re-login.
  
  The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.5 and 8.5.5.18. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP