Fixes are available
9.0.0.6: WebSphere Application Server traditional V9.0 Fix Pack 6
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
9.0.0.7: WebSphere Application Server traditional V9.0 Fix Pack 7
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
9.0.0.8: WebSphere Application Server traditional V9.0 Fix Pack 8
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
9.0.0.9: WebSphere Application Server traditional V9.0 Fix Pack 9
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
9.0.5.4: WebSphere Application Server traditional Version 9.0.5 Fix Pack 4
9.0.5.5: WebSphere Application Server traditional Version 9.0.5 Fix Pack 5
WebSphere Application Server traditional 9.0.5.6
9.0.5.7: WebSphere Application Server traditional Version 9.0.5 Fix Pack 7
9.0.5.8: WebSphere Application Server traditional Version 9.0.5.8
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
9.0.5.9: WebSphere Application Server traditional Version 9.0.5.9
9.0.5.10: WebSphere Application Server traditional Version 9.0.5.10
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
9.0.5.11: WebSphere Application Server traditional Version 9.0.5.11
APAR status
Closed as program error.
Error description
The error written by authnz_saf can be mis-leading. For example, the following error is seen when a userid does not have permission in class APPL to the profile referenced by SAFAPPLID: (163)EDC5163I SAF/RACF extract error. (errno2=0x090C0820): IHS00011: SAF user XXXXXXXX: authentication failure for "/": User revoked In this case, the call that fails is __passwd_applid() and looking up documentation for this, you can find the error does mean: The user does not have appropriate RACF access to either the SECLABEL, SERVAUTH profile, or APPL. But unless you know what call fails, you cannot look up what the errno/errnojr means. This APAR will add the function calls to the existing messages as well add a custom message for the 0x08020 case. Note, ensure you have set this in the IHS envvars file so that the errno2 is added to the error message: export _EDC_ADD_ERRNO2=1
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of IBM HTTP Server on z/OS * **************************************************************** * PROBLEM DESCRIPTION: Insufficient information provided by * * the mod_authnz_saf password failure * * messages. * **************************************************************** * RECOMMENDATION: Apply this fix if using IHS on z/OS * **************************************************************** The error messages did not contain sufficient information to always determine the cause of the problem.
Problem conclusion
The password failure error messages in mod_authnz_saf have been improved to include additional information. This fix is targeted for IBM HTTP Server fix packs: - 7.0.0.45 - 8.0.0.15 - 8.5.5.13 - 9.0.0.6
Temporary fix
Comments
APAR Information
APAR number
PI85804
Reported component name
WAS IHS ZOS
Reported component ID
5655I3510
Reported release
85P
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-08-11
Closed date
2017-10-12
Last modified date
2017-10-12
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WAS IHS ZOS
Fixed component ID
5655I3510
Applicable component levels
R700 PSY
UP
Document Information
Modified date:
04 May 2022