JR63500: YOU CAN'T UPDATE THE USER DISPLAYNAME IN THE PROCESS ADMIN CONSOLE

workflow.2102.delta.repository

APAR status

• Closed as program error.

Error description

• With IBM Business Automation Workflow configured to use
  WebSphere's file-based user repository (among others), details
  about these file repository users are maintained in the Process
  Admin Console under User Management > User Management. Updating
  a user's full name without setting a password, causes an attempt
  to set an empty password. The users's password is corrupted and
  subsequent login will fail. You see
  the following exception in the SystemOut.log file when the user
  tries to log in:
  
  
  [22/01/21 12:46:39:428 EST] 0000015f PasswordEncry I
  com.ibm.ws.wim.util.PasswordEncryptionUtil hashPbkdf2 Exception
  caught while generating the SecretKey object using PBEKeySpec
  javax.crypto.spec.PBEKeySpec@be22252f
  
  java.security.spec.InvalidKeySpecException: Could not generate
  secret key
  at javax.crypto.SecretKeyFactory.generateSecret(Unknown Source)
  at
  com.ibm.ws.wim.util.PasswordEncryptionUtil.hashPbkdf2(PasswordEn
  cryptionUtil.java:820)
  at
  com.ibm.ws.wim.util.PasswordEncryptionUtil.hashPbkdf2(PasswordEn
  cryptionUtil.java:874)
  at
  com.ibm.ws.wim.adapter.file.was.FileData.hashPbkdf2(FileData.jav
  a:1628)
  at
  com.ibm.ws.wim.adapter.file.was.FileAdapter.update(FileAdapter.j
  ava:1970)
  at
  com.ibm.ws.wim.ProfileManager.updateImpl(ProfileManager.java:344
  8)
  at
  com.ibm.ws.wim.ProfileManager.genericProfileManagerMethod(Profil
  eManager.java:368)
  at com.ibm.ws.wim.ProfileManager.update(ProfileManager.java:458)
  at
  com.ibm.websphere.wim.ServiceProvider.update(ServiceProvider.jav
  a:465)
  at
  com.ibm.websphere.wim.client.LocalServiceProvider.update(LocalSe
  rviceProvider.java:385)
  at com.lombardisoftware
  
  PRODUCTS AFFECTED
  IBM Business Automation Workflow
  

Local fix

• You can avoid this exception if you update the user name in the
  administrative console, set a password when updating a user's
  full name in the Process Admin Console, or manage end users in
  LDAP.
  

Problem summary

• No additional information is available.
  
  PRODUCTS AFFECTED
  IBM Business Automation Workflow
  

Problem conclusion

• A fix is available or will be available that ensures empty
  passwords are accepted in this form and will not be updated.
  

Temporary fix

• Not applicable
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BUS AUTO WORKFL

• Fixed component ID

  5737H4100

Applicable component levels