PH55311: FEDERATED REPOSITORIES' GET API INCORRECTLY RETURNS USERS BASED ON THE DEFINED USER SEARCH FILTER CRITERIA

APAR status

• Closed as new function.

Error description

• When using Federated Repositories, the list of users returned by
  the get API run against a group includes accounts which do not
  meet the defined search filter.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server users of   *
  *                  federated repositories                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: NameNotFoundException from              *
  *                      getMembersOfGroup command for an ldap   *
  *                      with multiple search bases configured   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Multiple search bases specified for a single Ldap repo in
  federated repositories are not parsed correctly when calling
  getMembersOfGroup. The underlying ldap search would attempt to
  look at all of the search bases concatenated, as if they were
  one
  search base.
  

Problem conclusion

• The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.18 and 8.5.5.25. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels