IT03108: SOME LDAP USERS CAN NOT LOGIN SINCE INSTALLING PUREAPPLICATION SYSTEM V1.1.0.4 ( FIXPACK 1.1.0.4 )

IBM PureApplication System Version 2.0.0.0
IBM PureApplication System Version 1.1.0.5

APAR status

• Closed as program error.

Error description

• An LDAP user account created prior to 1.1.0.2, and an existing
  IPAS LDAP user account prior to 1.1.0.2 with different
  character case than the corresponding account in LDAP server
  can not login.
  

Local fix

• n/a
  

Problem summary

• An LDAP user account added to the PureApplication System prior
  to 1.1.0.2 can have different character case than the
  corresponding account in LDAP server. LDAP users whose IPAS
  accounts fall into that category cannot login when update to
  1.1.0.4.
  

Problem conclusion

• This code change allows LDAP users whose PureApplication System
  user account have different case characters than that of the
  corresponding account in the LDAP server to login to
  PureApplication System 1.1.0.4.   Login to such IPAS accounts is
  case sensitive in the sense that the login user input must match
  exact character cases as that of the PureApplication System user
  account.
  
  Login to PureApplication System LDAP user accounts is case
  insensitive provided that PureApplication System user accounts
  match character case of those of accounts in LDAP server.  LDAP
  user accounts that are added to PureApplication System 1.1.0.2
  and later releases automatically match the exact character case
  of corresponding user accounts in the LDAP server.
  
  This code change provides a PureApplication System user account
  migration utility program that can adjust existing
  PureApplication LDAP user accounts to match exact character
  cases as that of corresponding accounts in the LDAP server. If
  you have existing PureApplication System LDAP user accounts
  whose character cases mismatch that of corresponding accounts in
  the LDAP server, an IBM service engineer can perform the
  migration utility.
  
  The utility program only needs to be run once and can
  only be run by an IBM service engineer.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  PAPP SYS 8382 I

• Fixed component ID

  5725G3200

Applicable component levels

• R110 PSY

     UP

• R200 PSY

     UP

• R100 PSN

     UP

• RESP PSN

     UP