IV01318: LTPA MODULE PERMITS CONCURRENT ACCESS TO NON THREAD SAFE CLASS

Tivoli Federated Identity Manager 6.2.0 Fixpack 9 (6.2.0-TIV-TFIM-FP0009)
Tivoli Fed Id Mgr Business Gateway v6.2.0, Fix Pack 9, 6.2.0-TIV-TFIMBG-FP0009
Tivoli Federated Identity Manager 6.2.0 Fixpack 13 (6.2.0-TIV-TFIM-FP0013)
Tivoli Fed Id Mgr Business Gateway v6.2.0, Fix Pack 13, 6.2.0-TIV-TFIMBG-FP0013

APAR status

• Closed as program error.

Error description

• The TFIM LTPA STS module support code is not thread safe. The
  code uses an static instance of a JDK class that is not thread
  safe causing undetermined results while verifying or generating
  the ltpa token signature on environments with high volume of
  transaction.
  

Local fix

Problem summary

• The TFIM LTPA STS module support code is not thread safe. The
  code uses an static instance of a JDK class that is not thread
  safe causing undetermined results while verifying or generating
  the ltpa token signature on environments with high volume of
  transaction.
  

Problem conclusion

• The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 6.2.0-TIV-TFIM-FP0009
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV07710

Fix information

• Fixed component name

  TIV FED ID MGR

• Fixed component ID

  5724L7300

Applicable component levels

• R620 PSY

     UP