IBM Support

PI57565: WS-SECURITY DOES NOT EMIT TOKENTYPE ON REFERENCE TO SAML TOKEN

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When WS-Security references a SAML token with a
    SecurityTokenReference, a TokenType attribute is not emitted
    on the SecurityTokenReference element.
    
    The TokeType attribute is required for a
    SecurityTokenReference to SAML tokens in the WS-I Basic
    Security Profile 1.1,section 16.2:
    
    http://www.ws-i.org/profiles/basicsecurityprofile-1.1.html#SAMLS
    TR
    

Local fix

  • No
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Application Server users of   *
    *                  WS-Security enabled JAX-WS web services     *
    *                  and SAML                                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: JAX-WS WS-Security does not emit        *
    *                      TokenType attribute on                  *
    *                      SecurityTokenReference                  *
    *                      to SAML token                           *
    ****************************************************************
    * RECOMMENDATION:  Install a fix pack that contains this       *
    *                  APAR.                                       *
    ****************************************************************
    JAX-WS WS-Security does not emit the TokenType attribute on
    the SecurityTokenReference element when it refers to a SAML
    token.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI57565

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-02-18

  • Closed date

    2016-06-27

  • Last modified date

    2016-06-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP

  • R900 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 850

Reference #: PI57565

Modified date: 27 June 2016