PK77853: DPWWA0607E RECEIVED BASIC AUTHENTICATION CHALLENGE FOR JUNCTION WHERE FILTERING IS BEING APPLIED

Java SDK 1.5 SR10 Cumulative Fix for WebSphere Application Server
6.1.0.31: Java SDK 1.5 SR11 FP1 Cumulative Fix for WebSphere Application Server
6.1.0.33: Java SDK 1.5 SR12 FP1 Cumulative Fix for WebSphere
6.1.0.29: Java SDK 1.5 SR11 Cumulative Fix for WebSphere Application Server
6.1.0.35: Java SDK 1.5 SR12 FP2 Cumulative Fix for WebSphere
6.1.0.37: Java SDK 1.5 SR12 FP3 Cumulative Fix for WebSphere
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server
Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After upgrade from Websphere Application Server
  6.1.0.13 to 6.1.0.17 this error occurs periodically:
  DPWWA0607E Received basic authentication challenge for junction
  where filtering is being applied. It happens several times a
  day. It can run with out errors for hours, and
  suddenly almost all transactions fails for 10 minutes or more,
  after a while it starts to work again.
  -
  The error can be triggered by updating security.xml which
  triggers a synchronization by the Node Agents.
  

Local fix

• Disable the option
  "Dynamically update the runtime when SSL configuration changes
  occur".
  -
  The checkbox for this can be found in the adminconsole by
  following
  Security > SSL certificate and key management
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of WebSphere Application Server   *
  *                  V6.1.0 using Tivoli Access Manager WebSEAL. *
  ****************************************************************
  * PROBLEM DESCRIPTION: WebSphere Application Server may        *
  *                      incorrectly send a basic                *
  *                      authentication challenge to WebSEAL.    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to a case-sensitivity issue, WebSphere Application Server
  may reject an otherwise valid authentication token from
  WebSEAL.  This results in a basic authentication challenge and
  WebSEAL message DPWWA0607E.
  

Problem conclusion

• The code was modified to ensure that particular string data
  comparisons are made only after conversion to a consistent case.
  
  APAR PK77853 is currently targeted for inclusion in
  Service Level (Fix Pack) 6.1.0.25 of WebSphere
  Application Server V6.1.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM11816

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R610 PSY UK47214

     UP09/06/22 P F906

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.