IBM Support

PM84969: WASREQURL COOKIE MIGHT NO LONGER BE DELETED AFTER LOGIN

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When com.ibm.ws.security.addHttpOnlyAttributeToCookies is set as
    true, none of cookies, which WebSphere Application Server
    security code attached, is removed from header but just set a
    value as blank.
    This behavior might introduce some unwanted result if there is
    an application which checks presense of LTPAToken or WASReqURL
    cookies.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: WASReqURL cookie might not be removed   *
    *                      after successful login.                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    In order to remove cookies from browser, the time of Expires
    attribute in cookie needs to be set as the past time, however
    the original code did not set, it if the custom property is
    set.
    This is WebSphere Application Server version 7.0 unique issue.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PM84969

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-03-18

  • Closed date

    2013-03-26

  • Last modified date

    2013-03-26

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 7.0

Reference #: PM84969

Modified date: 26 March 2013