A fix is available
APAR status
Closed as program error.
Error description
When running a WebFacing application on a Websphere Application Server V7.0 the message "incorrect password" is rendered. If the same application is used on a Websphere Application Server V6.1 the message is not rendered.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: HATS Webfacing Customers using * * programmatic invocation with parameter * * variables and request header with * * non-empty referer. * **************************************************************** * PROBLEM DESCRIPTION: When invoking webfacing application * * programmatically login fails and * * redirects to login error page with * * message "Password not correct for * * user profile XXXXXX." * **************************************************************** * RECOMMENDATION: * **************************************************************** When a webfacing application is programmatically invoked from other web application, and if the request header "referer" is available, and clcmd is not provided, then that request is not being considered as programmatic invocation, hence user profile validation fails.
Problem conclusion
Code was changed so that the invocation will be considered as programmatic invocation even if the invocation header referer field exists.
Temporary fix
Comments
APAR Information
APAR number
IC86536
Reported component name
RATL HATS FOR 5
Reported component ID
5724U6800
Reported release
800
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2012-09-13
Closed date
2012-10-11
Last modified date
2012-10-11
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
RATL HATS FOR 5
Fixed component ID
5724U6800
Applicable component levels
R800 PSY
UP
Rate this page:
Average rating
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.