APAR status
Closed as program error.
Error description
In SOAP webservice flows, the AppliesTo value is not preserved for username tokens without a password. If you have a security profile configured on the input node to interact with the WS-Trust server, the AppliesTo value is constructed when an inbound username token does not have a password, in the following form: <broker name>.<execution group name>.<flow name> This gets rejected at the WS-Trust server side.
Local fix
Alternatively, you can use a SecurityPEP node to specify the AppliesTo value as a work-around.
Problem summary
**************************************************************** USERS AFFECTED: All users of IBM Integration Bus V9.0 and V10.0 communicating with a WS-Trust V1.3 Security Token Server. Platforms affected: z/OS, MultiPlatform **************************************************************** PROBLEM DESCRIPTION: In SOAP webservice flows, the AppliesTo value is not preserved for username tokens without a password. If you have a security profile configured on the input node to interact with the WS-Trust server, the AppliesTo value is constructed when an inbound message with a username token does not have a password, in the following form: <broker name>.<execution group name>.<flow name> This may get rejected at the WS-Trust server side. There are a number of resource name changes between WebSphere Message Broker and IBM Integration Bus Version 9.0. For details visit http://pic.dhe.ibm.com/infocenter/wmbhelp/v9r0m0/topic/com.ibm.e tools.mft.doc/bb23814_.htm
Problem conclusion
The product now correctly sets the endpoint name as the AppliesTo value in the case of username tokens with or without passwords. --------------------------------------------------------------- The fix is targeted for delivery in the following PTFs: Version Maintenance Level v9.0 9.0.0.6 v10.0 10.0.0.5 The latest available maintenance can be obtained from: http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041 If the maintenance level is not yet available,information on its planned availability can be found on: http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308 ---------------------------------------------------------------
Temporary fix
Comments
APAR Information
APAR number
IT02831
Reported component name
INTEGRATION BUS
Reported component ID
5724J0530
Reported release
900
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2014-06-27
Closed date
2016-05-31
Last modified date
2016-05-31
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
INTEGRATION BUS
Fixed component ID
5724J0530
Applicable component levels
R900 PSY
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSNQK6","label":"IBM Integration Bus"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
31 May 2016