IT08983: WEBSERVICES REQUESTS CAN HAVE DUPLICATE AUTH HEADERS ON WINDOWS

APAR status

• Closed as program error.

Error description

• On Windows platforms if the security profile for a HTTP Request
  or SOAPRequest node is set to use a static id for identity
  propagation and the input message already has an HTTP
  Authorization header in the HTTPInputHeader subtree of the
  message then 2 Authorization headers may be added to the output
  message.
  

Local fix

• To work around the input Basic Auth header can be removed, for
  example by using the following ESQL:
  SET OutputRoot.HTTPInputHeader.Authorization = NULL;
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus version 9 or higher using the
  HTTP Request node on windows.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  On Windows platforms, if the security profile for a HTTP Request
  or SOAPRequest node is set to use a static id for identity
  propagation and the input message already has an HTTP
  Authorization header in the HTTPInputHeader subtree of the
  message, then 2 Authorization headers may be added to the output
  message.
  
  There are a number of resource name changes between WebSphere
  Message Broker and IBM Integration Bus Version 9.0. For details
  visit
  http://pic.dhe.ibm.com/infocenter/wmbhelp/v9r0m0/topic/com.ibm.e
  tools.mft.doc/bb23814_.htm
  

Problem conclusion

• The HTTPRequest Node no longer outputs duplicate Authorization
  headers.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.0       9.0.0.6
  v10.0      10.0.0.5
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0530

Applicable component levels

• R900 PSY

     UP