PK82301: STEP UP AUTHENTICATION NOT WORKING

APAR status

• Closed as program error.

Error description

• SPNEGO based authentication breaks in conjunction with step up
  authentication. If a SPNEGO authenticated request against a
  /wps/myportal/ url is issued that targets a page with
  authenticated level, portal will issue a redirect to the login
  page as the request is not properly identified as
  authenticated.
  
  Note: configuration tasks for enabling step up authentication
  are updated by this APAR. Please rerun tasks for enabling step
  up authentication as documented in the info center section
  'Enabling step-up authentication and/or the Remember me cookie'
  

Local fix

• NA
  

Problem summary

• SPNEGO based authentication breaks in conjunction with step
  up authentication. If a SPNEGO authenticated request against a
  /wps/myportal/ url is issued that targets a page with
  authenticated level, portal will issue a redirect to the login
  page as the request is not properly identified as authenticated.
  
  Note: Configuration tasks for enabling step up authentication
  are updated by this APAR. Please rerun tasks for enabling step
  up authentication as documented in the info center section
  'Enabling step-up authentication and/or the Remember me cookie'
  

Problem conclusion

• StepUp jaas login module updated to correctly identify SPNEGO
  TAI authenticated requests.
  
  Failing Module(s):
     SECURITY
  
  Affected Users:
     All Users
  
  Version Information:
      Portal Version(s): 6.1.0.0
       Pre-Requisite(s): PK78729 PK73815
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.1
       Pre-Requisite(s): PK78729
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PK82301&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R610 PSY

     UP

• R61A PSY

     UP