PM11816: DPWWA0607E RECEIVED BASIC AUTHENTICATION CHALLENGE FOR JUNCTION WHERE FILTERING IS BEING APPLIED

PM11816; 6.1.0.23: DPWWA0607E received basic authentication challenge
PM11816; 6.1.0.23: Periodic DPWWA0607E error after upgrade to 6.1.0.17

APAR status

• Closed as program error.

Error description

• After upgrade from Websphere Application Server
  6.1.0.13 to 6.1.0.17 this error occurs periodically:
  DPWWA0607E Received basic authentication challenge for junction
  where filtering is being applied. It happens several times a
  day. It can run with out errors for hours, and
  suddenly almost all transactions fails for 10 minutes or more,
  after a while it starts to work again.
  -
  The error can be triggered by updating security.xml which
  triggers a synchronization by the Node Agents.
  

Local fix

• Disable the option
  "Dynamically update the runtime when SSL configuration changes
  occur".
  -
  The checkbox for this can be found in the adminconsole by
  following
  Security > SSL certificate and key management
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of WebSphere Application Server   *
  *                  V6.1.0 using Tivoli Access Manager WebSEAL. *
  ****************************************************************
  * PROBLEM DESCRIPTION: WebSphere Application Server may        *
  *                      incorrectly send a basic                *
  *                      authentication challenge to WebSEAL.    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to a case-sensitivity issue, WebSphere Application Server
  may reject an otherwise valid authentication token from
  WebSEAL.  This results in a basic authentication challenge and
  WebSEAL message DPWWA0607E.
  

Problem conclusion

• The code was modified to ensure that particular string data
  comparisons are made only after conversion to a consistent case.
  This APAR ships an interim fix for PK77853.
  APAR PK77853 is currently targeted for inclusion in
  Service Level (Fix Pack) 6.1.0.25 of WebSphere
  Application Server V6.1.
  
  Please refer to URL:
  http://www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PK77853

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R61A PSN

     UP

• R61H PSN

     UP

• R61I PSN

     UP

• R61P PSN

     UP

• R61S PSN

     UP

• R61W PSN

     UP

• R61Z PSN

     UP