PM79290: DISABLE JSESSIONID COOKIE EXPIRY DURING LOGOUT AND IMPERSONATION - FOLLOW UP

APAR status

• Closed as program error.

Error description

• This APAR is a follow-up to APAR PM76571.
  
  WebSphere Portal default behavior during logout and
  impersonation is to invalidate the HTTP session in WebSphere
  Application Server as well as to expire the browser
  JSESSIONID cookie by setting (Expires=Thu, 01 Dec 1994
  16:00:00 GMT). This will force the browser to delete the
  JSESSIONID cookie.
  
  With this APAR, the portal logout/impersonation behavior is
  now configurable so that the logout and impersonation process
  will still invalidate the HTTP session, but will not
  revoke/expire the JSESSIONID cookie. The default behavior is
  unchanged (the cookie will be expired!).
  
  To change this, use the WAS Admin console:
  - Environment -> Resource Environment Providers
  - WP AuthenticationService -> Custom Properties
  - add new property:
  jsessionid.cookie.expire=false (default value = true)
  - save, synchronize and restart servers
  

Local fix

• n/a
  

Problem summary

• A code fix for this issue is integrated into the WebSphere
  Portal & WCM Combined Cumulative Fix 20 (PM78581) for Portal
  7.0.0.1 and into the WebSphere Portal & WCM Combined Cumulative
  Fix 20 (PM78582) for Portal 7.0.0.2 available from Fix Central:
  
  7.0.0.1:
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =ibm~WebSphere&product=ibm/WebSphere/WebSphere+Portal&release=7.
  0.0.1&platform=All&function=aparId&apars=PM78581
  
  7.0.0.2:
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =ibm~WebSphere&product=ibm/WebSphere/WebSphere+Portal&release=7.
  0.0.2&platform=All&function=aparId&apars=PM78582
  
  You might need to type or paste the complete address into your
  Web browser.
  

Problem conclusion

• A code fix for this issue is integrated into the WebSphere
  Portal & WCM Combined Cumulative Fix 20 (PM78581) for Portal
  7.0.0.1 and into the WebSphere Portal & WCM Combined Cumulative
  Fix 20 (PM78582) for Portal 7.0.0.2 available from Fix Central:
  
  7.0.0.1:
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =ibm~WebSphere&product=ibm/WebSphere/WebSphere+Portal&release=7.
  0.0.1&platform=All&function=aparId&apars=PM78581
  
  7.0.0.2:
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =ibm~WebSphere&product=ibm/WebSphere/WebSphere+Portal&release=7.
  0.0.2&platform=All&function=aparId&apars=PM78582
  
  You might need to type or paste the complete address into your
  Web browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R700 PSY

     UP