IT00735: INCORRECT REDIRECT ON FAILED LOGIN WHEN FORMS BASED LOGIN IS USED FOR AAA
Fixes are available
Fix packs for DataPower XML Security Gateway version 6.0
Fix packs for DataPower B2B Appliance version 6.0
Fix packs for DataPower Integration Appliance version 6.0
Fix packs for DataPower Low Latency Appliance version 6.0
Fix packs for DataPower Service Gateway version 6.0
Fix packs for DataPower Service Gateway version 6.0.1
Fix packs for DataPower B2B Appliance version 6.0.1
Fix packs for DataPower Integration Appliance version 6.0.1
Closed as program error.
Using a forms based login for AAA, failed logins redirect to the IP:Port on which DataPower is listening rather than the original URL the client used for login. One failing scenario has a load balancer that has an URL and forwards the request to DataPower. It works when the page is first accessed and when the login is successful.
Affected is the use of form-based login. An HTML forms based login redirect to a Logout or Error page uses the url-in value for the location.
Fix is available in 184.108.40.206, and 220.127.116.11. For a list of the latest fix packs available, please see: http://www-01.ibm.com/support/docview.wss?uid=swg21237631
Reported component name
Reported component ID
Last modified date
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fixed component name
Fixed component ID
Applicable component levels