IT25836: AAA NETEGRITY POLICY MIGHT ADD WHITESPACE TO SET-COOKIE HEADER VALUE ERRONEOUSLY

Fix packs for DataPower Gateway version 2018.4, 7.7
Fix packs for DataPower Gateway version 7.5
Fix packs for DataPower Gateway version 7.5.1
Fix packs for DataPower Gateway version 7.5.2
Fix packs for DataPower Gateway version 7.6

APAR status

• Closed as program error.

Error description

• The AAA policy which leverages store:///dp/aaa-netegrity.xsl
  might add extra whitespace to the Set-Cookie header value which
  might result in errors on clients or backend servers.
  

Local fix

Problem summary

• Cookie values when generated by AAA Netegrity produce trailing
  spaces. Ex: Set-Cookie: Cookie=      Value
  

Problem conclusion

• Format store:///dp/aaa-netegrity.xsl to produce no spaces
  between Cookie and Value per RFC 6265 spec.
  Fix is available in 7.5.0.19, 7.5.1.18, 7.5.2.18, 7.6.0.11 and
  2018.4.1.1
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• 0
  

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R750 PSY

     UP