IBM Support

PI98574: If Liberty Admin Center was accessed via reverse proxy, the Liberty server made an unnecessary request back to the proxy server.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When performing a login into Admin Center, access.log will
    show a request being made from the Liberty server to the
    reverse proxy server.  This could cause Admin Center
    preferences (like Bi-di) to not load.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of Liberty Admin Center using a   *
    *                  reverse proxy server                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: If Liberty Admin Center is accessed via *
    *                      a reverse proxy, Admin Center           *
    *                      preferences (like Bi-di) may not load   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When performing a login into the Admin Center through a reverse
    proxy, the access.log will show a request being made from the
    Liberty server to the reverse proxy server.  If the Liberty
    server does not trust the reverse proxy because the reverse
    proxy server lacks the Liberty server's SSL/TLS certificate,
    Admin Center preferences (like Bi-di) will not load and the
    following error will be seen in the logs:
    Error code FDC1015I:
    Exception: unable to find valid certification path to requested
    target com.ibm.ws.ssl.core.WSX509TrustManager
    checkServerTrusted
    

Problem conclusion

  • The Liberty server now correctly calls itself instead of
    attempting to route the call through the proxy server.
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 18.0.0.2.  Please refer to the Recommended Updates page for
    delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

  • Enable two-way communication between the Liberty and proxy
    server by exchanging SSL/TLS certificates; this will allow the
    call to from Liberty to the proxy server to be routed back to
    and handled by the Liberty server.
    

Comments

APAR Information

  • APAR number

    PI98574

  • Reported component name

    LIBERTY PROFILE

  • Reported component ID

    5724J0814

  • Reported release

    CD0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-05-30

  • Closed date

    2018-06-01

  • Last modified date

    2018-06-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    LIBERTY PROFILE

  • Fixed component ID

    5724J0814

Applicable component levels

  • RCD0 PSY

       UP



Document information

More support for: WebSphere Application Server

Software version: CD0

Reference #: PI98574

Modified date: 01 June 2018


Translate this page: