APAR status
Closed as program error.
Error description
When using a AAA action configured with a custom PDP binding XSLT in the Authorization step, the output XACML request cannot be wrapped in a SOAP Envelope.
Local fix
Set SOAP Enveloping to 'on' and follow the example provided in the store:///aaa-xacml-binding-sample.xsl
Problem summary
If a custom stylesheet is used to construct an XACML request for use in AAA AZ, and that stylesheet returns a request wrapped in SOAP headers, the appliance does not recognize the request and will not properly forward it to an external PDP.
Problem conclusion
If the useSOAP toggle is set to 'off' simply forward the generated request to the PDP, including any wrappers. It useSOAP is set to 'on', disregard any wrappers in the generated rewquest, and create SOAP wrappers in the appliance (in accordance with any <SoapHeader> elements in the response from the custom stylesheet).
Temporary fix
Comments
APAR Information
APAR number
IC69547
Reported component name
DATAPOWER
Reported component ID
DP1234567
Reported release
380
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2010-07-01
Closed date
2010-08-09
Last modified date
2010-08-09
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
DATAPOWER
Fixed component ID
DP1234567
Applicable component levels
R372 PSY
UP
R373 PSY
UP
R380 PSY
UP
R381 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.8","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
11 February 2022