IC80143: LDAP CLIENT DOES NOT DO SSL CACHING (EVEN IF SSL PROXY PROFILE 'CLIENT-SIDE SESSION CACHING' IS SET TO "ON")

Fix packs for DataPower XML Security Gateway version 6.0
Fix packs for DataPower B2B Appliance version 6.0
Fix packs for DataPower Integration Appliance version 6.0
Fix packs for DataPower Low Latency Appliance version 6.0
Fix packs for DataPower Service Gateway version 6.0

APAR status

• Closed as fixed if next.

Error description

• DataPower's LDAP client does not do SSL caching; it uses a new
  key exchange for every connection.
  You can detect the problem if you configure an SSL proxy
  profile. Set DataPower as an SSL client and set Client-side
  Session Caching on. Then configure DataPower as an LDAP client
  by using this SSL proxy profile.
  If you initiate an LDAP connection from DataPower and capture
  packets between DataPower and LDAP server, note that every
  connection uses a new key exchange.
  

Local fix

Problem summary

• Affected are users intending to take advantage of SSL caching
  using DataPower as an LDAP client.
  

Problem conclusion

• The fix will be available in a future major release.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R402 PSN

     UP