IT09124: BACKSLASH CHARACTER IS ADDED IF USERID IN KERBEROS SERVICE TICKET CONTAINS TWO '@' SYMBOLS

Fix packs for DataPower Gateway version 7.5

APAR status

• Closed as fixed if next.

Error description

• The inbound userID from Kerberos service ticket has the
  following format:
  
  userid@company.com@XYZ.NET.COM
  
  Note the two '@' symbols in the fully qualified Kerberos
  principal.  It has to be interpreted as follows:
  
  - userid@company.com is the Windows AD user principal name
  - @XYZ.NET.COM is the Windows AD domain realm
  
  However, when viewing the probe of this Kerberos service
  ticket, Datapower is parsing the fully qualified domain name as:
  
  userid\@company.com@XYZ.NET.COM
  

Local fix

• Use custom stylesheet in the map credential step to remove the
  backslash from the userid.
  

Problem summary

• A principle identity that contains an '@' character many not be
  completely parsed from a Kerberos service ticket.
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R720 PSY

     UP