IC88177: FOR FORMS BASED LOGIN, REDIRECT URLS MAY AFFECT FORWARDING COOKIES, WHICH COULD RESULT IN BACKEND APP ISSUES.

Fix packs for DataPower XML Security Gateway version 6.0
Fix packs for DataPower B2B Appliance version 6.0
Fix packs for DataPower Integration Appliance version 6.0
Fix packs for DataPower Low Latency Appliance version 6.0
Fix packs for DataPower Service Gateway version 6.0

APAR status

• Closed as program error.

Error description

• The redirect URL generated during forms based login uses the
  service's configured IP address in place of the hostname. After
  the login process, the client is redirected back to the original
  URL with the IP address URL. The end result is that any cookies
  already in the browser's cookie jar for the hostname are not
  forwarded with the final redirect, possibly breaking backend
  applications.
  

Local fix

Problem summary

• For forms based login, redirect URLs may affect forwarding
  cookies, which could result in backend app issues. This will be
  added as an ER in 6.0
  

Problem conclusion

• 6.0.0.0
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R500 PSY

     UP