IT26848: MALFORMED BASIC AUTH TOKEN AT SOAP INPUT NODE CAUSES A HTTP TIMEOUT RATHER THAN A HTTP 400 BAD REQUEST RESPONSE

APAR status

• Closed as program error.

Error description

• If a SOAP Input node is configured to use HTTP Basic
  authentication but receives a malformed authentication token
  that is not a valid base64 string will result in the client
  receiving a timeout fault response rather than a HTTP 400 - Bad
  Request response.
  
  Syslog entries indicative of this problem are
  
  (Msg 1/3) BIP2628W: Exception condition detected on input node
  'SOAPInputNode'.
  
  (Msg 2/3) BIP3748E: The SOAP Input node 'MsgFlow.SOAPInputNode'
  encountered an error while processing the inbound SOAP message.
  
  (Msg 3/3) BIP4019E: Error decoding (converting) the base64
  character string 'AUTH_TOKEN' to a BLOB. State = '-1' 'S22018'
  '0' ''.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus v10 and IBM App Connect
  Enterprise v11 who deploy Integration Service projects and use
  HTTP Basic Authorization security.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  If a SOAP Input node is configured to use HTTP Basic
  authentication but receives a malformed authentication token
  that is not a valid base64 string it will result in the client
  receiving a timeout fault response rather than a HTTP 400 - Bad
  Request response.
  

Problem conclusion

• The product will now return a HTTP 400 Bad Request error if the
  Basic authorization token is not valid Base64.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.16
  v11.0      11.0.0.4
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels