IT38645: IWA INBOUND AUTHENTICATION FAILURE ON UNIX

APAR status

• Closed as program error.

Error description

• If you have enabled integratedWindowsAuthentication property of
  HTTP(S)Connector to secure HTTP web services with kerberos
  authentication, it may fail to work in Unix environment and the
  clients will always get a http 500 response. A service trace
  shows the following error.
  
  
  
  BIP3484E: ''Error processing request''
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus V10 using integrated windows
  authentication on the webservice provider flow.
  
  
  Platforms affected:
  AIX, HP-UX PA-RISC platform, HP-UX Itanium platform, Linux on
  Power platform, Linux on x86 platform, Linux on x86-64 platform,
  Linux on zSeries platform, Solaris x86-64 platform, Solaris
  SPARC platform, z/OS
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  <span style="background-color:rgb(255, 255, 255)">If you have
  enabled IntegratedWindowsAuthentication property of
  </span><span style="background-color:rgb(255, 255,
  255)">HTTP(S)Connector to secure HTTP web services with kerberos
  </span><span style="background-color:rgb(255, 255,
  255)">authentication, it may fail to work in Unix environment
  and the </span><span style="background-color:rgb(255, 255,
  255)">clients will always get a http 500 response. A service
  trace </span><span style="background-color:rgb(255, 255,
  255)">shows the following error.
                                     </span><span
  style="background-color:rgb(255, 255, 255)">
  
  </span><span style="background-color:rgb(255, 255, 255)">
  
  </span>
  <span style="background-color:rgb(255, 255, 255)">BIP3484E:
  ''Error processing request''      </span>
  

Problem conclusion

• The product has been modified to avoid unexpected failure in
  Unix environment while authenticating http clients with kerberos
  authentication.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.25
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels