IT39975: NON-PREEMPTIVE AUTHENTICATION FAILURE WITH SOAPINPUT NODE USING INTEGRATION NODE LISTENER

APAR status

• Closed as program error.

Error description

• A SOAPInput node, configured to use integration node listener,
  fails to respond with '401 Unauthorized' for the clients to
  submit valid authentication credentials as part of
  non-preemptive authentication. Instead, it returns '500 Internal
  Server Error' with the following body:
  
  <?xml version="1.0" encoding="utf-8"?><soapenv:Envelope xmlns:s
  oapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Bod
  y><soapenv:Fault><faultcode>soapenv:Server</faultcode><faultstr
  ing>BIP3113E:Exception detected in message flow gen.testflow.SOA
  (integration node ACENODE) </faultstring><detail><Text>BIP2708W:
  An input message to flow ''gen.testflow'' does not have an
  identity.
  
  
  
  Input messages to the flow must have an identity for access.
  
  
  
  Modify the client calling the flow to provide an identity for
  the message. : /build/jenkins_swg/slot0/product-build/WMB/src/D
  ataFlowEngine/MessageServices/ImbSecurityManager.cpp:878: ImbSec
  oapenv:Fault></soapenv:Body></soapenv:Envelope>
  
  
  With integration server listener, non-preemptive authentication
  works as expected.
  

Local fix

• Use the embedded listener
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  <span style="background-color:#ffffff">All users of App Connect
  Enterprise V12 and V13 using node wide listener with
  non-preemptive authentication configured.</span>
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Client request to node wide listener configured with
  non-preemptive authentication does not return "401 Unauthorised"
  response waiting for the client to submit valid authentication
  credentials, instead the server returns "500 Internal Server
  Error" response.
  

Problem conclusion

• Node wide listeners configured with non-preemptive
  authentication will now respond with "401 Unauthorised" waiting
  for authentication credentials from the client.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v12.0      12.0.12.2
  v13.0      13.0.2.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels