PH21402: DFHWBEP IS NOT CALLED FOR A BASIC AUTHENTICATION ERROR

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CICS has a TCPIPSERVICE with AUTHENTICATE(BASIC).  If the
  client did not provide any credentials or the credentials
  were invalid then CICS will respond with an HTTP 401 response.
  The web error program, DFHWBEP, has not been driven for this
  error which means that these failures could not be logged or
  audited.
  Additional symptoms:
  migrating from 5.2 to 5.5 you experience an
  ABEND WBEP issued from your user replaceable
  module DFHWBEP.
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: DFHWBEP not invoked by DFHWBXN          *
  *                      following a basic authentication        *
  *                      error.                                  *
  ****************************************************************
  CICS has a TCPIPSERVICE defined with AUTHENTICATE(BASIC).  A
  client sends in an HTTP request that does not contain any
  credentials or contains invalid credentials.  This causes CICS
  to respond with an HTTP 401 response.  The web error program,
  DFHWBEP, is not driven for this error case so the failure is
  unable to be logged or audited.
  
  KEYWORDS: server WBEP 401 wbep_http_response_code
  

Problem conclusion

• The web error program will now be driven for basic
  authentication errors.
    Customers should review their use of the program to validate
  its behaviour when presented with a 401 response code.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI70285 UI70286 UI70287 UI70288

Modules/Macros

• DFHWBXN
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI70286

     UP20/06/30 P F006

• R100 PSY UI70285

     UP20/06/27 P F006

• R200 PSY UI70287

     UP20/06/27 P F006

• R300 PSY UI70288

     UP20/07/06 P F007

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.