PH29569: SUPPORT "CERTIFICATEUSERNAME" WITHOUT AUTHENTICATION

APAR status

• Closed as new function.

Error description

• Currently "CertificateUsername" can only be used in place of
  configured authentication, but sometimes it is useful to set
  the internal username without any authentication.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server 9.0 with       *
  *                  SSLClientAuth                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Currently "CertificateUsername" can     *
  *                      only be used in place of                *
  *                      configured authentication, but          *
  *                      sometimes it is useful to set           *
  *                      the internal username without any       *
  *                      authentication.                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The mod_authn_cert module in 9.0 allows a client certificate
  to be used in place of HTTP basic auth, but it cannot be used
  unless basic auth is actually configured.
  

Problem conclusion

• The code was updated to allow mod_authn_cert to work when
  there was no basic authentication configured.
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix packs 9.0.5.7. For more information, see
  'Recommended Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels