PH49305: MULTIPLE VALUES IN REQUEST HEADER "X-FORWARDED-FOR" NOT LOGGED.

APAR status

• Closed as program error.

Error description

• Multiple "X-Forwarded-For" exist in the request header.
  In this case only the first one is outputed to log.
  
  for example :
  
  in request header
  X-Forwarded-For 12.xx.xx.xx,13.xx.xx.xx
  X-Forwarded-For 14.xx.xx.xx
  X-Forwarded-For 10.xx.xx.xx
  
  accessLogging settings (server.xml)
  <accessLogging filepath="${SERVER_LOG_ROOT}/access.log"
  logFormat='%h %u %t "%r" %b "%{Referer}i" %s "%{User-Agent}i"
  "%{X-Forwarded-For}i" "%{JSESSIONID}C" '/>
  
  With this setting, only the first "%{X-Forwarded-For}i" part is
  output. (12.xx.xx.xx,13.xx.xx.xx)
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Customers using HTTP Access Logging.        *
  ****************************************************************
  * PROBLEM DESCRIPTION: When multiple valid same named headers  *
  *                      are present in an HTTP request, such   *
  *                      as                                      *
  *                      multiple X-Forwarded-For headers, only  *
  *                      the first value is logged in the HTTP  *
  *                      Access Log.  All Headers should be     *
  *                      logged in a comma separated list.       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When multiple valid same named headers are present in an
  HTTP request, only the first one is logged in the HTTP Access
  Log.
  

Problem conclusion

• All valid request headers with the same name are now logged in
  a comma separated list.
  
  For Liberty, see:
  https://github.com/OpenLiberty/open-liberty/issues/22688
  
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.23, 9.0.5.14, and Liberty 22.0.0.11. For more
  information, see 'Recommended Updates for WebSphere
  Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROF -

• Fixed component ID

  5655W6514

Applicable component levels