IBM Support

PI51185: ENHANCEMENTS ALLOWING USE OF SAFRUNASEARLY FOR CERTIFICATE SWITC HING

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • SAFRunAsEarly was only enabled for use with SAFRunAs %%CLIENT%%.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of IBM HTTP Server (powered by        *
    *                  Apache) on                                  *
    *                  z/OS                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: "SAFRunAsEarly" does not allow early    *
    *                      switching based on "SAFRunAs            *
    *                      %%CERTIF%%"                             *
    ****************************************************************
    * RECOMMENDATION:  Apply this fix if you need use              *
    *                  "SAFRunAsEarly"                             *
    *                  with certificate based authentication       *
    ****************************************************************
    "SAFRunAsEarly" does not allow early switching based on
    "SAFRunAs
    %%CERTIF%%"
    

Problem conclusion

  • SAFRunAsEarly was extended to allow use in conjunction with
    "SAFRunAs %%CERTIF%%".
    
    The fix for this APAR will be in IBM HTTP Server fixpacks:
     - 7.0.0.41
     - 8.0.0.13
     - 8.5.5.9
     - 9.0.0.0-PI54808 (z/OS V2R2 update 3)
    

Temporary fix

  • n/a
    

Comments

APAR Information

  • APAR number

    PI51185

  • Reported component name

    IBM HTTP SERVER

  • Reported component ID

    5724J0801

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-10-26

  • Closed date

    2016-02-09

  • Last modified date

    2016-02-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM HTTP SERVER

  • Fixed component ID

    5724J0801

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 September 2022