PM12308: REDIRECT.LOGOUT.URL WITH SERVER-RELATIVE URL DOES NOT UTILIZE RE DIRECT.LOGOUT.SSL SETTING

APAR status

• Closed as program error.

Error description

• The InfoCenter specifies that the redirect URL
  redirect.logout.url must be an absolute URL.  However, if the
  value of redirect.logout.url is a relative URL, WebSphere
  Application Server (WAS) will expand it according to the Servlet
  API. In such cases, WAS ignores the WebSphere Portal
  configuration setting redirect.logout.ssl.
  
  Therefore, if redirect.logout.ssl=true and, for example,
  redirect.logout.url=/wps/portal/path (a relative URL),
  WAS incorrectly expands this to
  http://server.com/wps/portal/path.
  
  The fix for this APAR will make WebSphere Portal expand the path
  so that redirect.logout.ssl is considered. The resulting
  expanded path should be https://server.com/wps/portal/path in
  this example.
  

Local fix

Problem summary

• According to the InfoCenter, the redirect URL specified in
  "redirect.logout.url" has to be an absolute URL. Although
  server-relative URLs work too they are expanded to absolute URL
  by the application server (according to the Servlet API), which
  means that the "redirect.logout.ssl" is not considered in the
  process of generating the absolute URL.
  

Problem conclusion

• This APAR makes use of the "redirect.logout.ssl" setting if the
  "redirect.logout.url" is server-relative.
  
  Manual Steps:
     None
  
  Failing Module(s):
     Authorization/Authentication (login/logout)
  
  Affected Users:
     All users
  
  Version Information:
      Portal Version(s): 6.1.0.1
       Pre-Requisite(s): PK78729
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.2
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.3
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PM12308&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R61A PSY

     UP

• R61B PSY

     UP

• R61C PSY

     UP