PM39549: Two part HTTP response is returned

Fixes are available

APAR status

Closed as program error.

Error description

When following configurations are set together, two part http
response is returned. The first part is NTLM (NT LAN
Manager) token error and the second part is application page.

-TAI(Trust Association Interceptor) is enabled
-SPNEGO Web authentication is enabled with "Allow fallback to
application authentication mechanism" option.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application      *
*                  Server who configured TAI and SPNEGO Web    *
*                  with "Allow fallback to application         *
*                  authentication mechanism" option enabled    *
****************************************************************
* PROBLEM DESCRIPTION: Two part http response is returned.     *
*                      The first part is NTLM (NT LAN          *
*                      Manager) token error. The second part   *
*                      is application page.                    *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
When NTLM Token is in the HTTP request, SPNEGO Web
authentication detects it and adds "NTLM Token received" error
message to the HTTP Response.  Then, the Application
server falls back on application authentication mechanism when
"Allow fallback to application authentication mechanism" is
enabled. If the authentication is successful, application page
is added to HTTP response. This results in two part HTTP
response, the first part with "NTLM Token received" error and
the second part with application page.

Problem conclusion

With this fix, when SPNEGO Web authentication is used, the
security code no longer appends the error message if "Allow
fallback to application authentication mechanism" is enabled,

The fix for this APAR is currently targeted for inclusion in
fix pack 7.0.0.21 and 8.0.0.2.  Please refer to the Recommended
Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PM39549
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2011-05-18
Closed date
2011-08-01
Last modified date
2011-08-01

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800

Applicable component levels

R700 PSY
UP
R800 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
27 October 2021

Tips

PM39549: Two part HTTP response is returned

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

R800 PSY

Document Information

Share your feedback

Need support?