PM61909: SECURITY CONSTRAINTS DO NOT GET PICKED UP WHEN USING SPACES IN VIRTUAL HOST NAME FOR APPLICATIION.

8.0.0.4: WebSphere Application Server V8.0 Fix Pack 4
8.5.0.1: WebSphere Application Server V8.5 Fix Pack 1
8.0.0.5: WebSphere Application Server V8.0 Fix Pack 5
8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• Product Version: Websphere ND 8.0.0.2
  OS: AIX
  Problem Description:
  Application does not recognize the Security Constraints from
  web.xml when using space in virtual host name.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8 and V8.5                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: Security constraints ignored if a       *
  *                      space occurs in the virtual Host name   *
  *                      or application context Root of a        *
  *                      deployed application.                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Application does not recognize the Security Constraints from
  web.xml when using space in virtual host name or application
  context root.
  This error also occurs if the contextRoot used to deploy an
  application contains a space.
  

Problem conclusion

• Code has been changed to enforce a security constraint when
  vHost and/or application contextRoot contains a space.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.4 and 8.5.0.1.  Please refer to the Recommended
  Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP