PM82601: WRONG PORT REDIRECTION AFTER CONSOLE AUTHENTICATION WHEN USING LOAD BALANCER/REVERSED PROXY.

APAR status

• Closed as program error.

Error description

• To replicate:
  1. setup an app server with WL with default console
  authentication.
     Lets say it's URL is http://1.2.3.4:9080/worklight/console
  2. setup a reversed proxy or any other NAT translation, e.g.
     http://some-server/worklight/console is forwarded to
     http://1.2.3.4:9080/worklight/console
  3. Open http://some-server/worklight/console
  4. Login
  5. After successful login browser is redirected to
     http://some-server:9080/worklight/console
  
  Expected behaviour - After successful login browser should be
  redirected to http://some-server/worklight/console
  
  Adjusting publicWorkLightPort in worklight.properties didn't
  help.
  

Local fix

• There is no workaround for this issue.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Administrators accessing a Worklight Console which is hosted *
  * behind a load balancer or reverse proxy.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When the Worklight Console is hosted behind a network        *
  * address translation (NAT) mechanism, the connection is not   *
  * being properly redirected after login.  Instead of           *
  * redirecting to the port of the NAT, the connection is routed *
  * to the local address/port of the console.                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Install fixpack 5.0.6.0 or newer.                            *
  ****************************************************************
  

Problem conclusion

• Fixed the code so that if onLoginUrl is defined for the
  protected resource, upon successful authentication the
  connection will be  redirected to the public full URL as is
  defined in worklight.properties (this includes the protocol,
  host, port, and context root.)
  
  The fix for this APAR is currently targeted for inclusion in
  fixpack 5.0.6.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WORKLIGHT CONSU

• Fixed component ID

  5725G9203

Applicable component levels

• R500 PSY

     UP