IT35090: IN POSTPROCESSING STEP OF AN AAA POLICY, USER CAN'T ADD ROLE INTO WS-SECURITY USERNAMETOKEN

Fix packs for DataPower Gateway version 2018.4.1

APAR status

• Closed as program error.

Error description

• During the Postprocessing step of an AAA Policy where customer
  add the WS-Security UsernameToken (enable "Add WS-Security
  Username Token" and "Include password in UsernameToken" options
  only.) They have add the correct role identifier. This is a
  mandatory setting which their clients sdie need to identify the
  platform and further processing. The setting "Actor or role
  identifier" is filled with the correct Role, but this Role
  doesn't get added to the message to the client.
  It is found
  only when also enable "Generate LTPA token", then the role will
  be added to the token.
  

Local fix

• N/A
  

Problem summary

• DataPower's AAA Post Processing step is not including an actor
  when generating a username token.
  

Problem conclusion

• Fix is available in 2018.4.1.15 and 10.0.1.2.
  
  For a list of the latest fix packs available, please see:
  https://www.ibm.com/support/pages/node/83105
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R18X PSY

     UP

• RA0X PSY

     UP