IT37085: INTEGRATED WINDOWS AUTHENTICATION FAILS FOR INBOUND HTTP REQUESTS IN ACE 11.0.0.12

APAR status

• Closed as program error.

Error description

• When integrated Windows authentication is enabled for the
  HTTPConnector or HTTPSConnector in ACE 11.0.0.12 and above,
  requests will fail with a 401 error. A service trace will show
  
  
  IWAManager::authenticateUser, ?Unsupported Authorization
  Header type?, ?ntlm?,
  
  or
  
  IWAManager::authenticateUser, ?Unsupported Authorization Header
  type?, ?negotiate?,
  

Local fix

• Use ACE 11.0.0.11 or lower
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of Integrated Windows Authentication with the
  HTTPConnector or HTTPSConnector in ACE 11.0.0.12
  
  
  Platforms affected:
  Windows on x86-64 platform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  <div><div><span style="color:#000000">When integrated Windows
  authentication is enabled for the HTTPConnector or
  HTTPSConnector in ACE 11.0.0.12 and above, requests will fail
  with a 401 error. A service trace will show</span></div>
  <div><span style="color:#000000">IWAManager::authenticateUser,
  'Unsupported Authorization Header type', 'ntlm'</span></div>
  <div><span style="color:#000000">or</span></div> <div><span
  style="color:#000000">IWAManager::authenticateUser, 'Unsupported
  Authorization Header type', 'negotiate'</span></div></div>
  

Problem conclusion

• The product correctly handles Integrated Windows Authentication
  authentication.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v11.0      11.0.0.16
  v12.0      12.0.3.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels