PH45303: CHANGES IN ADMIN CONSOLE COOKIES TO MEET RFC 6265 COMPLIANCE

APAR status

• Closed as program error.

Error description

• WebSphere Adminconsole may fail with some reverse proxy
  configuration due to extra spaces in the cookie-http response.
  This used to be allowed, but the standard in the RFC has changed
  where spaces aren't allowed anymore.
  

Local fix

• A current workaround seem to be possible with NGINX config to
  allow the cookie with spaces.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server using the administrative console to  *
  *                  manage their WebSphere environment.         *
  ****************************************************************
  * PROBLEM DESCRIPTION: The administrative console uses         *
  *                      whitespace in the cookie values.        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The administrative console cookie values contain whitespace
  that is not compliant with RFC 6265.
  

Problem conclusion

• The administrative console was modified to remove
  whitespace in its cookie values.
  
  The fix for this APAR is targeted for inclusion in fix packs
  8.5.5.22 and 9.0.5.13. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels