Download
Abstract
The parameters of POST request might not be accessable with the specific security configuration.
Download Description
PK72757 resolves the following problem:
ERROR DESCRIPTION:
When an application accesses the http parameters of POST request, the following error might be caught.
SRVE0133E: An error occurred while parsing parameters. java.io.IOException: SRVE0216E: post body contains less bytes than specified by content-length is thrown when the security components reads the request with getInputStream() and not setting back the raw un-encoded post data.
This condition might happen when "Use available authentication data when an unprotected URI is accessed" checkbox is checked. This panel can be reached by navigating the admin console as follows:
1. Click Security > Secure administration and applications.
2. Under Authentication, expand Web security and click General settings.
USERS AFFECTED:
All users of IBM WebSphere Application Server V6.1 on Windows/Solaris/AIX/HP/Linux.
PROBLEM DESCRIPTION:
When "Use available authentication data when an unprotected URI is accessed" checkbox in Web security - General settings panel of Administrative Console is checked, a POST request towards unprotected URI may not be processed properly. When this condition occurs, the following error message is logged: SRVE0133E: An error occurred while parsing parameters. java.io.IOException: SRVE0216E: post body contains less bytes than specified by content-length
The cause of the issue is that WebContainer code doesn't restore byte stream which contains POST parameter once the data was taken by the security code.
RECOMMENDATION:
PROBLEM CONCLUSION:
With this fix, the http parameters of the POST requests are preserved.
The fix for this APAR is currently targeted for inclusion in Fix Pack 6.1.0.23 and 7.0.0.3.
Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Prerequisites
Please download the UpdateInstaller below to install this fix.
Installation Instructions
Please review the readme.txt for detailed installation instructions.
Technical Support
Contact IBM Support using SR (http://www-306.ibm.com/software/support/probsub.html), visit the WebSphere Application Server Support Web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV(U.S. only).
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg24021045