PK03299: POST PARAMETERS NOT PRESERVED IN FORM LOGIN PER SERVLET-SPEC-2.3 SECTION 12.5.3.1 | |||||||||||||||||||||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||||||||||||||||||||
![]() APAR status Closed as program error. Error description POST parameters not preserved in form logion as abstractLocal fix Problem summary **************************************************************** * USERS AFFECTED: All users of WebSphere Application Server * * V5.0 for z/OS * **************************************************************** * PROBLEM DESCRIPTION: Servlet parameters are not being * * preserved in form based login. * **************************************************************** * RECOMMENDATION: * **************************************************************** The v2.3 servlet specification, section 12.5.3.1, requires that form based login preserve the original request parameters and pass them to the original requested resource following successful authentication and authorization. For requests with a POST method, the web container did not preserve the request's parameters when form based login was specified for a web application. Calls to getParameterValues() and getParameter() on the servlet request returned null following redirection from the initial login form.Problem conclusion Authentication for a web application is modified so that the parameters from the initial servlet POST request are preserved in session attributes prior to presenting the login form. Following successful authentication and authorization, the parameters are restored from the session so that they are accessible from the redirected request. APAR PK03299 is associated with SERVICE LEVEL W502031 of WebSphere Application Server V5.0 for z/OS.Temporary fix Comments
APAR is sysrouted FROM one or more of the following: PQ94384 APAR is sysrouted TO one or more of the following: PK07625 Modules/Macros
Publications Referenced
|
Document Information |
Current web document: swg1PK03299.html
Product categories: Software > Application Servers >
Distributed Application & Web Servers > WebSphere Application
Server for z/OS
Operating system(s):
Software version: 500
Software edition:
Reference #: PK03299
IBM Group: Software Group
Modified date: Jul 1, 2005
(C) Copyright IBM Corporation 2000, 2009. All Rights Reserved.