PK03299: POST PARAMETERS NOT PRESERVED IN FORM LOGIN PER SERVLET-SPEC-2.3 SECTION 12.5.3.1

 A fix is available

Obtain the fix for this APAR



APAR status
Closed as program error.

Error description
POST parameters not preserved in form logion as abstract
Local fix Problem summary
****************************************************************
* USERS AFFECTED: All users of WebSphere Application Server    *
*                 V5.0 for z/OS                                *
****************************************************************
* PROBLEM DESCRIPTION: Servlet parameters are not being        *
*                      preserved in form based login.          *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
The v2.3 servlet specification, section 12.5.3.1, requires that
form based login preserve the original request parameters and
pass them to the original requested resource following
successful authentication and authorization.

For requests with a POST method, the web container did not
preserve the request's parameters when form based login was
specified for a web application. Calls to getParameterValues()
and getParameter() on the servlet request returned null
following redirection from the initial login form.
Problem conclusion
Authentication for a web application is modified so that the
parameters from the initial servlet POST request are preserved
in session attributes prior to presenting the login form.
Following successful authentication and authorization, the
parameters are restored from the session so that they are
accessible from the redirected request.

APAR PK03299 is associated with SERVICE LEVEL W502031 of
WebSphere Application Server V5.0 for z/OS.
Temporary fix Comments
APAR information
APAR number PK03299
Reported component name WEBSPHERE FOR Z
Reported component ID 5655I3500
Reported release 500
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Special Attention NoSpecatt
Submitted date 2005-03-29
Closed date 2005-06-20
Last modified date 2005-07-01

APAR is sysrouted FROM one or more of the following:
PQ94384

APAR is sysrouted TO one or more of the following:
PK07625

Modules/Macros
BBOUBINF          

Publications Referenced

Fix information
Fixed component name WEBSPHERE FOR Z
Fixed component ID 5655I3500

Applicable component levels
R500 PSY UK04679    UP05/06/28 P F506

  Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.


Document Information


Current web document: swg1PK03299.html
Product categories: Software > Application Servers > Distributed Application & Web Servers > WebSphere Application Server for z/OS
Operating system(s):
Software version: 500
Software edition:
Reference #: PK03299
IBM Group: Software Group
Modified date: Jul 1, 2005