BASICSESSIONLESSSCHEME FAILS WITH HTTP 500 ERROR WHEN USED WITH OHS 12.2.1 WEBGATE
Last updated on MARCH 08, 2017
Applies to:Oracle Access Manager - Version 220.127.116.11.0 to 18.104.22.168.0 [Release 12c]
Information in this document applies to any platform.
The customer recently switched to OHS 12c R2 (based on Apache 2.4) and encounters the following issue when using BasicSessionlessScheme:
- HTTP-500 error in the browser
- Error message in <component_name>.log: AH00027: No authentication done but request not allowed without authentication for /protectedresourcename. Authentication not configured?"
The accessed resource is protected. They first get a basic-authentication pop-up and submit the credentials. They get the HTTP-500 error after authenticating.
This issue only seems to occur with BasicSessionlessScheme. It does not seem to reproduce with other authentication schemes so far.
Upgrade the OHS and webgate version to 12.2.1
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms