My Oracle Support Banner

Oracle HTTP Server Drop HTTP Headers Containing Underscore (Doc ID 2542618.1)

Last updated on FEBRUARY 02, 2024

Applies to:

Oracle HTTP Server - Version 12.2.1.2.0 and later
Oracle Access Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

Oracle HTTP Server is installed.
For authentication Oracle Access Manager is being used.

There is an application that uses CGI and expects to use the OAM headers like,

OAM_REMOTE_USER,
OAM_IDENTITY_ASSERTION

This OHS 12.2.1.x is based on Apache 2.4 and the CGI related modules have new restrictions in the release as described here,



Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.