Release Notes › Web Agent Release Notes › Defects Fixed › Defects Fixed in 6.x QMR 2 › Agent Allowing Unauthenticated Users Access When IP Addresses are used to Resolve Agent Name (34900)

Previous Topic: Orphaned Credential Cookies Cause Users to be Reprompted (34802)

Next Topic: Single Sign-on Failing with Different Policy Stores Sharing Common Key Store (35281)
Agent Allowing Unauthenticated Users Access When IP Addresses are used to Resolve Agent Name (34900)

Symptom:

The Web Agent may allow unauthenticated users access to protected resources on virtual Web servers when IP addresses in addition to host names are used to resolve the Agent name.

Solution:

Unauthenticated users are no longer gaining access to protected resources in this configuration due to the addition of the new parameter UseServerRequestIP.