idp 3.0.0 catch 22

[Jim Fox]

I'm attempting an install of idp 3.0.0

We need the RemoteUser authn because, for the time being at least,
we use pubcookie for our authn.  So we front the idp with apache
and mod_proxy.


The idp docs suggest jetty over tomcat for many reasons, including
the slow startup time.  And jetty version 9 is supported.

Jetty recommends proxying with http instead of ajp for performance
reasons.  However, http proxy does not forward REMOTE_USER.
So we need AJP.

However, jetty 9 dropped support for AJP.

So it seems RemoteUser and its ilk require tomcat.
Is that about right?

Thanks,

Jim