Environment Variables

[Brent Putman]

On 8/22/11 10:43 PM, Joshua Brodie wrote:
> Is it possible to pass all the IdP returned-attributes, from a
> Shibboleth SP/Apache
> set-up,  to a Tomcat, as environment variables? I have been reading:
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess;
> passing attributes as http header, as the article mentions, is not
> ideal from a security perspective - I am not 100% sure how to pass
> with other methodologies.


Yes, when using mod_proxy_ajp and Apache 2.2.  It's described here:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall


Pretty straightforward, the environment variable names just have to be
prefixed with "AJP_", and the SP provides an automated mechanism to do
that.  Works great.

--Brent