SP attributePrefix question

Tom Poage tfpoage at ucdavis.edu
Mon Aug 29 16:50:56 BST 2011


Morning,

I'm attempting to set up two paths in the same Apache httpd (virtual) host that prepend a different attribute prefix for each; one employs AJP to Tomcat. Same entityID. E.g.

<Location /path1>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  require valid-user
</Location>

<Location /path2>
   AuthType shibboleth
   ShibRequestSetting requireSession 1
   #ShibRequestSetting applicationId ajp
  Require valid-user
  ProxyPass ajp://localhost:8009/myapp/
</Location>
 
Setting attributePrefix="AJP_" on <ApplicationDefaults> works as expected, in that the AJP connector accepts those variables with the prefix and strips off the prefix by the time it gets to the application environment. e.g. "AJP_sn" gets mapped to "sn". In the httpd environment the the variable names remain "unstripped".

So I'm hoping to find a way to create consistent variables names across applications without any unusual Apache httpd contortions cf. mod_env and friends, i.e. make it easy for application developers and sysadmins to maintain.

Reviewing the docs, it looks as if attributePrefix="AJP_" on an <ApplicationOverride> (leaving it out of <ApplicationDefaults>) might work.

  <ApplicationOverride id="ajp" attributePrefix="AJP_"/>

then enable the ShibRequestSetting (above). This loops when I visit the AJP-enabled path.

I suspect I might need to flesh out ApplicationOverride with a Sessions element and a different handler URL, create a different virtual host (not what I was trying to do),  or create a different entityID for the second app.

Which way do I turn?

Thanks.
Tom.


More information about the users mailing list