Shibboleth vs mod_rewrite

[Cantor, Scott]

On 10/18/11 3:42 AM, "Aaron Roots" <aaron.roots at deakin.edu.au> wrote:
>
>However this piece of code under mod_rewrite can not see variables set by
>Shibboleth ­ we have tracked this down to all the variables being changed
>into something like "REDIRECT_username" instead of just being "username".
>When we access the index.php directly it is working perfectly as expected
>in the default code path.

I don't have any information on mod_rewrite, but what I can say is that if
the standard headers aren't set, it's because the request was rewritten to
be outside the SP content rules that would tell it to enforce a session.

By the time the actual request runs internally, the auth checking hooks in
Apache get run again on subrequests, so if they don't run, they're not
active.

-- Scott