Shibboleth vs mod_rewrite

[Aaron Roots]

So we have come up with a workaround that seems alright for our purposes -
noting it here for anyone else that needs a solution:

SetEnvIf REDIRECT_username ^(.+)$ username=$1

If "REDIRECT_username" exists - then write it's value into "username". If
it doesn't exist - then will leave the value of "username" intact.

Unfortunately this will need to be done for every released attribute you
are using in code - but at least you can achieve it.

Cheers heaps for you help
Aaron

On 19/10/11 12:25 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 10/18/11 3:42 AM, "Aaron Roots" <aaron.roots at deakin.edu.au> wrote:
>>
>>However this piece of code under mod_rewrite can not see variables set by
>>Shibboleth ­ we have tracked this down to all the variables being changed
>>into something like "REDIRECT_username" instead of just being "username".
>>When we access the index.php directly it is working perfectly as expected
>>in the default code path.
>
>I don't have any information on mod_rewrite, but what I can say is that if
>the standard headers aren't set, it's because the request was rewritten to
>be outside the SP content rules that would tell it to enforce a session.
>
>By the time the actual request runs internally, the auth checking hooks in
>Apache get run again on subrequests, so if they don't run, they're not
>active.
>
>-- Scott
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net