IdP access to server environment variables

[Jim Fox]

For the general case use getAttribute, e.g.

   httpRequest.getAttribute('some_attribute_name');

and omit the 'AJP_'.

Jim


On Thu, 29 Sep 2011, Christopher Bongaarts wrote:

> Date: Thu, 29 Sep 2011 08:47:34 -0700
> From: Christopher Bongaarts <cab at umn.edu>
> To: Shib Users <users at shibboleth.net>
> Reply-To: Shib Users <users at shibboleth.net>
> Subject: Re: IdP access to server environment variables
> 
> Liam Hoekenga wrote:
>> I find myself asking a question that I asked a couple of years ago.
>>
>> I'd like to access some environment variables set by our SSO for use
>> in our IdP configuration.
>>
>> We're using mod_proxy and mod_proxy_ajp.  I know that mod_proxy_ajp
>> will forward any environment variable with the AJP_ prefix to tomcat.
>> Is it then possible to access them?  (Maybe
>> $requestContext.getAttribute("variableName")?)
>
> I don't know about the general case, but I was able to get at the Apache
> REMOTE_USER and AUTH_TYPE from a login handler with:
>
>         String principalName = httpRequest.getRemoteUser();
>         String authType = httpRequest.getAuthType();
>
> Our local SSO sets the AUTH_TYPE variable to distinguish authentication
> methods.
> -- 
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>