Problem attempting to use Apache 2.2 mod_proxy_http and mod_shib w/ShibUseHeaders simultaneously

Steve Siirila sfs at umn.edu
Wed Feb 8 21:39:13 GMT 2012


Just a quick followup...  the issue was in the application which was
silently discarding all header variables upon reaching one without a
value.  And apparently either the Shib SP or the proxy likes sending
value-less header variables (e.g. "Shib-AuthnContent-Decl:") the moment
ShibUseHeaders got turned on.  Now that the application ignores these and
reads the rest it eventually gets to the last few, including the critical
one (Content-Length:).

(I hadn't gotten back to this in the past two weeks or I'd have realized
this sooner.)

On Wed, Jan 25, 2012 at 7:06 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 1/25/12 7:32 PM, "Steve Siirila" <sfs at umn.edu> wrote:
> >
> >Sorry, I specifically meant the Apache mod_shib module -- which is
> >bundled in my "ShibSP" software.
>
> Which is the SP, and again, has nothing to do with your issue. There is no
> code in it that will remove headers that don't overlap with the ones it
> controls.
>
> Whether the behavior is observed without the SP or not, it is not the SP
> doing it.
>
> >Care to share your Apache configuration -- in particular, the Shib- and
> >Proxy-related lines?
>
> It isn't mine and I have no access to it. I simply note the fact that it's
> been done.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120208/f1f4022e/attachment-0001.html 


More information about the users mailing list