Problem attempting to use Apache 2.2 mod_proxy_http and mod_shib w/ShibUseHeaders simultaneously
Cantor, Scott
cantor.2 at osu.edu
Wed Feb 8 21:44:56 GMT 2012
> Just a quick followup... the issue was in the application which was silently
> discarding all header variables upon reaching one without a value. And
> apparently either the Shib SP or the proxy likes sending value-less header
> variables (e.g. "Shib-AuthnContent-Decl:") the moment ShibUseHeaders got
> turned on. Now that the application ignores these and reads the rest it
> eventually gets to the last few, including the critical one (Content-Length:).
The SP is doing that, because if it didn't, values sent by the client would spoof any headers you want to rely on. The empty ones are "cleared".
-- Scott
More information about the users
mailing list