Problem attempting to use Apache 2.2 mod_proxy_http and mod_shib w/ShibUseHeaders simultaneously

Cantor, Scott cantor.2 at osu.edu
Wed Feb 8 21:44:56 GMT 2012


> Just a quick followup...  the issue was in the application which was silently
> discarding all header variables upon reaching one without a value.  And
> apparently either the Shib SP or the proxy likes sending value-less header
> variables (e.g. "Shib-AuthnContent-Decl:") the moment ShibUseHeaders got
> turned on.  Now that the application ignores these and reads the rest it
> eventually gets to the last few, including the critical one (Content-Length:).

The SP is doing that, because if it didn't, values sent by the client would spoof any headers you want to rely on. The empty ones are "cleared".

-- Scott



More information about the users mailing list