Problem attempting to use Apache 2.2 mod_proxy_http and mod_shib w/ShibUseHeaders simultaneously

[Steve Siirila]

On Wed, Feb 8, 2012 at 3:44 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Just a quick followup...  the issue was in the application which was
> silently
> > discarding all header variables upon reaching one without a value.  And
> > apparently either the Shib SP or the proxy likes sending value-less
> header
> > variables (e.g. "Shib-AuthnContent-Decl:") the moment ShibUseHeaders got
> > turned on.  Now that the application ignores these and reads the rest it
> > eventually gets to the last few, including the critical one
> (Content-Length:).
>
> The SP is doing that, because if it didn't, values sent by the client
> would spoof any headers you want to rely on. The empty ones are "cleared".
>

That certainly makes sense!  Thanks for pushing me in the right direction
earlier (i.e. keeping me from barking up the wrong tree).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120208/5627e079/attachment.html