Problem attempting to use Apache 2.2 mod_proxy_http and mod_shib w/ShibUseHeaders simultaneously

[Cantor, Scott]

> It is the lack of the 'content-length' header in particular that our application
> complains about on the POST request.  However, the application will also be
> needing additional Shib-specific headers (locally-defined attributes) that are
> also not getting passed.  Additionally, the x-forwwarded-* headers go
> missing as well as the 'connection' header.  What could be stripping these
> headers upon turning on ShibUseHeaders?  I assume ShibSP is doing this.

It's not. The SP has no involvement in this whatsoever. It sets the request headers on the Apache request object. After that, anything that happens is the Apache handler that actually serves the request.

> Does anyone run a proxy that is Shib-protected?  Are you using
> ShibUseHeaders?  We are running Apache 2.2 and ShibSP 2.4.3.

I believe we have one in front of a Tomcat server, but I don't know if any of those headers are "missing" or any other details, just that they did it. I don't know if the proxy end needs the headers option or if it just sets them for the proxied hop directly based on environment variables.

-- Scott