Attribute not resolving on SP
Peter Schober
peter.schober at univie.ac.at
Thu Apr 18 12:20:50 EDT 2013
* Christopher Bongaarts <cab at umn.edu> [2013-04-18 18:14]:
> > What specific java call can I make so that my JSPs can see the UID?
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess
>
> Examples at the bottom include Java...
>
> request.getAttribute("Shib-Identity-Provider")
>
> or in your case
>
> request.getAttribute("uid")
If mod_proxy is bein gusead (instead of mod_proxy_ajp) tuning the
attributes into HTTP request headers in the Shib SP will be necessary.
Without that (and without using AJP) neither request attributes nor
request headers will be visible in Java.
Provided (in this case) "uid" is part of the REMOTE_USER precedence
list in shibboleth2.xml the authenticated subject will be seen in
httpd's access log (look for lines not containing ' - - '). So I'd
check that first.
-peter
More information about the users
mailing list