configuring idp to release the "remote_user" as nameid

[Peter Schober]

* David Mansfield <shibboleth at dm.cobite.com> [2013-06-25 16:16]:
> The IdP sits behind apache with mod_auth_kerb doing http Negotiate 
> authentication and passing the REMOTE_USER to the IdP (running in a 
> tomcat web container).

Also note that using the contributed Kerberos Login Handler
https://wiki.shibboleth.net/confluence/display/SHIB2/Kerberos+Login+Handler
you could do all this within the IdP, without using httpd and the
somewhat limited RemoteUser handler (which does not support
forcedAuthn and isPassive),
-peter