Upgrade Issue going from 2.3.5. to 2.3.8

[Peter Schober]

* Ullfig, Roberto <rullfig at uic.edu> [2013-03-07 17:35]:
> OK, I found that login.jsp in 2.3.5 has some significant differences from the one in 2.3.8, namely:

You're using the RemoteUserLoginHandler, i.e., authentication happens
external to the IdP application. login.jsp is not used in this
scenario at all, the changes mentioned irrelevant to your problem.
Do you front the IdP with Apache httpd or get Remote User via Tomcat?
If the former I'd look at httpd's access log to see whether httpd
actually has an authenticated user for the request to the
/idp/Authn/RemoteUser endpoint.
Either way it seems the protection for that endpoint is not set up or
not set up correctly. Without details it's hard to say why.
-peter