Can REMOTE_USER not be set by Shibboleth ?

[Matthieu Huin]

Greetings,

I have a specific setup where I want the REMOTE_USER env variable not set; the SAML assertions are enough. I've removed the REMOTE_USER option in /etc/shibboleth/shibboleth2.xml, but it seems that shibboleth still sets a REMOTE_USER variable with the value '' ... which is not desirable.

Is it really Shibboleth doing this ? And if so, is it possible to make sure REMOTE_USER isn't set at all ?

Matthieu Huin 

mhu at enovance.com 
http://www.enovance.com 
11 bis rue roquépine – 75008 PARIS France