Get Shibboleth environment variables with Python

[Cantor, Scott]

On 5/13/14, 11:28 AM, "James Dore" <james.dore at new.ox.ac.uk> wrote:

>Within Apache, the config looks thus: (that appears to be putting the
>attribute in the http headers, can I do both headers and variable?)

You can't use variables if you aren't running in Apache or directly behind
it or tunneled as with AJP. Proxies don't count. Headers are the only
thing that can transit a proxy.

Enabling headers also doesn't disable environment population, they're
independent settings.

>	RequestHeader set REMOTE_USER "%{eppn}e"

REMOTE_USER is never a header and it's a bad idea to populate a header
that looks like it, it's just confusing. (The SP does this for historical
reasons and it was a bad idea.)

-- Scott