Get Shibboleth environment variables with Python

Cantor, Scott cantor.2 at
Tue May 13 11:33:18 EDT 2014

On 5/13/14, 11:28 AM, "James Dore" <james.dore at> wrote:

>Within Apache, the config looks thus: (that appears to be putting the
>attribute in the http headers, can I do both headers and variable?)

You can't use variables if you aren't running in Apache or directly behind
it or tunneled as with AJP. Proxies don't count. Headers are the only
thing that can transit a proxy.

Enabling headers also doesn't disable environment population, they're
independent settings.

>	RequestHeader set REMOTE_USER "%{eppn}e"

REMOTE_USER is never a header and it's a bad idea to populate a header
that looks like it, it's just confusing. (The SP does this for historical
reasons and it was a bad idea.)

-- Scott

More information about the users mailing list