Shibboleth attributes capture with PHP with AJP connector?

[Alvarez, Dyana I]

Thank you very much!

D.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Thursday, May 15, 2014 10:50 AM
To: users at shibboleth.net
Subject: Re: Shibboleth attributes capture with PHP with AJP connector?

* d.alvarez2 <d.alvarez2 at miami.edu> [2014-05-15 16:36]:
> There are lots of PHP code examples of how to retrieve it 
> programmatically but I don't know if I need to follow the steps with 
> the AJP connector for PHP the same way I did with Java.

No, PHP generally is run in-process (mod_php) or via FastCGI (e.g. using mod_fcgid). In both cases the $_SERVER super-global will have all your environment variables and hence attributes such as $_SERVER['REMOTE_USER'].

> Also, my other question is if I see that the attributes come in 
> encrypted, will I be able to decrypted in the code or will it the code 
> just decrypt the attributes by me just displaying them like this?

The Shib SP will do all necessary decoding and decryption for you (though I only have ever encuontered encrypted responses, encrypted assertions, and encrypted NameIDs, not encrypted attributes) -- unless you're referring to something completely outside SAML.

Either way, passing data via AJP to a Java servlet container or not does not alter any of this.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net