Getting access to Shib Attributes after initial authentication

[Guy Tadi]

Thanks. Can you please clarify a bit what you mean by "You don't have to
require a session... There's no reason that shouldn't work for you." Are
you suggesting if I require shibboleth session for "/secure" I should have
access to the Shib session variables when the same browser instance later
accesses "/" or you are suggesting that I use Lazy session? I'm using
Lighttpd so I'm using the RequestMapper to set the session.

On Fri, Apr 17, 2015 at 1:33 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/17/15, 1:26 PM, "Guy Tadi" <tadiguy812 at gmail.com> wrote:
>
> >Thanks for the response. The Cookies path defaulting to path=/ is OK
> because that's where my application resides (in fact, I explicitly set the
> cookieProp in the shib config to path=/). However, I can't require
> Shibsession for / due to legacy constraints.
>
> You don't have to require a session. require shibboleth is a dummy rule
> that just activates the SP lazily. There's no reason that shouldn't work
> for you.
>
> > I agree that Shib SP doesn't see the request to / because nothing tells
> the webserver to require SP for / which is exactly how I want it. However,
> by inpsection I determined that
> HTTP_COOKIE=_shibsession_randomstring=SHIB_SESSION_ID and so was hoping to
> use the SHIB_SESSION_ID to get attributes previously exported to the
> session cache during the initial access to /secure. Is that possible?
>
> Not really. Not practically anyway.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/8179fc78/attachment.html