Getting RemoteUserInternal working with a custom header

[Cantor, Scott]

On 11/10/15, 10:43 AM, "users on behalf of Youssef Ghorbal" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:



>	tcpdump shows that the header is provided to tomcat (in the HTTP request) and correcly formatted (I double checked this)

Tomcat alone, or Apache? You could try the snoopservlet or similar dumping sample and see if you can verify what Tomcat is seeing outside the IdP.

>I tried, for testing puposes, replacing the X-Username in authn/remoteuser-internal-authn-config.xml with a header that I’m sure always exists (I tried with the Host header for example) and with that header everything worked fine :

That sort of implicates your header / infrastructure I would say.

>	So either :
>	- checkHeaders is empty when called (IdP is not honoring the authn/remoteuser-internal-authn-config.xml, or the list is emptied earlier in the IdP code)

If that were true, your sanity check wouldn't have worked.

-- Scott

>