RemoteUser flow with Jetty behind Apache

[Yavor Yanakiev]

Hi folks,

We have a setup which is using Apache HTTPD in front of Jetty/IdPv3 that
acts also as an SP and proxy for another IdP(Ping Identity). Our old
configuration is using Tomcat/IdP 2.4.4 and it works fine. With the new one
I get this error

[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:309] - Profile
Action SelectAuthenticationFlow: Selecting inactive authentication flow
authn/RemoteUser
[net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:121] -
Profile Action ValidateExternalAuthentication: External authentication
failed, no user identity or error information returned
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:184] -
Error event NoCredentials will be handled with response

Judging by the email threads and this Eclipse bug

https://bugs.eclipse.org/bugs/show_bug.cgi?id=425244

passing REMOTE_USER from Apache HTTPD to Jetty 9.x seems as unresolved
issue.

Is there any other option or workaround than switching to Tomcat?

-- 
Yavor Yanakiev
Systems Developer for Identity Services
212-992-7585
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151112/760800a0/attachment.html>