Unable to pass SHIB_USERID from Apache to Oracle HTTP server

[Murthy Nunna]

It gets redirected to OHS:7777 and when I print ENV variables in OHS, SHIB_USERID comes out blank. With out SHIB_USERID I cannot access database.

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Tom Zeller
Sent: Sunday, September 06, 2015 9:40 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Unable to pass SHIB_USERID from Apache to Oracle HTTP server



On Sep 6, 2015, at 9:27 PM, Murthy Nunna <mnunna at fnal.gov<mailto:mnunna at fnal.gov>> wrote:
Hi,

I have implemented mod_shib. The authentication part is working fine. In our environment we have Apache in front end and OHS (Oracle HTTP Server) in back end. We need to pass SHIB_USERID from Apache to OHS. We have following rewrite rule but SHIB_USERID is not getting passed to OHS.

RewriteRule /pls/cert/(.*)      http://%{SERVER_NAME}:7777/pls/cert/$1<http://%25%7bSERVER_NAME%7d:7777/pls/cert/$1>          [P,L,env=HTTP_X_FORWARDED_FOR:%{HTTP_X_FORWARDED_FOR},env=SHIB_USERID:%{SSL:SHIB_USERID}]

When I print all env variables in apache I see SHIB_USERID has a value. But in OHS it comes out as blank.

Also, in Apache rewrite log, I see it is being set to blank…

131.225.74.243 - - [06/Sep/2015:06:00:15 --0500] [www-esh-dba.fnal.gov/sid#7f0a085c2bb8][rid#7f0a08704b88/initial<http://www-esh-dba.fnal.gov/sid#7f0a085c2bb8][rid#7f0a08704b88/initial>] (5) setting env variable 'SHIB_USERID' to ''

I don't know. What happens when you access /pls/certs/(.*) ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150907/1ffbfaf3/attachment.html>