Shibd not sending attributes

[Peter Schober]

* Sachin Kadam <sachin.nihcas at gmail.com> [2016-06-17 19:58]:
> How do I debug the SP ---> Java app, where I am not getting headers.
> How to check if it is AJP .. etc

There is an implicit assumption when using security software that you
know at least what your environment looks like and what the
integration points are. If you don't, better to ask the person who set
up the environment for you.

Hardly anything here has nothing to do with Shibboleth. If the Java
servlet container is Tomcat you could look for/at Tomcat's server.xml
(for a Connector with protocol="AJP/1.3"), also check listening
processes (e.g. a Java process listening on port 8009, Tomcat's
default port for AJP).  Activating a AJP connector on Tomcat is out of
scope for this list, but the Tomcat documentation covers that.
If it's not Tomcat you'd need to check with the documentation for
whatever piece of software is serving up Java -- you never mentioned
any technical details, of course.
If using AJP is not an option (I understand not all Java containers
support AJP these days) then proxing and using HTTP Headers seems your
only option.

In both cases you'd first make sure everything is there in the Shib
SP, checking the transaction log and the Session handler.
If all the attributes are there but you can't see them in Java (using
the appropriate method) you can always debug the connection between
httpd and the Java container using tcpdump.

-peter