Apache not picking up Shibboleth session variables

[Cantor, Scott]

> Quick recap, since it's been a while since I posted on this thread:  shibd is
> authenticating correctly and getting the session data (and the transaction log
> shows that a session is being created with that data), but the attributes
> aren't being passed along to apache.

You said that /Shibboleth.sso/Session reported no session. That doesn't jibe with anything else posted, log in this message included. It can't be working, create a session, log all that, and then not have it. Not unless it logs a failure to validate the session when it's accessed at least.

Until that issue is dealt with, nothing else really matters, and the configuration is set up to do absolutely nothing to the requests to the resource if there is no session. So combining all that leads me to conclude there is no session and that's why there's no data.

What is clear though is that you're doing all this over http, so if I had to guess, I'd be starting with that. What is the cookieProps setting set to? You would have to be issuing insecure cookies for any of this to be working.

-- Scott